$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: E9qHduLBbsrQAY+Wk0kL5sYw55hkM5N/h7GVZMJR3GM= Subject key identifier: 47:AB:4A:ED:78:73:9B:93:1F:30:87:CF:EB:83:AC:62:AD:75:02:6A Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 4B389DD1F28782CC8E42E47AA3035EE5DEA3F548 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01DB Signing time: Sun 16 Nov 2025 20:41:17 +0000 Manifest this update: Sun 16 Nov 2025 20:36:17 +0000 Manifest next update: Thu 20 Nov 2025 02:29:17 +0000 Files and hashes: 1: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 3: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: NIudtvYP7FfCTbKOXx1hQ8D67TM088uwHU28dYkNwOw=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Nov 2025 02:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:38:9d:d1:f2:87:82:cc:8e:42:e4:7a:a3:03:5e:e5:de:a3:f5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Nov 16 20:36:17 2025 GMT Not After : Nov 20 02:29:17 2025 GMT Subject: CN=47AB4AED78739B931F3087CFEB83AC62AD75026A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:36:75:9d:4c:79:14:b8:91:3e:bc:6b:99:a9: 1e:3b:84:b7:f1:3b:8b:a8:db:9e:2f:6b:ae:70:25: bf:a5:a4:ac:f6:c7:f2:d2:c3:0a:40:fe:ec:83:f5: 9e:5a:34:db:0a:ff:cc:99:85:1b:a8:7c:10:a9:30: 8a:3e:c6:f5:70:c6:1d:dc:00:59:b4:f4:e6:ec:54: 22:03:30:69:86:ea:bd:be:28:eb:fe:b3:7b:b2:6f: 7c:ed:84:34:9a:ea:e8:ac:f1:73:7d:aa:ed:eb:77: 2f:1d:3c:9f:4d:83:58:22:c8:22:82:c3:7f:b4:ec: 36:51:87:42:58:cf:9e:db:9a:49:68:c4:15:a1:80: 9c:35:51:a7:52:ae:6d:6c:70:88:27:c4:c3:37:1f: 95:f4:c2:17:c3:68:38:7d:cb:ce:f6:34:bc:f8:37: 3f:2c:7e:d3:fb:4a:8d:54:d7:eb:79:78:c2:e6:af: 63:d3:7f:9a:a0:7c:29:56:fb:70:97:2e:4e:9c:64: 66:28:8a:d8:9b:2a:f0:c1:43:d5:15:c1:3e:b2:ce: e7:51:8e:95:9c:ef:71:52:99:9a:85:13:a1:1c:57: 52:76:ec:1c:a1:f1:3e:5c:ad:fd:ca:14:56:5d:77: fd:b6:47:a7:9c:e7:33:f3:61:d2:09:3e:05:fa:f2: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:4A:ED:78:73:9B:93:1F:30:87:CF:EB:83:AC:62:AD:75:02:6A X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:79:68:b7:78:88:23:da:b0:c7:5c:66:c4:8d:ab:8f:bf:b0: 26:84:0a:34:45:26:1d:f7:bb:cd:3d:69:ca:cf:04:79:04:4e: e3:5b:ab:4e:1d:53:09:ee:b3:bf:19:af:28:b5:2f:6c:bb:86: c5:b3:80:e6:f1:2a:19:e2:cf:bc:4f:b6:13:a5:12:47:02:68: 43:a5:2e:e5:08:9c:0b:63:7c:c2:b5:7e:05:20:8f:56:7e:e4: 56:ee:94:92:be:c3:06:09:da:b8:4a:c8:6f:16:2a:8b:69:01: 27:f1:23:9c:7b:c4:3c:01:46:b5:d5:e7:17:f3:80:78:9b:8d: bf:aa:db:3a:1d:9b:93:19:92:0a:25:54:67:4e:c2:f9:60:3d: 63:ed:30:ab:0c:87:d0:7a:d9:5e:c0:61:2d:6b:2f:20:f5:f9: 51:cc:6f:96:74:9a:c6:93:9b:1c:95:2f:b9:35:df:82:b7:cf: 8b:af:4d:92:52:0b:06:46:24:5a:54:6a:1a:88:06:9f:72:1a: 71:36:b0:61:c3:ac:40:46:79:b6:af:96:d5:cc:cc:1b:85:07: 1c:01:9a:cc:43:dc:80:28:d1:a8:89:6e:1a:26:2b:01:93:73: c4:07:e7:30:c6:a1:a9:35:ea:e6:de:8c:d0:61:57:3f:59:b3: c1:7c:e3:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzid0fKHgsyOQuR6owNe5d6j9UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTExMTYyMDM2MTdaFw0yNTExMjAwMjI5MTdaMDMxMTAvBgNV BAMTKDQ3QUI0QUVENzg3MzlCOTMxRjMwODdDRkVCODNBQzYyQUQ3NTAyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNnWdTHkUuJE+vGuZqR47hLfx O4uo254va65wJb+lpKz2x/LSwwpA/uyD9Z5aNNsK/8yZhRuofBCpMIo+xvVwxh3c AFm09ObsVCIDMGmG6r2+KOv+s3uyb3zthDSa6uis8XN9qu3rdy8dPJ9Ng1giyCKC w3+07DZRh0JYz57bmkloxBWhgJw1UadSrm1scIgnxMM3H5X0whfDaDh9y872NLz4 Nz8sftP7So1U1+t5eMLmr2PTf5qgfClW+3CXLk6cZGYoitibKvDBQ9UVwT6yzudR jpWc73FSmZqFE6EcV1J27Byh8T5crf3KFFZdd/22R6ec5zPzYdIJPgX68n+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR6tK7Xhzm5MfMIfP64OsYq11AmowHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ5aLd4iCPasMdcZsSNq4+/sCaECjRFJh33 u809acrPBHkETuNbq04dUwnus78Zryi1L2y7hsWzgObxKhniz7xPthOlEkcCaEOl LuUInAtjfMK1fgUgj1Z+5FbulJK+wwYJ2rhKyG8WKotpASfxI5x7xDwBRrXV5xfz gHibjb+q2zodm5MZkgolVGdOwvlgPWPtMKsMh9B62V7AYS1rLyD1+VHMb5Z0msaT mxyVL7k134K3z4uvTZJSCwZGJFpUahqIBp9yGnE2sGHDrEBGebavltXMzBuFBxwB msxD3IAo0aiJbhomKwGTc8QH5zDGoak16ubejNBhVz9Zs8F84xQ= -----END CERTIFICATE-----Generated at Mon Nov 17 12:04:14 2025 by rpki-client