$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: /Tz/HztgWm2mbqgCqc0k9quPrllF7u+v7ULT8j+9/xE= Subject key identifier: 1B:1C:D9:4F:02:B8:74:46:46:13:A1:20:6B:B1:EE:9E:54:79:74:58 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 138DC13664D09073B4008BC6E151081694DA4FAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 04FB Signing time: Wed 23 Jul 2025 22:40:43 +0000 Manifest this update: Wed 23 Jul 2025 22:35:43 +0000 Manifest next update: Sun 27 Jul 2025 08:54:43 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 2: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 3: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 4: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 5: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: BNQoLodpBo1qQqqjmw5ewKFPrG+87WSUFKQqLNk+2lk=) 6: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 7: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 08:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8d:c1:36:64:d0:90:73:b4:00:8b:c6:e1:51:08:16:94:da:4f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Jul 23 22:35:43 2025 GMT Not After : Jul 27 08:54:43 2025 GMT Subject: CN=1B1CD94F02B874464613A1206BB1EE9E54797458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:d3:9d:80:1b:04:d4:b8:66:7b:ba:52:0a: d8:fe:96:4a:df:6b:c9:38:a3:39:13:0c:c6:53:d5: e7:bd:0c:9c:d1:4b:60:d1:19:ca:d1:54:0f:46:1d: 93:ce:84:f2:3b:85:bd:a7:67:cd:9f:04:a0:9b:46: 49:cc:e4:16:92:15:fd:a4:0f:49:ee:23:70:71:d5: da:76:95:11:ba:9d:80:cf:a8:74:2f:61:04:86:8a: 74:9b:4f:da:a9:0a:45:95:1e:da:58:74:4b:71:0c: f7:d0:0d:bc:96:64:4c:54:c6:fb:7e:ac:43:8a:da: 75:c8:40:59:fd:7d:d3:51:9e:38:54:b1:b0:cc:c8: 67:f1:65:62:4a:5f:f5:57:b2:23:d5:81:03:4a:52: eb:34:86:f9:00:fe:66:74:d0:d7:d1:c7:e2:03:87: 82:7c:9d:f3:ae:26:60:07:54:e6:8b:94:18:b3:eb: 04:18:86:ed:c4:d3:aa:57:fe:34:a3:a1:b1:85:8a: 13:51:42:5d:ae:12:1d:44:69:f5:0e:ed:e2:48:b2: 21:34:b0:0b:16:6f:19:98:5f:11:c2:b6:cb:e0:27: d3:65:03:bf:01:f1:e8:a9:b5:3b:6b:28:29:c3:20: b9:c3:24:fb:3f:6d:61:30:80:02:41:8d:b5:aa:b0: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1C:D9:4F:02:B8:74:46:46:13:A1:20:6B:B1:EE:9E:54:79:74:58 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e7:c5:81:11:25:d2:aa:05:6e:d5:07:db:ce:0a:82:10:55: 67:3f:9b:96:b5:4a:55:86:88:b0:12:93:67:86:6a:00:48:74: 47:a4:d8:63:95:3b:a5:a1:f9:2a:93:82:85:c0:b2:cd:08:5d: 4f:66:1c:08:f8:74:19:db:6e:5e:82:ea:30:09:46:b2:f6:0a: 26:60:81:49:a3:94:df:54:a9:19:82:ed:60:19:bb:ca:5b:29: 4d:76:65:44:c8:86:b1:46:b6:52:06:6a:3c:a8:5a:34:39:c6: 27:9d:26:d4:2b:92:c3:72:63:f5:3e:b4:73:c5:af:7b:8b:c5: 23:4f:39:4b:0d:ec:b6:b2:5b:d1:9d:39:4b:21:f3:f3:55:15: d2:0f:b0:34:4a:4d:3f:d4:be:a3:f7:56:d0:1d:92:a1:8b:1f: e6:fb:18:2b:c0:5f:01:57:27:5b:a3:78:a7:a5:ff:81:ba:0d: 43:55:45:8d:7c:ea:b8:79:34:32:71:6d:50:6a:fa:28:d3:a8: 1e:21:4b:7a:5a:31:b6:bd:2b:6c:05:82:98:c3:46:a7:d2:b0: a4:70:d8:7a:d9:13:ac:8f:8c:dd:5e:3a:bd:5b:27:d2:9d:5e: 1d:06:d6:5b:d0:b4:e2:cc:3b:69:4b:8f:64:cc:03:87:db:c6: 35:0b:7e:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE43BNmTQkHO0AIvG4VEIFpTaT6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA3MjMyMjM1NDNaFw0yNTA3MjcwODU0NDNaMDMxMTAvBgNV BAMTKDFCMUNEOTRGMDJCODc0NDY0NjEzQTEyMDZCQjFFRTlFNTQ3OTc0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gdOdgBsE1Lhme7pSCtj+lkrf a8k4ozkTDMZT1ee9DJzRS2DRGcrRVA9GHZPOhPI7hb2nZ82fBKCbRknM5BaSFf2k D0nuI3Bx1dp2lRG6nYDPqHQvYQSGinSbT9qpCkWVHtpYdEtxDPfQDbyWZExUxvt+ rEOK2nXIQFn9fdNRnjhUsbDMyGfxZWJKX/VXsiPVgQNKUus0hvkA/mZ00NfRx+ID h4J8nfOuJmAHVOaLlBiz6wQYhu3E06pX/jSjobGFihNRQl2uEh1EafUO7eJIsiE0 sAsWbxmYXxHCtsvgJ9NlA78B8eiptTtrKCnDILnDJPs/bWEwgAJBjbWqsCblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxzZTwK4dEZGE6Ega7HunlR5dFgwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfnxYERJdKqBW7VB9vOCoIQVWc/m5a1SlWG iLASk2eGagBIdEek2GOVO6Wh+SqTgoXAss0IXU9mHAj4dBnbbl6C6jAJRrL2CiZg gUmjlN9UqRmC7WAZu8pbKU12ZUTIhrFGtlIGajyoWjQ5xiedJtQrksNyY/U+tHPF r3uLxSNPOUsN7LayW9GdOUsh8/NVFdIPsDRKTT/UvqP3VtAdkqGLH+b7GCvAXwFX J1ujeKel/4G6DUNVRY186rh5NDJxbVBq+ijTqB4hS3paMba9K2wFgpjDRqfSsKRw 2HrZE6yPjN1eOr1bJ9KdXh0G1lvQtOLMO2lLj2TMA4fbxjULfh4= -----END CERTIFICATE-----Generated at Fri Jul 25 04:00:41 2025 by rpki-client