$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: 4KArDvMuGxlbbk0mnW6TgTvCPvl0OLLeh/xetrF02mk= Subject key identifier: CC:56:62:F5:F2:DB:B9:FA:27:80:13:CB:B3:0F:DA:B1:C4:1E:E8:9E Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 76C70E8BD2CCDABDABF8E43CE188DDF443A11589 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 016D Signing time: Wed 06 Aug 2025 18:01:04 +0000 Manifest this update: Wed 06 Aug 2025 17:56:04 +0000 Manifest next update: Sun 10 Aug 2025 03:13:04 +0000 Files and hashes: 1: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) 2: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: JwxJx1BR7txU3MGc2dEkxZ4riz+45ofQ+eptrVjsyyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c7:0e:8b:d2:cc:da:bd:ab:f8:e4:3c:e1:88:dd:f4:43:a1:15:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Aug 6 17:56:04 2025 GMT Not After : Aug 10 03:13:04 2025 GMT Subject: CN=CC5662F5F2DBB9FA278013CBB30FDAB1C41EE89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:1c:e8:c4:de:ce:fd:3a:a0:5b:0f:0e:5a: f3:c5:e1:42:9b:bf:f9:8d:29:7d:d8:d0:a4:c0:18: 7d:eb:4f:70:8b:61:0d:57:06:d4:58:41:cb:a8:ee: d8:cc:1e:b1:ad:09:2a:60:d3:92:63:4d:77:25:73: 55:35:bd:a1:26:4b:bd:6d:46:dd:24:cf:23:44:4b: af:bb:e6:ac:13:63:fd:6c:01:1c:c3:2b:50:9b:2c: e0:4d:27:d8:13:2e:d4:2b:9a:49:9f:24:c2:a8:af: 1e:bc:c7:3a:82:2d:29:60:0b:56:be:15:84:a7:69: 27:1a:b8:ea:ac:1f:39:fa:38:e5:77:4e:e2:8f:85: bf:d4:72:64:e3:4c:a4:92:8f:f2:81:f6:ec:3a:dd: ee:25:8f:0f:52:c4:a2:78:f3:23:e7:95:e6:06:f2: f9:e8:ee:6f:18:b6:da:c4:bb:7d:ae:da:27:1a:07: f5:80:a5:6e:fd:a9:5c:88:e1:5c:c8:60:c8:fb:6f: 72:95:95:cc:2b:b9:74:34:e6:37:22:63:ef:d4:60: 0d:c7:35:13:86:78:6c:c7:04:7f:d3:e2:4a:6e:9e: 68:e9:b5:6d:fb:f9:53:4d:1f:6d:1b:9b:95:5a:22: 5f:76:2b:23:04:a7:e7:0c:44:85:b2:a8:c8:06:95: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:56:62:F5:F2:DB:B9:FA:27:80:13:CB:B3:0F:DA:B1:C4:1E:E8:9E X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:cc:35:c8:1c:fb:66:05:1e:ab:4a:2c:2a:41:7d:c9:67:de: 86:9d:2d:ab:f2:29:33:93:94:a6:98:63:6d:f2:f1:ca:53:4d: f9:74:d8:92:ea:16:dd:81:33:73:f5:a9:11:c1:4c:8d:90:2d: 2e:e4:93:ad:66:34:a8:b9:c8:70:ee:29:30:c6:09:66:24:f3: c6:07:17:82:23:2c:fc:80:9e:5e:97:8d:0f:61:b0:16:79:ba: 56:89:6a:87:73:cc:ce:dc:75:32:7f:a4:77:1b:42:83:b6:ab: 6d:f9:d1:e6:4c:6f:a5:14:d3:af:e6:f4:60:eb:14:34:d7:4c: ef:7a:34:0c:c2:0c:83:d4:e4:e5:8c:a1:07:92:63:ca:16:4c: 3e:38:96:94:03:8f:88:fa:20:a5:83:a3:e0:98:58:7b:39:93: a4:98:c1:6c:33:70:40:d2:e6:9b:7e:16:dc:59:7d:02:c7:23: 0e:8c:66:ef:c5:f1:46:03:4c:32:cb:b5:0e:e6:25:49:9d:4e: 31:b6:ee:51:de:e5:76:86:b3:22:6f:e0:98:44:17:b6:82:63: 4c:03:75:96:f5:f1:23:1e:29:4f:be:40:c3:6d:48:cd:e6:0e: aa:f7:3e:94:c3:d9:3b:03:75:4a:44:c6:5e:18:9c:8a:a8:9d: 58:c8:c0:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdscOi9LM2r2r+OQ84Yjd9EOhFYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTA4MDYxNzU2MDRaFw0yNTA4MTAwMzEzMDRaMDMxMTAvBgNV BAMTKENDNTY2MkY1RjJEQkI5RkEyNzgwMTNDQkIzMEZEQUIxQzQxRUU4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YRzoxN7O/TqgWw8OWvPF4UKb v/mNKX3Y0KTAGH3rT3CLYQ1XBtRYQcuo7tjMHrGtCSpg05JjTXclc1U1vaEmS71t Rt0kzyNES6+75qwTY/1sARzDK1CbLOBNJ9gTLtQrmkmfJMKorx68xzqCLSlgC1a+ FYSnaScauOqsHzn6OOV3TuKPhb/UcmTjTKSSj/KB9uw63e4ljw9SxKJ48yPnleYG 8vno7m8YttrEu32u2icaB/WApW79qVyI4VzIYMj7b3KVlcwruXQ05jciY+/UYA3H NROGeGzHBH/T4kpunmjptW37+VNNH20bm5VaIl92KyMEp+cMRIWyqMgGlXLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFZi9fLbufongBPLsw/ascQe6J4wHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrMNcgc+2YFHqtKLCpBfcln3oadLavyKTOT lKaYY23y8cpTTfl02JLqFt2BM3P1qRHBTI2QLS7kk61mNKi5yHDuKTDGCWYk88YH F4IjLPyAnl6XjQ9hsBZ5ulaJaodzzM7cdTJ/pHcbQoO2q2350eZMb6UU06/m9GDr FDTXTO96NAzCDIPU5OWMoQeSY8oWTD44lpQDj4j6IKWDo+CYWHs5k6SYwWwzcEDS 5pt+FtxZfQLHIw6MZu/F8UYDTDLLtQ7mJUmdTjG27lHe5XaGsyJv4JhEF7aCY0wD dZb18SMeKU++QMNtSM3mDqr3PpTD2TsDdUpExl4YnIqonVjIwLg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:23 2025 by rpki-client