$ rpki-client -vvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft (raw, json) Hash identifier: +vMBlFS1EmWWrtlGFBSFbHBElbXqjdfG6qNLu+BVkqw= Subject key identifier: 82:1C:CD:DA:10:B6:6C:4A:F9:1F:BE:AE:8B:82:27:5A:D0:86:6D:37 Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 Certificate issuer: /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Certificate serial: 2E0D403F25DA018ACBE8802610C2F82CC8B33E8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 04:06:55 +0000 Manifest this update: Thu 18 Jun 2026 04:01:55 +0000 Manifest next update: Fri 19 Jun 2026 05:01:55 +0000 Files and hashes: 1: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=) 2: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl (hash: oDYbj6nVCkV2zJauKk54KHRdSlKBEt2t6xxTg+1je3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0d:40:3f:25:da:01:8a:cb:e8:80:26:10:c2:f8:2c:c8:b3:3e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42 Validity Not Before: Jun 18 04:01:55 2026 GMT Not After : Jun 19 05:01:55 2026 GMT Subject: CN=821CCDDA10B66C4AF91FBEAE8B82275AD0866D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f8:a9:2a:85:ed:0d:96:ea:91:b8:30:d0:e8: 82:b1:b0:56:93:83:b3:15:09:08:c3:71:f4:35:36: 45:55:8e:7e:5e:9e:a9:1b:2c:52:2f:d0:ef:41:d0: 4b:7a:6f:a9:85:72:03:be:f7:e2:2b:74:e4:22:ad: b8:24:d2:ba:e0:5a:df:e0:e7:60:a7:27:61:1f:f3: 0f:64:f0:61:14:e7:ec:05:f6:33:3a:29:9e:84:da: 2d:50:a5:2b:7e:88:b7:aa:f1:2a:7d:15:d5:67:33: 56:a7:23:60:59:cf:d3:1f:b7:00:57:c1:f6:d4:1a: bd:0e:7e:e1:33:a3:b5:41:55:42:f5:62:01:e2:ee: 9e:70:34:10:d4:33:2c:99:5d:c3:e1:48:e0:c2:2c: ab:e9:13:62:b9:72:03:25:c7:b2:08:2d:29:87:81: 43:71:ea:ac:e9:b4:07:49:0b:fa:7d:51:76:e1:73: ce:42:94:97:b9:d7:59:f5:43:6f:ad:d3:2f:10:ed: 92:a0:7b:9b:e9:44:87:5c:c5:5a:3c:51:ee:83:ba: fd:3c:83:b7:4b:72:b8:cc:df:27:1a:4f:c6:8c:d4: 4b:14:7c:d1:ed:d6:56:ef:e6:46:de:5c:e9:03:66: 87:2d:70:11:e7:fe:8c:8a:ce:1c:9b:3f:e7:4e:e0: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:CD:DA:10:B6:6C:4A:F9:1F:BE:AE:8B:82:27:5A:D0:86:6D:37 X509v3 Authority Key Identifier: keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b7:bf:5a:59:48:af:2f:12:71:76:a5:6f:58:d3:b1:9f:3c: 74:ae:7a:f0:f8:a1:6c:62:95:00:8a:a7:6a:22:97:6b:87:c3: e4:06:4b:dd:34:8d:41:9b:c1:2a:21:04:b1:b3:c5:77:87:4b: 6f:6c:11:90:16:1c:b7:f8:52:06:d0:9e:28:27:9c:4f:8e:b5: 9f:f0:96:84:86:73:3e:1b:7c:a6:5c:75:8a:28:8f:9c:15:0f: 2c:a2:b5:95:3c:e4:d7:48:ad:14:18:7b:e9:62:07:3d:0f:5a: c4:28:9b:7a:9d:ca:ef:e3:16:be:19:3e:ff:69:ef:d8:76:ff: 7c:27:51:3f:c9:eb:ce:98:2d:46:fe:32:c3:15:e8:99:ad:37: cf:11:52:4c:1a:12:9b:96:b0:b4:4c:62:c3:b6:13:47:d4:b7: a3:c1:c6:71:32:7e:ee:21:46:60:41:d6:24:04:6f:17:48:10: 59:72:05:86:0a:d4:e9:fa:60:81:49:5a:c2:1d:1c:88:85:41: 0b:43:c9:82:86:f0:93:96:09:ee:c5:9c:f2:48:d2:4c:28:81: 98:62:1a:29:41:b7:84:c4:23:ca:f5:76:32:26:38:a4:61:d2: 88:a5:e7:ef:a7:43:d9:5c:57:bf:7b:ac:5d:79:8c:df:80:c0: 2d:59:f7:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULg1APyXaAYrL6IAmEML4LMizPowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0 QUNENUE0MjAeFw0yNjA2MTgwNDAxNTVaFw0yNjA2MTkwNTAxNTVaMDMxMTAvBgNV BAMTKDgyMUNDRERBMTBCNjZDNEFGOTFGQkVBRThCODIyNzVBRDA4NjZEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN+Kkqhe0NluqRuDDQ6IKxsFaT g7MVCQjDcfQ1NkVVjn5enqkbLFIv0O9B0Et6b6mFcgO+9+IrdOQirbgk0rrgWt/g 52CnJ2Ef8w9k8GEU5+wF9jM6KZ6E2i1QpSt+iLeq8Sp9FdVnM1anI2BZz9MftwBX wfbUGr0OfuEzo7VBVUL1YgHi7p5wNBDUMyyZXcPhSODCLKvpE2K5cgMlx7IILSmH gUNx6qzptAdJC/p9UXbhc85ClJe511n1Q2+t0y8Q7ZKge5vpRIdcxVo8Ue6Duv08 g7dLcrjM3ycaT8aM1EsUfNHt1lbv5kbeXOkDZoctcBHn/oyKzhybP+dO4Ep9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghzN2hC2bEr5H76ui4InWtCGbTcwHwYDVR0j BBgwFoAUY9ss13s9+VrA+fxbu4XGM0rNWkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI2MGYwM2MtODk2OC00NzBmLWI2MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3 QjNERjk1QUMwRjlGQzVCQkI4NUM2MzM0QUNENUE0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82M0RCMkNENzdCM0RGOTVBQzBGOUZDNUJCQjg1QzYzMzRBQ0Q1 QTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI2MGYwM2MtODk2OC00NzBmLWI2 MTgtZDNlYjJjOTI4YTRkLzAvNjNEQjJDRDc3QjNERjk1QUMwRjlGQzVCQkI4NUM2 MzM0QUNENUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq3v1pZSK8vEnF2pW9Y07GfPHSuevD4oWxi lQCKp2oil2uHw+QGS900jUGbwSohBLGzxXeHS29sEZAWHLf4UgbQnignnE+OtZ/w loSGcz4bfKZcdYooj5wVDyyitZU85NdIrRQYe+liBz0PWsQom3qdyu/jFr4ZPv9p 79h2/3wnUT/J686YLUb+MsMV6JmtN88RUkwaEpuWsLRMYsO2E0fUt6PBxnEyfu4h RmBB1iQEbxdIEFlyBYYK1On6YIFJWsIdHIiFQQtDyYKG8JOWCe7FnPJI0kwogZhi GilBt4TEI8r1djImOKRh0oil5++nQ9lcV797rF15jN+AwC1Z9+s= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:02 2026 by rpki-client