$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: aCD6Ox0B+2bcsgolQFrkDEIYCBgzwTzpBeXfO+rngOs= Subject key identifier: 06:4C:EF:2F:33:63:3A:19:B1:41:91:F8:FE:A4:A7:24:59:A0:A9:79 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 0487DF37F5EB8C80FAED07068E315CF3125125E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01D6 Signing time: Wed 05 Nov 2025 14:21:12 +0000 Manifest this update: Wed 05 Nov 2025 14:16:12 +0000 Manifest next update: Sat 08 Nov 2025 17:03:12 +0000 Files and hashes: 1: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 2: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: svLueVfaYnkoKn/gim8t/A1BQ7H9B1+AHzrkxZZERsA=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 17:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:87:df:37:f5:eb:8c:80:fa:ed:07:06:8e:31:5c:f3:12:51:25:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Nov 5 14:16:12 2025 GMT Not After : Nov 8 17:03:12 2025 GMT Subject: CN=064CEF2F33633A19B14191F8FEA4A72459A0A979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:68:14:63:3c:76:eb:f8:5c:61:4a:de:bc: 09:71:7b:62:e6:df:99:79:42:49:73:b7:00:7b:83: 99:c4:01:6f:18:e9:e9:61:cc:56:dc:87:16:1f:d8: b4:f1:7a:10:e9:ad:81:88:7d:31:da:16:72:9d:e9: 72:18:37:75:9f:c1:ff:e0:53:20:04:76:35:e0:fc: cf:95:54:2d:6e:ea:4e:7f:da:95:d1:d5:96:ff:a3: e3:71:0f:f6:28:e0:f5:b5:3c:4e:00:c6:e6:bf:a8: f1:18:48:2f:f2:90:bd:42:17:d5:b3:df:6a:16:46: e2:ba:62:34:c0:3b:3b:1a:b5:88:6f:12:e3:9d:45: 2f:46:db:d7:98:4b:61:35:fe:25:e6:de:4c:db:20: bd:62:dd:2f:b8:07:85:b3:b7:35:e0:3b:7e:c6:a1: 6a:cf:ae:d9:53:fc:75:39:20:49:fa:65:bd:d6:cb: cc:76:08:be:d9:e6:4b:63:e8:d7:23:e6:f2:ff:fb: 0c:3e:2a:fb:d4:5c:86:ee:bb:23:3b:ca:c7:4d:f4: b4:1a:69:d8:de:0d:2d:34:a3:04:9e:fb:3e:69:8e: ae:68:b8:d6:f6:cc:60:21:32:35:fa:6d:6d:60:86: 05:c4:15:52:04:35:3e:be:8c:6a:41:e4:0c:cf:b0: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4C:EF:2F:33:63:3A:19:B1:41:91:F8:FE:A4:A7:24:59:A0:A9:79 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:01:a8:53:c0:d7:5a:4d:0d:0e:21:67:54:3c:d7:81:4b:d7: 3f:73:3e:13:9a:bf:96:eb:30:fb:64:d9:27:c1:45:b2:9a:26: a4:b5:b5:85:6a:f6:ed:dc:a2:14:69:cb:34:95:52:bd:c2:57: 9f:aa:fc:21:2e:d2:6c:20:ab:fa:ce:0c:45:e5:47:27:73:83: df:5c:36:8c:bf:19:23:56:89:49:64:87:2b:4c:27:4d:d4:09: 87:b7:52:5f:f1:99:0e:9b:b7:b9:c6:29:2c:a7:f7:a6:b6:38: fc:82:59:33:fa:e7:51:0a:5b:b3:b9:63:59:2b:13:ef:78:4b: 10:af:62:3d:7c:c6:26:1d:83:cf:13:b9:ac:d8:c5:93:6e:48: 96:76:ed:c1:34:4f:cd:4c:97:f5:7d:a2:b8:d7:1e:45:9d:a8: 3f:a0:1c:be:00:37:23:b2:55:1e:f1:41:6e:3e:18:da:32:65: 51:5f:ee:64:25:b9:b4:17:a2:94:0e:7c:26:d9:7a:83:4e:48: f0:35:80:0d:88:49:0e:28:1b:ca:51:70:60:5a:a4:d8:46:a8: f1:3a:3d:3a:2c:18:10:af:a7:dc:9f:5d:03:06:16:c4:f9:df: c5:f3:e5:58:96:d7:34:6c:bb:41:8a:45:77:63:db:89:af:e9: ff:28:d3:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIffN/XrjID67QcGjjFc8xJRJekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTExMDUxNDE2MTJaFw0yNTExMDgxNzAzMTJaMDMxMTAvBgNV BAMTKDA2NENFRjJGMzM2MzNBMTlCMTQxOTFGOEZFQTRBNzI0NTlBMEE5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/GgUYzx26/hcYUrevAlxe2Lm 35l5QklztwB7g5nEAW8Y6elhzFbchxYf2LTxehDprYGIfTHaFnKd6XIYN3Wfwf/g UyAEdjXg/M+VVC1u6k5/2pXR1Zb/o+NxD/Yo4PW1PE4Axua/qPEYSC/ykL1CF9Wz 32oWRuK6YjTAOzsatYhvEuOdRS9G29eYS2E1/iXm3kzbIL1i3S+4B4WztzXgO37G oWrPrtlT/HU5IEn6Zb3Wy8x2CL7Z5ktj6Ncj5vL/+ww+KvvUXIbuuyM7ysdN9LQa adjeDS00owSe+z5pjq5ouNb2zGAhMjX6bW1ghgXEFVIENT6+jGpB5AzPsGNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkzvLzNjOhmxQZH4/qSnJFmgqXkwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYBqFPA11pNDQ4hZ1Q814FL1z9zPhOav5br MPtk2SfBRbKaJqS1tYVq9u3cohRpyzSVUr3CV5+q/CEu0mwgq/rODEXlRydzg99c Noy/GSNWiUlkhytMJ03UCYe3Ul/xmQ6bt7nGKSyn96a2OPyCWTP651EKW7O5Y1kr E+94SxCvYj18xiYdg88TuazYxZNuSJZ27cE0T81Ml/V9orjXHkWdqD+gHL4ANyOy VR7xQW4+GNoyZVFf7mQlubQXopQOfCbZeoNOSPA1gA2ISQ4oG8pRcGBapNhGqPE6 PTosGBCvp9yfXQMGFsT538Xz5ViW1zRsu0GKRXdj24mv6f8o06U= -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:00 2025 by rpki-client