$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: u2P4IwQIZo8YQQLK2C4SRK5AD+stF+/ROmOBceobe48= Subject key identifier: 98:F1:91:77:D7:ED:EE:7E:D8:23:5D:31:2B:09:C8:2F:FE:59:3B:F8 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 1D33D779E3BD3008574FC3B9850AB159E7D23163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 04E0 Signing time: Sun 19 Oct 2025 21:11:42 +0000 Manifest this update: Sun 19 Oct 2025 21:06:42 +0000 Manifest next update: Thu 23 Oct 2025 03:05:42 +0000 Files and hashes: 1: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=) 2: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=) 3: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: G+FLxN6GoUFbP/5zCzL3WTrt9CZRIEaK4rQMCHBR/B4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:33:d7:79:e3:bd:30:08:57:4f:c3:b9:85:0a:b1:59:e7:d2:31:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Oct 19 21:06:42 2025 GMT Not After : Oct 23 03:05:42 2025 GMT Subject: CN=98F19177D7EDEE7ED8235D312B09C82FFE593BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:66:28:90:25:95:3d:d2:af:df:26:6d:8a: d3:3c:3d:c7:75:18:b1:bd:2c:26:60:6c:aa:8f:e2: 53:da:60:06:36:97:0c:78:55:96:65:9d:6f:1a:6b: e4:3f:04:52:00:4c:1c:f9:56:ee:6b:f5:c5:9d:87: 50:7a:e6:cc:34:64:4f:2f:c5:3b:ca:b5:a6:a4:f5: a0:b8:4c:8d:12:6c:f1:cb:47:14:ea:3c:23:16:98: 50:57:86:a6:1c:1d:0e:3c:1d:7f:7f:e9:77:b4:22: 8d:e1:f6:ba:86:55:54:58:c9:4c:ca:81:ad:50:c9: 5b:7d:c7:d4:6d:79:af:61:29:7d:43:b3:f4:93:18: 24:fa:9e:9c:6e:de:3f:1d:f0:b6:04:63:bc:b1:88: 80:65:2c:ea:8b:77:3a:6a:ff:03:f6:9d:36:a8:2b: 40:63:3e:58:81:c0:d3:4c:39:91:19:65:86:4d:11: b7:10:66:5b:14:16:5d:11:d7:82:bb:87:37:74:47: 1a:87:33:c2:66:26:1d:59:a4:99:26:cb:1e:98:e9: 7d:6f:fa:e7:28:ef:e9:61:f0:1c:64:91:77:27:96: 41:f9:e5:f3:1d:af:2f:4b:d1:3c:16:6e:81:08:ee: d4:f3:1c:cd:55:fd:10:6d:33:7b:ab:65:6b:17:1e: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F1:91:77:D7:ED:EE:7E:D8:23:5D:31:2B:09:C8:2F:FE:59:3B:F8 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:e2:c7:f1:5e:9a:80:a7:4b:22:b8:1a:20:53:ea:d3:f1: 86:b0:ae:f4:87:3f:aa:76:cc:b0:cf:b8:b5:97:83:cf:95:37: a6:f4:db:68:9f:45:cc:2b:cc:1d:4d:57:23:5f:cd:1a:57:54: ca:48:3b:08:d0:c9:67:83:4f:da:36:c0:4b:8b:18:04:61:86: a9:6e:eb:14:34:e1:49:91:75:34:71:5b:ea:36:9a:2a:10:fd: 6d:49:6f:78:ad:4d:4a:4f:2e:6f:21:48:f9:c2:f3:c4:1c:76: 6c:02:4f:a7:87:54:a9:2c:ba:62:b9:87:c7:83:49:e0:00:52: eb:58:16:d7:a7:42:a5:dd:37:92:d6:72:76:e1:0c:67:98:70: e0:a6:b5:df:81:fe:01:82:9d:96:96:f4:bd:66:f4:22:f8:1f: 3b:0a:a0:68:e4:5c:84:86:80:de:d5:a2:3d:3d:c3:bb:a8:f2: fb:d6:ea:ce:77:59:8b:ec:63:79:53:1b:25:81:de:1f:db:e0: cc:dd:72:a3:4a:35:ce:13:49:ac:f8:e9:53:f2:ad:b2:c2:27: 2c:a0:1e:d1:97:5e:ba:bc:01:e4:6a:3e:12:75:cd:8c:91:23: cf:52:ad:16:35:27:ef:b3:78:3a:08:18:03:2a:11:45:45:f9: cb:83:44:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTPXeeO9MAhXT8O5hQqxWefSMWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTEwMTkyMTA2NDJaFw0yNTEwMjMwMzA1NDJaMDMxMTAvBgNV BAMTKDk4RjE5MTc3RDdFREVFN0VEODIzNUQzMTJCMDlDODJGRkU1OTNCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTWYokCWVPdKv3yZtitM8Pcd1 GLG9LCZgbKqP4lPaYAY2lwx4VZZlnW8aa+Q/BFIATBz5Vu5r9cWdh1B65sw0ZE8v xTvKtaak9aC4TI0SbPHLRxTqPCMWmFBXhqYcHQ48HX9/6Xe0Io3h9rqGVVRYyUzK ga1QyVt9x9Rtea9hKX1Ds/STGCT6npxu3j8d8LYEY7yxiIBlLOqLdzpq/wP2nTao K0BjPliBwNNMOZEZZYZNEbcQZlsUFl0R14K7hzd0RxqHM8JmJh1ZpJkmyx6Y6X1v +uco7+lh8BxkkXcnlkH55fMdry9L0TwWboEI7tTzHM1V/RBtM3urZWsXHgDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmPGRd9ft7n7YI10xKwnIL/5ZO/gwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDJ4sfxXpqAp0siuBogU+rT8YawrvSHP6p2 zLDPuLWXg8+VN6b022ifRcwrzB1NVyNfzRpXVMpIOwjQyWeDT9o2wEuLGARhhqlu 6xQ04UmRdTRxW+o2mioQ/W1Jb3itTUpPLm8hSPnC88QcdmwCT6eHVKksumK5h8eD SeAAUutYFtenQqXdN5LWcnbhDGeYcOCmtd+B/gGCnZaW9L1m9CL4HzsKoGjkXISG gN7Voj09w7uo8vvW6s53WYvsY3lTGyWB3h/b4MzdcqNKNc4TSaz46VPyrbLCJyyg HtGXXrq8AeRqPhJ1zYyRI89SrRY1J++zeDoIGAMqEUVF+cuDRHI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:47 2025 by rpki-client