$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: LhJF3P4hxvNxwvFt3O19B1ZSjO7CtLe8x02ekyY+WGE= Subject key identifier: D3:45:95:CD:86:29:20:A6:C5:B3:BE:3B:0C:4F:BC:EE:1D:22:97:E3 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 39EDA8A55EEEDFDC45EDD3A82D94096C80C82F66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01CE Signing time: Sat 18 Oct 2025 08:01:13 +0000 Manifest this update: Sat 18 Oct 2025 07:56:13 +0000 Manifest next update: Tue 21 Oct 2025 17:39:13 +0000 Files and hashes: 1: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: gvkENKLVf10DlVBortADtk3R2reP2rwBhx9RQzPO46k=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ed:a8:a5:5e:ee:df:dc:45:ed:d3:a8:2d:94:09:6c:80:c8:2f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Oct 18 07:56:13 2025 GMT Not After : Oct 21 17:39:13 2025 GMT Subject: CN=D34595CD862920A6C5B3BE3B0C4FBCEE1D2297E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:96:a4:04:82:d0:4c:3b:30:67:e9:3e:f6: d0:10:d6:93:30:06:b0:62:ae:10:1b:56:d5:1c:1c: ca:67:fc:12:ff:01:dc:db:bd:4b:07:bb:9d:b9:68: 4a:4a:4c:dc:f6:91:0e:e9:eb:f4:c7:75:da:6f:9b: 91:ac:6b:fc:c5:8f:48:82:fd:b4:98:9b:36:7d:28: 68:82:ce:23:b7:e2:d1:1f:b8:1a:2f:39:2a:f9:bf: f7:89:50:67:ea:d9:a9:c9:9e:e4:83:e6:8d:ba:51: 45:27:b9:1a:76:25:98:35:37:5b:f9:c4:79:c0:d3: 94:1d:37:28:5c:55:97:63:37:70:ae:e5:85:24:6e: a8:15:32:78:8c:ea:e3:84:43:9b:00:02:95:3e:0e: 17:68:06:6e:06:d0:32:17:6e:13:60:8f:2e:d4:9a: bf:ee:84:d8:44:9f:51:21:cf:3d:8b:7d:72:8a:96: 0d:b2:4b:e7:56:d4:84:8b:03:6a:64:59:13:98:7c: 12:6d:28:9a:55:af:94:7f:19:94:f1:c5:c5:b0:5c: 72:2d:2d:43:61:19:61:82:38:15:2b:44:be:2f:a4: 87:1c:ac:3a:bb:35:9c:7a:58:fc:a0:65:34:77:eb: ed:4c:bc:27:bf:c4:2b:d4:75:38:95:f5:95:e0:41: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:95:CD:86:29:20:A6:C5:B3:BE:3B:0C:4F:BC:EE:1D:22:97:E3 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d4:fb:80:d5:fb:6a:81:c3:ff:93:ed:9b:cb:eb:2f:a4:ef: b7:41:ae:0e:a1:8f:f9:ad:69:23:f0:29:16:0e:55:a7:ac:b7: 6a:a2:63:22:4f:09:e1:e5:cd:ba:f3:a8:46:b7:09:dd:a3:c9: 86:cb:e8:8e:39:00:be:ea:a8:01:be:2a:d4:b3:5b:57:94:51: 92:5f:da:85:0b:37:f9:c2:eb:14:f8:fa:f5:16:47:89:78:45: ac:f7:10:24:03:e0:3f:f2:ce:da:97:9e:d2:d1:eb:22:31:3a: 9f:47:41:89:f0:ea:8e:22:57:75:3d:6f:43:a0:b7:97:aa:cf: 37:be:fd:e7:48:19:d0:af:74:13:a6:d6:73:25:93:36:2b:f9: e0:c5:3f:4d:be:4c:c1:6d:f8:fb:22:c8:91:13:65:11:2f:11: af:40:88:32:5a:73:34:be:b9:ae:3e:68:90:86:aa:af:71:fd: ba:d9:c0:66:fd:62:ca:ed:21:6f:85:81:61:69:8f:ee:b8:42: ce:35:a5:84:1d:c0:64:68:b5:39:80:2d:e8:62:10:2e:68:b3: 0c:f1:65:5f:fe:16:b8:7e:f3:58:7b:6d:98:18:dc:a7:f7:96: 34:85:b5:80:24:c7:0b:90:90:6b:5f:17:ff:57:1e:fb:12:31: 70:52:13:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOe2opV7u39xF7dOoLZQJbIDIL2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTEwMTgwNzU2MTNaFw0yNTEwMjExNzM5MTNaMDMxMTAvBgNV BAMTKEQzNDU5NUNEODYyOTIwQTZDNUIzQkUzQjBDNEZCQ0VFMUQyMjk3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDML5akBILQTDswZ+k+9tAQ1pMw BrBirhAbVtUcHMpn/BL/AdzbvUsHu525aEpKTNz2kQ7p6/THddpvm5Gsa/zFj0iC /bSYmzZ9KGiCziO34tEfuBovOSr5v/eJUGfq2anJnuSD5o26UUUnuRp2JZg1N1v5 xHnA05QdNyhcVZdjN3Cu5YUkbqgVMniM6uOEQ5sAApU+DhdoBm4G0DIXbhNgjy7U mr/uhNhEn1Ehzz2LfXKKlg2yS+dW1ISLA2pkWROYfBJtKJpVr5R/GZTxxcWwXHIt LUNhGWGCOBUrRL4vpIccrDq7NZx6WPygZTR36+1MvCe/xCvUdTiV9ZXgQdG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00WVzYYpIKbFs747DE+87h0il+MwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3U+4DV+2qBw/+T7ZvL6y+k77dBrg6hj/mt aSPwKRYOVaest2qiYyJPCeHlzbrzqEa3Cd2jyYbL6I45AL7qqAG+KtSzW1eUUZJf 2oULN/nC6xT4+vUWR4l4Raz3ECQD4D/yztqXntLR6yIxOp9HQYnw6o4iV3U9b0Og t5eqzze+/edIGdCvdBOm1nMlkzYr+eDFP02+TMFt+PsiyJETZREvEa9AiDJaczS+ ua4+aJCGqq9x/brZwGb9YsrtIW+FgWFpj+64Qs41pYQdwGRotTmALehiEC5oswzx ZV/+Frh+81h7bZgY3Kf3ljSFtYAkxwuQkGtfF/9XHvsSMXBSEyk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:58 2025 by rpki-client