$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft File: 63A008B749DB87C773CA05C5DF448BCA5357BB01.mft (raw, json) Hash identifier: fvwRvaIyBTQRI5FuGodmXJ1+MeLITidA7/jEAZkheeI= Subject key identifier: 47:2B:02:A0:DD:6E:B3:E8:E8:86:4D:FE:B2:43:3B:6B:7A:D3:37:B1 Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 Certificate issuer: /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Certificate serial: 1BA9606E2F16479ECB6E2BC9062946EFDC67FF40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft Manifest number: 02E8 Signing time: Tue 03 Jun 2025 09:14:19 +0000 Manifest this update: Tue 03 Jun 2025 09:09:19 +0000 Manifest next update: Fri 06 Jun 2025 10:15:19 +0000 Files and hashes: 1: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: P2SyqVIoFssBDcsUlALbhalkUZjg/54jTK6wq0SkiFI=) 2: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: yxKrPiSsf1x5fhpWy+3L9JKkG9LRwdglgLtEp+FGlHU=) 3: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: EERLWaOHC5VXDNTFDWjn9rENNRdpY5J1dQtTcb9ghR8=) 4: 63A008B749DB87C773CA05C5DF448BCA5357BB01.crl (hash: Ha/qyLhVkpP70jXgMHeDK84bvmGsJaAV9eEv1HfYjpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 10:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a9:60:6e:2f:16:47:9e:cb:6e:2b:c9:06:29:46:ef:dc:67:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Validity Not Before: Jun 3 09:09:19 2025 GMT Not After : Jun 6 10:15:19 2025 GMT Subject: CN=472B02A0DD6EB3E8E8864DFEB2433B6B7AD337B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:25:60:83:11:52:d7:8b:0b:d5:c6:b3:54:ca: 5b:ba:9d:44:f6:a6:a3:41:af:2e:55:cc:4c:0c:26: 24:a7:05:7a:d4:26:38:8c:56:f0:14:a3:11:fb:f8: c4:cb:6c:c0:a8:41:d6:c0:50:58:b8:a5:f6:c0:60: a8:50:be:8c:f8:7c:69:81:73:e1:02:8d:1d:ca:27: 8b:45:63:4d:40:0d:e6:4d:f7:1d:4e:ad:1f:2b:b9: 02:27:3a:51:5c:75:49:57:bb:37:6f:a3:c1:d5:46: 8a:2d:f6:c6:0b:0a:77:15:0f:5b:77:36:fb:42:6e: 7e:3b:e2:08:56:4b:f1:b2:50:12:80:47:f9:33:6a: 19:82:1d:35:ae:3d:d7:41:77:3e:39:a7:58:91:18: 59:2b:d5:f8:eb:07:fe:45:dd:14:bb:eb:d0:96:88: b3:b8:bb:7c:a1:5f:64:32:b9:eb:f1:a2:37:c9:d8: 14:19:19:cf:ee:ca:ec:46:98:48:85:86:f5:50:b4: 23:94:b4:5e:48:9f:a0:d0:d6:20:db:b3:9a:22:48: 07:4b:c3:a0:b8:30:51:5b:28:c6:1f:89:18:51:b4: c0:04:25:ca:0d:cb:31:6c:6e:68:f1:9e:6e:88:9e: 61:46:3f:cf:0d:16:ca:5b:7e:73:e3:d5:01:16:20: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2B:02:A0:DD:6E:B3:E8:E8:86:4D:FE:B2:43:3B:6B:7A:D3:37:B1 X509v3 Authority Key Identifier: keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fc:f7:c5:47:66:6a:9f:a4:e4:78:6c:c3:63:b1:e4:04:7a: 58:e5:12:2f:1e:9e:d3:18:6f:a0:81:b9:95:3a:d2:fd:2d:72: a6:09:b6:63:d5:31:d6:09:99:89:43:d6:51:42:52:a5:36:19: b3:d8:54:ca:98:b4:ed:b4:8c:2b:2e:70:62:fb:2f:57:a1:2b: 10:67:94:ea:56:42:5b:ef:39:af:eb:3c:16:4a:53:2b:29:9a: 80:db:c2:40:00:11:0f:5a:48:f7:c9:da:2f:8a:ee:ec:48:bb: c1:46:9c:bd:4d:65:19:b8:3b:40:4d:a4:5c:1b:a1:5e:5f:34: 46:55:bb:9f:2c:5f:f6:b7:ec:96:2a:14:86:98:00:8e:5a:7e: ce:28:b2:05:67:cc:f1:6b:9f:63:70:00:21:ed:79:60:23:06: 10:8b:00:08:d0:0a:a9:4f:65:66:5b:57:f4:ff:65:b1:87:2e: ce:9b:7e:33:71:a0:80:7e:26:c8:4a:3d:38:ba:b3:02:ae:8d: 55:4b:4c:9b:6b:33:cc:05:e3:ca:b6:3b:09:72:16:e6:38:71: fc:45:c0:be:e6:6d:38:e0:f2:74:86:e1:f4:77:3f:d5:1f:b4: 49:9b:46:87:f0:03:8c:df:89:41:bd:d1:41:c9:3b:49:a8:d0: e7:f2:1e:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6lgbi8WR57LbivJBilG79xn/0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1 MzU3QkIwMTAeFw0yNTA2MDMwOTA5MTlaFw0yNTA2MDYxMDE1MTlaMDMxMTAvBgNV BAMTKDQ3MkIwMkEwREQ2RUIzRThFODg2NERGRUIyNDMzQjZCN0FEMzM3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJWCDEVLXiwvVxrNUylu6nUT2 pqNBry5VzEwMJiSnBXrUJjiMVvAUoxH7+MTLbMCoQdbAUFi4pfbAYKhQvoz4fGmB c+ECjR3KJ4tFY01ADeZN9x1OrR8ruQInOlFcdUlXuzdvo8HVRoot9sYLCncVD1t3 NvtCbn474ghWS/GyUBKAR/kzahmCHTWuPddBdz45p1iRGFkr1fjrB/5F3RS769CW iLO4u3yhX2QyuevxojfJ2BQZGc/uyuxGmEiFhvVQtCOUtF5In6DQ1iDbs5oiSAdL w6C4MFFbKMYfiRhRtMAEJcoNyzFsbmjxnm6InmFGP88NFspbfnPj1QEWIFwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURysCoN1us+johk3+skM7a3rTN7EwHwYDVR0j BBgwFoAUY6AIt0nbh8dzygXF30SLylNXuwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWY5MDAyZC05MjY3LTRmOGItODU5YS1kZmE3ZDg5MTQzYjQvMC82M0EwMDhCNzQ5 REI4N0M3NzNDQTA1QzVERjQ0OEJDQTUzNTdCQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1MzU3 QkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmOTAwMmQtOTI2Ny00ZjhiLTg1 OWEtZGZhN2Q4OTE0M2I0LzAvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhC Q0E1MzU3QkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT898VHZmqfpOR4bMNjseQEeljlEi8entMY b6CBuZU60v0tcqYJtmPVMdYJmYlD1lFCUqU2GbPYVMqYtO20jCsucGL7L1ehKxBn lOpWQlvvOa/rPBZKUyspmoDbwkAAEQ9aSPfJ2i+K7uxIu8FGnL1NZRm4O0BNpFwb oV5fNEZVu58sX/a37JYqFIaYAI5afs4osgVnzPFrn2NwACHteWAjBhCLAAjQCqlP ZWZbV/T/ZbGHLs6bfjNxoIB+JshKPTi6swKujVVLTJtrM8wF48q2OwlyFuY4cfxF wL7mbTjg8nSG4fR3P9UftEmbRofwA4zfiUG90UHJO0mo0OfyHjs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:31 2025 by rpki-client