$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: QQtF93gSkvioAg1rz+md46IxndmAOPBX71TvVtsB8Sg= Subject key identifier: 9D:4D:6B:78:BC:21:F1:E3:FA:5C:B7:3F:1B:DC:C5:87:7E:EF:F7:3E Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 2D99B664F9D357189FFB2446B52F4B51B4562572 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 028C Signing time: Mon 03 Nov 2025 17:02:26 +0000 Manifest this update: Mon 03 Nov 2025 16:57:26 +0000 Manifest next update: Thu 06 Nov 2025 20:17:26 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=) 2: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=) 3: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: IFLQhcBJorKhPgzpf4tTJQo+yctC6LRn9bd/FqoJHlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:99:b6:64:f9:d3:57:18:9f:fb:24:46:b5:2f:4b:51:b4:56:25:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Nov 3 16:57:26 2025 GMT Not After : Nov 6 20:17:26 2025 GMT Subject: CN=9D4D6B78BC21F1E3FA5CB73F1BDCC5877EEFF73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:ec:3e:f1:0b:06:1b:fe:58:e5:e0:ca:c0: ca:20:7e:c1:8e:90:01:36:7e:b8:a1:02:33:6e:00: 4c:b4:46:81:36:e3:b7:c6:74:25:7d:f1:71:80:3f: cc:df:61:f6:0f:34:e1:67:28:d7:46:8b:83:22:cc: 59:02:cb:49:4e:a4:1e:bf:41:53:36:bb:33:4c:8c: be:3e:7a:1f:2f:14:bb:f1:e0:e3:79:dc:c6:c4:50: 52:fd:39:de:ce:53:9e:67:12:8e:1b:9e:24:b9:29: 07:d0:ac:3f:b3:2a:af:e5:fe:d5:80:04:26:83:96: f0:89:9b:db:6f:9b:5e:a9:fc:f6:a5:6a:95:c2:1b: bf:a1:8c:fc:45:f1:46:c3:7a:50:68:a7:45:38:3f: 5a:9b:a1:8f:e5:76:8a:19:ba:de:29:a7:e4:57:f8: 99:ea:52:3d:42:82:0c:14:96:86:be:f1:52:62:3f: a8:d6:ae:c0:63:82:fe:89:ad:4f:e7:d6:88:cb:38: 1b:d8:a8:d1:bd:2a:fb:e5:ce:2d:c3:a4:da:7c:da: ff:ed:2d:51:c5:c5:23:f2:66:68:44:fd:6f:02:9b: 26:33:6a:79:31:29:3d:49:42:4a:37:29:1b:8b:b2: c5:f2:6c:b7:d6:ab:70:c6:3a:8d:5b:34:9c:f7:03: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:6B:78:BC:21:F1:E3:FA:5C:B7:3F:1B:DC:C5:87:7E:EF:F7:3E X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a2:64:56:f8:b3:41:0d:2a:c0:e7:ef:af:61:65:ad:03:f5: 83:a4:c3:39:d1:3c:28:3d:e3:ea:60:ef:94:0d:59:ab:a4:75: b8:d0:18:94:65:80:db:be:c1:ca:b2:e3:a6:67:e9:37:e7:ca: a2:a1:2e:37:30:fd:a5:92:00:78:70:ce:14:2c:35:64:eb:9e: 50:12:79:8b:f7:26:93:27:fb:e4:5a:d3:6b:03:c5:fb:1b:c6: 2d:b5:2f:32:ca:49:3d:6f:03:36:cf:a2:15:93:6d:8e:0d:d4: ba:8c:ad:37:a3:0b:51:41:a3:fa:72:9a:b8:c7:1e:0d:78:4f: 5d:6b:6f:3f:ba:7b:41:22:9f:80:65:87:f8:84:b9:3b:7c:6a: ef:15:bb:5d:f7:56:3a:2d:c3:69:53:3d:84:2a:13:f3:ce:6e: 9f:55:94:52:52:31:ec:52:eb:0f:e3:d9:2d:d5:17:e3:62:9c: 5a:a4:e5:c2:c4:2d:79:eb:20:98:26:e4:17:52:ed:43:8c:5c: 07:81:9a:bd:bc:54:8e:f6:1f:9d:a5:57:8a:b2:3e:95:a1:04: 86:09:50:9f:60:22:aa:ce:17:49:5a:80:5e:87:db:5a:b5:c3: f3:4c:f5:07:8b:90:af:f7:8e:63:b6:05:36:d9:4f:1a:80:10: 98:1a:47:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZm2ZPnTVxif+yRGtS9LUbRWJXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTExMDMxNjU3MjZaFw0yNTExMDYyMDE3MjZaMDMxMTAvBgNV BAMTKDlENEQ2Qjc4QkMyMUYxRTNGQTVDQjczRjFCRENDNTg3N0VFRkY3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYOw+8QsGG/5Y5eDKwMogfsGO kAE2frihAjNuAEy0RoE247fGdCV98XGAP8zfYfYPNOFnKNdGi4MizFkCy0lOpB6/ QVM2uzNMjL4+eh8vFLvx4ON53MbEUFL9Od7OU55nEo4bniS5KQfQrD+zKq/l/tWA BCaDlvCJm9tvm16p/PalapXCG7+hjPxF8UbDelBop0U4P1qboY/ldooZut4pp+RX +JnqUj1CggwUloa+8VJiP6jWrsBjgv6JrU/n1ojLOBvYqNG9Kvvlzi3DpNp82v/t LVHFxSPyZmhE/W8CmyYzankxKT1JQko3KRuLssXybLfWq3DGOo1bNJz3A7EjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnU1reLwh8eP6XLc/G9zFh37v9z4wHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACiZFb4s0ENKsDn769hZa0D9YOkwznRPCg9 4+pg75QNWaukdbjQGJRlgNu+wcqy46Zn6TfnyqKhLjcw/aWSAHhwzhQsNWTrnlAS eYv3JpMn++Ra02sDxfsbxi21LzLKST1vAzbPohWTbY4N1LqMrTejC1FBo/pymrjH Hg14T11rbz+6e0Ein4Blh/iEuTt8au8Vu133Vjotw2lTPYQqE/PObp9VlFJSMexS 6w/j2S3VF+NinFqk5cLELXnrIJgm5BdS7UOMXAeBmr28VI72H52lV4qyPpWhBIYJ UJ9gIqrOF0lagF6H21q1w/NM9QeLkK/3jmO2BTbZTxqAEJgaR0Q= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:26 2025 by rpki-client