$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: QUynwvvQSie1e9xzKbiRaX8T4PrwSZzCeMaQMajxn6Y= Subject key identifier: 57:4A:33:DA:AC:FF:2F:06:65:27:0C:07:9A:1B:D8:8F:91:D1:A3:AD Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 18DA989FF7725D79744AF93520C42467F60402D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 04F5 Signing time: Sat 19 Jul 2025 07:11:41 +0000 Manifest this update: Sat 19 Jul 2025 07:06:41 +0000 Manifest next update: Tue 22 Jul 2025 18:04:41 +0000 Files and hashes: 1: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: XCgthdgFQVXgZhXpxamHo4Nu0prJPBdnL+Lmrt7t4ps=) 2: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: jMD6Lig5wfHocMZpxfFkqeTojuNJgjexiji6K2kM9bw=) 3: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=) 5: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:da:98:9f:f7:72:5d:79:74:4a:f9:35:20:c4:24:67:f6:04:02:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Jul 19 07:06:41 2025 GMT Not After : Jul 22 18:04:41 2025 GMT Subject: CN=574A33DAACFF2F0665270C079A1BD88F91D1A3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:73:63:a5:47:42:1d:62:db:f4:05:af:05: 6c:ff:37:a3:33:9a:b0:7c:82:0c:fb:ac:23:97:81: f5:b6:7e:0d:ee:fb:5a:84:65:8e:91:31:4b:91:aa: d9:14:7d:31:b1:f0:da:0d:fc:13:c0:be:fa:a4:cc: a8:59:85:98:5b:4e:42:2d:be:bc:a8:74:26:3a:21: 4b:f1:36:25:39:88:ce:b4:0c:a4:39:bc:bf:1c:4f: c3:a1:b5:f7:32:7d:3f:a6:68:86:04:43:43:44:fd: 98:da:c3:64:57:b3:49:80:88:f5:c2:f3:34:69:26: e3:23:90:59:5e:7e:89:e8:ee:a0:66:e2:1a:ad:4a: 85:17:09:f8:01:5f:39:f1:5f:5e:1b:73:63:80:c8: 41:1c:bf:a3:fd:6a:8f:7e:6b:d0:b7:fc:cb:47:1c: d3:f7:dd:eb:93:c8:c8:70:46:b7:87:a6:75:82:f0: 6a:93:28:5f:19:28:24:e0:cb:3d:65:be:17:30:25: 7d:ac:96:28:38:a1:18:7e:67:71:bf:cf:8a:d8:2a: f5:7e:bc:7f:02:3e:b6:be:49:a1:a8:d2:03:aa:48: d2:e7:84:ad:79:df:39:1c:de:72:2c:06:e0:32:04: 47:90:e3:40:63:70:c5:b6:bc:c2:ff:a7:c4:fe:3e: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:33:DA:AC:FF:2F:06:65:27:0C:07:9A:1B:D8:8F:91:D1:A3:AD X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2f:22:42:56:dc:11:94:16:6b:c8:1e:25:eb:ae:d1:54:ba: 20:6f:a2:73:a6:db:e8:14:a0:10:2f:3b:8b:c1:39:e1:63:7e: e4:1e:ff:1a:b0:5c:56:78:b9:b7:0b:15:d1:2c:74:9a:30:b2: b4:5b:e5:8c:ac:dc:0d:4b:6e:c8:4d:4b:cd:3c:7f:80:58:4a: 59:59:bd:bd:19:3d:41:23:3f:49:23:fa:28:5b:40:1f:07:df: 25:04:1a:47:ed:27:a4:71:63:a8:90:cf:7d:35:9e:d1:a2:a5: 06:56:c7:f7:c6:51:92:cc:55:1e:b2:fe:4b:50:ca:8c:a5:e1: f4:3e:7e:9b:0b:95:55:b9:ff:a7:9b:53:58:69:87:3b:fd:31: e9:68:3d:6c:cc:3a:08:f8:41:1b:60:df:31:52:cd:29:06:24: c3:20:cd:7f:66:5a:da:8e:e4:ce:dd:d9:f4:24:de:a0:15:02: 98:d7:f3:21:5d:19:f3:33:0d:ec:ca:29:6b:30:17:bb:7a:b4: af:c1:e5:d1:64:7f:3d:d5:9c:9a:0a:8f:77:99:49:b1:5e:3f: 93:ab:fc:22:4d:17:60:cc:9a:69:78:cc:bd:bc:6c:2a:54:21: b7:f5:6b:60:66:bf:6a:79:b9:19:c1:24:f0:c8:27:96:e3:a5: db:eb:af:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNqYn/dyXXl0Svk1IMQkZ/YEAtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA3MTkwNzA2NDFaFw0yNTA3MjIxODA0NDFaMDMxMTAvBgNV BAMTKDU3NEEzM0RBQUNGRjJGMDY2NTI3MEMwNzlBMUJEODhGOTFEMUEzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6nNjpUdCHWLb9AWvBWz/N6Mz mrB8ggz7rCOXgfW2fg3u+1qEZY6RMUuRqtkUfTGx8NoN/BPAvvqkzKhZhZhbTkIt vryodCY6IUvxNiU5iM60DKQ5vL8cT8OhtfcyfT+maIYEQ0NE/Zjaw2RXs0mAiPXC 8zRpJuMjkFlefono7qBm4hqtSoUXCfgBXznxX14bc2OAyEEcv6P9ao9+a9C3/MtH HNP33euTyMhwRreHpnWC8GqTKF8ZKCTgyz1lvhcwJX2slig4oRh+Z3G/z4rYKvV+ vH8CPra+SaGo0gOqSNLnhK153zkc3nIsBuAyBEeQ40BjcMW2vML/p8T+PoaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV0oz2qz/LwZlJwwHmhvYj5HRo60wHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkvIkJW3BGUFmvIHiXrrtFUuiBvonOm2+gU oBAvO4vBOeFjfuQe/xqwXFZ4ubcLFdEsdJowsrRb5Yys3A1LbshNS808f4BYSllZ vb0ZPUEjP0kj+ihbQB8H3yUEGkftJ6RxY6iQz301ntGipQZWx/fGUZLMVR6y/ktQ yoyl4fQ+fpsLlVW5/6ebU1hphzv9MeloPWzMOgj4QRtg3zFSzSkGJMMgzX9mWtqO 5M7d2fQk3qAVApjX8yFdGfMzDezKKWswF7t6tK/B5dFkfz3VnJoKj3eZSbFeP5Or /CJNF2DMmml4zL28bCpUIbf1a2Bmv2p5uRnBJPDIJ5bjpdvrrwc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:29 2025 by rpki-client