$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: zm2xOHWXK7K7DUJTTXp9RYOpzUSeecUwVVfnczLlHq8= Subject key identifier: D0:86:5E:E3:89:F9:7A:7E:3A:2A:6F:4D:51:28:71:46:2C:65:9C:66 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 5D8267103AC891A22E38CF6085FF64C3A8DA4C9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 04A7 Signing time: Fri 13 Jun 2025 21:31:46 +0000 Manifest this update: Fri 13 Jun 2025 21:26:46 +0000 Manifest next update: Tue 17 Jun 2025 05:40:46 +0000 Files and hashes: 1: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: pAWPg1mVsb6grEy5XwYS8KNz/YCIIoVZfrGxZUImg3c=) 2: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: Abkbz+JB96AsAJeWYsjGUVFZ5UI+53UJYjdT2RBIo/8=) 3: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: bE661+O1P4yXvU0DhZoWEyQ/dU6h4QpYxixmc8KzOac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 05:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:82:67:10:3a:c8:91:a2:2e:38:cf:60:85:ff:64:c3:a8:da:4c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Jun 13 21:26:46 2025 GMT Not After : Jun 17 05:40:46 2025 GMT Subject: CN=D0865EE389F97A7E3A2A6F4D512871462C659C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:54:b7:19:37:1f:8a:7d:ab:23:35:99:89:f5: 1e:87:a8:48:08:a8:07:24:d2:cd:99:1a:ed:75:1a: fb:85:5b:74:9e:b2:e9:56:c3:a5:11:1e:e3:dc:6c: 07:ba:fb:7f:65:16:fb:c5:d8:4f:97:70:9b:f8:9c: 69:b0:50:8f:06:52:37:54:6e:3d:3c:7d:90:aa:d6: d3:fe:34:38:b5:06:b4:05:2e:c3:65:a7:ad:02:4c: e4:72:9e:67:2c:09:4a:23:ef:54:0b:1d:a7:5f:50: c3:aa:d5:bd:88:b1:52:83:3b:97:ac:7a:67:ca:9f: eb:fe:10:53:55:16:43:a3:c9:21:ae:41:ad:43:7c: 41:e9:a8:68:fa:38:08:0c:e9:8d:7f:92:15:06:15: 40:53:cb:42:a1:b8:ba:d2:d5:bd:e0:7e:b2:0f:01: 1a:c0:74:e5:24:f7:36:20:79:32:13:cd:68:0f:35: 3e:5f:aa:a8:57:73:0e:b0:77:9d:67:e7:0f:b3:30: 83:57:96:b0:55:80:c2:d5:8d:86:80:cb:aa:90:29: a2:82:e3:76:01:90:68:c5:ec:c3:ec:e1:0c:37:29: 85:eb:7b:97:dc:be:f3:b6:68:de:ea:ff:4b:35:ce: 2f:97:b1:1b:1b:8e:69:24:6d:7d:c0:3e:c5:ba:51: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:86:5E:E3:89:F9:7A:7E:3A:2A:6F:4D:51:28:71:46:2C:65:9C:66 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:d7:45:49:aa:9a:7e:ca:ac:26:7c:a3:ad:c6:bf:5b:89: 88:71:f8:74:15:00:52:e4:51:c6:de:15:06:53:26:57:7f:0e: 62:9c:29:f1:f0:6d:42:97:28:41:63:ef:5f:f5:75:4a:83:44: a1:13:69:dc:86:e0:54:ec:7a:f9:77:3a:7f:22:e1:0a:b7:43: e2:55:ba:90:a3:8c:48:d0:26:30:24:92:d9:d2:d7:3d:52:f2: db:9e:c9:d7:a0:36:63:51:47:a0:be:6c:93:aa:21:d1:66:6f: d7:73:02:49:fd:c9:6d:93:a6:db:34:79:3c:1d:34:50:ed:de: 25:10:c6:56:5f:37:a6:49:6f:b8:ed:ec:05:d6:70:9b:dc:bd: 20:75:09:c7:9f:e3:12:1d:04:9e:8c:7e:9d:62:cf:d3:19:78: ad:98:a5:ad:23:eb:c2:ee:74:bd:63:de:b6:5f:b5:7d:f8:fd: 32:38:fd:7e:f7:74:7a:38:39:23:f9:91:57:bd:88:d4:00:0b: de:c9:bd:3d:66:0d:50:cf:38:16:81:d8:77:b5:13:6c:b3:90: 7a:e1:2f:8a:93:45:58:4e:80:33:d7:34:0b:3e:ed:2a:02:12: 40:ac:ab:9d:31:e2:0a:b8:01:2e:60:8e:7a:15:c0:d8:0e:bb: 52:cf:41:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYJnEDrIkaIuOM9ghf9kw6jaTJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTA2MTMyMTI2NDZaFw0yNTA2MTcwNTQwNDZaMDMxMTAvBgNV BAMTKEQwODY1RUUzODlGOTdBN0UzQTJBNkY0RDUxMjg3MTQ2MkM2NTlDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvVLcZNx+KfasjNZmJ9R6HqEgI qAck0s2ZGu11GvuFW3SesulWw6URHuPcbAe6+39lFvvF2E+XcJv4nGmwUI8GUjdU bj08fZCq1tP+NDi1BrQFLsNlp60CTORynmcsCUoj71QLHadfUMOq1b2IsVKDO5es emfKn+v+EFNVFkOjySGuQa1DfEHpqGj6OAgM6Y1/khUGFUBTy0KhuLrS1b3gfrIP ARrAdOUk9zYgeTITzWgPNT5fqqhXcw6wd51n5w+zMINXlrBVgMLVjYaAy6qQKaKC 43YBkGjF7MPs4Qw3KYXre5fcvvO2aN7q/0s1zi+XsRsbjmkkbX3APsW6UeDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IZe44n5en46Km9NUShxRixlnGYwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJK10VJqpp+yqwmfKOtxr9biYhx+HQVAFLk UcbeFQZTJld/DmKcKfHwbUKXKEFj71/1dUqDRKETadyG4FTsevl3On8i4Qq3Q+JV upCjjEjQJjAkktnS1z1S8tueydegNmNRR6C+bJOqIdFmb9dzAkn9yW2Tpts0eTwd NFDt3iUQxlZfN6ZJb7jt7AXWcJvcvSB1Ccef4xIdBJ6Mfp1iz9MZeK2Ypa0j68Lu dL1j3rZftX34/TI4/X73dHo4OSP5kVe9iNQAC97JvT1mDVDPOBaB2He1E2yzkHrh L4qTRVhOgDPXNAs+7SoCEkCsq50x4gq4AS5gjnoVwNgOu1LPQY4= -----END CERTIFICATE-----Generated at Mon Jun 16 00:35:36 2025 by rpki-client