$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: Rd6M/MgwWPke+roVAjadr7XpLoLt4hD46KCO0bsl9QM= Subject key identifier: 2B:12:C1:C0:A2:F2:34:FB:D3:DA:93:11:C2:32:EA:5F:A7:E1:38:DC Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 2CBEEC8C8BF8644F50B790F89DF745CDE4C675F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 024B Signing time: Mon 03 Nov 2025 09:01:29 +0000 Manifest this update: Mon 03 Nov 2025 08:56:29 +0000 Manifest next update: Thu 06 Nov 2025 09:42:29 +0000 Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=) 2: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: 3Wgm/sAWm69oUTnJmjyM0xrsNYQB5ArWY7dkM97ROcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:ec:8c:8b:f8:64:4f:50:b7:90:f8:9d:f7:45:cd:e4:c6:75:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: Nov 3 08:56:29 2025 GMT Not After : Nov 6 09:42:29 2025 GMT Subject: CN=2B12C1C0A2F234FBD3DA9311C232EA5FA7E138DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:a4:12:d2:79:84:39:dc:cf:a1:5e:96:d7: 0f:ad:87:5b:2a:34:92:ed:62:eb:c0:e2:6d:b7:67: dd:04:8c:13:c9:9d:6f:bd:63:64:d0:64:cd:69:ac: 14:d5:53:38:89:66:07:ae:e7:34:f1:65:6d:99:72: 78:a0:4b:86:6d:93:48:b1:95:9f:c3:91:62:11:f1: d2:53:65:5e:8c:f5:fe:fc:18:3e:d4:f4:ce:8c:69: 8b:44:dc:80:3d:03:63:7e:2f:22:e6:c6:10:d6:86: b7:db:ba:d1:ad:49:07:e1:bd:26:5b:3b:03:75:81: 71:21:ef:b4:29:cb:df:d8:86:0f:8c:d9:a8:45:ce: 5a:15:6d:3a:f3:9e:f1:e0:94:92:a0:2d:41:9f:a1: 16:ed:3a:cc:ea:9c:a0:31:34:2e:29:03:63:f2:ac: 0a:78:75:4c:5e:6c:ff:47:55:cc:ee:bd:a7:a3:0b: c5:e8:da:1e:21:37:f7:4c:04:3b:38:78:20:e5:8a: 2a:f3:e6:dd:ef:08:8b:69:44:e5:be:95:bd:28:5e: 28:13:c6:80:36:91:0a:68:27:90:90:2e:b6:ce:79: 10:72:42:53:7e:90:3b:20:80:fd:59:42:bf:43:aa: de:db:68:fb:3a:5b:82:26:56:23:99:71:fd:bd:55: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:C1:C0:A2:F2:34:FB:D3:DA:93:11:C2:32:EA:5F:A7:E1:38:DC X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f6:81:a2:7a:b6:99:cb:04:e7:3e:32:b0:55:66:25:74:ab: 7e:fd:a1:ab:05:0f:35:73:10:b6:83:2b:e9:10:39:6c:52:49: d1:0e:14:9e:39:6a:d5:85:a1:e7:ef:f6:04:7a:d2:75:12:d6: 80:8c:5b:98:15:33:ce:f2:38:37:c0:20:63:39:f1:b5:88:7e: 81:78:85:f9:09:c1:8c:de:45:dd:57:9c:74:1f:d2:e5:d6:bd: fb:65:ce:e3:61:ff:a3:13:29:4c:f0:2b:18:64:8f:a4:e8:29: b1:65:7d:fb:3a:6f:dc:21:40:fb:d3:9f:2c:b9:f6:47:1e:33: f0:fd:3e:39:2b:75:9b:d1:c5:13:85:ab:d5:31:76:50:39:c4: 9a:13:79:98:2b:72:c3:c9:da:1f:45:2e:4f:61:11:f0:a3:47: 88:b6:ac:85:78:ed:f0:f6:07:e6:8d:5e:69:94:f9:36:8d:e3: 48:43:1d:e1:c6:60:81:fc:f6:08:26:08:51:29:56:e7:75:28: 20:73:99:82:6a:90:7c:24:df:e5:51:94:13:56:28:7b:2b:5a: 21:0a:99:35:47:92:23:16:c0:3a:3f:d4:3f:63:4f:db:ee:7f: 8f:e7:69:4b:ef:5d:a7:0a:49:a5:fb:00:24:72:dd:92:10:ce: f7:5f:de:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULL7sjIv4ZE9Qt5D4nfdFzeTGdfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNTExMDMwODU2MjlaFw0yNTExMDYwOTQyMjlaMDMxMTAvBgNV BAMTKDJCMTJDMUMwQTJGMjM0RkJEM0RBOTMxMUMyMzJFQTVGQTdFMTM4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/qQS0nmEOdzPoV6W1w+th1sq NJLtYuvA4m23Z90EjBPJnW+9Y2TQZM1prBTVUziJZgeu5zTxZW2ZcnigS4Ztk0ix lZ/DkWIR8dJTZV6M9f78GD7U9M6MaYtE3IA9A2N+LyLmxhDWhrfbutGtSQfhvSZb OwN1gXEh77Qpy9/Yhg+M2ahFzloVbTrznvHglJKgLUGfoRbtOszqnKAxNC4pA2Py rAp4dUxebP9HVczuvaejC8Xo2h4hN/dMBDs4eCDliirz5t3vCItpROW+lb0oXigT xoA2kQpoJ5CQLrbOeRByQlN+kDsggP1ZQr9Dqt7baPs6W4ImViOZcf29VZ29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxLBwKLyNPvT2pMRwjLqX6fhONwwHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT2gaJ6tpnLBOc+MrBVZiV0q379oasFDzVz ELaDK+kQOWxSSdEOFJ45atWFoefv9gR60nUS1oCMW5gVM87yODfAIGM58bWIfoF4 hfkJwYzeRd1XnHQf0uXWvftlzuNh/6MTKUzwKxhkj6ToKbFlffs6b9whQPvTnyy5 9kceM/D9PjkrdZvRxROFq9UxdlA5xJoTeZgrcsPJ2h9FLk9hEfCjR4i2rIV47fD2 B+aNXmmU+TaN40hDHeHGYIH89ggmCFEpVud1KCBzmYJqkHwk3+VRlBNWKHsrWiEK mTVHkiMWwDo/1D9jT9vuf4/naUvvXacKSaX7ACRy3ZIQzvdf3iU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:23 2025 by rpki-client