$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: 7rJ+s/tT5JTwQDbjskbjFNQbD/e/nVAdTKZQCj59V6I= Subject key identifier: 39:99:6E:12:AC:B7:89:F9:5F:4C:5A:A6:1B:89:C8:44:CA:C4:8A:D6 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 4029EE53410BC9D0F2D27972F853EF0F251744BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 04C6 Signing time: Fri 22 Aug 2025 03:51:44 +0000 Manifest this update: Fri 22 Aug 2025 03:46:44 +0000 Manifest next update: Mon 25 Aug 2025 12:36:44 +0000 Files and hashes: 1: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=) 2: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: 4BI0QewBc8EmVD6NgpQe5eYrutDn2ZuVIUNL9qdC2ks=) 3: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:29:ee:53:41:0b:c9:d0:f2:d2:79:72:f8:53:ef:0f:25:17:44:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Aug 22 03:46:44 2025 GMT Not After : Aug 25 12:36:44 2025 GMT Subject: CN=39996E12ACB789F95F4C5AA61B89C844CAC48AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:c2:bf:00:be:ac:39:db:b1:7e:9a:dd:56: e0:53:d3:81:d1:c6:30:33:f6:a5:76:9e:f1:59:c0: 3a:c3:81:fe:b2:c6:95:7f:04:71:29:c7:f5:5d:f4: f9:60:7d:e3:cf:c9:11:2e:aa:8d:4b:03:90:74:1b: fd:d9:60:a4:13:56:a1:64:9d:9a:58:56:bd:48:f1: 74:87:4e:18:43:32:cd:e0:b2:f6:4f:35:7d:e8:b0: 61:b0:cd:88:6f:a7:c9:70:d5:9d:b5:0c:ad:4d:5d: 2e:6a:dc:83:4e:a2:8e:23:72:78:c9:c5:e2:c2:83: b0:4b:dd:16:f4:ea:a5:af:e1:c4:7d:79:9e:00:31: 40:d2:dd:02:bd:a0:a5:f8:59:5c:d3:78:5c:64:4b: 3e:a3:6e:e7:2d:77:57:dd:cd:cf:58:47:70:60:48: f4:2a:12:25:73:61:1b:4b:a8:ac:75:61:f8:b3:61: 7f:ae:75:ca:17:30:04:2e:ee:e8:8c:d7:f7:54:6c: 71:98:18:bc:48:a4:10:22:49:79:78:de:4d:01:6f: 89:cb:e7:9d:02:41:1e:28:09:89:c1:f9:2c:89:97: ef:b6:73:0e:f8:18:e1:aa:1a:22:d9:36:03:1b:1b: 03:30:14:9a:13:7a:4a:2f:43:1d:b7:1c:b9:43:0d: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:6E:12:AC:B7:89:F9:5F:4C:5A:A6:1B:89:C8:44:CA:C4:8A:D6 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:fe:e1:34:a4:ec:6b:0a:87:24:7d:79:d2:cf:fe:cf:c7: 6d:ae:0b:39:2e:4c:ad:ca:0a:fa:e3:33:40:ee:e6:02:22:43: 30:3c:66:14:54:13:16:bf:1e:70:4f:b6:7e:8a:63:2a:1a:4e: c0:2f:df:9c:f2:49:31:d4:30:07:9e:10:a7:20:89:b4:e2:28: 16:71:f0:31:c4:c4:b0:31:40:99:24:c3:00:05:ba:ea:d6:91: a1:b7:0a:50:98:af:aa:25:4b:b8:1d:60:8a:09:5b:1a:13:96: 52:11:47:d2:b1:84:07:25:23:3b:34:13:8f:57:9c:8e:45:ca: 40:c6:51:52:d9:bc:73:90:2b:61:06:3a:df:28:64:51:17:87: f0:21:1f:5c:64:fa:c3:d4:c5:8d:95:79:ff:a3:72:ad:9c:0c: 3b:b4:6d:77:9e:5f:bf:6c:e1:2d:0a:a0:26:37:3b:de:8e:a3: 6c:c8:a0:47:ef:e4:a0:05:6b:c7:35:c2:0a:32:ca:75:4e:12: 6d:db:05:05:8c:73:0b:be:bc:3b:19:b8:19:0f:75:a6:27:a8: 6c:5a:b2:26:80:8b:15:0a:40:3b:d3:ad:74:ba:98:3f:1a:9e: 5f:23:b3:9b:2e:c8:62:11:96:3c:43:99:eb:e9:00:5b:be:04: ae:71:14:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCnuU0ELydDy0nly+FPvDyUXRL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTA4MjIwMzQ2NDRaFw0yNTA4MjUxMjM2NDRaMDMxMTAvBgNV BAMTKDM5OTk2RTEyQUNCNzg5Rjk1RjRDNUFBNjFCODlDODQ0Q0FDNDhBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQl8K/AL6sOduxfprdVuBT04HR xjAz9qV2nvFZwDrDgf6yxpV/BHEpx/Vd9PlgfePPyREuqo1LA5B0G/3ZYKQTVqFk nZpYVr1I8XSHThhDMs3gsvZPNX3osGGwzYhvp8lw1Z21DK1NXS5q3INOoo4jcnjJ xeLCg7BL3Rb06qWv4cR9eZ4AMUDS3QK9oKX4WVzTeFxkSz6jbuctd1fdzc9YR3Bg SPQqEiVzYRtLqKx1YfizYX+udcoXMAQu7uiM1/dUbHGYGLxIpBAiSXl43k0Bb4nL 550CQR4oCYnB+SyJl++2cw74GOGqGiLZNgMbGwMwFJoTekovQx23HLlDDYh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZluEqy3iflfTFqmG4nIRMrEitYwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWP/uE0pOxrCockfXnSz/7Px22uCzkuTK3K CvrjM0Du5gIiQzA8ZhRUExa/HnBPtn6KYyoaTsAv35zySTHUMAeeEKcgibTiKBZx 8DHExLAxQJkkwwAFuurWkaG3ClCYr6olS7gdYIoJWxoTllIRR9KxhAclIzs0E49X nI5FykDGUVLZvHOQK2EGOt8oZFEXh/AhH1xk+sPUxY2Vef+jcq2cDDu0bXeeX79s 4S0KoCY3O96Oo2zIoEfv5KAFa8c1wgoyynVOEm3bBQWMcwu+vDsZuBkPdaYnqGxa siaAixUKQDvTrXS6mD8anl8js5suyGIRljxDmevpAFu+BK5xFGw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:06:38 2025 by rpki-client