$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: P5wxQaULq6I/GVgdxOF6FUFSaseOoQ3xojVoW09kXMg= Subject key identifier: FC:0C:47:CF:8E:3D:6C:97:03:66:38:2C:DD:A2:F5:B2:EE:3B:7E:5D Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 6B018C27F29B26A6BB73D5EF23F0D0731A76CB85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 025D Signing time: Tue 22 Jul 2025 19:02:36 +0000 Manifest this update: Tue 22 Jul 2025 18:57:36 +0000 Manifest next update: Fri 25 Jul 2025 19:07:36 +0000 Files and hashes: 1: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: 75WVqtiQBPS/ntlbg6wVPdgpSsxp6PD7SEO4RDhZyUQ=) 2: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: TnO3pGOiHJftQOd6DXKryLv7FvQHNCeG0oziJLeZSbA=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:8c:27:f2:9b:26:a6:bb:73:d5:ef:23:f0:d0:73:1a:76:cb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Jul 22 18:57:36 2025 GMT Not After : Jul 25 19:07:36 2025 GMT Subject: CN=FC0C47CF8E3D6C970366382CDDA2F5B2EE3B7E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:8c:fb:72:dd:ce:31:af:63:35:c9:6a:e0: 65:d5:16:29:0f:4c:a3:7e:f2:20:fc:05:d6:3d:c3: 0c:7a:70:96:c6:78:65:45:43:e6:ae:ab:80:2a:8e: cd:9b:cb:22:f8:00:a9:9a:1d:15:71:e3:c6:e2:42: fe:d3:c5:3f:6c:36:e4:91:35:73:b4:20:4b:b6:e2: d7:81:f7:43:e7:1c:f9:85:de:fd:92:9c:f2:2e:7c: 81:78:24:b6:cc:9c:f3:41:79:f0:32:d3:2c:b5:a4: d9:a8:da:38:88:12:17:8b:89:c5:80:fe:f4:a0:26: c4:76:c1:f9:e5:f5:18:ad:5a:a6:12:3e:0f:c7:61: 69:34:82:2e:27:6f:79:48:43:fc:28:8e:1a:ee:24: 1d:aa:17:2d:57:a1:67:1a:41:b5:95:43:54:95:f8: 4f:75:e7:fc:9e:94:03:da:75:a3:8f:50:03:47:03: 59:be:6b:29:c1:88:3d:a1:3e:da:be:45:1f:33:03: f7:65:c4:17:1c:6f:ec:1f:76:de:3e:05:9c:9e:25: 64:cf:01:d5:ee:22:2c:98:d4:c8:ab:3a:40:ab:59: f5:12:48:e8:0f:ec:ce:00:35:da:72:c1:0a:43:db: 23:6a:4b:83:7b:33:11:9a:44:af:5f:cd:2d:e1:50: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0C:47:CF:8E:3D:6C:97:03:66:38:2C:DD:A2:F5:B2:EE:3B:7E:5D X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:fc:d0:09:3d:49:57:65:7b:fd:ec:47:a2:3c:72:c8:bd: 80:bd:79:4c:51:06:af:6b:82:9b:8a:56:ca:a4:ab:ce:8d:ee: 7a:9e:22:18:4a:3f:9d:6e:80:92:eb:f0:f2:7f:fc:d1:cf:2a: 08:b8:7c:1d:b6:eb:2c:ce:4d:98:b2:5b:cf:f5:4b:9c:66:77: 92:17:78:96:10:f6:98:e5:f5:35:01:cf:83:21:7b:c4:1e:e5: c5:f1:1b:9a:7d:7b:d0:2f:71:c1:54:9b:4e:96:8d:eb:4d:f5: 3e:73:61:da:94:0f:5a:33:41:4a:78:9d:d7:eb:1a:dc:a0:87: 82:dd:36:c5:c5:fa:57:bc:ab:e4:d0:70:11:c0:1d:84:3e:4a: 9b:c2:73:97:96:7a:0a:d2:99:0d:c3:0a:c4:71:bb:2a:81:6b: a9:d4:d0:97:a2:6d:82:aa:d3:75:29:b1:05:db:16:fe:c4:8f: c1:f5:30:aa:06:37:2a:21:f0:54:47:bc:b1:2d:ee:84:bd:34: b8:af:13:f6:b2:fa:f9:d1:18:c5:70:b4:a1:25:2a:a6:d7:ce: a9:ab:85:ed:52:95:0e:9c:c0:0a:b0:3e:a5:1a:c3:d6:70:db: 72:dd:07:bc:3a:92:50:6d:30:8a:42:d8:3e:80:81:21:49:bb: 37:79:3d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawGMJ/KbJqa7c9XvI/DQcxp2y4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTA3MjIxODU3MzZaFw0yNTA3MjUxOTA3MzZaMDMxMTAvBgNV BAMTKEZDMEM0N0NGOEUzRDZDOTcwMzY2MzgyQ0REQTJGNUIyRUUzQjdFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMAYz7ct3OMa9jNclq4GXVFikP TKN+8iD8BdY9wwx6cJbGeGVFQ+auq4Aqjs2byyL4AKmaHRVx48biQv7TxT9sNuSR NXO0IEu24teB90PnHPmF3v2SnPIufIF4JLbMnPNBefAy0yy1pNmo2jiIEheLicWA /vSgJsR2wfnl9RitWqYSPg/HYWk0gi4nb3lIQ/wojhruJB2qFy1XoWcaQbWVQ1SV +E915/yelAPadaOPUANHA1m+aynBiD2hPtq+RR8zA/dlxBccb+wfdt4+BZyeJWTP AdXuIiyY1MirOkCrWfUSSOgP7M4ANdpywQpD2yNqS4N7MxGaRK9fzS3hUKtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AxHz449bJcDZjgs3aL1su47fl0wHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcu/NAJPUlXZXv97EeiPHLIvYC9eUxRBq9r gpuKVsqkq86N7nqeIhhKP51ugJLr8PJ//NHPKgi4fB226yzOTZiyW8/1S5xmd5IX eJYQ9pjl9TUBz4Mhe8Qe5cXxG5p9e9AvccFUm06WjetN9T5zYdqUD1ozQUp4ndfr Gtygh4LdNsXF+le8q+TQcBHAHYQ+SpvCc5eWegrSmQ3DCsRxuyqBa6nU0JeibYKq 03UpsQXbFv7Ej8H1MKoGNyoh8FRHvLEt7oS9NLivE/ay+vnRGMVwtKElKqbXzqmr he1SlQ6cwAqwPqUaw9Zw23LdB7w6klBtMIpC2D6AgSFJuzd5PYQ= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:25 2025 by rpki-client