$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: MnapsZDugTWOqJkJ74Qa7gAV1HMg26J6cofvwxZkj9U= Subject key identifier: B4:0E:5C:90:96:48:89:EC:99:F4:27:9C:38:2F:4E:EA:0B:97:4B:A9 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 0A95F633C0DE761F7EBFA28A30A289671A6D8F8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 0504 Signing time: Thu 21 Aug 2025 20:51:41 +0000 Manifest this update: Thu 21 Aug 2025 20:46:41 +0000 Manifest next update: Sun 24 Aug 2025 23:59:41 +0000 Files and hashes: 1: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 2: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: XCgthdgFQVXgZhXpxamHo4Nu0prJPBdnL+Lmrt7t4ps=) 3: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) 4: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: ac0RU7mQxYJ65wa+Zbze9xntXFdXflyH+zlqjFXLdbo=) 5: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:95:f6:33:c0:de:76:1f:7e:bf:a2:8a:30:a2:89:67:1a:6d:8f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Aug 21 20:46:41 2025 GMT Not After : Aug 24 23:59:41 2025 GMT Subject: CN=B40E5C90964889EC99F4279C382F4EEA0B974BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bf:0c:6a:f9:9a:e7:0e:03:ce:e9:54:a4:63: 01:b3:f2:30:2e:16:a1:7c:cb:40:43:18:46:20:7b: 78:66:86:97:fc:40:02:a1:90:10:fb:98:09:dc:14: a5:80:15:f4:88:f0:f2:df:2b:7e:ad:0f:0a:ce:7f: 9c:35:b2:1d:33:21:0c:b8:c9:85:0a:d7:9c:33:af: 49:b5:1c:51:dc:40:b6:0a:2c:c5:b1:c8:e7:61:31: 62:ed:ca:f3:66:0c:a2:ae:bd:6c:0c:1e:e6:97:5d: e3:ba:45:32:10:35:80:0c:fd:1c:2f:a2:36:77:72: 24:2f:1d:ee:19:43:e8:93:a7:5e:4f:73:ba:ad:53: 8f:5c:58:e3:0d:11:2a:0b:3b:e3:78:8a:66:dd:a1: 21:bc:2b:d5:bd:ac:be:0a:69:c6:d0:fd:f5:bf:9a: ec:bc:42:03:05:67:05:e6:72:d7:f2:c3:c4:db:b0: 1c:14:c6:02:90:4e:d3:3e:32:69:2e:32:48:2e:f5: 8b:5c:fa:16:c5:d6:3c:ec:06:bb:2f:fd:07:41:ec: f3:9e:f3:f0:75:aa:d9:c5:14:3d:10:22:32:94:fd: 44:ac:01:fa:6f:21:96:d5:02:b8:b2:6b:e8:90:bc: 25:b2:f1:82:8e:a6:51:77:65:e0:f5:72:21:41:30: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:5C:90:96:48:89:EC:99:F4:27:9C:38:2F:4E:EA:0B:97:4B:A9 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3e:bc:2c:fc:f5:ae:11:13:59:dc:3a:91:1b:46:82:81:14: 50:de:b8:88:15:53:8e:d0:32:49:a7:f0:b6:cf:0a:13:64:5e: 7f:ce:31:e1:1c:b0:50:24:2a:81:c9:40:d9:62:81:e0:98:db: b9:62:a5:79:9c:71:85:42:33:23:28:2e:fe:15:35:2f:4d:f5: f9:48:84:78:1c:82:d9:80:69:72:3e:56:34:08:56:28:79:51: 4f:7c:27:a1:3a:9a:38:06:e4:19:06:3d:28:5b:30:91:e6:19: e2:38:8c:3b:e7:ee:79:82:be:d9:67:a4:08:d1:3c:06:c8:fd: 6e:ca:ce:52:c1:08:92:c6:cb:34:42:67:f3:1c:9d:ff:3a:6e: 20:32:e8:47:e1:12:25:39:4f:f1:d7:fe:43:6d:2f:e6:f7:07: 22:94:f1:6c:5a:31:24:86:e9:c2:ec:76:37:e8:e0:3e:d9:03: 29:87:bf:a8:c9:db:d0:84:91:e1:4c:eb:db:69:ae:4a:d2:0e: 0e:57:87:3a:69:80:91:f9:00:59:21:de:c2:93:36:af:86:39: d9:75:52:45:7d:73:1c:51:f7:71:16:0d:02:4c:79:b5:e4:d7: ff:b3:fb:0b:76:86:af:ed:23:26:a5:ae:5c:a6:b4:71:85:32: f8:3f:51:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpX2M8Dedh9+v6KKMKKJZxptj4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA4MjEyMDQ2NDFaFw0yNTA4MjQyMzU5NDFaMDMxMTAvBgNV BAMTKEI0MEU1QzkwOTY0ODg5RUM5OUY0Mjc5QzM4MkY0RUVBMEI5NzRCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1vwxq+ZrnDgPO6VSkYwGz8jAu FqF8y0BDGEYge3hmhpf8QAKhkBD7mAncFKWAFfSI8PLfK36tDwrOf5w1sh0zIQy4 yYUK15wzr0m1HFHcQLYKLMWxyOdhMWLtyvNmDKKuvWwMHuaXXeO6RTIQNYAM/Rwv ojZ3ciQvHe4ZQ+iTp15Pc7qtU49cWOMNESoLO+N4imbdoSG8K9W9rL4KacbQ/fW/ muy8QgMFZwXmctfyw8TbsBwUxgKQTtM+MmkuMkgu9Ytc+hbF1jzsBrsv/QdB7POe 8/B1qtnFFD0QIjKU/USsAfpvIZbVAriya+iQvCWy8YKOplF3ZeD1ciFBMN3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtA5ckJZIieyZ9CecOC9O6guXS6kwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs+vCz89a4RE1ncOpEbRoKBFFDeuIgVU47Q Mkmn8LbPChNkXn/OMeEcsFAkKoHJQNligeCY27lipXmccYVCMyMoLv4VNS9N9flI hHgcgtmAaXI+VjQIVih5UU98J6E6mjgG5BkGPShbMJHmGeI4jDvn7nmCvtlnpAjR PAbI/W7KzlLBCJLGyzRCZ/Mcnf86biAy6EfhEiU5T/HX/kNtL+b3ByKU8WxaMSSG 6cLsdjfo4D7ZAymHv6jJ29CEkeFM69tprkrSDg5XhzppgJH5AFkh3sKTNq+GOdl1 UkV9cxxR93EWDQJMebXk1/+z+wt2hq/tIyalrlymtHGFMvg/UXQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:29 2025 by rpki-client