$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: 9e5/yRksonAQSCmo7ixA3W7vmr4vqX/+E5UC781pnLo= Subject key identifier: 74:47:DA:CA:29:2F:68:FA:C1:91:00:BD:F9:3B:EE:A6:57:3B:C2:EF Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 472CAA976A2EA86C38D486EDDC5B27AEBFFC7A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: D8 Signing time: Sat 06 Sep 2025 06:12:04 +0000 Manifest this update: Sat 06 Sep 2025 06:07:04 +0000 Manifest next update: Tue 09 Sep 2025 06:44:04 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) 2: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 3: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) 4: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: 8EHUbBVaopTfYWAbWbij119vte+PKzSZZ91ntx1qZvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2c:aa:97:6a:2e:a8:6c:38:d4:86:ed:dc:5b:27:ae:bf:fc:7a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Sep 6 06:07:04 2025 GMT Not After : Sep 9 06:44:04 2025 GMT Subject: CN=7447DACA292F68FAC19100BDF93BEEA6573BC2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:1b:58:ab:32:c9:bd:84:71:4a:9d:e8:b7: f0:13:1a:15:de:28:4c:f0:f6:d0:83:8c:02:be:9d: 85:37:00:7a:11:aa:1b:11:ae:1d:06:8c:7a:56:c4: b2:6b:b3:d4:3b:89:67:87:58:f2:32:9b:13:5d:fa: e1:3a:6e:bc:ab:b8:c3:90:ff:69:9d:19:15:65:cf: 88:ab:9a:33:94:6d:da:71:83:63:30:da:ca:20:f9: 66:21:c7:13:60:82:3d:45:54:8b:8f:be:61:03:f0: bb:9b:d8:e1:bd:f5:e2:8d:fc:f9:b0:fc:41:a8:b5: 60:44:67:bf:1f:78:6a:87:3a:b5:80:e2:e8:64:1f: 46:5f:70:38:a4:d3:ef:09:94:b6:a1:68:6a:1c:19: 24:4c:59:b7:b6:56:6d:6a:de:34:e8:30:fb:50:e7: 33:e8:f2:a7:d8:81:00:50:a1:0a:9e:69:af:61:d5: 4d:e3:da:b8:88:2c:d6:14:c6:82:3a:f6:18:29:f7: 15:58:a1:6e:24:54:55:0e:8f:79:eb:bd:76:19:05: cc:e1:09:a9:b6:d5:ff:0e:97:a5:91:6e:e3:39:70: 59:43:15:3c:44:ea:cd:eb:a7:32:93:f2:39:23:d7: c2:9b:6b:f2:92:c1:0e:cf:fb:f0:a4:c8:b7:28:6a: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:47:DA:CA:29:2F:68:FA:C1:91:00:BD:F9:3B:EE:A6:57:3B:C2:EF X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:29:59:a5:cb:fe:a4:f2:3b:13:2f:88:94:0b:b7:1d:80:f8: b3:f7:ea:dd:09:b3:67:81:b9:f2:b0:df:88:6f:3b:c3:5a:69: 4d:71:7c:d9:52:46:57:bc:8b:69:9b:4d:50:04:9d:cb:2a:49: 1c:bf:44:a1:98:c7:89:7a:be:28:ac:5b:31:2f:d2:1c:15:7b: 2f:d0:b3:65:51:5e:1c:7a:b5:9f:84:fb:58:8a:d5:69:ef:70: 40:9f:2e:28:1e:d7:30:a7:e4:21:38:d8:93:8a:31:8b:bc:09: b7:88:4a:64:ac:ac:02:04:ab:cf:f1:0b:8f:0a:3a:af:cc:2f: 5c:26:2c:70:52:33:c2:92:4e:3f:2a:11:1a:87:4b:6b:86:0b: de:43:b8:b8:0a:f6:34:fd:05:2d:db:9f:1f:ec:c7:da:25:e3: 01:a2:c8:5c:0b:1c:8d:5e:3c:08:e7:a9:c3:02:b9:eb:1f:fe: fb:91:08:2e:4c:d8:6f:88:75:21:c3:52:06:fd:da:1c:3a:12: 99:a3:c6:72:c4:9a:e0:0b:0b:12:19:40:bf:9a:4f:d6:1a:f2: 93:66:5d:33:51:64:5c:83:0b:7a:b9:50:be:20:32:52:ce:0d: d6:d3:3e:5c:27:bb:4d:17:34:4e:c8:93:24:ce:2c:de:fa:e2: 71:1c:b5:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyyql2ouqGw41Ibt3Fsnrr/8eoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA5MDYwNjA3MDRaFw0yNTA5MDkwNjQ0MDRaMDMxMTAvBgNV BAMTKDc0NDdEQUNBMjkyRjY4RkFDMTkxMDBCREY5M0JFRUE2NTczQkMyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iRtYqzLJvYRxSp3ot/ATGhXe KEzw9tCDjAK+nYU3AHoRqhsRrh0GjHpWxLJrs9Q7iWeHWPIymxNd+uE6bryruMOQ /2mdGRVlz4irmjOUbdpxg2Mw2sog+WYhxxNggj1FVIuPvmED8Lub2OG99eKN/Pmw /EGotWBEZ78feGqHOrWA4uhkH0ZfcDik0+8JlLahaGocGSRMWbe2Vm1q3jToMPtQ 5zPo8qfYgQBQoQqeaa9h1U3j2riILNYUxoI69hgp9xVYoW4kVFUOj3nrvXYZBczh Cam21f8Ol6WRbuM5cFlDFTxE6s3rpzKT8jkj18Kba/KSwQ7P+/CkyLcoavxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEfayikvaPrBkQC9+Tvuplc7wu8wHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwpWaXL/qTyOxMviJQLtx2A+LP36t0Js2eB ufKw34hvO8NaaU1xfNlSRle8i2mbTVAEncsqSRy/RKGYx4l6viisWzEv0hwVey/Q s2VRXhx6tZ+E+1iK1WnvcECfLige1zCn5CE42JOKMYu8CbeISmSsrAIEq8/xC48K Oq/ML1wmLHBSM8KSTj8qERqHS2uGC95DuLgK9jT9BS3bnx/sx9ol4wGiyFwLHI1e PAjnqcMCuesf/vuRCC5M2G+IdSHDUgb92hw6EpmjxnLEmuALCxIZQL+aT9Ya8pNm XTNRZFyDC3q5UL4gMlLODdbTPlwnu00XNE7IkyTOLN764nEctYM= -----END CERTIFICATE-----Generated at Mon Sep 8 08:50:56 2025 by rpki-client