$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: g7ObfMsaxzx5YhWPOypLU3vncf5T32T4Y4s1+wqZt0k= Subject key identifier: C8:AC:F3:79:A0:5A:57:15:C7:8B:AD:01:70:2F:BF:4F:58:F1:9A:E3 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 6B4DB002E116B891D523AEF522EFC0D4AF1EBDFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 016C Signing time: Tue 05 Aug 2025 22:51:57 +0000 Manifest this update: Tue 05 Aug 2025 22:46:57 +0000 Manifest next update: Fri 08 Aug 2025 23:38:57 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 3: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 4: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: RN/LvtEszvUpaULdha3BnZHVguuIop81LIFe8D6jTRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:b0:02:e1:16:b8:91:d5:23:ae:f5:22:ef:c0:d4:af:1e:bd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Aug 5 22:46:57 2025 GMT Not After : Aug 8 23:38:57 2025 GMT Subject: CN=C8ACF379A05A5715C78BAD01702FBF4F58F19AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:d6:b8:c3:a6:16:61:65:76:ab:d4:b4:d9: 15:53:de:f3:8a:4f:97:6e:6b:f9:cd:db:87:72:9c: f5:ac:fa:49:dd:41:ca:1d:0f:a3:31:ea:04:aa:f1: d6:a1:80:cb:27:35:02:47:e0:8e:da:b8:c0:f7:57: 22:07:94:06:a8:0f:90:90:d1:a7:4f:49:87:0d:ad: 59:f5:a9:22:90:48:19:cf:20:14:8f:c0:1b:27:3e: c9:6d:e0:f6:5d:a0:08:d3:48:25:ea:0f:2f:95:7d: cf:24:c0:89:c5:03:85:a3:44:41:85:a1:56:95:d9: 91:0e:6a:0a:2b:f9:f6:b6:d0:43:88:95:3a:a0:49: bb:8d:bb:e8:6c:16:c8:e8:cb:dd:ba:9f:12:e6:dc: 88:f2:c1:43:f0:4e:33:4b:4d:57:49:b8:2c:55:69: 82:e2:ee:92:05:d2:62:56:3e:b0:39:2a:1a:74:4f: 24:7d:f0:b6:13:b8:75:6c:af:45:42:e1:f5:1a:a7: 01:0b:9c:00:5f:96:67:69:1b:d9:25:2a:af:c1:2b: 4d:dd:76:c6:67:f8:b9:bb:0f:cf:75:4d:58:fc:6b: 84:a4:ba:e2:68:bd:f6:24:ee:d3:6d:0c:6b:e1:81: c7:ba:0f:66:fc:de:9b:c8:86:e0:f6:c1:a0:c3:b5: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:F3:79:A0:5A:57:15:C7:8B:AD:01:70:2F:BF:4F:58:F1:9A:E3 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a6:d8:7d:81:db:84:2b:f9:35:63:bf:e6:ef:c8:e0:a3:dd: 1e:85:10:c1:5a:7c:98:63:dc:a2:fc:78:70:68:6a:cc:45:ea: ec:38:be:a7:b4:f9:88:fe:e3:dd:1b:9d:31:10:f4:65:a7:e9: de:e0:22:5f:7d:39:3a:96:55:8f:94:7b:e4:d7:72:f5:20:48: 9a:6d:fa:93:d0:fc:57:33:73:f3:0c:73:fa:38:97:b2:03:91: be:c8:33:ba:a3:62:5a:6d:ad:a7:fa:3b:89:a2:a3:97:4b:77: 65:cf:66:6b:79:a0:29:6a:9f:2e:a7:93:08:15:9a:af:d2:29: f0:8a:30:cb:f8:2b:b2:c7:62:ff:5f:06:06:10:ce:38:cf:c5: 46:8e:4c:b6:77:26:ec:91:ff:8b:7f:98:0e:39:d1:10:30:f9: 2b:5b:5c:2e:54:5e:2e:eb:d8:e3:95:5c:62:07:8c:23:26:ae: fc:d0:a2:c1:3a:28:37:fc:59:fa:80:44:5a:f7:23:80:8c:71: 28:a7:34:c5:41:ba:31:84:7c:6e:c4:dc:9a:2d:bf:5d:24:e2: 75:22:3f:86:46:f2:8f:36:87:5f:f3:77:0a:3d:ab:e8:56:31: 7f:3e:d9:5b:f0:d2:88:71:48:4d:8c:6d:e3:24:d4:3d:cc:9a: 63:56:17:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa02wAuEWuJHVI671Iu/A1K8evfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA4MDUyMjQ2NTdaFw0yNTA4MDgyMzM4NTdaMDMxMTAvBgNV BAMTKEM4QUNGMzc5QTA1QTU3MTVDNzhCQUQwMTcwMkZCRjRGNThGMTlBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDed9a4w6YWYWV2q9S02RVT3vOK T5dua/nN24dynPWs+kndQcodD6Mx6gSq8dahgMsnNQJH4I7auMD3VyIHlAaoD5CQ 0adPSYcNrVn1qSKQSBnPIBSPwBsnPslt4PZdoAjTSCXqDy+Vfc8kwInFA4WjREGF oVaV2ZEOagor+fa20EOIlTqgSbuNu+hsFsjoy926nxLm3IjywUPwTjNLTVdJuCxV aYLi7pIF0mJWPrA5Khp0TyR98LYTuHVsr0VC4fUapwELnABflmdpG9klKq/BK03d dsZn+Lm7D891TVj8a4SkuuJovfYk7tNtDGvhgce6D2b83pvIhuD2waDDtabzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKzzeaBaVxXHi60BcC+/T1jxmuMwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGm2H2B24Qr+TVjv+bvyOCj3R6FEMFafJhj 3KL8eHBoasxF6uw4vqe0+Yj+490bnTEQ9GWn6d7gIl99OTqWVY+Ue+TXcvUgSJpt +pPQ/Fczc/MMc/o4l7IDkb7IM7qjYlptraf6O4mio5dLd2XPZmt5oClqny6nkwgV mq/SKfCKMMv4K7LHYv9fBgYQzjjPxUaOTLZ3JuyR/4t/mA450RAw+StbXC5UXi7r 2OOVXGIHjCMmrvzQosE6KDf8WfqARFr3I4CMcSinNMVBujGEfG7E3Jotv10k4nUi P4ZG8o82h1/zdwo9q+hWMX8+2Vvw0ohxSE2MbeMk1D3MmmNWF7w= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:37 2025 by rpki-client