$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: pc1fou1nX+I7MXqguXEbSy7fIG6BDXZJfIogwR19R+c= Subject key identifier: B7:55:C5:04:53:42:11:A3:97:2B:5A:88:95:7A:4F:8B:C4:62:EF:BC Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 5F31B48581EE00B6EDCBAE10A2A3757E2977E88F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01A5 Signing time: Mon 21 Jul 2025 08:31:10 +0000 Manifest this update: Mon 21 Jul 2025 08:26:10 +0000 Manifest next update: Thu 24 Jul 2025 16:26:10 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: KcWonMBSbsGevHNJZJsCL19ath775WUNuMlG1UGoR5s=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: RgYXWUxCBVufF+BL7Dfb9hVoCpZizx6VvWdk0F4NdDU=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=) 4: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: 6e+H33pzfEfllNdeaANp41NX5R5L9NnZxFFKcixXV+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:31:b4:85:81:ee:00:b6:ed:cb:ae:10:a2:a3:75:7e:29:77:e8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Jul 21 08:26:10 2025 GMT Not After : Jul 24 16:26:10 2025 GMT Subject: CN=B755C504534211A3972B5A88957A4F8BC462EFBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:25:fd:7a:1c:a7:c1:1e:65:71:61:ff:82:aa: 0e:91:a5:46:bd:46:dc:17:42:0c:c8:dc:d1:8a:4e: 33:4f:48:06:67:42:6b:02:8d:ad:55:cf:d6:20:bf: a8:06:dc:07:73:85:0b:5e:6d:bb:59:84:a0:0f:fa: d0:34:1b:b4:fd:6b:6b:8f:e4:92:5a:64:dc:52:eb: 15:9d:97:90:0b:f7:2a:46:56:e5:dd:94:c3:1b:a6: 78:e4:4c:63:5d:2e:01:a7:b6:73:b3:c9:a7:24:35: c2:dc:25:d4:46:79:13:7d:06:f9:fe:cc:4a:79:a7: cd:c7:99:71:4a:e5:e5:0c:0f:ca:b4:d7:8d:24:e5: aa:6a:c5:88:ed:83:a2:13:9f:6c:d5:73:09:39:0f: 0a:a7:7b:6f:2c:af:e4:4a:17:82:8c:ba:e3:17:4a: 1b:12:a0:82:fd:0d:10:2b:3a:ad:d4:71:a3:39:dc: 43:e1:c2:52:f1:70:88:6b:fe:82:0d:84:1b:87:8a: c0:37:7e:22:fc:45:2f:a9:80:29:a7:22:a0:b2:ef: 65:2c:d9:a8:08:48:da:de:45:26:0e:c4:54:6f:e3: 67:a7:41:50:02:1c:d1:81:ea:e5:fe:8f:34:70:8a: f9:6e:f7:6e:e8:27:0e:42:bd:14:72:15:69:44:38: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:55:C5:04:53:42:11:A3:97:2B:5A:88:95:7A:4F:8B:C4:62:EF:BC X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:12:e0:e5:ed:a0:c0:47:65:1e:9d:fa:cf:55:91:f0:73:b2: 21:a6:a3:4a:bf:2a:95:0e:d6:d2:cc:3e:e0:34:d6:98:cf:33: fd:2d:a6:94:f1:d0:f8:72:be:ab:ae:0d:59:ca:46:79:62:29: b4:b4:46:d2:5d:a7:61:2d:9e:34:e0:01:48:8b:54:60:bf:e9: 3a:ed:6a:1e:6e:0c:da:ed:e0:19:0c:8c:f9:4c:b1:c1:2f:0b: 20:f2:32:b6:f3:e1:ac:87:44:ee:da:11:24:78:37:e5:c8:f7: ed:cc:4e:e2:61:93:86:5e:93:65:84:ad:6d:4c:e8:c5:8a:10: c8:1d:70:5e:f3:01:d7:7b:a1:1d:f9:30:35:0a:83:8f:37:98: 8c:51:68:fd:f3:cc:96:49:d3:15:08:90:ea:0b:10:c3:4c:16: 0d:05:5a:5c:5e:70:fa:44:b2:f0:6f:b8:1a:46:97:95:7a:96: 52:d5:42:84:c1:a8:9c:15:72:68:a4:6b:90:a6:29:8f:86:9e: ff:f8:21:c4:26:eb:88:38:e3:34:9c:eb:30:20:0c:3b:1d:c6: 98:d4:55:33:9c:f6:79:e3:77:7c:e0:fb:f7:2c:fe:5e:80:1f: ce:e5:39:73:92:59:b0:90:a2:25:d6:8e:74:9e:a2:da:b5:6a: d3:0a:29:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzG0hYHuALbty64QoqN1fil36I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTA3MjEwODI2MTBaFw0yNTA3MjQxNjI2MTBaMDMxMTAvBgNV BAMTKEI3NTVDNTA0NTM0MjExQTM5NzJCNUE4ODk1N0E0RjhCQzQ2MkVGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Jf16HKfBHmVxYf+Cqg6RpUa9 RtwXQgzI3NGKTjNPSAZnQmsCja1Vz9Ygv6gG3AdzhQtebbtZhKAP+tA0G7T9a2uP 5JJaZNxS6xWdl5AL9ypGVuXdlMMbpnjkTGNdLgGntnOzyackNcLcJdRGeRN9Bvn+ zEp5p83HmXFK5eUMD8q0140k5apqxYjtg6ITn2zVcwk5Dwqne28sr+RKF4KMuuMX ShsSoIL9DRArOq3UcaM53EPhwlLxcIhr/oINhBuHisA3fiL8RS+pgCmnIqCy72Us 2agISNreRSYOxFRv42enQVACHNGB6uX+jzRwivlu927oJw5CvRRyFWlEOJYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt1XFBFNCEaOXK1qIlXpPi8Ri77wwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUS4OXtoMBHZR6d+s9VkfBzsiGmo0q/KpUO 1tLMPuA01pjPM/0tppTx0PhyvquuDVnKRnliKbS0RtJdp2EtnjTgAUiLVGC/6Trt ah5uDNrt4BkMjPlMscEvCyDyMrbz4ayHRO7aESR4N+XI9+3MTuJhk4Zek2WErW1M 6MWKEMgdcF7zAdd7oR35MDUKg483mIxRaP3zzJZJ0xUIkOoLEMNMFg0FWlxecPpE svBvuBpGl5V6llLVQoTBqJwVcmika5CmKY+Gnv/4IcQm64g44zSc6zAgDDsdxpjU VTOc9nnjd3zg+/cs/l6AH87lOXOSWbCQoiXWjnSeotq1atMKKX8= -----END CERTIFICATE-----Generated at Wed Jul 23 02:16:49 2025 by rpki-client