$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft (raw, json) Hash identifier: pjgguHMrOUC21Fvx89mxNEAc7S79/fAJtVQwQJSrQHc= Subject key identifier: 89:8A:B9:F3:1A:E5:EA:F5:69:D3:79:65:8C:63:3F:5D:8B:63:6F:EA Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 Certificate issuer: /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Certificate serial: 24C7FD03AE52784758AC4821DE631F2CBEA9E7AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft Manifest number: FE Signing time: Mon 09 Nov 2026 20:15:57 +0000 Manifest this update: Mon 09 Nov 2026 20:10:57 +0000 Manifest next update: Tue 10 Nov 2026 23:19:57 +0000 Files and hashes: 1: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl (hash: gKIJaS4FPNAYY5wMvzlFeD/Ctp+CX/6b6sm+Xux6yHI=) 2: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c7:fd:03:ae:52:78:47:58:ac:48:21:de:63:1f:2c:be:a9:e7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Validity Not Before: Nov 9 20:10:57 2026 GMT Not After : Nov 10 23:19:57 2026 GMT Subject: CN=898AB9F31AE5EAF569D379658C633F5D8B636FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:2d:a3:ff:b8:34:c8:14:d4:37:6b:d5:c9: 34:1d:ed:15:c1:56:fe:30:44:7e:1f:ba:03:7f:78: 4a:6d:f2:93:45:dd:e3:ae:98:61:14:eb:60:a5:83: 6d:34:e5:a7:77:0b:a7:e8:bf:50:6e:d2:73:4e:63: 50:17:14:7f:de:82:50:2e:42:ba:f8:71:a5:e6:45: fb:16:89:66:4b:c2:0a:2e:7b:87:e4:74:91:2c:75: f6:81:24:36:c9:ad:79:d0:35:7a:a8:bf:85:52:cc: bc:f1:b2:32:29:b8:ee:1a:a5:ae:74:70:f2:83:dc: 99:73:c4:7e:39:f8:30:ee:ba:3b:64:9b:30:0d:77: c6:1c:33:78:c7:e7:bc:1e:28:98:0d:4e:a8:fa:f3: 9c:63:8b:da:36:07:68:68:53:cc:fb:b1:a0:71:20: ed:a1:45:50:bf:7d:e1:9e:31:58:13:1c:46:3d:aa: aa:cc:1d:90:ba:36:ab:0c:06:93:4c:71:26:dd:b0: 61:e6:1e:56:f2:68:1f:de:6b:10:7d:60:cb:84:14: 01:43:27:d6:4c:ca:26:91:50:12:8f:32:3e:1a:c9: ed:d1:20:0d:f5:59:7d:f5:bb:61:e8:e1:f3:81:bb: d0:5b:b1:a0:10:30:83:f9:f5:45:87:af:89:61:1f: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:B9:F3:1A:E5:EA:F5:69:D3:79:65:8C:63:3F:5D:8B:63:6F:EA X509v3 Authority Key Identifier: keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dd:75:0a:54:5a:db:3b:80:bc:57:6e:45:0c:fb:a4:09:bf: e2:85:96:f2:79:b6:65:9e:07:f5:af:89:27:19:28:79:30:e8: 06:e8:c5:94:a9:75:3f:af:a5:c3:13:d4:e6:72:cf:22:74:a3: c6:2a:32:94:be:38:13:6b:1f:62:00:3c:4a:cf:c6:0f:a5:d7: aa:1d:e9:9a:84:51:0c:50:91:98:9c:39:c7:de:f7:b3:76:e8: 0e:06:0a:74:36:c7:5f:3e:c2:57:30:60:ea:62:3a:64:53:99: 39:40:f6:16:f7:db:60:0f:af:1f:9b:7a:27:4c:92:a1:7f:c1: 0e:b1:c4:4f:7e:76:90:08:ff:1a:de:02:2a:02:ba:1b:f6:6d: 83:f6:6e:8e:87:5d:e3:45:a9:2c:ae:b4:85:e1:d0:6b:4a:87: 95:2e:7d:b4:36:b1:c2:70:e7:e5:8d:26:69:93:39:af:e5:11: 86:78:b1:88:3c:66:e5:9e:0d:49:ec:07:67:97:11:9d:69:22: 4f:f5:16:3d:af:91:8b:8c:87:bc:c7:e1:dd:a0:48:2a:4a:31: fc:1f:5f:ab:75:2a:1b:d9:7a:af:ea:f8:68:6c:d1:6f:05:ef: 1f:f3:2a:5c:2a:84:34:35:70:fc:e7:8e:6d:23:f2:44:e9:c2: 9f:c6:59:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMf9A65SeEdYrEgh3mMfLL6p568wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0 QUNENUE0MjAeFw0yNjExMDkyMDEwNTdaFw0yNjExMTAyMzE5NTdaMDMxMTAvBgNV BAMTKDg5OEFCOUYzMUFFNUVBRjU2OUQzNzk2NThDNjMzRjVEOEI2MzZGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3S2j/7g0yBTUN2vVyTQd7RXB Vv4wRH4fugN/eEpt8pNF3eOumGEU62Clg2005ad3C6fov1Bu0nNOY1AXFH/eglAu Qrr4caXmRfsWiWZLwgoue4fkdJEsdfaBJDbJrXnQNXqov4VSzLzxsjIpuO4apa50 cPKD3JlzxH45+DDuujtkmzANd8YcM3jH57weKJgNTqj685xji9o2B2hoU8z7saBx IO2hRVC/feGeMVgTHEY9qqrMHZC6NqsMBpNMcSbdsGHmHlbyaB/eaxB9YMuEFAFD J9ZMyiaRUBKPMj4aye3RIA31WX31u2Ho4fOBu9BbsaAQMIP59UWHr4lhH1nZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYq58xrl6vVp03lljGM/XYtjb+owHwYDVR0j BBgwFoAUY9ss13s9+VrA+fxbu4XGM0rNWkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI2MGYwM2MtODk2OC00NzBmLWI2MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3 QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0QUNENUE0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82M0RCMkNENzdCM0RGOTVBQzBGOUZDNUJCQjg1QzYzMzRBQ0Q1 QTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI2MGYwM2MtODk2OC00NzBmLWI2 MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2 MzM0QUNENUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7ddQpUWts7gLxXbkUM+6QJv+KFlvJ5tmWe B/WviScZKHkw6AboxZSpdT+vpcMT1OZyzyJ0o8YqMpS+OBNrH2IAPErPxg+l16od 6ZqEUQxQkZicOcfe97N26A4GCnQ2x18+wlcwYOpiOmRTmTlA9hb322APrx+beidM kqF/wQ6xxE9+dpAI/xreAioCuhv2bYP2bo6HXeNFqSyutIXh0GtKh5UufbQ2scJw 5+WNJmmTOa/lEYZ4sYg8ZuWeDUnsB2eXEZ1pIk/1Fj2vkYuMh7zH4d2gSCpKMfwf X6t1KhvZeq/q+Ghs0W8F7x/zKlwqhDQ1cPznjm0j8kTpwp/GWXU= -----END CERTIFICATE-----Generated at Tue Nov 10 10:34:00 2026 by rpki-client