$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: LXf4+ikfJluDIbdw1UEakRuH5POi3evgsRIfSU+1Hs8= Subject key identifier: F6:CF:0B:F5:F4:4F:A9:CA:9B:A4:AB:DF:08:83:75:2E:7D:B3:08:4A Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 5B0F070D8C139BCF6E9FC49B5500A2AE17044FAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 0286 Signing time: Mon 20 Oct 2025 09:02:25 +0000 Manifest this update: Mon 20 Oct 2025 08:57:25 +0000 Manifest next update: Thu 23 Oct 2025 18:50:25 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=) 2: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=) 3: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: 2H77NP0GIOkt1aXcGWCkh5bWHHGcImjddNvNCn2ygkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0f:07:0d:8c:13:9b:cf:6e:9f:c4:9b:55:00:a2:ae:17:04:4f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Oct 20 08:57:25 2025 GMT Not After : Oct 23 18:50:25 2025 GMT Subject: CN=F6CF0BF5F44FA9CA9BA4ABDF0883752E7DB3084A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:ed:78:3a:84:a5:74:9c:5e:48:98:0f:b7: 48:ba:13:31:d8:58:72:1c:06:87:74:7e:36:0e:e1: df:0f:e8:21:ea:74:57:ae:cc:8d:17:cf:e1:21:4d: 39:4b:02:0e:13:5b:a8:12:52:51:31:26:69:5f:7e: 2a:ae:07:71:b8:69:99:76:95:71:61:78:97:03:fd: 08:e5:7c:24:b9:88:6e:40:a7:90:14:bf:34:a6:d7: f0:83:9e:a8:87:7a:aa:f4:f5:7c:ed:75:af:14:db: 08:fb:3a:bf:16:f2:29:ee:86:77:e1:aa:87:8b:e1: 5f:4b:cb:d6:78:56:30:fa:1f:5c:5b:6f:d1:a9:0e: 02:54:5e:fb:10:3c:1a:9d:d7:71:16:c6:9e:ce:b9: 92:f3:64:1f:34:1b:38:e0:cd:27:43:bc:7e:58:8b: cd:dd:b0:f4:d4:f6:e4:4b:52:01:02:9e:de:f3:bc: 65:b5:35:b3:30:b2:24:96:29:a7:a6:c4:f1:33:2e: e7:8f:d0:0a:29:b2:05:ab:5c:38:39:04:6f:a6:d4: 17:ae:91:57:1b:7b:25:f7:b2:31:c6:51:a8:92:77: b7:72:ec:f4:e5:c1:52:0c:9e:5c:0f:f3:b1:ee:44: 6c:8e:bd:04:e8:05:58:07:d6:1d:3d:a4:2e:0d:41: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:0B:F5:F4:4F:A9:CA:9B:A4:AB:DF:08:83:75:2E:7D:B3:08:4A X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:02:79:a9:60:e9:3b:f8:43:d4:5d:ed:d3:a5:4a:35:c0:ee: 74:6c:6e:01:fb:07:5f:7a:91:e3:83:49:07:94:ed:d7:79:6b: 44:8e:fa:81:67:38:5d:85:ba:f5:13:d6:38:9a:04:a9:61:b5: 89:54:7a:9f:44:3a:7c:2c:79:8a:51:61:1b:80:0c:3c:10:7e: 89:f7:30:76:ae:c7:c4:89:a0:a9:96:60:3a:3b:9a:38:0c:6f: fd:a2:dd:51:d8:67:80:0f:01:b0:8d:74:a2:32:ae:eb:eb:c8: 6d:51:8f:43:ef:95:bb:9d:b1:41:eb:f0:c9:0d:8c:92:02:c0: 0b:47:0e:f3:2d:ca:cc:c1:47:a2:4d:1f:36:36:01:8a:3a:94: 46:d2:bd:98:0c:a4:2f:b0:ba:cc:b4:72:a3:37:8a:12:be:f0: 99:e2:5f:25:dc:df:07:9b:5d:ff:e0:5d:c3:30:55:68:ce:9d: 36:da:21:4e:fd:9f:16:f4:45:0d:d8:d7:62:18:1f:80:6d:c8: 59:63:c8:d7:c2:db:ef:92:60:32:eb:85:42:b6:9c:f9:60:a0: 44:3a:7d:31:eb:bf:f6:ab:5a:f1:81:5f:8b:ab:35:1a:6e:7f: 14:8b:17:75:5a:ae:3e:9f:fe:04:a0:e9:5e:d4:af:94:06:7d: 36:e0:39:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWw8HDYwTm89un8SbVQCirhcET6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTEwMjAwODU3MjVaFw0yNTEwMjMxODUwMjVaMDMxMTAvBgNV BAMTKEY2Q0YwQkY1RjQ0RkE5Q0E5QkE0QUJERjA4ODM3NTJFN0RCMzA4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ru14OoSldJxeSJgPt0i6EzHY WHIcBod0fjYO4d8P6CHqdFeuzI0Xz+EhTTlLAg4TW6gSUlExJmlffiquB3G4aZl2 lXFheJcD/QjlfCS5iG5Ap5AUvzSm1/CDnqiHeqr09Xztda8U2wj7Or8W8inuhnfh qoeL4V9Ly9Z4VjD6H1xbb9GpDgJUXvsQPBqd13EWxp7OuZLzZB80GzjgzSdDvH5Y i83dsPTU9uRLUgECnt7zvGW1NbMwsiSWKaemxPEzLueP0AopsgWrXDg5BG+m1Beu kVcbeyX3sjHGUaiSd7dy7PTlwVIMnlwP87HuRGyOvQToBVgH1h09pC4NQV47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9s8L9fRPqcqbpKvfCIN1Ln2zCEowHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0Cealg6Tv4Q9Rd7dOlSjXA7nRsbgH7B196 keODSQeU7dd5a0SO+oFnOF2FuvUT1jiaBKlhtYlUep9EOnwseYpRYRuADDwQfon3 MHaux8SJoKmWYDo7mjgMb/2i3VHYZ4APAbCNdKIyruvryG1Rj0PvlbudsUHr8MkN jJICwAtHDvMtyszBR6JNHzY2AYo6lEbSvZgMpC+wusy0cqM3ihK+8JniXyXc3web Xf/gXcMwVWjOnTbaIU79nxb0RQ3Y12IYH4BtyFljyNfC2++SYDLrhUK2nPlgoEQ6 fTHrv/arWvGBX4urNRpufxSLF3Varj6f/gSg6V7Ur5QGfTbgOQk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:00 2025 by rpki-client