$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: YwO8IbnV2ONrDAbLfVoxJWEsoEp+UffNJk+xnSHlPL0= Subject key identifier: B5:96:59:D6:A6:8A:57:0E:80:67:D9:24:0F:E3:36:63:3C:B2:32:4D Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 263BF188A10F1C3B0835254A6A67FCBC204CB6BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 020D Signing time: Mon 16 Jun 2025 22:31:27 +0000 Manifest this update: Mon 16 Jun 2025 22:26:27 +0000 Manifest next update: Fri 20 Jun 2025 05:51:27 +0000 Files and hashes: 1: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: BUFDyzkspS2QrFibNh9BtW0X9nIIcrszwx7XX1GjVtU=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3b:f1:88:a1:0f:1c:3b:08:35:25:4a:6a:67:fc:bc:20:4c:b6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: Jun 16 22:26:27 2025 GMT Not After : Jun 20 05:51:27 2025 GMT Subject: CN=B59659D6A68A570E8067D9240FE336633CB2324D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:c6:6c:43:00:6c:43:87:d0:a0:31:30:2a: c6:77:50:a6:cc:e6:4b:61:36:ae:5f:57:49:fa:3c: e3:43:76:19:77:96:82:a8:5c:74:a9:01:1c:45:0d: 1a:db:58:84:70:1a:25:87:2b:9e:d3:61:72:fd:ea: 08:b3:0b:73:3f:f6:ed:73:2e:fd:d9:1a:51:bc:32: 20:38:e5:13:fc:28:ce:a6:26:34:bc:a8:2d:da:33: 5d:8c:34:91:92:70:ee:8e:bd:5b:09:aa:a9:b2:7e: a5:b2:eb:b5:65:26:54:f1:34:a3:3f:02:12:3a:56: e3:65:21:ce:8e:8f:ba:3d:26:44:43:72:3a:3c:51: 81:92:d4:ed:1e:f2:95:53:d3:43:1a:a5:93:63:a0: 2f:ad:88:4c:0f:6f:c0:a1:15:29:3c:c5:74:b4:43: 83:32:67:65:45:70:e4:b1:2e:a3:6a:40:2b:7f:75: 83:1b:c9:a7:2f:9f:f4:38:55:6f:93:b9:d3:bf:19: 94:73:a7:e1:0a:65:68:ea:ac:36:b5:04:c2:c8:bc: d3:85:9e:af:c8:3e:6b:0d:43:52:3c:0b:e3:5d:65: 48:3a:31:4c:c5:33:09:c9:87:49:94:56:30:51:d7: 8a:87:be:1b:a3:58:59:d7:bc:64:8d:82:16:4b:1a: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:96:59:D6:A6:8A:57:0E:80:67:D9:24:0F:E3:36:63:3C:B2:32:4D X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:94:fd:73:ba:82:01:4c:e5:a0:41:ac:ac:c2:88:6d:33:97: 97:b5:20:c9:7b:e3:d2:9e:04:4a:08:fe:06:35:55:0c:42:31: 6f:38:6d:bc:ca:3a:62:f7:35:82:9f:45:0d:e9:75:3c:fe:fd: 1b:82:9a:ea:1b:16:a4:e4:84:e3:a7:be:46:a9:7e:d8:67:86: ce:50:6e:3a:3b:cb:05:f6:82:d5:94:ef:8a:ab:e9:ae:4b:ac: 8d:98:0f:a2:b1:b3:68:d8:35:52:6f:1e:82:ad:d0:12:e6:08: ad:2b:d9:0e:60:2f:54:5a:1a:d0:ae:1c:6b:ca:02:a7:ce:d9: f6:45:2c:d2:c8:3d:7c:dd:9c:4a:9e:cf:d8:bc:c4:ba:ae:9d: a9:12:55:84:07:69:2d:63:1f:e8:95:ba:14:d1:ca:f2:23:94: 6c:53:6c:ff:22:65:aa:d5:67:a7:7e:a4:89:39:86:95:36:57: 01:0b:cf:30:5e:07:0f:ab:0e:17:1c:74:b3:c9:1a:83:ec:c2: 3d:2d:b7:16:a8:d5:38:b6:91:cc:37:70:54:b1:f4:78:8b:c3: a2:99:82:15:3c:49:2a:5b:20:fa:06:11:c2:80:48:79:b2:20: 48:11:e7:41:c5:6e:2f:81:65:24:84:42:d0:ce:ce:31:b7:c6: 42:41:dd:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjvxiKEPHDsINSVKamf8vCBMtrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNTA2MTYyMjI2MjdaFw0yNTA2MjAwNTUxMjdaMDMxMTAvBgNV BAMTKEI1OTY1OUQ2QTY4QTU3MEU4MDY3RDkyNDBGRTMzNjYzM0NCMjMyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiMZsQwBsQ4fQoDEwKsZ3UKbM 5kthNq5fV0n6PONDdhl3loKoXHSpARxFDRrbWIRwGiWHK57TYXL96gizC3M/9u1z Lv3ZGlG8MiA45RP8KM6mJjS8qC3aM12MNJGScO6OvVsJqqmyfqWy67VlJlTxNKM/ AhI6VuNlIc6Oj7o9JkRDcjo8UYGS1O0e8pVT00MapZNjoC+tiEwPb8ChFSk8xXS0 Q4MyZ2VFcOSxLqNqQCt/dYMbyacvn/Q4VW+TudO/GZRzp+EKZWjqrDa1BMLIvNOF nq/IPmsNQ1I8C+NdZUg6MUzFMwnJh0mUVjBR14qHvhujWFnXvGSNghZLGtcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZZZ1qaKVw6AZ9kkD+M2YzyyMk0wHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCU/XO6ggFM5aBBrKzCiG0zl5e1IMl749Ke BEoI/gY1VQxCMW84bbzKOmL3NYKfRQ3pdTz+/RuCmuobFqTkhOOnvkapfthnhs5Q bjo7ywX2gtWU74qr6a5LrI2YD6Kxs2jYNVJvHoKt0BLmCK0r2Q5gL1RaGtCuHGvK AqfO2fZFLNLIPXzdnEqez9i8xLqunakSVYQHaS1jH+iVuhTRyvIjlGxTbP8iZarV Z6d+pIk5hpU2VwELzzBeBw+rDhccdLPJGoPswj0ttxao1Ti2kcw3cFSx9HiLw6KZ ghU8SSpbIPoGEcKASHmyIEgR50HFbi+BZSSEQtDOzjG3xkJB3bs= -----END CERTIFICATE-----Generated at Tue Jun 17 06:58:02 2025 by rpki-client