$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: SIUyv7CGSls20L1JC/jgKnfSFplWHmm59ryTfSc70UM= Subject key identifier: 15:1B:14:DD:AD:11:25:D1:5C:D5:3E:A1:11:E9:A5:0A:3C:34:80:74 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 12E1DE9C680A678AE566CC78A5F84BDA614B36D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 04EC Signing time: Sat 28 Jun 2025 23:31:37 +0000 Manifest this update: Sat 28 Jun 2025 23:26:37 +0000 Manifest next update: Wed 02 Jul 2025 04:37:37 +0000 Files and hashes: 1: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: XCgthdgFQVXgZhXpxamHo4Nu0prJPBdnL+Lmrt7t4ps=) 2: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 3: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: qFcLu5VAPKjzw4JRcwoVmt/Mb0+ql7d7H0vTzIi1k54=) 4: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) 5: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:de:9c:68:0a:67:8a:e5:66:cc:78:a5:f8:4b:da:61:4b:36:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Jun 28 23:26:37 2025 GMT Not After : Jul 2 04:37:37 2025 GMT Subject: CN=151B14DDAD1125D15CD53EA111E9A50A3C348074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:ed:b7:e6:8c:d5:07:09:ca:0a:8c:e2:a6: 2e:7e:50:b2:0f:1f:7d:2b:9c:87:35:6c:29:e4:1c: 8c:8f:c6:62:5f:3c:3f:63:78:13:a2:87:eb:aa:a1: 7e:8b:ed:bf:db:3d:85:6f:2f:6a:3e:ac:60:95:97: 56:e2:0f:80:ed:71:a4:8d:83:ca:4d:3d:7b:06:5e: c1:d1:42:0c:b8:ca:57:cc:38:92:75:8a:a6:40:bf: 5f:03:14:9b:ce:38:7a:6b:bb:1c:26:72:51:a1:e0: 7f:57:12:f8:f4:5f:b4:cf:7a:6c:ab:6a:49:f3:7b: 20:36:cb:26:4e:58:28:0f:76:a2:3f:98:71:ec:35: f0:76:6b:c8:e0:51:4a:3f:3e:b1:eb:3d:cc:dd:da: 89:83:71:ae:c8:ca:ab:40:e8:13:2f:b7:3a:c4:c7: a8:00:65:3e:df:9e:5b:49:10:1e:54:02:e8:23:fa: 7e:cc:08:73:4e:df:c6:34:29:78:b6:2d:7a:3c:21: aa:29:dd:78:1c:59:25:51:31:f4:54:9c:e8:36:da: f0:0d:7a:2a:a4:8e:42:05:f5:b8:66:96:2a:f9:bd: 1a:4d:1e:b4:6d:e4:26:da:95:a1:eb:35:33:fa:c1: 52:a4:63:68:d2:fa:06:48:22:2f:67:9b:3c:62:ac: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:14:DD:AD:11:25:D1:5C:D5:3E:A1:11:E9:A5:0A:3C:34:80:74 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:24:af:ba:da:4e:1f:64:0f:50:6f:b0:92:f3:e1:69:25:4a: 76:25:ac:19:1d:a9:b4:73:a9:b1:dc:e5:2f:84:e0:4b:2e:99: f5:1f:32:e0:1a:58:af:ab:ae:c6:92:eb:6a:7e:cd:3b:a0:2d: ee:09:b9:5c:39:d2:dd:d1:8e:27:3e:e1:71:f4:1c:87:28:0f: 97:b1:3b:10:fe:cd:d4:b6:d5:2e:20:b8:13:80:e5:5e:f2:bc: c6:56:9d:65:34:ef:7b:91:ae:00:a4:6d:b5:2d:d9:6c:b5:3a: c7:52:c4:cd:f7:a0:d0:93:02:1f:d7:7d:0b:84:7d:ee:b4:4e: 62:09:73:86:84:cc:05:52:76:d8:92:c2:c5:68:d0:e2:84:14: 6a:8b:6f:9a:b2:a9:ce:5c:7a:ba:a1:11:49:b3:11:8e:ef:36: 25:dd:8b:ac:d3:da:7f:35:aa:43:4d:5d:0f:f1:2b:4d:9e:ce: bb:bc:57:c0:95:51:3d:b1:4c:e9:94:3c:d7:1c:78:08:40:20: 6e:ac:06:92:a6:a6:b1:db:2c:a5:f5:01:d6:9b:ba:5b:16:19: 30:a8:58:df:cb:27:89:84:e9:fb:f7:ad:76:b9:13:81:c3:d0: bd:a3:6b:89:b8:ba:cc:60:c3:2d:55:50:12:f3:a4:05:3a:ad: 99:45:c7:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuHenGgKZ4rlZsx4pfhL2mFLNtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA2MjgyMzI2MzdaFw0yNTA3MDIwNDM3MzdaMDMxMTAvBgNV BAMTKDE1MUIxNEREQUQxMTI1RDE1Q0Q1M0VBMTExRTlBNTBBM0MzNDgwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsO+235ozVBwnKCozipi5+ULIP H30rnIc1bCnkHIyPxmJfPD9jeBOih+uqoX6L7b/bPYVvL2o+rGCVl1biD4DtcaSN g8pNPXsGXsHRQgy4ylfMOJJ1iqZAv18DFJvOOHpruxwmclGh4H9XEvj0X7TPemyr aknzeyA2yyZOWCgPdqI/mHHsNfB2a8jgUUo/PrHrPczd2omDca7IyqtA6BMvtzrE x6gAZT7fnltJEB5UAugj+n7MCHNO38Y0KXi2LXo8Iaop3XgcWSVRMfRUnOg22vAN eiqkjkIF9bhmlir5vRpNHrRt5CbalaHrNTP6wVKkY2jS+gZIIi9nmzxirGLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRsU3a0RJdFc1T6hEemlCjw0gHQwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQkr7raTh9kD1BvsJLz4WklSnYlrBkdqbRz qbHc5S+E4EsumfUfMuAaWK+rrsaS62p+zTugLe4JuVw50t3Rjic+4XH0HIcoD5ex OxD+zdS21S4guBOA5V7yvMZWnWU073uRrgCkbbUt2Wy1OsdSxM33oNCTAh/XfQuE fe60TmIJc4aEzAVSdtiSwsVo0OKEFGqLb5qyqc5cerqhEUmzEY7vNiXdi6zT2n81 qkNNXQ/xK02ezru8V8CVUT2xTOmUPNcceAhAIG6sBpKmprHbLKX1AdabulsWGTCo WN/LJ4mE6fv3rXa5E4HD0L2ja4m4usxgwy1VUBLzpAU6rZlFx/s= -----END CERTIFICATE-----Generated at Sun Jun 29 20:02:41 2025 by rpki-client