$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: bOIiLVFsUwbWWFTlCsWAhS6hGf69SpmfnnhxyKPOb7s= Subject key identifier: 3C:1D:70:F0:1C:10:E7:24:46:46:06:B0:14:C2:D0:DF:DE:63:5E:F9 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 7E18B66281CF9F6AFCE44F86BDD66098F22E9B18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 0181 Signing time: Thu 01 May 2025 09:51:08 +0000 Manifest this update: Thu 01 May 2025 09:46:08 +0000 Manifest next update: Sun 04 May 2025 15:11:08 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: KcWonMBSbsGevHNJZJsCL19ath775WUNuMlG1UGoR5s=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: RgYXWUxCBVufF+BL7Dfb9hVoCpZizx6VvWdk0F4NdDU=) 4: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: SyGKyaTDqOK4q3DKX7zQPl9QjdesHfX3XV9nz5yNKls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 15:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:18:b6:62:81:cf:9f:6a:fc:e4:4f:86:bd:d6:60:98:f2:2e:9b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: May 1 09:46:08 2025 GMT Not After : May 4 15:11:08 2025 GMT Subject: CN=3C1D70F01C10E724464606B014C2D0DFDE635EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:e0:ff:47:81:cb:28:c0:bb:50:bc:12:46: 89:78:60:bd:2b:c3:f1:0e:50:3e:44:d8:40:4a:d1: 07:c1:fe:47:d4:7b:e8:f9:17:40:fc:c7:cb:96:6f: de:22:ca:32:ef:1e:09:6e:b6:9d:7b:6d:4b:96:69: 19:63:6c:30:8b:ee:73:b4:16:53:54:c0:d3:0b:71: 8c:d8:1a:08:0f:18:c0:49:2f:3c:4d:96:5d:14:25: b4:f2:33:78:05:b3:54:0e:29:11:4c:2e:c7:5f:89: f0:cb:71:54:db:5d:f6:b2:da:97:45:36:00:ac:84: 80:21:3e:65:30:d4:f6:2c:8e:ab:22:b2:8c:16:f6: 2d:95:ec:82:93:f4:fb:44:52:90:fd:1e:af:5a:7d: ad:43:c7:e3:e9:1c:83:6f:86:2e:45:b6:8a:15:29: e1:5e:3e:8b:4c:a7:96:b3:dc:d7:06:87:73:af:f3: 22:cd:77:c1:3d:28:6b:36:87:5a:0a:4f:69:c8:f1: 43:7c:a0:f7:5b:c6:11:53:dd:30:82:92:6f:10:f2: ee:7a:4f:f1:32:1b:78:02:e4:80:74:86:b3:ea:e1: 88:46:f8:4f:bf:b0:38:d5:a8:8f:e8:84:48:7b:82: f6:1e:b3:ae:3d:2d:a7:0b:0f:6a:f0:68:83:b0:35: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:70:F0:1C:10:E7:24:46:46:06:B0:14:C2:D0:DF:DE:63:5E:F9 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:be:65:46:4e:12:0a:71:79:22:c6:dd:87:d9:54:bc:27:33: 94:ae:83:a1:51:13:a7:58:d8:c0:66:7c:f2:9a:da:58:99:a4: f0:9a:39:60:0d:3d:75:7f:9c:fc:af:2a:89:ae:07:57:87:59: 48:b3:79:33:81:ad:fa:15:20:7b:8d:73:91:7a:24:f9:b1:6b: b0:00:b8:ef:04:fb:d4:13:bd:cd:4e:62:30:50:a1:e8:44:6d: e1:b2:b9:85:ed:30:93:a9:49:8a:b5:84:4a:f0:4e:67:25:37: 25:7d:2a:c8:b5:e7:08:f3:29:29:8f:ef:96:fa:3a:f7:7e:dd: 7f:b4:62:a6:2b:69:7c:f0:8a:7e:05:e3:c3:6e:9d:03:2f:be: d8:44:aa:0a:ad:0f:c5:aa:1d:58:c8:de:7d:16:a4:ec:bf:9e: f7:10:1d:7d:62:17:ef:e8:43:c6:e8:6f:1f:cc:54:1d:68:62: 13:75:c5:2c:8c:a5:39:46:58:f5:ea:f7:b8:84:36:a8:32:2f: fa:64:10:90:36:6d:f8:d7:be:bb:46:00:a8:3c:fb:91:78:55: ca:96:9e:e0:13:9b:65:ab:a6:05:6f:9d:f1:e8:63:1c:85:6b: f1:b5:74:f6:a0:e9:71:85:59:02:51:46:28:e1:80:e1:26:9b: 4c:28:9f:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhi2YoHPn2r85E+GvdZgmPIumxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTA1MDEwOTQ2MDhaFw0yNTA1MDQxNTExMDhaMDMxMTAvBgNV BAMTKDNDMUQ3MEYwMUMxMEU3MjQ0NjQ2MDZCMDE0QzJEMERGREU2MzVFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOA+D/R4HLKMC7ULwSRol4YL0r w/EOUD5E2EBK0QfB/kfUe+j5F0D8x8uWb94iyjLvHglutp17bUuWaRljbDCL7nO0 FlNUwNMLcYzYGggPGMBJLzxNll0UJbTyM3gFs1QOKRFMLsdfifDLcVTbXfay2pdF NgCshIAhPmUw1PYsjqsisowW9i2V7IKT9PtEUpD9Hq9afa1Dx+PpHINvhi5FtooV KeFePotMp5az3NcGh3Ov8yLNd8E9KGs2h1oKT2nI8UN8oPdbxhFT3TCCkm8Q8u56 T/EyG3gC5IB0hrPq4YhG+E+/sDjVqI/ohEh7gvYes649LacLD2rwaIOwNa+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPB1w8BwQ5yRGRgawFMLQ395jXvkwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6+ZUZOEgpxeSLG3YfZVLwnM5Sug6FRE6dY 2MBmfPKa2liZpPCaOWANPXV/nPyvKomuB1eHWUizeTOBrfoVIHuNc5F6JPmxa7AA uO8E+9QTvc1OYjBQoehEbeGyuYXtMJOpSYq1hErwTmclNyV9Ksi15wjzKSmP75b6 Ovd+3X+0YqYraXzwin4F48NunQMvvthEqgqtD8WqHVjI3n0WpOy/nvcQHX1iF+/o Q8bobx/MVB1oYhN1xSyMpTlGWPXq97iENqgyL/pkEJA2bfjXvrtGAKg8+5F4VcqW nuATm2WrpgVvnfHoYxyFa/G1dPag6XGFWQJRRijhgOEmm0won7Q= -----END CERTIFICATE-----Generated at Fri May 2 01:49:41 2025 by rpki-client