$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: 6tazlHo51C++S7bjPC+Xnr8dCpHNCVC+TuzrC+MkgKo= Subject key identifier: 00:18:0B:5A:BD:8A:4C:D3:03:55:34:A9:5E:02:BB:6D:12:6E:85:AD Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 10B4EA28A020FF88ABC3862381DF794D3920405A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01AD Signing time: Fri 08 Aug 2025 17:31:11 +0000 Manifest this update: Fri 08 Aug 2025 17:26:11 +0000 Manifest next update: Mon 11 Aug 2025 19:00:11 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: KcWonMBSbsGevHNJZJsCL19ath775WUNuMlG1UGoR5s=) 2: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: piIameVBzQwXdLcWH/xoSvPyIiJuYtPVyhYDA/JzPmU=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=) 4: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: RgYXWUxCBVufF+BL7Dfb9hVoCpZizx6VvWdk0F4NdDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b4:ea:28:a0:20:ff:88:ab:c3:86:23:81:df:79:4d:39:20:40:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Aug 8 17:26:11 2025 GMT Not After : Aug 11 19:00:11 2025 GMT Subject: CN=00180B5ABD8A4CD3035534A95E02BB6D126E85AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:c1:ab:5e:03:59:21:d2:23:8b:02:d9:41: 33:3a:d6:2b:05:87:1a:00:02:8f:3f:14:b8:22:6f: d4:6c:1a:15:b9:0e:d3:d1:6a:fc:79:1a:d8:88:d5: 8e:17:80:b8:c1:dd:59:7c:7c:5d:2d:26:ff:59:ba: 97:45:c9:f4:e8:a6:f5:a7:bd:75:80:7b:0b:a6:67: 88:66:18:95:d8:d5:e1:af:fb:12:b6:49:a9:d3:cd: b7:e9:2c:9b:de:e5:e4:bf:48:cf:2a:6d:4a:17:fb: c1:2a:64:fe:92:9c:e9:bd:e1:53:63:41:fe:e9:c2: de:9a:2a:3e:90:73:d3:24:9e:50:4f:bd:d9:7f:72: 75:13:75:de:8b:1a:a0:ea:38:43:03:05:40:16:36: 50:14:41:17:f6:90:a8:4c:5b:47:1b:de:d8:f0:a7: 00:81:88:e2:1b:84:8a:e8:4d:e5:a3:3c:2c:75:cb: ba:29:72:1c:a9:4a:bc:ae:30:61:49:cc:6b:c9:da: 96:69:6c:40:67:0b:26:84:5b:e2:be:5e:8f:b8:25: 24:7e:7d:91:e3:0f:14:22:7b:25:2e:9a:af:88:f2: 9c:12:14:d6:0f:b8:c1:c6:4a:e0:7c:04:73:97:19: 52:68:f8:f8:25:18:fa:45:7c:5b:ad:c6:3e:cc:57: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:18:0B:5A:BD:8A:4C:D3:03:55:34:A9:5E:02:BB:6D:12:6E:85:AD X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:38:17:44:e9:18:0e:00:9c:45:39:39:13:49:f0:72:f2: 8d:dc:c0:22:f1:0d:d8:b6:62:31:7b:6f:fa:51:da:60:61:fc: 97:17:48:ed:01:92:e3:93:f2:fa:73:c8:05:62:1a:a0:54:d2: 5b:29:d2:d3:43:7a:7d:5f:17:55:f3:a2:56:f8:76:82:3c:c6: a7:b1:a2:cd:b5:24:98:e8:72:d3:eb:ae:0d:35:93:6b:33:d1: 19:3c:30:c9:ea:bd:32:94:d1:0f:7e:9a:af:d5:6f:b6:06:df: 35:0a:f9:e0:f6:15:45:74:a3:83:d2:68:3b:78:17:81:71:dd: f2:67:ed:5b:a5:a8:1b:09:9f:a8:7c:76:09:45:b3:2c:dc:09: b1:15:0c:6f:e5:2c:2b:5e:4d:d0:ed:a6:10:ec:4a:5f:1a:09: bb:c6:fc:72:d0:18:84:b1:e6:ce:9a:3d:57:08:62:9f:8e:f0: e0:67:75:6f:9d:ee:65:6d:b9:29:fc:be:d5:d4:d8:49:59:e2: ec:ab:1b:ae:0d:5e:34:1e:1f:f6:ec:49:68:b0:0d:b7:1b:77: 3d:2a:d5:2b:63:c6:a2:0a:6a:27:82:92:8a:8a:25:93:ef:3d: 2b:18:4d:6b:2e:89:83:da:20:53:12:85:d2:9c:11:0a:4e:3a: 7a:bf:5c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELTqKKAg/4irw4Yjgd95TTkgQFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTA4MDgxNzI2MTFaFw0yNTA4MTExOTAwMTFaMDMxMTAvBgNV BAMTKDAwMTgwQjVBQkQ4QTRDRDMwMzU1MzRBOTVFMDJCQjZEMTI2RTg1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5MGrXgNZIdIjiwLZQTM61isF hxoAAo8/FLgib9RsGhW5DtPRavx5GtiI1Y4XgLjB3Vl8fF0tJv9ZupdFyfTopvWn vXWAewumZ4hmGJXY1eGv+xK2SanTzbfpLJve5eS/SM8qbUoX+8EqZP6SnOm94VNj Qf7pwt6aKj6Qc9MknlBPvdl/cnUTdd6LGqDqOEMDBUAWNlAUQRf2kKhMW0cb3tjw pwCBiOIbhIroTeWjPCx1y7opchypSryuMGFJzGvJ2pZpbEBnCyaEW+K+Xo+4JSR+ fZHjDxQieyUumq+I8pwSFNYPuMHGSuB8BHOXGVJo+PglGPpFfFutxj7MV493AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABgLWr2KTNMDVTSpXgK7bRJuha0wHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhDOBdE6RgOAJxFOTkTSfBy8o3cwCLxDdi2 YjF7b/pR2mBh/JcXSO0BkuOT8vpzyAViGqBU0lsp0tNDen1fF1Xzolb4doI8xqex os21JJjoctPrrg01k2sz0Rk8MMnqvTKU0Q9+mq/Vb7YG3zUK+eD2FUV0o4PSaDt4 F4Fx3fJn7VulqBsJn6h8dglFsyzcCbEVDG/lLCteTdDtphDsSl8aCbvG/HLQGISx 5s6aPVcIYp+O8OBndW+d7mVtuSn8vtXU2ElZ4uyrG64NXjQeH/bsSWiwDbcbdz0q 1StjxqIKaieCkoqKJZPvPSsYTWsuiYPaIFMShdKcEQpOOnq/XLE= -----END CERTIFICATE-----Generated at Sat Aug 9 23:12:54 2025 by rpki-client