$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: 7f3p/D/0uukSUIyDswGhdlM3BTaVoa3KMF8Z95kpYzI= Subject key identifier: E5:11:22:FE:12:E4:72:FA:F3:EE:17:8B:83:09:17:E3:75:2B:9C:4A Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 5ADC55B51A604268C7071DA96B2A5F5F17C63B5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 01D5 Signing time: Mon 21 Jul 2025 19:41:49 +0000 Manifest this update: Mon 21 Jul 2025 19:36:49 +0000 Manifest next update: Thu 24 Jul 2025 22:15:49 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: LVSCMc7vfnzRcaQCBVnLhOspmvGT6C720G71HkuX20g=) 2: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: 5mWzobeDtqqoABHpnhxS9HWUsQTc9g5dCjPE+J8kBP4=) 3: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: SEQ6tg3JngKo4EuPEoreDiNfhhs+RQhioJdhjUZ/tYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dc:55:b5:1a:60:42:68:c7:07:1d:a9:6b:2a:5f:5f:17:c6:3b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Jul 21 19:36:49 2025 GMT Not After : Jul 24 22:15:49 2025 GMT Subject: CN=E51122FE12E472FAF3EE178B830917E3752B9C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:ff:52:2c:47:f8:3e:ee:36:17:c7:f7:77: 3f:f8:3c:bd:91:37:a5:9e:a4:ed:cd:c9:fe:dd:2c: a8:09:f1:f5:88:12:f3:85:eb:7a:dc:f1:a8:23:b7: ba:25:1d:c9:f7:8c:b7:46:56:50:f4:22:83:ac:8f: b8:7c:73:63:ff:3d:0d:a6:0a:d0:29:8b:52:b9:ba: 17:43:2a:61:bd:de:4d:6d:37:00:6a:be:7b:c6:a9: e6:d1:4b:cc:9d:ee:57:c0:84:e5:b0:32:91:c6:ac: 95:34:5c:42:a6:d3:56:77:3b:46:71:00:29:62:0d: 3a:6a:3e:e8:ae:04:43:ee:4d:39:c1:ed:1e:4f:6a: a4:57:f6:e1:61:4b:61:c4:cd:ba:4d:29:61:1e:c8: 9a:26:72:3b:af:3b:e1:5b:cb:f1:56:0c:d4:0c:6a: a7:e5:27:e8:03:66:08:3c:a7:b5:b7:99:db:f5:e4: df:be:22:2e:a0:98:e8:76:76:7c:e5:d2:73:7d:99: 06:bc:8e:f0:27:4b:6a:cc:3d:d5:47:32:56:e3:73: d9:72:94:f5:a2:18:37:b6:ce:96:4b:43:2e:71:31: ef:17:77:7f:39:3a:bc:60:e0:25:29:cb:6b:4e:14: e4:38:a6:f0:c2:ae:54:db:f3:6c:a0:5e:29:ef:31: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:11:22:FE:12:E4:72:FA:F3:EE:17:8B:83:09:17:E3:75:2B:9C:4A X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b3:03:44:ab:4d:df:54:83:0e:9d:47:f7:ce:e5:87:f2:51: ee:cb:f5:34:dc:30:84:79:7c:59:ce:0a:17:64:9e:d1:ec:c1: df:a3:b6:d6:48:a6:24:d8:89:ff:92:85:17:55:57:aa:f7:43: 4f:f9:be:8a:a4:fd:eb:f8:1b:d1:23:87:4d:13:b3:f2:b9:a6: 46:8b:fb:0a:ad:ba:04:0f:cf:2e:7f:ec:fd:da:8a:c3:0c:68: 8b:c1:42:61:99:75:1f:61:12:15:59:ba:2d:cc:3e:0a:aa:3e: 01:56:5a:38:14:b4:4b:25:b8:fe:29:50:6a:2d:84:06:a4:d1: c2:7b:d7:ef:27:be:e8:3b:1f:61:a8:69:c8:c2:41:43:94:5b: e8:89:ef:2e:f0:fc:b9:1a:83:b1:7d:c7:f5:e3:ce:17:31:e2: b2:e5:5e:8a:66:64:f0:8c:d3:c4:90:d1:99:62:1f:74:84:82: 31:9a:12:37:28:9a:08:92:5e:d1:10:1b:2d:af:67:04:24:35: 62:3e:65:85:60:10:6c:a5:a9:aa:dd:ec:f1:da:f3:15:2b:a9: d3:ee:dd:13:c4:39:a7:f3:11:3a:28:02:1c:0a:22:41:34:89: 0a:99:c5:49:a6:47:f6:5b:eb:be:55:f2:1b:a9:53:68:8e:cf: 5f:97:ec:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtxVtRpgQmjHBx2paypfXxfGO1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTA3MjExOTM2NDlaFw0yNTA3MjQyMjE1NDlaMDMxMTAvBgNV BAMTKEU1MTEyMkZFMTJFNDcyRkFGM0VFMTc4QjgzMDkxN0UzNzUyQjlDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxv9SLEf4Pu42F8f3dz/4PL2R N6WepO3Nyf7dLKgJ8fWIEvOF63rc8agjt7olHcn3jLdGVlD0IoOsj7h8c2P/PQ2m CtApi1K5uhdDKmG93k1tNwBqvnvGqebRS8yd7lfAhOWwMpHGrJU0XEKm01Z3O0Zx ACliDTpqPuiuBEPuTTnB7R5PaqRX9uFhS2HEzbpNKWEeyJomcjuvO+Fby/FWDNQM aqflJ+gDZgg8p7W3mdv15N++Ii6gmOh2dnzl0nN9mQa8jvAnS2rMPdVHMlbjc9ly lPWiGDe2zpZLQy5xMe8Xd385Orxg4CUpy2tOFOQ4pvDCrlTb82ygXinvMVHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5REi/hLkcvrz7heLgwkX43UrnEowHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuzA0SrTd9Ugw6dR/fO5YfyUe7L9TTcMIR5 fFnOChdkntHswd+jttZIpiTYif+ShRdVV6r3Q0/5voqk/ev4G9Ejh00Ts/K5pkaL +wqtugQPzy5/7P3aisMMaIvBQmGZdR9hEhVZui3MPgqqPgFWWjgUtEsluP4pUGot hAak0cJ71+8nvug7H2GoacjCQUOUW+iJ7y7w/Lkag7F9x/Xjzhcx4rLlXopmZPCM 08SQ0ZliH3SEgjGaEjcomgiSXtEQGy2vZwQkNWI+ZYVgEGylqard7PHa8xUrqdPu 3RPEOafzETooAhwKIkE0iQqZxUmmR/Zb675V8hupU2iOz1+X7NI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:57 2025 by rpki-client