$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: yHpJ5J/N7AFCT+xS5QE/Xg45DFNYkJCmw+GEpVOIMzc= Subject key identifier: 15:0D:BE:51:78:B5:CA:6C:A2:FD:D1:DF:F6:2B:D6:CA:EF:7F:28:08 Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 18135DCB38C248DB1280B971C7D64D2606B084A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 024D Signing time: Tue 17 Jun 2025 05:52:25 +0000 Manifest this update: Tue 17 Jun 2025 05:47:25 +0000 Manifest next update: Fri 20 Jun 2025 11:08:25 +0000 Files and hashes: 1: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: /lOnbOtji6YyuZliCrjnmOuEs3tds2ztynSZF0UqsOU=) 2: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s=) 3: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: TnO3pGOiHJftQOd6DXKryLv7FvQHNCeG0oziJLeZSbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 11:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:13:5d:cb:38:c2:48:db:12:80:b9:71:c7:d6:4d:26:06:b0:84:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Jun 17 05:47:25 2025 GMT Not After : Jun 20 11:08:25 2025 GMT Subject: CN=150DBE5178B5CA6CA2FDD1DFF62BD6CAEF7F2808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:49:c6:63:de:7c:bf:ef:b0:49:57:68:11: d4:fe:16:59:8c:e6:0a:e7:c0:1d:55:f6:89:52:e7: c1:c0:c4:a1:52:1b:ea:80:29:e1:87:7a:4f:8a:ae: ce:ac:32:df:c3:1d:b0:a6:93:3a:61:ce:5d:24:f4: 17:3b:2f:d6:8f:14:e1:be:16:a5:d3:f2:b7:48:78: bc:56:2e:43:82:61:80:35:cc:2c:c2:37:ff:01:85: 24:4e:5f:b9:5a:a1:6e:fb:23:d3:ce:a3:6e:b4:5e: 96:5b:ac:ca:19:ec:7b:59:dc:28:96:12:d1:84:30: e7:f5:a4:aa:4c:c5:8d:8b:6d:46:de:34:75:f9:eb: af:b2:a9:bd:1a:b3:3f:70:6a:12:ad:77:9d:99:d9: 78:0d:dd:d9:fc:50:0d:dc:34:69:62:50:09:68:52: 64:6e:aa:eb:87:48:ab:db:ff:2a:bd:42:20:c5:ee: 82:17:d1:fb:09:e4:82:19:a0:10:02:81:f2:7a:f1: 87:5c:36:b5:35:31:5e:fc:16:50:3f:c5:1d:13:ba: b1:65:30:75:6c:19:4f:0d:b3:31:7b:f4:e8:f5:13: 97:8e:b9:5d:08:c2:d1:3f:e5:49:4b:17:bb:25:86: 7b:c6:62:35:15:11:3e:0b:58:ad:c9:94:15:0d:02: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0D:BE:51:78:B5:CA:6C:A2:FD:D1:DF:F6:2B:D6:CA:EF:7F:28:08 X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f7:b5:5e:99:f2:ae:5f:9f:9d:b5:7e:6d:18:42:38:da:14: 94:7f:c4:03:b4:d5:b1:26:9a:87:8a:5d:a7:a4:55:ac:7d:c1: e6:da:18:64:d0:20:23:57:e9:b6:e8:50:fc:e7:ad:9c:55:6f: 32:c4:91:61:c1:82:f2:75:0e:b3:38:ce:73:30:48:d6:45:ab: e6:b6:27:e5:59:1b:c1:10:98:9d:da:18:bf:25:52:30:60:a5: 0d:78:ec:8f:21:91:07:60:d8:c4:dc:77:a8:ae:30:6b:f1:36: fd:5a:e1:6f:01:17:0d:e3:cd:cc:0d:f2:c6:65:aa:a1:08:13: 16:6b:ad:1a:76:4c:c9:9a:c1:45:50:72:93:1a:62:c3:26:f7: 67:d7:8e:1d:d1:e5:16:c1:be:2f:5e:31:96:01:0c:7a:ef:09: af:ee:6d:2b:63:6a:39:c5:99:f5:58:f4:bb:3f:86:f5:c4:a8: db:41:01:54:3c:76:fb:cf:3f:98:a2:d8:71:a9:23:68:76:09: a8:d2:10:5c:0f:39:05:ee:fc:c7:75:d9:49:8e:21:85:20:85: 8c:56:10:09:5b:3f:5c:9b:29:55:8e:fe:93:81:ac:09:15:20: 7d:10:f4:c8:04:f5:2a:e5:3a:d3:35:1b:ee:ec:cd:76:40:d8: 6c:9a:b3:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBNdyzjCSNsSgLlxx9ZNJgawhKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTA2MTcwNTQ3MjVaFw0yNTA2MjAxMTA4MjVaMDMxMTAvBgNV BAMTKDE1MERCRTUxNzhCNUNBNkNBMkZERDFERkY2MkJENkNBRUY3RjI4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCz0nGY958v++wSVdoEdT+FlmM 5grnwB1V9olS58HAxKFSG+qAKeGHek+Krs6sMt/DHbCmkzphzl0k9Bc7L9aPFOG+ FqXT8rdIeLxWLkOCYYA1zCzCN/8BhSROX7laoW77I9POo260XpZbrMoZ7HtZ3CiW EtGEMOf1pKpMxY2LbUbeNHX566+yqb0asz9wahKtd52Z2XgN3dn8UA3cNGliUAlo UmRuquuHSKvb/yq9QiDF7oIX0fsJ5IIZoBACgfJ68YdcNrU1MV78FlA/xR0TurFl MHVsGU8NszF79Oj1E5eOuV0IwtE/5UlLF7slhnvGYjUVET4LWK3JlBUNAr4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQ2+UXi1ymyi/dHf9ivWyu9/KAgwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr3tV6Z8q5fn521fm0YQjjaFJR/xAO01bEm moeKXaekVax9webaGGTQICNX6bboUPznrZxVbzLEkWHBgvJ1DrM4znMwSNZFq+a2 J+VZG8EQmJ3aGL8lUjBgpQ147I8hkQdg2MTcd6iuMGvxNv1a4W8BFw3jzcwN8sZl qqEIExZrrRp2TMmawUVQcpMaYsMm92fXjh3R5RbBvi9eMZYBDHrvCa/ubStjajnF mfVY9Ls/hvXEqNtBAVQ8dvvPP5ii2HGpI2h2CajSEFwPOQXu/Md12UmOIYUghYxW EAlbP1ybKVWO/pOBrAkVIH0Q9MgE9SrlOtM1G+7szXZA2Gyas7g= -----END CERTIFICATE-----Generated at Tue Jun 17 17:54:17 2025 by rpki-client