$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: c+k2GKWXie6hd/03Z6w3vG51hm+GCUlqaHq+YxGfY3o= Subject key identifier: 27:7B:4A:92:FD:18:15:92:21:52:DA:4D:04:7D:46:43:DA:AC:B3:3F Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 301D0315DA1FDDC31C0F22C00C33FAC9D7CF5FE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 0156 Signing time: Mon 16 Jun 2025 09:11:03 +0000 Manifest this update: Mon 16 Jun 2025 09:06:03 +0000 Manifest next update: Thu 19 Jun 2025 13:16:03 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: oWnxNZ89G9ytaRZvuexuyx/vQJqvGoR6Q2oKSa08BXo=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1d:03:15:da:1f:dd:c3:1c:0f:22:c0:0c:33:fa:c9:d7:cf:5f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Jun 16 09:06:03 2025 GMT Not After : Jun 19 13:16:03 2025 GMT Subject: CN=277B4A92FD1815922152DA4D047D4643DAACB33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0e:88:a0:41:05:91:c4:5c:e7:0a:fd:ff:5e: 57:a3:a5:8f:1c:a4:a3:99:4b:e4:67:9d:00:77:32: e7:ce:78:65:6d:7c:94:c9:ec:00:f5:6b:b2:5f:8d: ae:4f:f9:08:07:6f:b6:5d:72:b7:c0:5d:77:65:3c: 02:b4:5b:10:fe:0d:c4:ac:5b:81:6c:36:fa:30:fe: 12:e7:29:70:ef:1b:36:89:2f:6e:86:4f:32:9d:d7: 60:c8:14:ab:c6:73:94:7f:3a:55:ea:6a:b4:5f:9a: aa:eb:30:19:2e:73:12:39:6a:18:db:89:ab:93:62: 66:6c:d1:a8:6b:28:4c:40:8d:01:2c:e5:e9:a9:66: 3c:98:bd:d3:41:fa:a1:e3:1a:d1:71:20:c9:cd:30: 4b:c3:01:79:88:23:67:03:8e:e3:f2:8a:88:d4:4b: 5d:ee:c1:87:13:f4:02:5c:e1:db:08:72:41:48:d8: e2:e3:b2:e6:d8:2e:d8:68:30:5a:dd:2e:87:07:38: d6:ef:4f:b0:07:2d:b6:ab:7e:7a:1c:6d:4e:a5:c3: 38:24:a1:af:ea:eb:96:ff:36:54:a7:ab:46:a1:35: 06:dc:ef:88:11:c3:b1:86:a4:79:38:6f:8e:98:6b: ed:04:0e:01:a8:1c:97:72:73:35:b5:b7:1d:33:e1: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:4A:92:FD:18:15:92:21:52:DA:4D:04:7D:46:43:DA:AC:B3:3F X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:02:16:e8:eb:97:b3:8f:65:03:e0:7a:0e:d3:9b:ca:24: 09:54:bb:0b:47:5d:0d:e1:7b:3d:bc:48:46:70:23:2c:d7:de: dd:75:7d:fa:29:77:b6:fd:1f:b3:61:69:8e:c9:cd:60:08:48: f9:ff:de:2a:23:6d:be:d5:bc:d7:c9:13:52:e4:ec:5f:5e:98: d4:61:e0:f9:d3:a5:4f:7c:c2:cb:35:91:2b:fd:84:59:75:94: 60:22:81:49:b8:b2:a8:4c:f8:48:a6:0b:76:80:ff:10:e2:31: d0:e8:dd:2a:a9:55:bb:e0:2f:3e:4c:e1:00:a2:41:ca:ac:fd: 80:69:dc:4f:29:41:48:25:7e:8b:61:3d:04:6b:88:61:76:05: 33:86:1d:d0:67:d0:86:03:31:b4:5a:23:ca:cc:43:4f:50:76: 02:95:66:da:34:3b:aa:ad:17:27:8e:ac:6e:ac:ad:d4:38:9b: 79:02:e3:a9:85:23:e2:bc:43:cd:9c:ea:0e:d2:fa:ad:41:f8: 1f:8b:52:dd:af:48:ef:b6:de:ce:d4:1b:f5:71:ab:32:3f:c3: c0:80:b9:23:13:30:b5:f5:ac:bb:36:5c:55:67:7d:6c:c3:ed: e1:c6:02:93:2f:61:52:37:11:de:e9:15:8b:80:4e:ac:68:df: 43:b0:11:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB0DFdof3cMcDyLADDP6ydfPX+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTA2MTYwOTA2MDNaFw0yNTA2MTkxMzE2MDNaMDMxMTAvBgNV BAMTKDI3N0I0QTkyRkQxODE1OTIyMTUyREE0RDA0N0Q0NjQzREFBQ0IzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmDoigQQWRxFznCv3/XlejpY8c pKOZS+RnnQB3MufOeGVtfJTJ7AD1a7Jfja5P+QgHb7ZdcrfAXXdlPAK0WxD+DcSs W4FsNvow/hLnKXDvGzaJL26GTzKd12DIFKvGc5R/OlXqarRfmqrrMBkucxI5ahjb iauTYmZs0ahrKExAjQEs5empZjyYvdNB+qHjGtFxIMnNMEvDAXmII2cDjuPyiojU S13uwYcT9AJc4dsIckFI2OLjsubYLthoMFrdLocHONbvT7AHLbarfnocbU6lwzgk oa/q65b/NlSnq0ahNQbc74gRw7GGpHk4b46Ya+0EDgGoHJdyczW1tx0z4eA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3tKkv0YFZIhUtpNBH1GQ9qssz8wHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxSAhbo65ezj2UD4HoO05vKJAlUuwtHXQ3h ez28SEZwIyzX3t11ffopd7b9H7NhaY7JzWAISPn/3iojbb7VvNfJE1Lk7F9emNRh 4PnTpU98wss1kSv9hFl1lGAigUm4sqhM+EimC3aA/xDiMdDo3SqpVbvgLz5M4QCi Qcqs/YBp3E8pQUglfothPQRriGF2BTOGHdBn0IYDMbRaI8rMQ09QdgKVZto0O6qt FyeOrG6srdQ4m3kC46mFI+K8Q82c6g7S+q1B+B+LUt2vSO+23s7UG/VxqzI/w8CA uSMTMLX1rLs2XFVnfWzD7eHGApMvYVI3Ed7pFYuATqxo30OwEdI= -----END CERTIFICATE-----Generated at Tue Jun 17 15:39:41 2025 by rpki-client