$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: H/e0AaSB4u8Di4z5prSERlv5JTSgyWbnLiOsCnSHoDc= Subject key identifier: 80:08:4B:BB:64:B7:8D:C9:D5:2C:C7:E7:5B:9E:63:A3:C6:40:EE:A7 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 305B722199969905BEFD525C01D0311418F99072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: CB Signing time: Thu 07 Aug 2025 18:42:06 +0000 Manifest this update: Thu 07 Aug 2025 18:37:06 +0000 Manifest next update: Mon 11 Aug 2025 02:52:06 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) 2: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 3: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) 4: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: zlTyklIjUe3VVK9E9Kt59X9ou/Jd7ai90IDwfLw0rSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 02:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5b:72:21:99:96:99:05:be:fd:52:5c:01:d0:31:14:18:f9:90:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Aug 7 18:37:06 2025 GMT Not After : Aug 11 02:52:06 2025 GMT Subject: CN=80084BBB64B78DC9D52CC7E75B9E63A3C640EEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:6f:4a:fd:04:6c:a7:d4:55:54:51:9b:7d: bf:27:a2:d9:fc:03:ae:a3:a6:e6:be:8d:55:62:e6: 6b:39:77:e7:0d:d2:a9:8b:56:84:30:83:3b:b0:5d: cb:09:ba:66:3b:51:32:c2:4a:65:fb:f7:10:a8:e8: 9b:d7:03:17:91:72:4e:8c:97:95:42:df:31:de:1b: 15:59:12:4f:ac:04:68:e3:fe:28:28:37:2c:1d:47: 83:47:9c:f9:f2:f1:a2:7a:28:a7:fd:e5:e8:a6:7a: 77:cf:16:04:0b:d0:33:83:09:4b:14:1d:4f:85:25: 99:67:df:d4:27:9b:40:d7:76:08:53:a8:a0:d9:b7: a9:29:43:82:e8:31:4c:db:84:ea:95:0e:f3:74:a7: c4:31:be:83:ed:df:b5:6b:2a:27:62:9e:fe:aa:16: 5a:89:95:46:a3:25:56:29:f4:d6:82:42:83:2b:d9: f5:11:0b:ad:e2:60:1d:c8:d9:a5:b3:1f:82:8b:82: df:f5:16:69:5e:70:6a:e8:c5:b5:12:89:6d:a7:ff: 87:c2:9e:2f:77:ac:f2:5d:87:c0:65:81:5c:61:6e: 93:81:87:dc:28:f0:38:fb:4c:63:22:d1:cc:50:81: c7:8f:16:f4:d6:14:d3:1b:76:8a:1f:09:11:1a:46: ec:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:08:4B:BB:64:B7:8D:C9:D5:2C:C7:E7:5B:9E:63:A3:C6:40:EE:A7 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:73:80:44:45:2b:ea:76:d0:a5:14:e9:d7:63:40:62:5f:4a: 32:c2:db:ba:00:82:62:0d:d8:11:fc:f3:45:be:39:4e:58:c6: 2a:42:74:2c:4e:c8:fa:49:73:c5:d0:18:3c:45:e1:95:34:f3: f9:ae:a4:8e:b8:a3:cf:0c:33:d8:3f:5c:6a:d8:27:1b:95:54: 86:d6:05:02:c9:4f:de:11:35:ad:e8:d2:42:41:76:41:0a:72: e1:ac:42:6d:9f:c7:c0:27:7e:5b:7a:ec:49:6b:ba:32:86:d6: 14:14:88:d7:44:91:0b:e5:b5:23:fe:b7:00:3e:72:bb:d4:06: bb:92:0e:14:8a:0c:e7:ea:80:e7:ff:7a:08:24:12:e0:eb:62: d3:23:a8:48:72:3f:cd:47:19:e0:1a:0e:a0:37:c2:22:47:a2: 6f:9d:6d:27:65:78:97:79:9c:0d:ab:72:51:14:a5:9b:6d:4c: e9:9a:cf:99:dd:1f:9b:fd:95:5a:7d:a5:5d:9e:5d:70:25:9e: 21:a4:c9:07:b1:d1:59:73:f3:05:1f:a0:e4:79:e3:49:a2:37: f0:27:d9:de:82:98:1b:f7:17:31:96:e2:b4:8d:32:7f:61:77: d0:91:da:ed:5f:42:44:2f:dc:1c:e4:7f:94:1e:dc:d5:61:69: 1c:5c:4b:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFtyIZmWmQW+/VJcAdAxFBj5kHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA4MDcxODM3MDZaFw0yNTA4MTEwMjUyMDZaMDMxMTAvBgNV BAMTKDgwMDg0QkJCNjRCNzhEQzlENTJDQzdFNzVCOUU2M0EzQzY0MEVFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKW9K/QRsp9RVVFGbfb8notn8 A66jpua+jVVi5ms5d+cN0qmLVoQwgzuwXcsJumY7UTLCSmX79xCo6JvXAxeRck6M l5VC3zHeGxVZEk+sBGjj/igoNywdR4NHnPny8aJ6KKf95eimenfPFgQL0DODCUsU HU+FJZln39Qnm0DXdghTqKDZt6kpQ4LoMUzbhOqVDvN0p8QxvoPt37VrKidinv6q FlqJlUajJVYp9NaCQoMr2fURC63iYB3I2aWzH4KLgt/1FmlecGroxbUSiW2n/4fC ni93rPJdh8BlgVxhbpOBh9wo8Dj7TGMi0cxQgcePFvTWFNMbdoofCREaRuzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgAhLu2S3jcnVLMfnW55jo8ZA7qcwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANlzgERFK+p20KUU6ddjQGJfSjLC27oAgmIN 2BH880W+OU5YxipCdCxOyPpJc8XQGDxF4ZU08/mupI64o88MM9g/XGrYJxuVVIbW BQLJT94RNa3o0kJBdkEKcuGsQm2fx8Anflt67ElrujKG1hQUiNdEkQvltSP+twA+ crvUBruSDhSKDOfqgOf/eggkEuDrYtMjqEhyP81HGeAaDqA3wiJHom+dbSdleJd5 nA2rclEUpZttTOmaz5ndH5v9lVp9pV2eXXAlniGkyQex0Vlz8wUfoOR540miN/An 2d6CmBv3FzGW4rSNMn9hd9CR2u1fQkQv3Bzkf5Qe3NVhaRxcS3E= -----END CERTIFICATE-----Generated at Sat Aug 9 01:24:09 2025 by rpki-client