$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: eeAVsIFdNrluRQvQ7x9ptn8oyYwQCJqY6RsvWMnwMyA= Subject key identifier: D6:BE:8B:AE:F3:D6:BA:07:C8:C5:19:D8:1F:F8:93:42:FC:F3:BF:EE Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 6A4383693A784A011072E649674C351A44378E69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 012F Signing time: Mon 03 Nov 2025 13:10:58 +0000 Manifest this update: Mon 03 Nov 2025 13:05:58 +0000 Manifest next update: Thu 06 Nov 2025 18:40:58 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: Am1BWLj60L+PqnkHlSQ52TbIMSezEouH4OyLbQe1h90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:43:83:69:3a:78:4a:01:10:72:e6:49:67:4c:35:1a:44:37:8e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Nov 3 13:05:58 2025 GMT Not After : Nov 6 18:40:58 2025 GMT Subject: CN=D6BE8BAEF3D6BA07C8C519D81FF89342FCF3BFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:c7:c5:1d:82:73:b2:0e:71:5b:36:41:59: 7b:c3:38:07:cc:87:11:84:22:4f:a3:39:3b:29:e2: dc:67:70:1e:6a:78:e7:ee:69:c0:4d:31:e0:85:73: db:f9:f8:60:4f:22:d5:29:3e:0e:f5:f4:f7:df:36: f8:26:bc:fd:8d:1a:06:63:ab:df:de:21:d8:e4:fc: 11:a5:81:6c:50:46:a4:68:f6:09:91:ba:6e:a1:c9: eb:bd:62:c7:20:98:34:a5:48:02:9a:f4:69:7e:19: e5:b7:4c:28:df:85:95:ef:a7:55:32:0a:73:0f:a5: 5f:ff:67:91:be:7a:89:77:2e:4f:ac:38:d8:e3:88: 8a:35:81:49:b7:af:c2:29:ba:bb:76:24:34:21:f7: f2:af:84:cf:06:ac:e5:09:19:fd:69:75:9a:33:50: d6:c4:68:ae:42:21:9c:af:eb:03:69:59:59:e8:56: 1e:3e:b1:f5:1b:7b:5b:21:ad:9c:9b:73:0e:b5:14: c2:3e:74:d6:44:63:ca:40:eb:18:82:6f:af:99:52: c8:25:e9:9d:c0:2a:29:08:50:ae:cd:2d:be:c1:1d: fa:a8:15:a2:be:5e:60:8a:e6:b0:b8:42:7b:b0:83: b8:6b:05:31:45:64:56:5f:41:d2:7e:2f:52:87:9f: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BE:8B:AE:F3:D6:BA:07:C8:C5:19:D8:1F:F8:93:42:FC:F3:BF:EE X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:07:f2:d2:42:85:ec:b8:1b:89:12:bc:ac:e0:56:4c:05:e1: ec:a0:d3:86:09:eb:d2:65:ef:cb:4e:b0:e4:fe:34:7a:94:48: ce:ae:a3:e7:5b:63:19:a3:26:b8:b7:fc:9f:23:49:9b:f9:76: d9:10:cb:a8:76:44:67:db:18:52:ee:05:33:c8:9b:47:cf:70: a9:3b:c1:4c:ce:54:92:be:5c:67:97:90:0f:52:fc:f9:5e:e8: 8b:76:9d:f8:34:47:83:b8:26:61:0c:31:ad:c7:1b:9f:d0:d0: 47:58:0e:41:fb:01:1b:90:a3:d2:9d:7c:87:cc:66:84:65:c0: 62:d5:00:bf:a3:e9:9d:be:5c:bf:92:a3:fc:1e:fd:f0:c8:b1: c0:5b:c3:e3:83:21:5b:a1:68:cc:14:1a:8f:bd:e5:f4:b4:fe: ed:da:fd:55:2a:c7:7d:57:e1:e3:c8:e1:63:0f:96:ed:62:a7: d2:c7:5b:33:91:d2:fc:d4:83:68:72:90:68:4a:59:fc:19:71: 7d:44:c6:77:88:aa:e0:e1:89:b4:48:ac:2a:25:a7:2d:b8:2b: 0a:52:bd:53:c0:ad:d1:30:38:d8:a4:21:22:1b:de:18:c1:b5: ac:74:08:a4:3c:7b:e8:2e:01:aa:1a:b4:05:9f:dc:7c:7b:f9: b5:d3:8e:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUakODaTp4SgEQcuZJZ0w1GkQ3jmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTExMDMxMzA1NThaFw0yNTExMDYxODQwNThaMDMxMTAvBgNV BAMTKEQ2QkU4QkFFRjNENkJBMDdDOEM1MTlEODFGRjg5MzQyRkNGM0JGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbMfFHYJzsg5xWzZBWXvDOAfM hxGEIk+jOTsp4txncB5qeOfuacBNMeCFc9v5+GBPItUpPg719PffNvgmvP2NGgZj q9/eIdjk/BGlgWxQRqRo9gmRum6hyeu9YscgmDSlSAKa9Gl+GeW3TCjfhZXvp1Uy CnMPpV//Z5G+eol3Lk+sONjjiIo1gUm3r8Ipurt2JDQh9/KvhM8GrOUJGf1pdZoz UNbEaK5CIZyv6wNpWVnoVh4+sfUbe1shrZybcw61FMI+dNZEY8pA6xiCb6+ZUsgl 6Z3AKikIUK7NLb7BHfqoFaK+XmCK5rC4Qnuwg7hrBTFFZFZfQdJ+L1KHn41VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1r6LrvPWugfIxRnYH/iTQvzzv+4wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUH8tJChey4G4kSvKzgVkwF4eyg04YJ69Jl 78tOsOT+NHqUSM6uo+dbYxmjJri3/J8jSZv5dtkQy6h2RGfbGFLuBTPIm0fPcKk7 wUzOVJK+XGeXkA9S/Ple6It2nfg0R4O4JmEMMa3HG5/Q0EdYDkH7ARuQo9KdfIfM ZoRlwGLVAL+j6Z2+XL+So/we/fDIscBbw+ODIVuhaMwUGo+95fS0/u3a/VUqx31X 4ePI4WMPlu1ip9LHWzOR0vzUg2hykGhKWfwZcX1ExneIquDhibRIrColpy24KwpS vVPArdEwONikISIb3hjBtax0CKQ8e+guAaoatAWf3Hx7+bXTjqE= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:08 2025 by rpki-client