$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: B8SIWZOboQAVtcrO3E3k40vqTao20r7aKYw6kD4Cqps= Subject key identifier: 65:AB:08:9D:78:BD:84:2F:65:EE:A5:73:5D:AE:AD:F4:3D:38:18:43 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 0B94522ACECC579234DAD784C6AEE6490B2C359F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: D2 Signing time: Sat 23 Aug 2025 14:02:06 +0000 Manifest this update: Sat 23 Aug 2025 13:57:06 +0000 Manifest next update: Tue 26 Aug 2025 16:26:06 +0000 Files and hashes: 1: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) 3: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: mCe+DySBPniRgpPWQciKp0BPC/jXR3p8CCrvb4aOhJY=) 4: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:94:52:2a:ce:cc:57:92:34:da:d7:84:c6:ae:e6:49:0b:2c:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Aug 23 13:57:06 2025 GMT Not After : Aug 26 16:26:06 2025 GMT Subject: CN=65AB089D78BD842F65EEA5735DAEADF43D381843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:09:c6:c3:d0:34:ed:3f:57:c6:8f:f4:b4: bf:0f:d1:94:aa:bf:ba:91:78:fa:c0:1a:17:f9:8f: 92:f7:d9:f9:c8:3d:b7:ce:a1:1b:c0:63:4d:46:4d: 46:13:c9:48:3a:d2:04:b8:7c:78:5d:2f:6b:9b:cb: f9:32:22:d1:9d:69:e2:4c:56:81:53:87:7c:17:d4: 43:7b:b5:11:c1:63:d8:0b:ed:1a:d3:34:ee:a5:28: 3d:38:0d:1c:2b:63:0c:a5:7f:e3:e9:95:e0:bb:22: 30:26:d4:ab:7c:f6:8f:bb:c3:1d:73:e0:13:17:d3: 69:47:59:60:25:8d:a6:02:60:e4:10:d5:1a:12:4d: 4a:37:a1:d3:94:41:7f:56:f4:f0:2b:b7:23:5f:15: 32:1e:d8:35:bd:00:38:25:1c:92:19:e7:1d:29:83: 94:99:2c:ef:fe:6b:64:f6:3e:53:df:7f:fd:58:3c: 25:b3:3f:eb:23:f1:41:5a:53:6b:05:b0:45:b4:dd: dd:e7:ad:1d:e9:59:d8:72:47:6b:d9:0c:50:c2:f4: 2f:00:51:bd:cf:a3:c6:1e:9f:1f:86:45:cc:82:2d: 18:8b:20:d8:5e:d8:3d:f7:73:91:44:d1:89:7c:ed: b9:0d:9f:3c:0d:5b:1b:57:bb:02:01:36:bc:7f:71: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:08:9D:78:BD:84:2F:65:EE:A5:73:5D:AE:AD:F4:3D:38:18:43 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:60:49:73:78:eb:50:83:7a:77:75:c1:b3:70:3f:b9:df: b8:40:b4:bc:08:12:83:03:73:3f:95:69:3e:22:82:de:bf:20: 2a:c4:e4:33:77:87:90:0b:4b:45:a6:89:5f:26:47:fe:62:30: 4d:08:52:9e:1e:f0:7c:ca:2c:c2:d2:bc:0f:69:90:d6:5a:3e: 9a:d3:2f:9b:15:f9:e6:08:b6:b6:9f:71:fc:41:05:66:6b:c4: ef:4f:39:1e:df:bc:6d:91:8b:10:ee:ff:d9:5a:66:7a:94:c6: 32:50:5a:3d:c3:b7:9e:67:91:2e:2f:69:f2:56:a5:a1:0e:92: 7d:c2:c4:a0:ed:d0:66:91:a0:fd:9c:e1:42:9f:2b:8b:9c:80: b9:16:95:49:cb:79:5b:a4:93:cf:14:b7:ad:a4:74:2f:f2:e3: 5f:c8:f3:bc:fc:69:6e:57:a2:39:bb:bc:53:35:12:fd:66:40: e8:87:ea:24:55:88:74:e3:db:8c:d6:5a:d8:98:77:c3:f0:33: a3:6f:46:b6:61:86:8a:10:08:1c:ce:c8:3b:1a:01:8e:22:6a: 3e:4e:ad:57:fa:8e:99:f3:89:6a:ee:2c:67:ad:c9:da:27:f0: 03:c8:93:c6:b4:2a:1b:eb:f2:e7:7f:f4:b9:12:db:d5:5b:32: 2a:e3:3e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5RSKs7MV5I02teExq7mSQssNZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA4MjMxMzU3MDZaFw0yNTA4MjYxNjI2MDZaMDMxMTAvBgNV BAMTKDY1QUIwODlENzhCRDg0MkY2NUVFQTU3MzVEQUVBREY0M0QzODE4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wgnGw9A07T9Xxo/0tL8P0ZSq v7qRePrAGhf5j5L32fnIPbfOoRvAY01GTUYTyUg60gS4fHhdL2uby/kyItGdaeJM VoFTh3wX1EN7tRHBY9gL7RrTNO6lKD04DRwrYwylf+PpleC7IjAm1Kt89o+7wx1z 4BMX02lHWWAljaYCYOQQ1RoSTUo3odOUQX9W9PArtyNfFTIe2DW9ADglHJIZ5x0p g5SZLO/+a2T2PlPff/1YPCWzP+sj8UFaU2sFsEW03d3nrR3pWdhyR2vZDFDC9C8A Ub3Po8Yenx+GRcyCLRiLINhe2D33c5FE0Yl87bkNnzwNWxtXuwIBNrx/cefbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZasInXi9hC9l7qVzXa6t9D04GEMwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACsYElzeOtQg3p3dcGzcD+537hAtLwIEoMD cz+VaT4igt6/ICrE5DN3h5ALS0WmiV8mR/5iME0IUp4e8HzKLMLSvA9pkNZaPprT L5sV+eYItrafcfxBBWZrxO9POR7fvG2RixDu/9laZnqUxjJQWj3Dt55nkS4vafJW paEOkn3CxKDt0GaRoP2c4UKfK4ucgLkWlUnLeVukk88Ut62kdC/y41/I87z8aW5X ojm7vFM1Ev1mQOiH6iRViHTj24zWWtiYd8PwM6NvRrZhhooQCBzOyDsaAY4iaj5O rVf6jpnziWruLGetydon8APIk8a0Khvr8ud/9LkS29VbMirjPuI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:23:36 2025 by rpki-client