$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: byJALL8kKz2o5+WRyJXkEnnYrtTlCskbDQ+lwZm1m8I= Subject key identifier: 59:E8:16:78:77:12:60:E9:D3:14:D3:BA:89:56:0B:15:58:8D:39:D1 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 7AF11C34431D1CC90C26C8C21EC7C96408A3776A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: BB Signing time: Wed 02 Jul 2025 10:22:01 +0000 Manifest this update: Wed 02 Jul 2025 10:17:01 +0000 Manifest next update: Sat 05 Jul 2025 18:28:01 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) 2: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: vvbHB0GVQK4OM38SWlYj0CgYoxY/NKPm/AePUuuDEhs=) 3: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 4: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f1:1c:34:43:1d:1c:c9:0c:26:c8:c2:1e:c7:c9:64:08:a3:77:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Jul 2 10:17:01 2025 GMT Not After : Jul 5 18:28:01 2025 GMT Subject: CN=59E81678771260E9D314D3BA89560B15588D39D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:e8:8b:d0:6e:73:37:15:19:57:d6:68:6c: 3f:0b:5a:c0:f6:65:15:9e:d4:d4:c8:b8:d3:f0:95: d8:13:da:47:37:b1:ab:9f:42:19:ff:f5:97:2d:8c: 89:ba:da:cb:9c:d8:d9:aa:e5:e2:90:50:45:54:da: 2d:57:ce:b7:d5:00:e8:f1:d8:59:fc:c7:a8:3c:fd: f9:ae:a0:48:6b:6f:c2:1d:1f:1b:2e:0d:93:c7:d8: 0e:e9:17:b3:a9:f3:85:bf:1c:e3:c8:3b:08:73:7d: 8a:ba:f6:f9:87:c3:e3:b4:77:a8:9b:f2:1f:db:f9: 1b:ab:4c:49:79:cf:f2:94:cd:20:de:80:07:f0:df: db:63:bd:f1:f6:3c:c6:b4:87:bb:cc:c8:26:53:1e: d2:85:00:1d:5d:ba:df:78:78:bc:01:da:f2:26:18: 95:b2:60:8c:4d:3c:24:ae:6b:46:79:90:60:d0:36: ae:b1:7e:ca:47:af:79:52:00:73:84:cd:23:ba:8d: b8:0d:72:2f:54:65:03:de:40:43:6b:37:71:5a:67: 31:ea:58:9a:af:be:d0:f8:dd:a4:20:57:40:50:5f: b8:cd:e6:ef:0e:77:64:7d:a6:14:49:15:41:f0:34: 51:c5:b4:f9:fd:02:0e:e0:44:12:7c:34:05:95:19: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E8:16:78:77:12:60:E9:D3:14:D3:BA:89:56:0B:15:58:8D:39:D1 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:41:40:0f:6f:ca:65:5f:69:c4:0a:6d:e8:ad:a3:e2:5c:27: 27:44:cd:84:3e:0d:1e:15:d3:25:c7:f3:46:3b:9f:6f:9a:52: 0e:f3:2a:9d:8b:56:ca:41:a6:26:19:4e:83:54:63:28:28:bf: 1c:42:e4:9b:a7:e6:cd:54:65:a4:ea:1e:ba:27:d0:0c:b3:99: cf:57:e0:a5:94:c2:10:9b:16:83:09:1e:bd:70:55:36:e4:d0: ac:c5:b0:9a:3c:f1:5c:eb:76:42:1f:6e:47:24:7d:87:08:4d: 71:c7:5a:a7:c5:0d:42:87:87:5f:01:db:76:d6:5c:81:b4:33: 00:de:d4:90:64:bb:5a:90:f2:b0:46:eb:0f:e9:f9:9c:6c:c3: f2:4d:6e:ef:a6:37:65:ed:6f:cf:d0:26:95:79:92:4b:c3:2d: a9:3f:ff:6d:35:d7:c1:5d:41:98:9b:23:7d:f0:99:1d:5b:c1: 79:18:02:b4:67:a9:ac:ec:af:c6:fc:c2:65:2f:a7:66:4b:ba: f7:b5:0a:19:ec:fb:39:e6:99:38:b2:f1:94:36:59:88:fb:53: aa:22:ba:ef:0b:69:54:b6:88:7c:b0:82:14:a2:31:57:32:ac: ab:12:34:84:26:99:9a:96:3d:35:55:9c:e2:3c:f7:d4:fa:1c: ec:73:5c:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevEcNEMdHMkMJsjCHsfJZAijd2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA3MDIxMDE3MDFaFw0yNTA3MDUxODI4MDFaMDMxMTAvBgNV BAMTKDU5RTgxNjc4NzcxMjYwRTlEMzE0RDNCQTg5NTYwQjE1NTg4RDM5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvOiL0G5zNxUZV9ZobD8LWsD2 ZRWe1NTIuNPwldgT2kc3saufQhn/9ZctjIm62suc2Nmq5eKQUEVU2i1XzrfVAOjx 2Fn8x6g8/fmuoEhrb8IdHxsuDZPH2A7pF7Op84W/HOPIOwhzfYq69vmHw+O0d6ib 8h/b+RurTEl5z/KUzSDegAfw39tjvfH2PMa0h7vMyCZTHtKFAB1dut94eLwB2vIm GJWyYIxNPCSua0Z5kGDQNq6xfspHr3lSAHOEzSO6jbgNci9UZQPeQENrN3FaZzHq WJqvvtD43aQgV0BQX7jN5u8Od2R9phRJFUHwNFHFtPn9Ag7gRBJ8NAWVGTN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWegWeHcSYOnTFNO6iVYLFViNOdEwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpBQA9vymVfacQKbeito+JcJydEzYQ+DR4V 0yXH80Y7n2+aUg7zKp2LVspBpiYZToNUYygovxxC5Jun5s1UZaTqHron0Ayzmc9X 4KWUwhCbFoMJHr1wVTbk0KzFsJo88VzrdkIfbkckfYcITXHHWqfFDUKHh18B23bW XIG0MwDe1JBku1qQ8rBG6w/p+Zxsw/JNbu+mN2Xtb8/QJpV5kkvDLak//20118Fd QZibI33wmR1bwXkYArRnqazsr8b8wmUvp2ZLuve1Chns+znmmTiy8ZQ2WYj7U6oi uu8LaVS2iHywghSiMVcyrKsSNIQmmZqWPTVVnOI899T6HOxzXIw= -----END CERTIFICATE-----Generated at Thu Jul 3 00:43:18 2025 by rpki-client