$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: wyVCXrp+q/bcT4CH10Dp/kyoqLrAaZ8XKkcTw+LSMMg= Subject key identifier: 3B:E1:96:0D:9B:EA:F8:13:C4:D2:BD:FA:63:51:D0:40:70:0E:01:C7 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 7BF70A1C04AE4C2997A07EE12AE24D100AB8EEB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 04E1 Signing time: Wed 04 Jun 2025 08:21:39 +0000 Manifest this update: Wed 04 Jun 2025 08:16:39 +0000 Manifest next update: Sat 07 Jun 2025 17:31:39 +0000 Files and hashes: 1: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: XCgthdgFQVXgZhXpxamHo4Nu0prJPBdnL+Lmrt7t4ps=) 2: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 3: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) 4: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: 249pHyUPiubjvkbl9mAFBUwm/fo6grStnxbGPwoJlKA=) 5: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: Qv1tc+1BNpqIaBHZM2YNybHF0+xA/UHUteSmAreAcco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f7:0a:1c:04:ae:4c:29:97:a0:7e:e1:2a:e2:4d:10:0a:b8:ee:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Jun 4 08:16:39 2025 GMT Not After : Jun 7 17:31:39 2025 GMT Subject: CN=3BE1960D9BEAF813C4D2BDFA6351D040700E01C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:cc:6c:a3:52:79:21:01:3a:31:79:15:1e: fd:ef:5f:43:ab:2f:9c:80:db:7b:46:a7:20:7a:c7: c7:87:c2:0e:b1:29:d3:19:03:2e:06:48:cf:56:13: 58:67:6e:f8:b1:05:8a:cb:2e:1b:53:b9:b7:d2:20: 2f:ed:0e:7e:85:10:15:eb:88:20:a6:cd:47:57:c7: 33:13:1c:5c:9d:04:0e:ce:5e:ca:fa:59:21:9f:af: 78:3e:67:dd:12:5a:22:ac:bc:bc:d6:00:fc:b3:78: 86:a5:e0:90:d8:bc:3d:55:92:15:7c:cb:2b:02:c0: 48:ac:b2:af:b4:ff:40:0f:2b:0a:28:6d:81:ac:20: ca:86:28:10:0f:c5:12:66:db:ce:65:6f:e3:93:a2: bf:ca:77:76:6e:56:1d:de:ff:84:c6:29:5f:ae:3d: c7:01:50:5b:69:aa:5b:30:30:77:1a:71:a8:bd:bc: 91:2f:75:08:b7:32:c1:df:89:b0:f7:23:b2:ba:2a: 47:10:f6:9f:8d:0f:3b:bc:b2:32:6b:af:1a:ff:9b: 89:28:83:71:ce:0f:13:ba:1a:16:7c:c7:64:8b:d9: 2d:72:7d:d6:fc:13:a7:2f:32:d5:46:c0:0f:c8:81: 3d:a3:92:c3:83:e3:2d:ed:c0:e0:ff:28:11:70:81: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:96:0D:9B:EA:F8:13:C4:D2:BD:FA:63:51:D0:40:70:0E:01:C7 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7f:5a:f3:de:99:49:c7:3c:0a:ec:3c:4d:dc:db:2e:fa:8a: 36:57:eb:fa:44:27:30:00:66:fb:d5:92:36:05:23:b7:c7:07: fc:25:0f:22:da:51:ea:2d:b9:3c:bb:5b:e8:ce:c9:e0:b7:bf: 77:39:33:35:50:d3:19:20:9e:97:41:ad:51:ff:c3:6e:da:a9: 08:a4:41:1d:99:30:07:81:1e:0f:09:f1:b8:2f:3b:81:28:2f: 72:71:36:27:5c:95:1a:7c:d1:2e:b0:4b:05:03:99:a2:dd:0b: 88:2f:b9:db:28:4a:7b:66:91:cf:0c:43:0a:26:70:e9:7f:7a: d0:ea:88:dc:62:2e:ff:a8:b4:59:6f:00:fa:86:48:e5:5f:bd: 2f:a5:27:78:65:de:00:4c:18:70:93:78:ac:d0:b2:5e:e5:17: d4:3a:a1:0a:10:13:19:9a:04:f0:35:4f:88:02:9f:9c:df:c2: 91:63:b2:06:9d:2e:74:04:92:9d:b8:f9:67:3d:de:74:d0:97: b4:75:62:94:82:d5:8b:cc:d9:4e:15:a7:e0:d4:cd:22:95:e1: a4:fa:d5:8d:c4:da:2e:1f:ea:49:a1:7e:95:f6:77:a3:86:ad: 1a:73:06:19:a4:c8:c4:05:e1:c5:a8:36:5f:af:63:ee:44:1d: aa:74:bb:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/cKHASuTCmXoH7hKuJNEAq47rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA2MDQwODE2MzlaFw0yNTA2MDcxNzMxMzlaMDMxMTAvBgNV BAMTKDNCRTE5NjBEOUJFQUY4MTNDNEQyQkRGQTYzNTFEMDQwNzAwRTAxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyMxso1J5IQE6MXkVHv3vX0Or L5yA23tGpyB6x8eHwg6xKdMZAy4GSM9WE1hnbvixBYrLLhtTubfSIC/tDn6FEBXr iCCmzUdXxzMTHFydBA7OXsr6WSGfr3g+Z90SWiKsvLzWAPyzeIal4JDYvD1VkhV8 yysCwEissq+0/0APKwoobYGsIMqGKBAPxRJm285lb+OTor/Kd3ZuVh3e/4TGKV+u PccBUFtpqlswMHcacai9vJEvdQi3MsHfibD3I7K6KkcQ9p+NDzu8sjJrrxr/m4ko g3HODxO6GhZ8x2SL2S1yfdb8E6cvMtVGwA/IgT2jksOD4y3twOD/KBFwgYmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+GWDZvq+BPE0r36Y1HQQHAOAccwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJR/WvPemUnHPArsPE3c2y76ijZX6/pEJzAA ZvvVkjYFI7fHB/wlDyLaUeotuTy7W+jOyeC3v3c5MzVQ0xkgnpdBrVH/w27aqQik QR2ZMAeBHg8J8bgvO4EoL3JxNidclRp80S6wSwUDmaLdC4gvudsoSntmkc8MQwom cOl/etDqiNxiLv+otFlvAPqGSOVfvS+lJ3hl3gBMGHCTeKzQsl7lF9Q6oQoQExma BPA1T4gCn5zfwpFjsgadLnQEkp24+Wc93nTQl7R1YpSC1YvM2U4Vp+DUzSKV4aT6 1Y3E2i4f6kmhfpX2d6OGrRpzBhmkyMQF4cWoNl+vY+5EHap0uyI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:02 2025 by rpki-client