$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: Fz9qgOm/c/bSPR8aTGhS3GlryS0ORoKduy9aF2Cc7lw= Subject key identifier: 07:F3:D7:1B:10:5D:67:43:35:DB:77:1E:F6:89:BA:15:27:F9:99:B5 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 5C300FDCE1EF281818882B01F20A5F112BB6A177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 050B Signing time: Sat 06 Sep 2025 11:31:40 +0000 Manifest this update: Sat 06 Sep 2025 11:26:40 +0000 Manifest next update: Tue 09 Sep 2025 15:10:40 +0000 Files and hashes: 1: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 2: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=) 3: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) 4: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: 8FKmYZrmtjCIeJIY04wfT7UW5HvKkmLQYHDxxXunVFo=) 5: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: XCgthdgFQVXgZhXpxamHo4Nu0prJPBdnL+Lmrt7t4ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:0f:dc:e1:ef:28:18:18:88:2b:01:f2:0a:5f:11:2b:b6:a1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Sep 6 11:26:40 2025 GMT Not After : Sep 9 15:10:40 2025 GMT Subject: CN=07F3D71B105D674335DB771EF689BA1527F999B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:dc:d0:2a:af:8d:84:bb:35:19:02:3b:48: 6a:a5:5c:52:f5:4d:01:e0:74:de:c9:5d:68:37:87: 2e:8f:22:8e:ab:42:37:0d:83:db:59:b0:9e:27:5f: 3f:78:c7:e2:f0:ef:83:ab:6f:26:05:89:64:21:bd: fa:1e:82:67:99:78:bd:25:af:fb:23:a4:42:c4:fa: e6:e3:20:75:bf:10:de:d1:45:74:98:cc:c5:29:22: d0:9a:ff:b1:1a:92:ee:c7:47:4f:f3:48:9d:71:d6: 41:98:31:b0:f5:b9:fe:40:61:b3:18:9e:ec:1e:aa: ef:20:ab:b5:40:db:90:52:c5:e1:91:79:4e:ae:92: 0a:34:79:10:f4:3e:04:a4:b3:fc:37:d7:39:5e:64: 39:80:aa:50:2e:9b:ac:d4:d0:67:7c:c2:40:7f:23: f9:76:18:72:05:36:c9:54:86:1b:23:41:b5:d6:d5: 25:e1:55:44:e5:e0:0e:00:05:88:ec:0b:08:c9:7f: b2:12:89:80:fb:be:2e:71:c0:2e:e0:38:a2:e7:39: af:fc:02:a2:96:e7:f5:42:64:72:14:e1:fa:aa:9c: 02:04:dd:57:81:12:01:43:fc:b4:a0:ce:cf:3f:fb: 91:9e:ff:5b:d8:7a:db:0b:03:fb:7c:97:ef:8b:85: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:D7:1B:10:5D:67:43:35:DB:77:1E:F6:89:BA:15:27:F9:99:B5 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:75:22:a5:ea:c2:52:b9:3c:02:5d:c2:23:13:2d:b8:5b:ad: 1e:26:2c:df:34:44:e3:95:97:01:a4:30:21:68:b1:88:83:45: d4:7c:8e:b9:93:e3:f7:a9:57:c5:e0:e1:cd:7d:4c:fb:c0:02: 51:8d:16:63:7f:9e:11:17:fa:77:3c:aa:e0:bb:cb:9c:c6:3e: eb:99:06:7e:fd:1e:96:4b:7b:33:fb:ed:40:77:c2:d0:f8:4b: f3:67:80:8a:a9:a2:3d:7f:7c:26:83:98:94:38:37:52:70:d8: 7a:1d:52:37:b3:9d:d5:a6:eb:2e:d6:c3:bc:a8:e9:d3:12:31: 87:32:df:a7:f0:c3:31:d8:69:87:0a:0b:03:f5:3d:d1:c9:0d: c9:74:d8:d8:3c:49:47:1d:55:b0:91:76:ee:97:35:f4:61:88: 7b:de:11:4b:d3:6c:88:66:02:0b:c1:9f:6d:ae:f6:f1:fa:93: bd:50:60:4e:2a:88:8b:29:94:7a:8e:78:e0:32:aa:ed:e6:83: c3:c5:6f:80:57:6b:2d:14:25:13:4e:4c:99:00:9c:3b:cc:f2: ca:09:fb:cf:70:13:ae:6a:15:8e:69:1d:e4:31:4e:40:fd:60: 42:eb:37:77:6b:72:0e:2f:b5:78:7b:d1:cc:07:3e:9c:8d:08: d6:a0:2b:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDAP3OHvKBgYiCsB8gpfESu2oXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA5MDYxMTI2NDBaFw0yNTA5MDkxNTEwNDBaMDMxMTAvBgNV BAMTKDA3RjNENzFCMTA1RDY3NDMzNURCNzcxRUY2ODlCQTE1MjdGOTk5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZ9zQKq+NhLs1GQI7SGqlXFL1 TQHgdN7JXWg3hy6PIo6rQjcNg9tZsJ4nXz94x+Lw74OrbyYFiWQhvfoegmeZeL0l r/sjpELE+ubjIHW/EN7RRXSYzMUpItCa/7Eaku7HR0/zSJ1x1kGYMbD1uf5AYbMY nuwequ8gq7VA25BSxeGReU6ukgo0eRD0PgSks/w31zleZDmAqlAum6zU0Gd8wkB/ I/l2GHIFNslUhhsjQbXW1SXhVUTl4A4ABYjsCwjJf7ISiYD7vi5xwC7gOKLnOa/8 AqKW5/VCZHIU4fqqnAIE3VeBEgFD/LSgzs8/+5Ge/1vYetsLA/t8l++LhSirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB/PXGxBdZ0M123ce9om6FSf5mbUwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt1IqXqwlK5PAJdwiMTLbhbrR4mLN80ROOV lwGkMCFosYiDRdR8jrmT4/epV8Xg4c19TPvAAlGNFmN/nhEX+nc8quC7y5zGPuuZ Bn79HpZLezP77UB3wtD4S/NngIqpoj1/fCaDmJQ4N1Jw2HodUjezndWm6y7Ww7yo 6dMSMYcy36fwwzHYaYcKCwP1PdHJDcl02Ng8SUcdVbCRdu6XNfRhiHveEUvTbIhm AgvBn22u9vH6k71QYE4qiIsplHqOeOAyqu3mg8PFb4BXay0UJRNOTJkAnDvM8soJ +89wE65qFY5pHeQxTkD9YELrN3drcg4vtXh70cwHPpyNCNagK10= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:38 2025 by rpki-client