$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: vU2JKNZ0stTjJx4HC85IiHV/vN6gamOG5xtMSTnIb8g= Subject key identifier: A0:A9:8E:A4:54:88:D0:D2:8B:86:69:A6:7E:92:6E:51:C1:14:2C:73 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 09AB779A75E443512527E611C88DEB4F84060B30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: 99 Signing time: Sat 26 Apr 2025 18:02:03 +0000 Manifest this update: Sat 26 Apr 2025 17:57:03 +0000 Manifest next update: Wed 30 Apr 2025 03:06:03 +0000 Files and hashes: 1: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: 4ruCLdTa/XvD5PLSksPaPAmjUYBMkWseEbVKrrqeJU0=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ab:77:9a:75:e4:43:51:25:27:e6:11:c8:8d:eb:4f:84:06:0b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Apr 26 17:57:03 2025 GMT Not After : Apr 30 03:06:03 2025 GMT Subject: CN=A0A98EA45488D0D28B8669A67E926E51C1142C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:62:71:41:1a:08:22:61:c8:d2:25:15:55: 06:9d:0f:58:4e:11:9d:c2:05:2a:32:16:46:86:36: 18:3b:f5:d4:2f:a5:be:19:47:62:2d:d0:5d:da:2a: 67:4c:a7:44:37:05:ec:8a:da:0b:0a:b9:2c:0d:f2: 2c:0b:31:98:e0:2e:86:bd:05:0c:bc:86:89:98:1e: 6c:41:a3:24:00:84:43:dd:90:18:e7:a6:0c:af:b3: 5c:ab:7d:cb:cb:ef:a0:9a:61:22:6b:1e:ea:57:be: ac:bf:2b:ac:9d:6c:5c:ee:78:45:f9:3d:53:7f:85: 03:5c:21:61:f1:3a:43:c5:00:71:db:a2:18:3c:40: 51:a5:da:4d:ec:63:ed:aa:2b:d6:ed:25:fd:0d:3b: 6b:0f:6e:aa:02:47:27:e6:2b:0e:b6:c3:51:93:99: 6c:a3:ea:a8:35:78:bf:41:7d:01:d2:2c:d1:f9:f6: ee:76:1a:a3:8c:3a:ea:95:46:4e:2d:bb:80:da:8d: d2:f0:f2:2a:1d:27:ad:4a:7b:e6:9b:13:f7:89:25: a6:26:2a:80:c4:bb:7e:14:90:7d:80:71:0d:c9:da: cb:17:95:34:a8:ec:20:ad:6d:8d:de:f9:e4:98:53: c8:94:b3:57:60:f0:1b:e5:7a:38:eb:7d:ae:b0:45: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:8E:A4:54:88:D0:D2:8B:86:69:A6:7E:92:6E:51:C1:14:2C:73 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5f:2a:b8:c0:12:7c:0f:a5:bd:83:b4:7d:77:6a:7a:ee:c9: b4:23:08:c9:41:2a:c9:ce:07:d9:cb:92:57:28:86:9e:55:6e: b7:e5:c4:a3:e0:52:e2:ff:d0:ed:f9:1c:4e:0d:d3:e7:09:60: 2c:0a:ae:9e:4e:ec:bc:72:11:1a:74:0b:d7:17:b4:1b:6f:48: f4:33:ff:08:06:41:01:88:38:ae:7d:4b:e8:64:d1:87:c7:ea: bf:ca:11:d2:5d:c9:f9:84:c5:84:a9:e8:d8:41:0f:8f:ed:e3: 18:e9:bd:09:fd:0a:7d:7a:98:c9:04:87:a0:75:93:ec:99:48: a4:be:8e:62:35:85:5a:0b:90:74:6a:38:d6:77:a0:f0:09:66: 0b:f5:b7:68:ab:4f:7b:cf:55:d8:4c:9f:ed:80:ed:eb:97:4f: 71:03:e4:e9:c3:65:25:8d:ae:ec:1a:6b:80:db:0a:fb:ca:59: dc:f5:34:70:cd:73:0f:06:59:d8:0f:3f:7a:39:ed:49:5e:49: 34:47:b6:66:9b:d7:21:69:75:df:32:5e:28:50:7d:5f:5d:44: c0:ad:d6:05:59:b2:d6:26:1d:f8:9c:92:34:6d:b9:90:22:8f: 3e:e6:ed:03:bb:dd:cf:9e:31:50:0c:77:28:c3:3c:a1:75:d6: 03:58:7c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCat3mnXkQ1ElJ+YRyI3rT4QGCzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA0MjYxNzU3MDNaFw0yNTA0MzAwMzA2MDNaMDMxMTAvBgNV BAMTKEEwQTk4RUE0NTQ4OEQwRDI4Qjg2NjlBNjdFOTI2RTUxQzExNDJDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZmJxQRoIImHI0iUVVQadD1hO EZ3CBSoyFkaGNhg79dQvpb4ZR2It0F3aKmdMp0Q3BeyK2gsKuSwN8iwLMZjgLoa9 BQy8homYHmxBoyQAhEPdkBjnpgyvs1yrfcvL76CaYSJrHupXvqy/K6ydbFzueEX5 PVN/hQNcIWHxOkPFAHHbohg8QFGl2k3sY+2qK9btJf0NO2sPbqoCRyfmKw62w1GT mWyj6qg1eL9BfQHSLNH59u52GqOMOuqVRk4tu4DajdLw8iodJ61Ke+abE/eJJaYm KoDEu34UkH2AcQ3J2ssXlTSo7CCtbY3e+eSYU8iUs1dg8Bvlejjrfa6wRajlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoKmOpFSI0NKLhmmmfpJuUcEULHMwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVfKrjAEnwPpb2DtH13anruybQjCMlBKsnO B9nLklcohp5VbrflxKPgUuL/0O35HE4N0+cJYCwKrp5O7LxyERp0C9cXtBtvSPQz /wgGQQGIOK59S+hk0YfH6r/KEdJdyfmExYSp6NhBD4/t4xjpvQn9Cn16mMkEh6B1 k+yZSKS+jmI1hVoLkHRqONZ3oPAJZgv1t2irT3vPVdhMn+2A7euXT3ED5OnDZSWN ruwaa4DbCvvKWdz1NHDNcw8GWdgPP3o57UleSTRHtmab1yFpdd8yXihQfV9dRMCt 1gVZstYmHfickjRtuZAijz7m7QO73c+eMVAMdyjDPKF11gNYfL4= -----END CERTIFICATE-----Generated at Tue Apr 29 01:21:42 2025 by rpki-client