$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: Zby810DrMg7y0gSkBRl8UGgv2JNP5rTFJSP7cJ2i5Q0= Subject key identifier: DF:F4:6E:05:10:E6:BB:E2:9D:8A:7A:70:9D:78:1B:A5:98:33:2D:E8 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 277BCC4C5D3BDAFD9239561F0AC08E80BA20F100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: F2 Signing time: Tue 04 Nov 2025 04:32:07 +0000 Manifest this update: Tue 04 Nov 2025 04:27:07 +0000 Manifest next update: Fri 07 Nov 2025 09:54:07 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) 2: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 3: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) 4: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: TJPE41mSIuNFemVZ6UCkX7pgXtsKqtnGq22Nfr8zdtk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7b:cc:4c:5d:3b:da:fd:92:39:56:1f:0a:c0:8e:80:ba:20:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Nov 4 04:27:07 2025 GMT Not After : Nov 7 09:54:07 2025 GMT Subject: CN=DFF46E0510E6BBE29D8A7A709D781BA598332DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:77:1f:17:e5:75:5c:9b:d3:b2:11:e2:73:36: 2d:fb:c1:aa:b3:b9:15:e1:93:49:7b:d0:b5:42:fe: 25:01:9a:56:f0:71:67:d7:7e:5f:be:ee:4e:d3:67: 4c:d9:76:ca:7e:c1:ac:e3:fd:e9:61:5e:06:8a:89: 4a:de:1e:d7:aa:53:49:e2:f6:b0:71:3d:55:0f:a8: f9:8d:a0:1e:e2:78:23:d6:dc:b5:08:ea:0f:2f:7c: 40:c8:ed:94:da:c1:6e:10:05:21:01:8f:e3:ac:9a: 13:a8:ef:9d:9f:f6:c9:b4:09:29:7b:7e:2c:f1:f6: f8:c6:83:cc:45:34:e7:65:fd:f0:e0:a2:7c:98:68: f7:99:1d:6f:dc:32:db:71:63:1b:81:fb:88:cf:80: 58:d9:7e:ed:e8:5f:f0:d7:d3:af:46:d5:f5:9f:88: fa:af:b3:fd:83:55:30:59:7f:75:2d:ff:43:f6:29: 10:12:05:5a:9c:95:54:04:f0:52:62:10:64:3a:33: 7a:10:69:d6:ec:b2:cb:b2:b7:97:55:88:39:de:fa: 4b:82:48:53:3f:0c:60:7b:77:bc:c1:c1:b8:68:a9: 6f:ab:45:d2:29:06:e9:38:0e:b4:38:84:83:12:51: ce:20:df:a0:bf:49:da:ef:7c:30:2b:d7:6e:75:77: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:6E:05:10:E6:BB:E2:9D:8A:7A:70:9D:78:1B:A5:98:33:2D:E8 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e1:85:63:38:71:ce:04:ab:4f:fc:e6:75:28:b7:cc:72:ac: 26:0f:4c:65:6e:d0:58:31:31:4f:e0:62:9d:2d:27:06:51:00: e3:24:00:24:b7:d5:e3:47:25:19:3e:d5:47:25:80:84:29:dc: 1f:0e:e9:de:0a:63:b0:56:65:cc:21:85:07:22:a6:02:97:95: 72:10:1e:55:11:ea:6a:49:8a:3f:e2:fa:c2:47:42:47:d2:dc: 9c:ed:92:45:d9:62:2b:e7:ad:8c:22:10:c4:52:ab:bf:79:8c: 0e:04:15:cf:40:7f:db:a5:1d:12:50:de:a5:81:0b:d4:20:44: c6:0d:6a:86:41:96:a0:ca:32:94:1b:92:c4:30:c4:c1:20:f3: e8:89:4f:8b:1f:31:61:be:0a:2d:fa:95:d5:51:a0:5c:44:e7: 5e:e5:12:b2:ef:bc:ad:26:52:8a:60:1a:4e:60:b3:59:42:1c: 1d:c5:54:72:d9:c6:57:86:79:b8:b2:3e:a8:bd:80:d8:88:c9: 2d:59:86:53:fa:47:e1:c5:aa:f0:d9:76:6e:4d:7f:4e:64:63: d5:36:86:3e:8a:56:e3:93:25:bf:72:8d:7f:22:a3:92:e7:65: f4:09:aa:5e:e6:7e:2f:39:ce:e4:af:bb:36:3c:ed:51:6c:8b: 10:6f:57:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3vMTF072v2SOVYfCsCOgLog8QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTExMDQwNDI3MDdaFw0yNTExMDcwOTU0MDdaMDMxMTAvBgNV BAMTKERGRjQ2RTA1MTBFNkJCRTI5RDhBN0E3MDlENzgxQkE1OTgzMzJERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5dx8X5XVcm9OyEeJzNi37waqz uRXhk0l70LVC/iUBmlbwcWfXfl++7k7TZ0zZdsp+wazj/elhXgaKiUreHteqU0ni 9rBxPVUPqPmNoB7ieCPW3LUI6g8vfEDI7ZTawW4QBSEBj+OsmhOo752f9sm0CSl7 fizx9vjGg8xFNOdl/fDgonyYaPeZHW/cMttxYxuB+4jPgFjZfu3oX/DX069G1fWf iPqvs/2DVTBZf3Ut/0P2KRASBVqclVQE8FJiEGQ6M3oQadbsssuyt5dViDne+kuC SFM/DGB7d7zBwbhoqW+rRdIpBuk4DrQ4hIMSUc4g36C/SdrvfDAr1251d7KDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/RuBRDmu+KdinpwnXgbpZgzLegwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjhhWM4cc4Eq0/85nUot8xyrCYPTGVu0Fgx MU/gYp0tJwZRAOMkACS31eNHJRk+1UclgIQp3B8O6d4KY7BWZcwhhQcipgKXlXIQ HlUR6mpJij/i+sJHQkfS3JztkkXZYivnrYwiEMRSq795jA4EFc9Af9ulHRJQ3qWB C9QgRMYNaoZBlqDKMpQbksQwxMEg8+iJT4sfMWG+Ci36ldVRoFxE517lErLvvK0m UopgGk5gs1lCHB3FVHLZxleGebiyPqi9gNiIyS1ZhlP6R+HFqvDZdm5Nf05kY9U2 hj6KVuOTJb9yjX8io5LnZfQJql7mfi85zuSvuzY87VFsixBvV04= -----END CERTIFICATE-----Generated at Tue Nov 4 23:51:22 2025 by rpki-client