$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: YaXC1BT46UE6qL4O0YvZIvxG5Z/bLMlH17keMJrbHgg= Subject key identifier: 87:CC:41:DD:23:9E:9B:A4:1B:78:6A:EB:35:21:07:72:6A:45:24:D2 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 4ADE634D72832B1E8FD8207E298DF14A722C86A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 04D4 Signing time: Wed 07 May 2025 06:51:39 +0000 Manifest this update: Wed 07 May 2025 06:46:39 +0000 Manifest next update: Sat 10 May 2025 16:37:39 +0000 Files and hashes: 1: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: DuPPvM0N+z/I5fh+w6ISB+swswfHuIEOv1y6nFrqj6k=) 2: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=) 3: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: XCgthdgFQVXgZhXpxamHo4Nu0prJPBdnL+Lmrt7t4ps=) 4: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: jmQm3aOMqqODKe0DYNxt94k8ljD1uDvHE52LVQGmti4=) 5: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: UbBgZ51f4C8Vvj6Jx9oSBaJ3qNsiB9IL8hCIyy1Np8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:de:63:4d:72:83:2b:1e:8f:d8:20:7e:29:8d:f1:4a:72:2c:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: May 7 06:46:39 2025 GMT Not After : May 10 16:37:39 2025 GMT Subject: CN=87CC41DD239E9BA41B786AEB352107726A4524D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:00:6a:92:76:68:5d:a6:6c:04:b2:07:d4: 95:33:49:be:e9:2c:c5:ad:cc:4e:d2:13:2d:93:3e: c1:42:0d:03:61:35:d9:08:71:a6:fe:0a:4a:9b:60: 6c:89:ad:14:a4:b6:52:cf:5e:7e:74:1b:1f:a2:66: 52:4e:99:87:64:c6:4b:44:53:49:cf:bc:49:bd:df: 64:fb:d4:62:1a:cb:4a:91:e8:0c:5b:75:77:5a:4f: 6f:cc:40:56:fc:8d:49:6c:93:a5:fe:ca:97:d0:ee: 8d:8f:14:43:30:19:0e:ac:f5:3e:30:fb:96:20:09: 7f:79:49:a4:a7:7e:95:25:55:72:28:2c:58:4b:d7: d9:29:86:25:d7:3c:a8:d5:a0:f6:a3:85:9f:8e:4b: 17:a3:9b:6f:3b:ec:31:da:7d:1a:ca:3e:2e:4a:47: 5e:cd:4b:0a:ff:fb:20:0b:12:94:5c:07:b0:54:6a: e7:79:01:fc:9a:45:8c:11:8b:00:3d:b6:5e:30:3f: 19:01:a2:8d:0e:68:32:82:ab:90:e9:0f:44:5f:04: 18:d5:f8:89:dc:8d:c7:3e:53:28:ae:fb:32:c9:bf: 8d:41:e8:0e:03:b2:d0:3c:16:95:bf:bc:13:c1:93: 73:8b:d6:7e:ea:45:07:e8:e7:49:09:b6:36:eb:36: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CC:41:DD:23:9E:9B:A4:1B:78:6A:EB:35:21:07:72:6A:45:24:D2 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e3:41:d2:70:28:cf:85:b5:ad:30:3e:d5:b7:25:3e:6c:ae: 55:be:d1:89:d9:15:43:da:cf:ff:6a:a7:58:96:02:84:30:59: 8f:2a:05:32:d8:50:c9:10:8d:8f:cf:be:29:80:bc:1a:fb:b9: b6:c0:6a:32:27:28:f1:c5:69:17:6a:cc:a2:54:f9:4b:71:cf: 5f:35:7a:51:cd:15:4e:54:ff:06:ff:3d:33:85:8f:31:ec:bc: 51:11:85:a2:77:77:d5:df:a5:dc:0c:bc:f5:72:e1:ca:fc:9b: e3:b8:56:4d:88:fb:e6:d5:91:4e:48:bd:9a:b2:a1:11:f6:72: ed:75:a1:ff:de:eb:ad:c2:dd:4c:c9:80:70:7c:c9:f8:b2:71: 92:de:9b:e8:9e:2c:23:57:ae:00:e0:fe:0f:b7:88:c9:55:f7: 19:d4:fb:f4:f0:24:72:99:22:9d:de:bf:54:34:69:6b:34:0f: f1:a2:11:82:f5:2a:57:fc:53:72:9b:f0:22:ef:7f:ee:d1:61: c1:91:f9:89:12:c1:bc:62:a5:b6:0d:53:be:b8:2e:5c:8a:a7: 27:01:4e:49:34:24:88:63:3a:5c:a3:99:b4:68:ba:29:53:b9: 32:03:c9:fc:30:3d:d3:da:00:a4:8b:d4:3e:2e:6b:5e:52:6d: 27:b2:b3:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSt5jTXKDKx6P2CB+KY3xSnIshqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA1MDcwNjQ2MzlaFw0yNTA1MTAxNjM3MzlaMDMxMTAvBgNV BAMTKDg3Q0M0MUREMjM5RTlCQTQxQjc4NkFFQjM1MjEwNzcyNkE0NTI0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHQBqknZoXaZsBLIH1JUzSb7p LMWtzE7SEy2TPsFCDQNhNdkIcab+CkqbYGyJrRSktlLPXn50Gx+iZlJOmYdkxktE U0nPvEm932T71GIay0qR6AxbdXdaT2/MQFb8jUlsk6X+ypfQ7o2PFEMwGQ6s9T4w +5YgCX95SaSnfpUlVXIoLFhL19kphiXXPKjVoPajhZ+OSxejm2877DHafRrKPi5K R17NSwr/+yALEpRcB7BUaud5AfyaRYwRiwA9tl4wPxkBoo0OaDKCq5DpD0RfBBjV +Incjcc+Uyiu+zLJv41B6A4DstA8FpW/vBPBk3OL1n7qRQfo50kJtjbrNo2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8xB3SOem6QbeGrrNSEHcmpFJNIwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbjQdJwKM+Fta0wPtW3JT5srlW+0YnZFUPa z/9qp1iWAoQwWY8qBTLYUMkQjY/PvimAvBr7ubbAajInKPHFaRdqzKJU+Utxz181 elHNFU5U/wb/PTOFjzHsvFERhaJ3d9XfpdwMvPVy4cr8m+O4Vk2I++bVkU5IvZqy oRH2cu11of/e663C3UzJgHB8yfiycZLem+ieLCNXrgDg/g+3iMlV9xnU+/TwJHKZ Ip3ev1Q0aWs0D/GiEYL1Klf8U3Kb8CLvf+7RYcGR+YkSwbxipbYNU764LlyKpycB Tkk0JIhjOlyjmbRouilTuTIDyfwwPdPaAKSL1D4ua15SbSeys5M= -----END CERTIFICATE-----Generated at Thu May 8 21:28:52 2025 by rpki-client