$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: fQ88iiE9E901G7im92JWFBSRT1sEIPdAZjMU2CHl50M= Subject key identifier: DE:E1:20:11:F3:E4:27:2C:A8:C9:6B:A7:74:A1:8E:AC:59:6A:BC:68 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 518CAA8E870AF9AF5D501DFEDE2ABE16AAAA8AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 04CD Signing time: Sat 06 Sep 2025 18:11:44 +0000 Manifest this update: Sat 06 Sep 2025 18:06:44 +0000 Manifest next update: Wed 10 Sep 2025 05:54:44 +0000 Files and hashes: 1: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=) 2: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: GAzug/4lTTaUbgV56eFOWmTuQKN1hDhvGP95Z5i0BwA=) 3: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8c:aa:8e:87:0a:f9:af:5d:50:1d:fe:de:2a:be:16:aa:aa:8a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Sep 6 18:06:44 2025 GMT Not After : Sep 10 05:54:44 2025 GMT Subject: CN=DEE12011F3E4272CA8C96BA774A18EAC596ABC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:38:51:f8:93:83:ce:b4:60:7b:d0:9a:f6: 14:e8:63:f1:ab:cf:3b:fe:ff:27:c6:53:cf:6e:d3: 73:35:0a:42:6f:88:da:85:7b:61:bc:cc:4a:0f:27: ae:c7:de:c8:a7:da:d4:93:19:88:3e:3e:ee:ae:d8: 9c:28:59:4d:04:3b:f7:47:f2:88:e5:29:53:72:ee: 53:4a:4f:4c:a3:cc:e0:10:12:3b:69:8b:e7:30:71: 20:dd:bb:85:e2:49:37:9f:91:01:aa:2d:6d:9a:24: d9:92:df:d2:13:88:3f:b6:67:63:6f:16:4d:37:07: 92:ba:41:b7:03:cc:85:16:3e:b7:d0:f5:4f:0c:51: 1b:ef:5f:31:91:7d:26:e5:83:5c:8e:f9:a1:4e:32: 5f:b2:25:1b:81:88:ad:ac:cb:f2:ab:d0:89:ec:f6: 08:e2:81:82:10:85:40:d2:10:43:d7:d1:f1:03:68: c0:74:6e:ad:20:25:b6:ed:c6:f0:67:29:8f:c3:58: 04:5c:d7:ff:29:1d:2b:75:4b:4b:64:0b:aa:20:91: 7e:97:b6:61:67:b9:44:b0:7f:9e:b9:66:e1:78:d2: 99:49:ba:b1:dd:47:8a:2e:8d:f7:74:87:9d:e8:a4: f5:c2:da:6d:27:89:7d:57:6a:0b:b0:5d:74:af:a3: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E1:20:11:F3:E4:27:2C:A8:C9:6B:A7:74:A1:8E:AC:59:6A:BC:68 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c3:f7:ca:8e:64:09:cf:e2:cc:63:b3:7e:83:7d:7a:42:89: cc:9a:09:fa:58:d5:88:4a:2b:74:89:7d:bf:cc:06:8b:f9:0b: 29:e3:74:a8:1c:2a:6a:8a:26:20:97:82:c4:9b:65:58:26:0c: 0d:2b:32:0b:22:9c:18:23:a6:51:f7:c7:4e:cd:6a:9f:5e:52: 60:fa:37:10:c4:a5:d2:6a:8b:5d:27:ec:e2:e8:24:e5:24:11: 39:c9:6d:6c:09:a0:29:e6:50:ca:6b:03:5c:82:2a:e4:f8:fe: 7a:b1:2a:fd:5d:ed:cc:e5:a1:21:e5:03:ad:c6:d2:b3:25:45: c9:59:ce:fc:03:75:bd:89:13:6e:1c:1a:b3:7b:14:82:ad:d3: ad:34:25:50:06:7c:f8:8a:ec:90:2f:8d:4f:50:ed:e7:f0:0d: 11:3b:66:63:3b:c3:51:c1:5a:2b:48:4f:fc:0d:ba:1c:9c:75: 34:54:99:ae:1a:62:e2:27:c4:53:2c:df:06:bc:bc:d5:d0:25: 17:2f:1e:7d:ee:16:65:24:85:f6:25:00:c1:33:7c:6a:53:f1: b2:6b:d8:cb:7b:7e:8e:0b:c5:19:40:b7:5d:76:7b:1d:34:cd: e1:67:0f:b1:6f:2f:49:94:9f:a8:79:d8:94:19:de:68:5c:22: 7c:9c:0a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYyqjocK+a9dUB3+3iq+FqqqiqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTA5MDYxODA2NDRaFw0yNTA5MTAwNTU0NDRaMDMxMTAvBgNV BAMTKERFRTEyMDExRjNFNDI3MkNBOEM5NkJBNzc0QTE4RUFDNTk2QUJDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrDhR+JODzrRge9Ca9hToY/Gr zzv+/yfGU89u03M1CkJviNqFe2G8zEoPJ67H3sin2tSTGYg+Pu6u2JwoWU0EO/dH 8ojlKVNy7lNKT0yjzOAQEjtpi+cwcSDdu4XiSTefkQGqLW2aJNmS39ITiD+2Z2Nv Fk03B5K6QbcDzIUWPrfQ9U8MURvvXzGRfSblg1yO+aFOMl+yJRuBiK2sy/Kr0Ins 9gjigYIQhUDSEEPX0fEDaMB0bq0gJbbtxvBnKY/DWARc1/8pHSt1S0tkC6ogkX6X tmFnuUSwf565ZuF40plJurHdR4oujfd0h53opPXC2m0niX1XaguwXXSvoz17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3uEgEfPkJyyoyWundKGOrFlqvGgwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPD98qOZAnP4sxjs36DfXpCicyaCfpY1YhK K3SJfb/MBov5CynjdKgcKmqKJiCXgsSbZVgmDA0rMgsinBgjplH3x07Nap9eUmD6 NxDEpdJqi10n7OLoJOUkETnJbWwJoCnmUMprA1yCKuT4/nqxKv1d7czloSHlA63G 0rMlRclZzvwDdb2JE24cGrN7FIKt0600JVAGfPiK7JAvjU9Q7efwDRE7ZmM7w1HB WitIT/wNuhycdTRUma4aYuInxFMs3wa8vNXQJRcvHn3uFmUkhfYlAMEzfGpT8bJr 2Mt7fo4LxRlAt112ex00zeFnD7FvL0mUn6h52JQZ3mhcInycCq8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:09 2025 by rpki-client