$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: UPH2XOfNwy+srNb0lOzYeVrKTbEdsocB1gKmpg1kLXc= Subject key identifier: 69:D0:36:8E:DD:0C:24:CB:7A:70:7F:22:1B:76:51:8F:4D:E2:B8:AA Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 565F63A591B512C54125447090E03F82C7E6CD79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: B1 Signing time: Wed 18 Jun 2025 15:42:03 +0000 Manifest this update: Wed 18 Jun 2025 15:37:03 +0000 Manifest next update: Sat 21 Jun 2025 18:25:03 +0000 Files and hashes: 1: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: G7dwlPgkctcd1+QDun479+RE0hT5hs/eOGjeywWAvsE=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5f:63:a5:91:b5:12:c5:41:25:44:70:90:e0:3f:82:c7:e6:cd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Jun 18 15:37:03 2025 GMT Not After : Jun 21 18:25:03 2025 GMT Subject: CN=69D0368EDD0C24CB7A707F221B76518F4DE2B8AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:99:ce:e0:4a:6e:bf:62:fa:33:0c:83:e3:3b: bd:73:b6:96:ae:c9:34:5d:df:03:40:61:7c:59:ee: a0:93:06:a2:9c:94:df:da:5e:c8:a2:37:8b:bc:d1: aa:92:52:c5:3c:dc:5b:d8:7c:f9:53:12:16:ae:19: 70:41:b8:2a:d9:63:59:7b:81:b2:23:a4:61:89:d4: ae:83:b5:3b:a6:0e:5e:ab:c1:5b:af:93:fa:26:d5: 02:5c:38:f4:7d:7a:3b:eb:ae:89:b3:1c:1f:4d:3e: ca:fc:19:5e:1a:96:fc:d6:4b:02:f1:44:11:65:71: 19:3d:fc:77:57:a8:5a:f6:9f:d9:2e:20:1b:07:b3: 68:a2:cb:f3:f9:5d:cc:3c:11:4c:5f:c1:22:d6:14: fe:07:93:a8:d2:51:30:a0:9b:80:38:62:94:48:01: b5:2e:1f:e6:b0:4e:94:50:77:da:4f:f3:32:53:02: c7:90:95:32:f9:cb:68:52:48:dd:c7:80:64:b7:cd: 1e:db:ab:79:17:5b:12:10:9f:6f:73:71:fc:65:f8: 52:c2:5b:5b:23:80:9d:d2:6b:0c:13:77:79:74:84: b5:aa:94:32:60:c0:e7:de:71:47:64:c5:31:ac:d4: cc:99:c9:a5:63:78:0b:de:a2:d4:d2:2b:94:bb:18: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D0:36:8E:DD:0C:24:CB:7A:70:7F:22:1B:76:51:8F:4D:E2:B8:AA X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:18:2b:d9:d1:a6:0b:82:f4:4b:8d:d4:0b:11:f8:fe:85:91: 89:4d:a0:f0:c6:9b:7e:e5:f3:6b:46:61:21:7c:7e:db:be:7f: bf:e4:6c:0c:81:13:bf:c9:0e:7c:16:fe:9c:a4:1f:31:10:d8: 9c:e5:10:11:0a:5c:6c:e6:c9:a1:47:75:f5:e8:e9:4d:eb:c8: 95:78:14:21:38:00:b7:79:36:cc:68:a5:ec:b1:dd:d3:b8:e9: f3:5c:fb:b9:3f:d6:f0:c6:75:b7:6f:d6:45:91:8f:52:86:cd: 7d:1b:b3:bc:56:d1:b0:98:b0:ab:94:ac:f1:8b:76:59:ce:f8: 46:fc:37:ba:2e:39:af:b7:d0:f7:d9:fa:79:39:3f:27:17:4b: 0b:bd:48:a3:6c:f8:69:94:5d:05:dc:ae:5f:3a:13:3a:fb:b2: e6:a2:44:f0:ac:9a:0b:18:64:ab:a2:8c:de:84:4a:c6:9e:4a: a1:7d:e5:91:39:3e:c6:5b:3b:e5:f5:07:da:44:a1:c1:a6:55: df:c8:12:72:2f:60:06:54:89:82:e8:12:2b:6e:cc:44:c7:f7: 62:2d:30:73:3a:5a:c1:a1:ef:8a:32:2c:e6:6e:24:7e:96:97: ba:93:b2:b5:b3:08:c8:ea:30:18:8e:24:3e:d8:98:49:2e:94: 11:e6:4f:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl9jpZG1EsVBJURwkOA/gsfmzXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA2MTgxNTM3MDNaFw0yNTA2MjExODI1MDNaMDMxMTAvBgNV BAMTKDY5RDAzNjhFREQwQzI0Q0I3QTcwN0YyMjFCNzY1MThGNERFMkI4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqmc7gSm6/YvozDIPjO71ztpau yTRd3wNAYXxZ7qCTBqKclN/aXsiiN4u80aqSUsU83FvYfPlTEhauGXBBuCrZY1l7 gbIjpGGJ1K6DtTumDl6rwVuvk/om1QJcOPR9ejvrromzHB9NPsr8GV4alvzWSwLx RBFlcRk9/HdXqFr2n9kuIBsHs2iiy/P5Xcw8EUxfwSLWFP4Hk6jSUTCgm4A4YpRI AbUuH+awTpRQd9pP8zJTAseQlTL5y2hSSN3HgGS3zR7bq3kXWxIQn29zcfxl+FLC W1sjgJ3SawwTd3l0hLWqlDJgwOfecUdkxTGs1MyZyaVjeAveotTSK5S7GAYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadA2jt0MJMt6cH8iG3ZRj03iuKowHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAYK9nRpguC9EuN1AsR+P6FkYlNoPDGm37l 82tGYSF8ftu+f7/kbAyBE7/JDnwW/pykHzEQ2JzlEBEKXGzmyaFHdfXo6U3ryJV4 FCE4ALd5Nsxopeyx3dO46fNc+7k/1vDGdbdv1kWRj1KGzX0bs7xW0bCYsKuUrPGL dlnO+Eb8N7ouOa+30PfZ+nk5PycXSwu9SKNs+GmUXQXcrl86Ezr7suaiRPCsmgsY ZKuijN6ESsaeSqF95ZE5PsZbO+X1B9pEocGmVd/IEnIvYAZUiYLoEituzETH92It MHM6WsGh74oyLOZuJH6Wl7qTsrWzCMjqMBiOJD7YmEkulBHmT1o= -----END CERTIFICATE-----Generated at Thu Jun 19 04:04:37 2025 by rpki-client