$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: Wu06EMyg/Xvmo46UlLTU+akJ1e9h6aYKYoQggF/1RsI= Subject key identifier: D6:23:3D:A2:18:2B:98:95:54:75:98:85:24:A8:6D:86:39:50:E6:A7 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 4CE4EBCFA57B51590B1653ACD06445F472146D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 0197 Signing time: Fri 20 Jun 2025 03:21:09 +0000 Manifest this update: Fri 20 Jun 2025 03:16:09 +0000 Manifest next update: Mon 23 Jun 2025 05:04:09 +0000 Files and hashes: 1: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: kVKfvztUeICk5csICrMRYPJi/Mqt41B1F76hy87sU4U=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: RgYXWUxCBVufF+BL7Dfb9hVoCpZizx6VvWdk0F4NdDU=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: KcWonMBSbsGevHNJZJsCL19ath775WUNuMlG1UGoR5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 23:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e4:eb:cf:a5:7b:51:59:0b:16:53:ac:d0:64:45:f4:72:14:6d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Jun 20 03:16:09 2025 GMT Not After : Jun 23 05:04:09 2025 GMT Subject: CN=D6233DA2182B98955475988524A86D863950E6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:57:b0:71:70:81:0f:db:b0:98:76:c0:bd: be:3e:1a:9e:f2:39:26:82:67:9d:5b:ac:3d:5e:a2: e9:08:06:ba:9f:45:ac:3e:23:43:76:13:38:cf:38: 38:07:14:0c:5e:12:03:43:47:6f:fb:52:53:71:07: bd:ab:3f:13:93:a6:bb:2a:25:e5:96:8f:de:d0:2b: 68:29:7e:9e:a7:01:8a:0a:76:69:dd:b8:b0:5c:f7: 21:30:ca:5e:95:26:5c:b6:b6:56:2d:4f:90:05:23: 69:ed:ca:5c:d4:4a:66:4a:b7:1e:d9:2a:d4:90:be: b7:ee:09:e8:d7:a6:65:ed:f9:1f:90:44:fa:1e:0e: 30:b0:34:65:ae:b5:26:6c:b9:f2:55:1e:41:c3:44: dd:0f:06:0b:6e:01:9b:85:ce:7f:b5:df:b7:a3:38: 5c:06:1f:24:47:49:8b:ce:c8:75:ab:ba:a6:bb:9d: e9:e7:f1:b3:c9:aa:2f:a5:67:a3:9c:03:01:09:48: 5e:ff:3e:2d:73:1e:1a:53:b4:25:39:ea:70:6c:9c: f9:e0:e8:d2:38:27:02:37:bd:74:63:fb:bd:16:ac: 80:c3:25:9a:65:bd:44:da:ff:d3:dc:b0:8c:8f:d5: 2a:5b:f2:2a:53:65:55:e2:54:67:ca:3d:48:62:f6: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:23:3D:A2:18:2B:98:95:54:75:98:85:24:A8:6D:86:39:50:E6:A7 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:07:9e:8d:3e:2a:a3:f0:99:1f:c8:16:cd:a7:bd:ae:cb:55: 02:fd:ae:09:30:3a:21:93:f9:df:dc:25:68:3e:1c:75:3e:cb: 8b:38:b2:66:dd:17:c7:74:d8:5f:a5:a5:84:37:db:2b:98:56: 02:99:65:ea:8e:f2:63:dd:fc:fa:1f:00:37:aa:49:58:93:e4: c3:20:99:75:2e:e5:a5:d6:6a:64:30:6f:49:8c:a6:56:ce:e5: 95:1d:f8:c6:f3:35:5e:b3:19:2f:e3:ad:37:6f:9e:93:d1:c2: e4:b1:74:24:0c:06:24:c3:51:b3:b1:ff:18:d3:17:a3:a0:d2: aa:bb:ba:be:d1:00:8e:28:de:85:d7:fe:84:a6:c8:f5:fe:dd: f7:c0:51:34:78:6a:5e:31:ac:e8:9d:ed:55:57:d3:28:6b:26: 65:47:32:86:8d:58:25:68:91:f3:cf:0f:d9:2b:93:93:43:fe: 61:96:51:22:7a:4b:f0:b0:60:f0:e2:18:23:cb:32:e9:fd:f3: a5:ea:8a:b5:8c:a5:d8:25:d2:1f:e6:72:38:1a:c3:2e:d9:e8: 9f:1b:fe:0d:d3:5d:23:a2:25:0f:2a:86:a5:b2:c2:39:62:43: 2e:cd:58:fc:2e:4f:43:a8:53:8b:f9:75:5a:ee:7f:a9:91:3b: af:0d:86:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOTrz6V7UVkLFlOs0GRF9HIUbQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTA2MjAwMzE2MDlaFw0yNTA2MjMwNTA0MDlaMDMxMTAvBgNV BAMTKEQ2MjMzREEyMTgyQjk4OTU1NDc1OTg4NTI0QTg2RDg2Mzk1MEU2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuVewcXCBD9uwmHbAvb4+Gp7y OSaCZ51brD1eoukIBrqfRaw+I0N2EzjPODgHFAxeEgNDR2/7UlNxB72rPxOTprsq JeWWj97QK2gpfp6nAYoKdmnduLBc9yEwyl6VJly2tlYtT5AFI2ntylzUSmZKtx7Z KtSQvrfuCejXpmXt+R+QRPoeDjCwNGWutSZsufJVHkHDRN0PBgtuAZuFzn+137ej OFwGHyRHSYvOyHWruqa7nenn8bPJqi+lZ6OcAwEJSF7/Pi1zHhpTtCU56nBsnPng 6NI4JwI3vXRj+70WrIDDJZplvUTa/9PcsIyP1Spb8ipTZVXiVGfKPUhi9ro5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1iM9ohgrmJVUdZiFJKhthjlQ5qcwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4Hno0+KqPwmR/IFs2nva7LVQL9rgkwOiGT +d/cJWg+HHU+y4s4smbdF8d02F+lpYQ32yuYVgKZZeqO8mPd/PofADeqSViT5MMg mXUu5aXWamQwb0mMplbO5ZUd+MbzNV6zGS/jrTdvnpPRwuSxdCQMBiTDUbOx/xjT F6Og0qq7ur7RAI4o3oXX/oSmyPX+3ffAUTR4al4xrOid7VVX0yhrJmVHMoaNWCVo kfPPD9krk5ND/mGWUSJ6S/CwYPDiGCPLMun986XqirWMpdgl0h/mcjgawy7Z6J8b /g3TXSOiJQ8qhqWywjliQy7NWPwuT0OoU4v5dVruf6mRO68Nho0= -----END CERTIFICATE-----Generated at Fri Jun 20 05:38:44 2025 by rpki-client