$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: teJn5MmnZK5u9V3/BHpPBNj1wsqtKTBbPa9RKkcqq0w= Subject key identifier: 54:94:67:8C:55:4F:6D:A6:FD:DF:9C:5E:D9:E4:D0:40:42:6B:E8:DD Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 0EB65EA47D171279005803ADAE66BCCC07AF1812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: F0 Signing time: Sat 14 Jun 2025 20:50:56 +0000 Manifest this update: Sat 14 Jun 2025 20:45:56 +0000 Manifest next update: Wed 18 Jun 2025 02:56:56 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: afZcE/tZQq6Gpgjq4EGeWx6UymRWG5aJHWOrcSwE/j4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b6:5e:a4:7d:17:12:79:00:58:03:ad:ae:66:bc:cc:07:af:18:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Jun 14 20:45:56 2025 GMT Not After : Jun 18 02:56:56 2025 GMT Subject: CN=5494678C554F6DA6FDDF9C5ED9E4D040426BE8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:02:83:2b:40:b2:22:33:81:29:df:09:d6: c2:36:59:6e:6a:a0:08:43:2b:36:dd:13:89:1b:1d: 53:73:ca:8f:89:b4:ef:c5:f5:4d:8a:18:4c:e2:fd: a3:b7:6f:90:a0:fb:e1:46:f8:c3:bf:19:2e:c0:61: 39:92:77:74:c3:95:27:a9:21:25:29:dd:ce:33:22: 26:b0:de:27:f6:e0:de:df:a8:cb:e1:55:ef:a6:cf: ff:a8:07:b2:68:07:aa:26:38:23:92:4d:f1:95:b1: 9a:1b:39:d6:b6:05:21:20:0d:be:0f:7c:5e:b2:02: 28:1f:d1:76:b3:43:92:d3:ac:33:0d:23:ff:60:d5: 07:6b:4f:61:52:c9:1c:9f:7c:b7:a1:72:65:2d:7d: 7c:24:7a:e8:58:b8:a9:14:c8:b3:8b:31:81:af:82: f0:ef:da:88:e1:09:a9:ca:ea:18:4d:38:0d:84:91: 19:0f:49:de:dc:c1:0b:6a:d4:84:9b:00:1f:2a:63: 5a:ff:6e:83:49:98:a9:93:ad:05:f2:bd:81:0f:4e: b7:05:ad:79:69:c6:25:e5:98:84:02:73:63:bf:0d: ce:93:b3:6e:e8:3a:d8:0a:40:3e:c5:30:b9:3a:9d: 22:c0:ee:c7:b6:da:73:26:c0:2a:f8:b4:5b:b7:c6: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:67:8C:55:4F:6D:A6:FD:DF:9C:5E:D9:E4:D0:40:42:6B:E8:DD X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:67:56:f9:a0:23:7f:d6:56:a4:db:3e:30:25:24:0a:6e:49: 61:c1:b1:29:77:fe:f9:b8:59:e9:85:af:ce:9c:01:80:59:04: 96:c1:b3:1f:0f:16:74:ee:ad:87:22:2d:9b:4b:9b:cf:53:69: 78:00:44:f0:65:96:a0:0f:73:0c:c7:ab:4b:e1:33:d4:2d:f7: 65:57:0f:ba:f2:6f:22:27:04:ae:38:6e:6b:37:3d:de:a4:e0: 6e:1a:75:03:45:49:4a:bd:ac:6a:49:9b:ce:2e:71:ea:e0:ee: ad:63:c5:1c:cd:b5:51:69:4a:45:71:c7:e0:9a:21:a2:51:00: e5:be:f1:a6:01:47:b1:d8:ac:f4:8a:4b:90:d3:3d:be:47:87: 02:66:13:76:f7:2f:fb:70:01:f0:d3:81:bb:34:ea:cc:c3:75: 98:70:5f:73:c1:1f:06:2d:99:5e:93:cb:c6:f0:d7:b5:67:d5: 75:97:a2:32:0b:f9:71:2f:98:09:5d:50:94:84:cb:3f:4a:7f: 6d:65:ad:6f:26:40:e8:4a:b9:c0:be:3a:c2:63:a6:7b:79:55: a5:96:ef:9e:79:ff:b5:5d:c3:9c:f0:95:ca:d3:e1:f2:77:c7: 65:d2:13:5f:7a:c7:18:d6:6b:a2:97:99:ff:93:09:d1:ef:ec: a1:d9:9c:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrZepH0XEnkAWAOtrma8zAevGBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA2MTQyMDQ1NTZaFw0yNTA2MTgwMjU2NTZaMDMxMTAvBgNV BAMTKDU0OTQ2NzhDNTU0RjZEQTZGRERGOUM1RUQ5RTREMDQwNDI2QkU4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEAKDK0CyIjOBKd8J1sI2WW5q oAhDKzbdE4kbHVNzyo+JtO/F9U2KGEzi/aO3b5Cg++FG+MO/GS7AYTmSd3TDlSep ISUp3c4zIiaw3if24N7fqMvhVe+mz/+oB7JoB6omOCOSTfGVsZobOda2BSEgDb4P fF6yAigf0XazQ5LTrDMNI/9g1QdrT2FSyRyffLehcmUtfXwkeuhYuKkUyLOLMYGv gvDv2ojhCanK6hhNOA2EkRkPSd7cwQtq1ISbAB8qY1r/boNJmKmTrQXyvYEPTrcF rXlpxiXlmIQCc2O/Dc6Ts27oOtgKQD7FMLk6nSLA7se22nMmwCr4tFu3xraxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJRnjFVPbab935xe2eTQQEJr6N0wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdnVvmgI3/WVqTbPjAlJApuSWHBsSl3/vm4 WemFr86cAYBZBJbBsx8PFnTurYciLZtLm89TaXgARPBllqAPcwzHq0vhM9Qt92VX D7rybyInBK44bms3Pd6k4G4adQNFSUq9rGpJm84ucerg7q1jxRzNtVFpSkVxx+Ca IaJRAOW+8aYBR7HYrPSKS5DTPb5HhwJmE3b3L/twAfDTgbs06szDdZhwX3PBHwYt mV6Ty8bw17Vn1XWXojIL+XEvmAldUJSEyz9Kf21lrW8mQOhKucC+OsJjpnt5VaWW 7555/7Vdw5zwlcrT4fJ3x2XSE196xxjWa6KXmf+TCdHv7KHZnG8= -----END CERTIFICATE-----Generated at Tue Jun 17 00:16:46 2025 by rpki-client