$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: 3ti5gE1S7KaofXDRzmzIdw15rgzoSQOXUNmKgytmBAs= Subject key identifier: 0E:A1:00:3B:15:51:09:14:E5:F2:3F:4D:7B:C7:C0:06:D6:76:EA:1D Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 62F45A609B5AECE50B0A38516B413AF206DFAEE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 0107 Signing time: Tue 05 Aug 2025 22:30:58 +0000 Manifest this update: Tue 05 Aug 2025 22:25:58 +0000 Manifest next update: Sat 09 Aug 2025 07:59:58 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: MLhOEr9bZupJXNcskGhIow+YI00thqX6SuLUeU7KC8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f4:5a:60:9b:5a:ec:e5:0b:0a:38:51:6b:41:3a:f2:06:df:ae:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Aug 5 22:25:58 2025 GMT Not After : Aug 9 07:59:58 2025 GMT Subject: CN=0EA1003B15510914E5F23F4D7BC7C006D676EA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:28:e5:2f:e2:96:38:72:4e:bf:22:21:36: ab:61:95:e1:14:0e:0f:52:b6:60:92:0f:22:e6:a5: 60:df:cb:5a:16:09:88:bf:39:f4:51:4e:63:e9:82: 9a:e9:03:a4:04:2a:8d:6e:4c:8b:bd:d3:69:30:26: 28:19:96:91:14:13:e7:7e:d4:4f:06:8f:ad:70:de: f8:cf:c7:66:82:03:45:17:d7:96:4e:d3:0a:0d:8a: ac:b4:f9:79:7b:e5:dd:10:3f:92:10:dc:f2:0b:ee: 67:c2:49:b0:46:86:ac:67:9b:0b:be:37:0d:75:0c: 0a:0c:50:94:16:4e:dc:ea:bc:8a:83:bc:ac:7b:b0: 87:e1:8d:44:78:b0:c4:23:91:69:9f:1a:5a:18:08: 9c:75:ec:36:49:05:e9:a3:ed:2a:58:44:09:31:b5: 4f:83:65:3a:e8:2a:c9:7a:b9:e5:ce:8a:78:cd:93: cd:46:dc:3e:66:24:44:b9:3c:50:e1:8d:87:51:0b: 5d:f5:fb:5d:b9:3b:20:5c:67:b8:f3:52:be:3a:44: d4:19:a0:cc:96:0b:e3:6b:26:13:6e:67:51:dd:40: 08:93:1a:dc:16:a0:84:e0:4d:46:f0:f1:91:12:2b: 7b:5a:c8:b8:a2:c1:c2:4d:7c:93:34:56:2d:82:ff: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A1:00:3B:15:51:09:14:E5:F2:3F:4D:7B:C7:C0:06:D6:76:EA:1D X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:12:25:9d:bc:71:60:dc:ac:7d:08:75:8c:5d:27:c5:1c:95: 3b:d8:2c:c2:d6:33:e0:4f:69:03:cc:d9:34:b0:b5:a8:0a:27: 24:55:c4:ea:0c:2e:8d:fa:7f:8d:29:93:1f:b8:77:57:7b:1b: dd:ba:48:cf:df:e9:8c:fe:c2:51:25:3e:92:cc:50:d0:ef:3f: d7:be:70:0c:13:f3:62:83:4c:da:e6:80:a6:d3:92:5e:66:80: e7:0a:8a:e0:17:9a:05:6e:af:15:66:ac:86:75:64:fc:58:aa: c2:d4:39:4c:e4:98:45:bf:67:7f:cd:69:84:30:a6:1f:90:39: 1d:65:c0:84:d3:4a:89:45:ed:de:3c:0a:54:3c:42:3d:9a:65: 50:44:c6:2c:c1:e6:96:f4:6c:d8:b1:fd:d4:bd:53:c8:41:ac: b6:77:ae:69:3e:a4:d8:3a:01:ac:17:a2:41:b4:ae:a5:53:de: 0a:81:d3:f5:d9:b2:16:7d:af:18:21:df:06:73:95:01:47:de: a6:61:58:dc:c3:11:04:20:0a:c2:5a:12:c8:2d:06:64:89:70: a2:17:e9:2a:ae:7d:83:fa:9d:80:15:ca:c9:60:0c:ed:9f:1b: 2c:31:9c:76:de:4a:04:ae:a2:9e:03:a8:c9:94:af:aa:bd:75: 88:1e:40:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvRaYJta7OULCjhRa0E68gbfruQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA4MDUyMjI1NThaFw0yNTA4MDkwNzU5NThaMDMxMTAvBgNV BAMTKDBFQTEwMDNCMTU1MTA5MTRFNUYyM0Y0RDdCQzdDMDA2RDY3NkVBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LSjlL+KWOHJOvyIhNqthleEU Dg9StmCSDyLmpWDfy1oWCYi/OfRRTmPpgprpA6QEKo1uTIu902kwJigZlpEUE+d+ 1E8Gj61w3vjPx2aCA0UX15ZO0woNiqy0+Xl75d0QP5IQ3PIL7mfCSbBGhqxnmwu+ Nw11DAoMUJQWTtzqvIqDvKx7sIfhjUR4sMQjkWmfGloYCJx17DZJBemj7SpYRAkx tU+DZTroKsl6ueXOinjNk81G3D5mJES5PFDhjYdRC131+125OyBcZ7jzUr46RNQZ oMyWC+NrJhNuZ1HdQAiTGtwWoITgTUbw8ZESK3tayLiiwcJNfJM0Vi2C/wJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDqEAOxVRCRTl8j9Ne8fABtZ26h0wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4SJZ28cWDcrH0IdYxdJ8UclTvYLMLWM+BP aQPM2TSwtagKJyRVxOoMLo36f40pkx+4d1d7G926SM/f6Yz+wlElPpLMUNDvP9e+ cAwT82KDTNrmgKbTkl5mgOcKiuAXmgVurxVmrIZ1ZPxYqsLUOUzkmEW/Z3/NaYQw ph+QOR1lwITTSolF7d48ClQ8Qj2aZVBExizB5pb0bNix/dS9U8hBrLZ3rmk+pNg6 AawXokG0rqVT3gqB0/XZshZ9rxgh3wZzlQFH3qZhWNzDEQQgCsJaEsgtBmSJcKIX 6SqufYP6nYAVyslgDO2fGywxnHbeSgSuop4DqMmUr6q9dYgeQKc= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:35 2025 by rpki-client