$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: j5lLwzekeTRSnONXq5nKOY4ENf6efxbzEYFcs5IC2uQ= Subject key identifier: D3:A7:BF:1B:BF:9E:98:18:B0:46:01:70:6F:67:68:9F:D1:A1:29:A8 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 7050D5D92285878FECBBC7E6EEA4C8B0EC709947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: C4 Signing time: Tue 22 Jul 2025 23:42:04 +0000 Manifest this update: Tue 22 Jul 2025 23:37:04 +0000 Manifest next update: Sat 26 Jul 2025 10:51:04 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313533333237.roa (hash: 5kV5IEGJemDrX4dTRJGFiitWDS9Xn5xZMjop2LDovbk=) 2: 3135372e36362e3132392e302f32342d3234203d3e20313533333237.roa (hash: p8eJ4FMHWvRfEme3JAT+m3Y/gwkNkodHiOYxvIrDdWQ=) 3: 3135372e36362e3132382e302f32332d3234203d3e20313532373531.roa (hash: 705Tii5x7S14LtQKPH8/q3tF4NH3B5/oStv9EoIsYwk=) 4: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: OjtgzYQPeezA5u0OPX+9QL3qoAaakBg69xom6FRsSj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:50:d5:d9:22:85:87:8f:ec:bb:c7:e6:ee:a4:c8:b0:ec:70:99:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Jul 22 23:37:04 2025 GMT Not After : Jul 26 10:51:04 2025 GMT Subject: CN=D3A7BF1BBF9E9818B04601706F67689FD1A129A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:29:b8:2d:49:2c:2a:bd:72:a3:23:0e:6f: a9:93:30:49:58:a4:a7:db:1f:46:05:c5:65:54:79: 31:d3:f1:5a:ae:47:fb:c8:8b:91:68:6b:7f:8e:84: c6:21:bc:5a:c0:8e:e8:cc:3a:73:3d:9a:fe:10:c3: 16:98:7e:ed:69:78:66:86:dc:5d:ca:45:01:53:e8: bd:84:c9:76:05:db:12:c5:1b:33:20:c0:8d:4c:b5: 76:60:e4:73:ae:c0:60:70:5f:24:ec:df:f5:70:36: e0:c7:9f:46:0d:85:ec:62:52:36:32:a7:99:18:f9: fd:ec:69:27:26:21:2b:cf:54:54:ec:f6:a4:83:49: a1:d6:f3:fe:d9:a8:96:41:d8:b4:e3:f1:f2:30:e2: 3a:3b:13:66:08:65:78:d0:e6:82:60:51:56:f3:d9: 01:e9:b3:ee:4e:73:63:94:2d:eb:16:2e:92:a4:93: c8:75:df:42:cb:10:4f:c3:da:02:0c:91:43:33:5b: ec:f6:f3:27:9d:b5:af:ef:c2:3b:9c:ab:2c:ee:b8: 84:a3:45:74:a0:85:b4:35:62:22:d4:09:ae:31:b1: 3f:c4:60:6c:2c:1d:14:78:5c:50:5f:c5:0f:f6:b3: d6:60:3c:0c:2d:13:78:dd:28:60:c3:4d:e2:18:f0: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:BF:1B:BF:9E:98:18:B0:46:01:70:6F:67:68:9F:D1:A1:29:A8 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:37:5c:25:4a:af:cc:83:cc:65:87:5e:ea:9d:23:fb:99:78: 48:3f:ec:3a:18:c4:b7:5e:57:02:69:43:65:d9:6d:39:a4:9c: ad:01:29:8c:fe:6a:9b:cb:57:6a:cd:26:41:6f:98:a9:02:4d: 51:89:be:e9:5b:5c:f0:c5:37:f2:14:30:d1:10:8c:d6:bc:0c: 88:cd:c1:78:a5:0a:a1:53:59:bd:17:69:23:94:97:b1:36:f4: 7d:83:84:9b:c9:62:7d:e7:f3:52:f6:99:4f:e1:e0:69:72:4f: d5:aa:11:ec:24:26:61:3f:9e:ef:e9:21:42:8b:d8:e4:c2:e8: 18:48:b6:4b:f6:3b:02:5d:2e:a8:7e:24:a5:46:49:28:60:89: a7:96:2f:61:9a:df:d9:59:1b:62:3f:d6:48:76:3b:e2:f2:f1: d2:e4:e5:6d:7e:f7:ce:b5:af:f8:b2:e8:c4:ee:e7:fd:76:ee: e5:63:2f:80:e9:3a:d4:51:0c:38:2a:f4:2a:e5:3a:ed:4e:59: 20:53:d4:a0:2e:a4:48:f2:0e:4d:43:74:14:19:0c:37:e4:c4: a2:8a:18:ae:5a:b1:be:f0:f4:69:e2:d8:e1:8e:51:df:fc:46: 10:67:8a:1c:22:61:4d:d5:02:33:64:f8:bd:3f:d5:b5:ef:23: be:c6:d4:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFDV2SKFh4/su8fm7qTIsOxwmUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTA3MjIyMzM3MDRaFw0yNTA3MjYxMDUxMDRaMDMxMTAvBgNV BAMTKEQzQTdCRjFCQkY5RTk4MThCMDQ2MDE3MDZGNjc2ODlGRDFBMTI5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2ym4LUksKr1yoyMOb6mTMElY pKfbH0YFxWVUeTHT8VquR/vIi5Foa3+OhMYhvFrAjujMOnM9mv4QwxaYfu1peGaG 3F3KRQFT6L2EyXYF2xLFGzMgwI1MtXZg5HOuwGBwXyTs3/VwNuDHn0YNhexiUjYy p5kY+f3saScmISvPVFTs9qSDSaHW8/7ZqJZB2LTj8fIw4jo7E2YIZXjQ5oJgUVbz 2QHps+5Oc2OULesWLpKkk8h130LLEE/D2gIMkUMzW+z28yedta/vwjucqyzuuISj RXSghbQ1YiLUCa4xsT/EYGwsHRR4XFBfxQ/2s9ZgPAwtE3jdKGDDTeIY8J2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06e/G7+emBiwRgFwb2don9GhKagwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY3XCVKr8yDzGWHXuqdI/uZeEg/7DoYxLde VwJpQ2XZbTmknK0BKYz+apvLV2rNJkFvmKkCTVGJvulbXPDFN/IUMNEQjNa8DIjN wXilCqFTWb0XaSOUl7E29H2DhJvJYn3n81L2mU/h4GlyT9WqEewkJmE/nu/pIUKL 2OTC6BhItkv2OwJdLqh+JKVGSShgiaeWL2Ga39lZG2I/1kh2O+Ly8dLk5W1+9861 r/iy6MTu5/127uVjL4DpOtRRDDgq9CrlOu1OWSBT1KAupEjyDk1DdBQZDDfkxKKK GK5asb7w9Gni2OGOUd/8RhBnihwiYU3VAjNk+L0/1bXvI77G1FU= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:07 2025 by rpki-client