$ rpki-client -vvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft (raw, json) Hash identifier: HjODaj/qTd8L22AI5XEPeqObs1C1rw9lTcjMpNB+plQ= Subject key identifier: F4:3B:91:21:27:F1:6D:31:16:00:5F:1A:23:CE:07:B5:50:39:F4:E9 Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 Certificate issuer: /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Certificate serial: 42C22D95B6C621996AE13F638CA6726802AED71A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:39 +0000 Manifest this update: Tue 12 May 2026 20:32:39 +0000 Manifest next update: Wed 13 May 2026 22:13:39 +0000 Files and hashes: 1: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=) 2: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl (hash: o6K4nD8K0kxC+wuMhTkW3Rmv6jdc4KtW4+QQQe7lVkY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c2:2d:95:b6:c6:21:99:6a:e1:3f:63:8c:a6:72:68:02:ae:d7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Validity Not Before: May 12 20:32:39 2026 GMT Not After : May 13 22:13:39 2026 GMT Subject: CN=F43B912127F16D3116005F1A23CE07B55039F4E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:88:f4:62:8e:33:9d:28:10:c2:65:14:a7: db:e0:2c:7c:f5:61:09:6a:74:88:e1:a6:b9:e8:a1: 83:32:0b:8c:08:a8:8d:58:9f:aa:91:4c:4c:85:30: b4:34:43:d1:d6:d6:d1:60:8d:36:6c:f0:75:e0:9c: 58:de:0f:18:65:f6:99:3a:b1:41:36:c1:ca:f6:78: 9f:a0:d2:8c:6e:7e:f9:b5:fa:42:3e:1c:e1:80:4c: ac:36:dc:df:cc:6f:41:db:0c:a8:96:60:0b:64:79: 37:0b:1f:0f:06:85:f8:27:22:2a:58:af:f9:b2:9a: fe:82:25:01:8b:43:04:61:6b:24:fd:45:89:3d:1f: 85:65:aa:2f:ca:c2:71:e5:1c:a3:b2:e2:49:e5:49: be:7d:0b:d7:ef:05:e9:9f:a2:cd:70:86:6d:8e:34: 24:f5:84:e9:5b:de:67:5f:9a:84:56:2b:0d:2d:62: 86:7d:95:4b:2e:1c:2b:88:6b:2b:4d:6f:a0:b5:e6: 66:41:6a:66:e5:ed:8c:11:19:35:9e:d6:a0:59:71: 98:15:b6:4f:9e:26:4a:81:7a:0f:c6:8d:3e:da:9f: 11:ec:61:69:11:27:4d:45:5b:20:0e:d2:20:d4:30: 26:5a:61:e1:48:5a:cc:d7:90:e0:e0:1d:cf:ab:10: 0f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3B:91:21:27:F1:6D:31:16:00:5F:1A:23:CE:07:B5:50:39:F4:E9 X509v3 Authority Key Identifier: keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bb:6b:e6:86:02:90:56:32:9d:d8:f1:50:98:fc:2a:cd:17: 8a:6b:f7:bd:71:ad:23:bf:7f:be:7a:f9:ed:bf:b3:57:30:ec: 00:03:8e:13:aa:8e:6d:f6:0d:c3:70:b4:e4:46:ba:e3:f8:b5: 58:c6:31:a2:dd:a0:50:82:90:4b:7b:35:df:e1:b5:5c:44:f2: 2c:8b:84:ce:5f:dd:7e:9e:ee:68:18:33:a8:3e:35:34:46:65: 78:dc:b2:d7:d0:e7:34:4f:5c:0c:cc:7e:a8:42:03:f0:93:5f: 5e:8c:db:4e:c0:88:10:d5:32:e8:6f:db:76:b6:99:95:6d:3e: 2b:97:b1:23:98:e1:2b:38:a1:e6:68:bd:a1:52:3d:00:cb:4f: 85:8d:12:80:d8:fe:db:ac:24:27:c6:e1:6a:6a:3b:a4:ca:2e: e3:d5:d0:01:31:50:ef:79:1e:b0:53:85:ac:1c:ba:cb:c9:8d: 6a:d6:26:d0:50:7d:df:ff:a3:6b:20:7e:0b:54:eb:2b:93:de: 0a:16:56:ae:fa:67:47:66:d9:5f:47:76:8d:b6:d3:1d:85:e2: a3:db:0a:1d:18:50:f9:fa:6c:60:38:e7:36:33:db:03:1f:50: 16:55:20:6b:98:d9:c4:28:96:2b:5b:29:be:da:87:d3:f8:8d: 0d:7e:80:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsItlbbGIZlq4T9jjKZyaAKu1xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0 QUNENUE0MjAeFw0yNjA1MTIyMDMyMzlaFw0yNjA1MTMyMjEzMzlaMDMxMTAvBgNV BAMTKEY0M0I5MTIxMjdGMTZEMzExNjAwNUYxQTIzQ0UwN0I1NTAzOUY0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyoj0Yo4znSgQwmUUp9vgLHz1 YQlqdIjhprnooYMyC4wIqI1Yn6qRTEyFMLQ0Q9HW1tFgjTZs8HXgnFjeDxhl9pk6 sUE2wcr2eJ+g0oxufvm1+kI+HOGATKw23N/Mb0HbDKiWYAtkeTcLHw8GhfgnIipY r/mymv6CJQGLQwRhayT9RYk9H4Vlqi/KwnHlHKOy4knlSb59C9fvBemfos1whm2O NCT1hOlb3mdfmoRWKw0tYoZ9lUsuHCuIaytNb6C15mZBambl7YwRGTWe1qBZcZgV tk+eJkqBeg/GjT7anxHsYWkRJ01FWyAO0iDUMCZaYeFIWszXkODgHc+rEA/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9DuRISfxbTEWAF8aI84HtVA59OkwHwYDVR0j BBgwFoAUY9ss13s9+VrA+fxbu4XGM0rNWkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI2MGYwM2MtODk2OC00NzBmLWI2MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3 QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0QUNENUE0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82M0RCMkNENzdCM0RGOTVBQzBGOUZDNUJCQjg1QzYzMzRBQ0Q1 QTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI2MGYwM2MtODk2OC00NzBmLWI2 MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2 MzM0QUNENUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKu7a+aGApBWMp3Y8VCY/CrNF4pr971xrSO/ f756+e2/s1cw7AADjhOqjm32DcNwtORGuuP4tVjGMaLdoFCCkEt7Nd/htVxE8iyL hM5f3X6e7mgYM6g+NTRGZXjcstfQ5zRPXAzMfqhCA/CTX16M207AiBDVMuhv23a2 mZVtPiuXsSOY4Ss4oeZovaFSPQDLT4WNEoDY/tusJCfG4WpqO6TKLuPV0AExUO95 HrBThawcusvJjWrWJtBQfd//o2sgfgtU6yuT3goWVq76Z0dm2V9Hdo220x2F4qPb Ch0YUPn6bGA45zYz2wMfUBZVIGuY2cQolitbKb7ah9P4jQ1+gAQ= -----END CERTIFICATE-----Generated at Tue May 12 22:47:13 2026 by rpki-client