$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: UCP419TKTdcDigg01HoKtrs4Tf38tznMzCc18D4Zpoc= Subject key identifier: 78:46:57:6F:A8:D4:30:35:D2:AE:04:BC:7E:9C:42:00:9C:4E:E5:F5 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 3CBDF04E48B588B1A6646719EA8EE5CB59F651EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 0160 Signing time: Wed 18 Jun 2025 03:52:17 +0000 Manifest this update: Wed 18 Jun 2025 03:47:17 +0000 Manifest next update: Sat 21 Jun 2025 14:04:17 +0000 Files and hashes: 1: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: DPM1FBrcpX+ZAz5dU0TBDI30FpYI122rCfMqv1JxNHg=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bd:f0:4e:48:b5:88:b1:a6:64:67:19:ea:8e:e5:cb:59:f6:51:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jun 18 03:47:17 2025 GMT Not After : Jun 21 14:04:17 2025 GMT Subject: CN=7846576FA8D43035D2AE04BC7E9C42009C4EE5F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:6e:e1:d5:55:e0:0a:63:4b:9a:54:7c:e1: 5d:c7:ba:6a:99:4a:3d:df:4c:fc:12:22:69:f8:20: 8a:a0:93:a7:e8:39:05:64:00:e3:a6:04:8c:13:33: 4e:be:bc:47:30:2b:9f:e7:a9:29:a2:04:5d:2e:db: df:3f:47:f9:60:28:b8:e2:59:a6:85:00:0e:e8:8c: 6a:79:3b:5f:47:f7:9f:0c:16:18:a1:47:dd:45:d4: 10:e4:af:e0:d0:87:45:14:6c:f7:72:d5:1d:a4:78: 99:19:78:56:d7:e2:72:49:64:94:05:68:cf:33:e1: d7:69:c1:70:25:a6:bf:07:3d:7f:93:79:9f:aa:ce: 1a:c4:6f:a6:b0:81:b2:66:99:ca:37:ab:17:7d:91: df:76:54:0c:6f:96:be:b2:31:a1:fd:11:90:d1:f0: 34:7c:aa:76:95:3b:07:b5:a7:21:f2:26:50:9a:53: 11:c7:9b:c0:e5:c1:e5:fa:19:4c:75:5a:77:62:60: d1:82:11:70:d5:6f:96:26:f4:f8:28:a8:13:5b:48: 6e:5e:04:56:f8:26:df:ef:71:9b:14:82:25:4f:3b: d9:70:7f:32:6a:24:47:16:34:8c:fe:de:6a:d2:35: af:4c:5a:84:c7:19:8f:7a:58:b5:9b:9b:2c:4c:0f: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:57:6F:A8:D4:30:35:D2:AE:04:BC:7E:9C:42:00:9C:4E:E5:F5 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:df:6b:72:b4:ab:d8:b7:ad:bb:57:32:5d:75:6f:5b:a6:61: 84:e0:03:34:c8:b4:1a:66:ba:f5:c2:9c:6b:59:3c:f9:98:e2: 99:97:93:ed:ed:25:19:10:38:66:6b:bc:d2:fe:4c:7c:11:37: 1c:1a:69:1a:cc:a8:c1:2e:c5:5f:a3:33:03:1d:fd:fc:ea:26: 43:44:1e:f7:80:e2:f4:f5:43:f4:70:ce:c0:14:34:5f:80:be: 14:3d:82:80:d4:b2:46:31:cd:73:5f:0d:00:e4:e7:2e:29:01: 0c:32:45:b5:38:a3:26:3b:c2:03:fe:bd:45:9a:82:cf:e6:14: 6c:35:95:57:de:ff:ea:0a:de:6c:71:da:24:99:eb:51:f5:6e: a5:e6:5d:b2:3b:51:f2:61:12:3a:54:12:ac:b5:42:0a:cc:34: 89:9a:7e:9c:60:44:18:06:10:a1:f9:48:22:ad:c6:ff:dc:6d: a8:4f:d8:7f:e4:3d:b9:6b:25:eb:11:15:2d:f6:86:4a:06:d7: e8:2a:45:76:32:e8:9c:68:5e:42:57:aa:61:e9:42:be:09:25: 26:1b:f1:65:e5:6d:57:20:db:1e:d2:ac:47:0b:e5:89:4e:8b: a5:aa:e7:86:c8:e1:8c:cb:bb:04:45:05:af:c9:7a:65:40:28: 8b:46:7e:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPL3wTki1iLGmZGcZ6o7ly1n2UewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA2MTgwMzQ3MTdaFw0yNTA2MjExNDA0MTdaMDMxMTAvBgNV BAMTKDc4NDY1NzZGQThENDMwMzVEMkFFMDRCQzdFOUM0MjAwOUM0RUU1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKm7h1VXgCmNLmlR84V3HumqZ Sj3fTPwSImn4IIqgk6foOQVkAOOmBIwTM06+vEcwK5/nqSmiBF0u298/R/lgKLji WaaFAA7ojGp5O19H958MFhihR91F1BDkr+DQh0UUbPdy1R2keJkZeFbX4nJJZJQF aM8z4ddpwXAlpr8HPX+TeZ+qzhrEb6awgbJmmco3qxd9kd92VAxvlr6yMaH9EZDR 8DR8qnaVOwe1pyHyJlCaUxHHm8DlweX6GUx1WndiYNGCEXDVb5Ym9PgoqBNbSG5e BFb4Jt/vcZsUgiVPO9lwfzJqJEcWNIz+3mrSNa9MWoTHGY96WLWbmyxMDzXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEZXb6jUMDXSrgS8fpxCAJxO5fUwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANffa3K0q9i3rbtXMl11b1umYYTgAzTItBpm uvXCnGtZPPmY4pmXk+3tJRkQOGZrvNL+THwRNxwaaRrMqMEuxV+jMwMd/fzqJkNE HveA4vT1Q/RwzsAUNF+AvhQ9goDUskYxzXNfDQDk5y4pAQwyRbU4oyY7wgP+vUWa gs/mFGw1lVfe/+oK3mxx2iSZ61H1bqXmXbI7UfJhEjpUEqy1QgrMNImafpxgRBgG EKH5SCKtxv/cbahP2H/kPblrJesRFS32hkoG1+gqRXYy6JxoXkJXqmHpQr4JJSYb 8WXlbVcg2x7SrEcL5YlOi6Wq54bI4YzLuwRFBa/JemVAKItGfvw= -----END CERTIFICATE-----Generated at Thu Jun 19 01:15:25 2025 by rpki-client