$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: z5xtkzpo+X+GoHF1NpZJJXProuuxX1LlHqXuw93OcpQ= Subject key identifier: FD:D8:F5:97:CE:7F:CA:E3:BD:3C:8C:21:6F:56:95:25:08:E4:59:1F Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 58A0D827F73B943864201BC17AABD8CEF2F8B273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 0221 Signing time: Thu 07 Aug 2025 00:22:09 +0000 Manifest this update: Thu 07 Aug 2025 00:17:09 +0000 Manifest next update: Sun 10 Aug 2025 03:20:09 +0000 Files and hashes: 1: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 2: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 3: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 4: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 5: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: xW2DFoa3azvHNv6/6ibdNFkfTicxwwmrKDLMFJkUvTg=) 6: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 7: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 8: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 9: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=) 10: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 11: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 12: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) 13: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a0:d8:27:f7:3b:94:38:64:20:1b:c1:7a:ab:d8:ce:f2:f8:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Aug 7 00:17:09 2025 GMT Not After : Aug 10 03:20:09 2025 GMT Subject: CN=FDD8F597CE7FCAE3BD3C8C216F56952508E4591F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:b4:0e:3f:d4:b4:8c:5f:9f:f3:a7:93:56: 35:70:98:bb:49:2c:e3:24:ae:b6:dd:2d:5e:6b:88: 0d:ad:3c:69:02:b3:92:8d:96:39:10:72:aa:68:ea: f2:48:3f:e4:fe:67:72:11:8f:06:53:1a:b4:8b:0e: b4:a6:4c:47:48:68:40:37:dc:98:9a:2b:d9:8b:1d: ac:da:c6:5b:61:d3:69:54:74:6b:77:03:6d:c9:4f: 22:5e:f1:db:18:95:49:95:41:ca:06:12:70:58:95: 74:27:ef:3d:29:eb:a0:2c:a6:81:16:19:04:30:2b: f7:7c:ca:5e:bc:17:13:85:ba:88:30:11:d1:b2:94: 1f:14:5f:52:d7:7c:84:44:f1:c3:d4:3c:9a:91:f2: c0:5d:b9:82:1a:c1:10:90:ed:1b:c7:9c:cf:01:52: e0:94:76:81:ab:7c:7b:fc:9d:f7:1f:b1:f0:9c:27: 44:6e:5d:26:2d:5c:fa:57:92:08:98:78:45:19:7b: 99:40:d7:4c:d5:6a:4d:e8:55:6f:67:b4:ba:11:65: 76:6f:be:4e:f8:02:1f:d4:83:bb:6b:7f:b4:dc:31: 3a:e5:7c:f1:72:42:e4:40:f3:b6:f7:d3:98:19:d4: f5:a8:d7:72:d8:a5:bf:90:33:d0:c2:66:90:f9:41: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:F5:97:CE:7F:CA:E3:BD:3C:8C:21:6F:56:95:25:08:E4:59:1F X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:57:49:4d:2b:27:55:49:42:96:59:dd:c8:1a:fe:e0:9c:7f: 45:1a:50:40:57:0e:c0:21:5b:8c:87:1c:e5:81:f8:26:6a:57: cb:90:a6:ec:b8:9f:fe:45:f5:e5:fc:f5:95:33:15:2d:4b:ac: 15:e6:6d:b9:9d:c3:72:d1:ad:4e:69:b5:c9:b8:3d:30:cc:f7: af:01:ba:0f:76:92:6e:a9:7d:53:e2:ca:42:8d:b6:04:2c:94: 46:6f:54:cb:0a:d2:2a:ad:41:32:2d:c4:b2:03:0d:ec:d0:91: dc:0e:89:fc:40:d4:7a:56:4e:17:eb:9a:81:2f:c2:ea:ff:17: b4:ff:ea:17:1c:45:b1:68:b7:f3:2c:ee:12:11:a9:df:22:54: 36:48:74:b1:9c:40:47:fe:ae:48:8e:f5:7e:d7:c5:55:ed:14: 06:07:2e:fd:ed:28:13:98:c7:48:01:b3:a2:77:c7:cc:c8:3a: a2:0a:fa:84:ae:22:a6:a9:bc:fc:e3:ef:73:66:f3:93:b2:ce: 0e:3e:42:14:27:a6:4c:f1:d8:5d:1c:c7:56:3f:47:9c:16:a4: 52:01:9c:e4:c7:ec:cd:54:82:1c:cf:60:09:36:72:b9:ea:ad: 22:a1:95:f0:24:e8:01:52:1b:09:82:36:97:5c:26:90:5e:91: 85:69:69:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKDYJ/c7lDhkIBvBeqvYzvL4snMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTA4MDcwMDE3MDlaFw0yNTA4MTAwMzIwMDlaMDMxMTAvBgNV BAMTKEZERDhGNTk3Q0U3RkNBRTNCRDNDOEMyMTZGNTY5NTI1MDhFNDU5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkorQOP9S0jF+f86eTVjVwmLtJ LOMkrrbdLV5riA2tPGkCs5KNljkQcqpo6vJIP+T+Z3IRjwZTGrSLDrSmTEdIaEA3 3JiaK9mLHazaxlth02lUdGt3A23JTyJe8dsYlUmVQcoGEnBYlXQn7z0p66AspoEW GQQwK/d8yl68FxOFuogwEdGylB8UX1LXfIRE8cPUPJqR8sBduYIawRCQ7RvHnM8B UuCUdoGrfHv8nfcfsfCcJ0RuXSYtXPpXkgiYeEUZe5lA10zVak3oVW9ntLoRZXZv vk74Ah/Ug7trf7TcMTrlfPFyQuRA87b305gZ1PWo13LYpb+QM9DCZpD5QewlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/dj1l85/yuO9PIwhb1aVJQjkWR8wHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9XSU0rJ1VJQpZZ3cga/uCcf0UaUEBXDsAh W4yHHOWB+CZqV8uQpuy4n/5F9eX89ZUzFS1LrBXmbbmdw3LRrU5ptcm4PTDM968B ug92km6pfVPiykKNtgQslEZvVMsK0iqtQTItxLIDDezQkdwOifxA1HpWThfrmoEv wur/F7T/6hccRbFot/Ms7hIRqd8iVDZIdLGcQEf+rkiO9X7XxVXtFAYHLv3tKBOY x0gBs6J3x8zIOqIK+oSuIqapvPzj73Nm85Oyzg4+QhQnpkzx2F0cx1Y/R5wWpFIB nOTH7M1UghzPYAk2crnqrSKhlfAk6AFSGwmCNpdcJpBekYVpaVM= -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:11 2025 by rpki-client