$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: X6gC+2n+1kE30ynC9xbEHoL4uYQdonX7c+6hkxpuw2Y= Subject key identifier: A1:49:BB:0A:03:1C:7F:56:D9:4E:1D:7D:0C:A2:81:BA:FF:D4:3F:39 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 03EFBB1A76806522A0E864F1F239EDBEA726086F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 018F Signing time: Sun 01 Jun 2025 16:31:10 +0000 Manifest this update: Sun 01 Jun 2025 16:26:10 +0000 Manifest next update: Wed 04 Jun 2025 23:04:10 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: KcWonMBSbsGevHNJZJsCL19ath775WUNuMlG1UGoR5s=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: RgYXWUxCBVufF+BL7Dfb9hVoCpZizx6VvWdk0F4NdDU=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=) 4: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: nd/CvPeNLRxW58zSSIhEGQUd1VvrbddzAxWc4ixiUe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 23:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ef:bb:1a:76:80:65:22:a0:e8:64:f1:f2:39:ed:be:a7:26:08:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Jun 1 16:26:10 2025 GMT Not After : Jun 4 23:04:10 2025 GMT Subject: CN=A149BB0A031C7F56D94E1D7D0CA281BAFFD43F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:72:1b:f7:72:e6:9a:a9:a4:29:53:01:78: f9:b4:3b:69:33:a2:71:3e:54:32:63:f6:56:fa:1e: b6:be:48:a2:fb:23:0d:31:78:68:99:79:15:69:e1: 75:b3:81:bd:ba:60:ea:9b:20:f1:32:8c:db:96:41: 5f:35:7c:98:1d:57:b0:36:1e:3a:39:80:a8:59:bb: 52:04:6e:f7:a2:22:3d:0b:de:3a:7d:77:7a:43:9a: 2b:48:4d:35:19:f3:c9:00:bd:7e:73:33:0c:56:d6: b0:0e:9f:12:dc:fd:e2:a0:15:fd:76:3f:e4:48:b0: 4e:a8:c9:08:fc:ab:11:86:a9:db:ae:ef:85:89:7e: 35:1c:99:53:fc:7e:f7:8e:99:ec:3f:21:07:08:2e: ee:49:1c:0e:48:59:7f:18:e3:9c:ac:20:75:05:8a: 26:c4:ee:57:55:89:5f:fd:11:2f:b2:33:39:9d:4b: 2c:35:85:3e:4c:3f:41:cb:43:4f:37:44:7f:cc:d9: 26:36:d6:9d:26:1b:d7:f5:9c:8f:d7:e5:f2:a8:de: ef:e3:51:c4:a6:9f:95:85:c3:90:9f:a8:57:ec:97: 49:bc:65:11:cc:c2:b9:9f:6c:b8:e5:57:db:3d:9f: 21:42:6a:64:c5:86:67:e0:02:e3:c1:a3:23:e9:40: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:BB:0A:03:1C:7F:56:D9:4E:1D:7D:0C:A2:81:BA:FF:D4:3F:39 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:de:a7:e9:42:d1:36:de:ab:b1:9e:41:53:a3:95:c3:32:33: f4:e6:3e:fc:99:b7:76:1e:6c:9b:e7:fd:57:db:55:b2:5a:ad: 93:e2:7e:d5:ed:b9:d9:72:27:d7:94:d7:2f:6b:74:d4:89:e7: b1:09:34:e1:84:3c:44:1f:e0:1b:1e:46:7d:ac:38:b4:44:13: dd:de:0e:c0:1e:8f:a5:69:3f:78:65:b2:c0:9e:e7:5c:21:60: 21:93:6e:7a:56:8b:c7:a5:07:0f:73:b6:05:c1:15:9a:30:2e: 2c:c6:6a:40:f1:17:ab:60:f2:f4:fb:3a:a7:e3:fb:15:9a:ff: 93:eb:f5:dc:20:c4:50:a7:fa:21:a6:cb:8d:8c:30:13:52:ea: 79:51:e4:8e:ce:36:51:10:e8:15:df:b1:ec:c5:8c:ef:a7:c6: bf:8b:7f:5d:9d:00:2a:e7:fc:cc:ce:c0:cc:79:cd:93:90:34: bf:0f:51:77:27:1e:1a:d1:8f:7f:9f:23:c0:4d:e9:39:2a:70: dd:b5:5f:53:a1:7b:d2:e5:86:58:fa:51:7e:8c:5d:67:58:dc: eb:71:40:56:a8:ce:f4:e8:be:17:19:69:b6:a8:3b:00:f1:f6: 86:50:02:4f:a4:9e:89:6b:15:50:9d:3d:d5:4f:a0:a4:66:ff: da:77:a9:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA++7GnaAZSKg6GTx8jntvqcmCG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTA2MDExNjI2MTBaFw0yNTA2MDQyMzA0MTBaMDMxMTAvBgNV BAMTKEExNDlCQjBBMDMxQzdGNTZEOTRFMUQ3RDBDQTI4MUJBRkZENDNGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPnIb93LmmqmkKVMBePm0O2kz onE+VDJj9lb6Hra+SKL7Iw0xeGiZeRVp4XWzgb26YOqbIPEyjNuWQV81fJgdV7A2 Hjo5gKhZu1IEbveiIj0L3jp9d3pDmitITTUZ88kAvX5zMwxW1rAOnxLc/eKgFf12 P+RIsE6oyQj8qxGGqduu74WJfjUcmVP8fveOmew/IQcILu5JHA5IWX8Y45ysIHUF iibE7ldViV/9ES+yMzmdSyw1hT5MP0HLQ083RH/M2SY21p0mG9f1nI/X5fKo3u/j UcSmn5WFw5CfqFfsl0m8ZRHMwrmfbLjlV9s9nyFCamTFhmfgAuPBoyPpQM/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoUm7CgMcf1bZTh19DKKBuv/UPzkwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/ep+lC0Tbeq7GeQVOjlcMyM/TmPvyZt3Ye bJvn/VfbVbJarZPiftXtudlyJ9eU1y9rdNSJ57EJNOGEPEQf4BseRn2sOLREE93e DsAej6VpP3hlssCe51whYCGTbnpWi8elBw9ztgXBFZowLizGakDxF6tg8vT7Oqfj +xWa/5Pr9dwgxFCn+iGmy42MMBNS6nlR5I7ONlEQ6BXfsezFjO+nxr+Lf12dACrn /MzOwMx5zZOQNL8PUXcnHhrRj3+fI8BN6TkqcN21X1Ohe9Llhlj6UX6MXWdY3Otx QFaozvTovhcZabaoOwDx9oZQAk+knolrFVCdPdVPoKRm/9p3qYo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:58:55 2025 by rpki-client