$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: grTK8nfAnWyzNfiL/wG+KJHcKe/nOIZL0jQ8y75Ld1U= Subject key identifier: 1C:0B:24:C6:A0:60:99:D8:59:2A:06:8A:10:17:1F:AD:F0:CB:A4:E5 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 41891B61F24D35B2A5D559DF650BC6F066F15817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: EC Signing time: Mon 20 Oct 2025 20:02:09 +0000 Manifest this update: Mon 20 Oct 2025 19:57:09 +0000 Manifest next update: Fri 24 Oct 2025 05:28:09 +0000 Files and hashes: 1: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: tftRq+N+x9RQ75ZfNIYyghIIrQW6FtzZwaI9y9yFsTE=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) 3: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 4: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:89:1b:61:f2:4d:35:b2:a5:d5:59:df:65:0b:c6:f0:66:f1:58:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Oct 20 19:57:09 2025 GMT Not After : Oct 24 05:28:09 2025 GMT Subject: CN=1C0B24C6A06099D8592A068A10171FADF0CBA4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:30:a8:4d:76:9e:b9:00:c4:bb:66:98:f1: 80:6b:ab:38:c3:ac:0c:15:ea:f9:a4:63:ae:8d:42: 2e:ce:c0:ff:7c:f6:fd:4c:88:64:be:9a:6c:f6:da: 8e:d3:e1:58:5e:31:cf:47:0e:c9:a9:17:13:a6:0a: 54:c4:93:91:6a:64:69:87:3a:5f:32:78:d7:7c:38: 63:fe:f3:65:0b:7a:f8:d5:e4:6d:ec:d0:c3:a8:1f: e8:59:0b:c0:b0:84:14:d4:e4:37:8c:24:24:c6:9b: 1a:05:18:d1:94:ba:ae:2d:0e:bb:b4:91:56:f0:87: 61:64:d4:21:f2:3c:7c:40:76:02:d9:c4:25:af:0b: 81:42:ec:a9:92:0c:f4:b7:98:9f:e8:8b:f7:e3:ca: 13:b4:40:51:8e:9a:ac:cf:30:f9:70:6f:50:d4:bb: 67:ef:02:81:9f:78:8d:b9:05:90:87:af:fb:4e:21: 8a:dc:02:ff:24:3e:93:ab:c0:f2:c0:17:7b:bb:95: c2:60:97:d6:7f:2e:b5:4a:44:74:0b:e0:3d:26:e2: e7:9a:3f:32:cc:e7:24:67:50:c1:65:cf:f0:d3:79: 45:78:25:98:70:e0:43:8c:d7:6e:49:62:3a:45:92: 64:f9:3f:70:a7:0f:f5:2f:ff:04:7b:06:63:c3:dd: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:24:C6:A0:60:99:D8:59:2A:06:8A:10:17:1F:AD:F0:CB:A4:E5 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:99:51:1e:d4:04:67:75:18:01:b3:03:bf:57:9d:c6:01:b1: 97:a8:fe:d3:fe:2e:ad:06:6a:c0:ce:32:d0:5e:f5:d4:5b:c9: 1f:3e:11:a4:5c:f1:8d:d9:c2:c9:2f:bd:79:64:7f:6d:23:12: 8f:ec:96:2f:36:cd:41:4a:b3:3d:33:d7:8f:cb:45:f7:db:c8: 17:89:b3:43:34:62:ab:5b:0d:36:03:b2:6a:02:3e:2a:89:9b: 6f:9d:92:89:d1:16:11:01:b9:34:c0:70:6a:2d:58:29:f2:19: 7e:88:9c:dd:0a:a4:89:f2:60:e7:db:75:00:b7:b8:25:6b:52: b5:c9:3c:cf:22:05:eb:f9:37:34:4c:02:c9:58:58:94:cb:a8: 45:4b:51:cf:63:5c:24:9e:e4:ce:f9:80:0a:e5:7a:82:11:0c: f7:b3:59:a0:e4:90:6e:f5:1a:34:11:fb:e7:8e:79:d8:6a:c7: e0:1c:db:57:52:04:5a:a0:39:0a:ef:5f:85:e4:fa:ca:2f:40: df:64:1e:c9:d1:40:6b:2a:9b:f7:1b:8e:82:f6:70:b7:f8:ae: 8d:90:85:0e:9f:b3:53:6e:86:32:d4:f2:f0:50:15:aa:3a:cf: 71:7a:bf:91:7b:49:38:72:02:04:b7:da:d3:c8:41:bc:91:17: 9b:40:1f:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYkbYfJNNbKl1VnfZQvG8GbxWBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTEwMjAxOTU3MDlaFw0yNTEwMjQwNTI4MDlaMDMxMTAvBgNV BAMTKDFDMEIyNEM2QTA2MDk5RDg1OTJBMDY4QTEwMTcxRkFERjBDQkE0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPzCoTXaeuQDEu2aY8YBrqzjD rAwV6vmkY66NQi7OwP989v1MiGS+mmz22o7T4VheMc9HDsmpFxOmClTEk5FqZGmH Ol8yeNd8OGP+82ULevjV5G3s0MOoH+hZC8CwhBTU5DeMJCTGmxoFGNGUuq4tDru0 kVbwh2Fk1CHyPHxAdgLZxCWvC4FC7KmSDPS3mJ/oi/fjyhO0QFGOmqzPMPlwb1DU u2fvAoGfeI25BZCHr/tOIYrcAv8kPpOrwPLAF3u7lcJgl9Z/LrVKRHQL4D0m4uea PzLM5yRnUMFlz/DTeUV4JZhw4EOM125JYjpFkmT5P3CnD/Uv/wR7BmPD3VzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHAskxqBgmdhZKgaKEBcfrfDLpOUwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeZUR7UBGd1GAGzA79XncYBsZeo/tP+Lq0G asDOMtBe9dRbyR8+EaRc8Y3ZwskvvXlkf20jEo/sli82zUFKsz0z14/LRffbyBeJ s0M0YqtbDTYDsmoCPiqJm2+dkonRFhEBuTTAcGotWCnyGX6InN0KpInyYOfbdQC3 uCVrUrXJPM8iBev5NzRMAslYWJTLqEVLUc9jXCSe5M75gArleoIRDPezWaDkkG71 GjQR++eOedhqx+Ac21dSBFqgOQrvX4Xk+sovQN9kHsnRQGsqm/cbjoL2cLf4ro2Q hQ6fs1NuhjLU8vBQFao6z3F6v5F7SThyAgS32tPIQbyRF5tAH2k= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:35 2025 by rpki-client