$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: wookfwjlRuNua+8R6OCoh35Wh1OZloIhLBxKDZv6fyw= Subject key identifier: E4:11:7B:15:06:98:AD:7D:5C:5D:B4:59:C6:E3:03:7E:0A:98:CF:42 Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 6434C472F7FBD5497FCA0F54004E648C5A2018EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 046C Signing time: Sat 19 Jul 2025 21:32:00 +0000 Manifest this update: Sat 19 Jul 2025 21:27:00 +0000 Manifest next update: Wed 23 Jul 2025 01:59:00 +0000 Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: wZIxpj3dwGCzcl7cZh9X0VQ9p0ml4TLvq9R2W6nIlhM=) 2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: i/CdXeZuPQVUstKVs76+x74Oq4V2zFk5DiDj2B9uubk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:34:c4:72:f7:fb:d5:49:7f:ca:0f:54:00:4e:64:8c:5a:20:18:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Jul 19 21:27:00 2025 GMT Not After : Jul 23 01:59:00 2025 GMT Subject: CN=E4117B150698AD7D5C5DB459C6E3037E0A98CF42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:2e:56:13:90:1b:61:72:d4:2a:0a:6b:d4: ad:68:e3:77:9f:b3:cc:ca:00:aa:10:51:f9:f1:04: a9:49:18:86:3a:e6:52:f1:fc:96:df:9a:5d:e4:d1: 28:91:ed:6b:31:ea:b9:2c:89:cf:9f:73:02:ac:e2: b2:4b:79:67:3f:1c:89:62:d9:24:ec:a6:7d:59:06: bf:9c:4c:2b:9e:a6:c2:29:e7:44:73:ae:02:83:e3: 38:89:2f:f1:d9:0f:2f:a6:41:2d:ba:f5:c4:4b:e9: eb:16:99:de:0d:4f:25:32:92:8f:5e:e1:e2:0d:da: 38:4e:23:3d:ff:1a:42:c6:3f:c9:63:09:d2:22:ad: 8b:62:71:19:44:10:81:4c:34:b5:71:fe:88:99:ca: 3f:55:1c:07:8a:9a:c9:ec:d6:54:92:57:86:30:c1: d7:24:2d:f1:b8:7e:ae:2e:84:42:74:cb:c6:ce:bc: f1:68:a4:c4:91:2d:0a:5e:44:f6:d8:a2:04:ad:be: 85:c6:b9:13:e2:d5:e9:79:00:4f:ad:4b:16:a9:2f: 30:ee:9d:29:ae:c0:ea:13:4b:92:73:52:c2:3a:95: 48:86:40:63:a5:cd:3a:bd:70:09:3d:38:bf:21:4d: 61:2c:21:af:62:17:ef:53:25:17:44:67:f9:23:7c: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:11:7B:15:06:98:AD:7D:5C:5D:B4:59:C6:E3:03:7E:0A:98:CF:42 X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:dc:f7:2e:e9:86:70:8d:04:d0:90:8a:b6:f8:21:24:54:11: 80:9f:fb:32:ec:fe:68:96:d1:fd:f3:d1:dd:89:a5:d6:23:9a: 76:14:67:2c:b2:b4:7f:90:bc:b4:13:7b:26:34:c4:da:e1:f8: 9b:01:e7:c1:9f:5b:e1:54:8d:aa:7b:85:7e:02:7e:0b:a4:ed: d9:33:1f:b5:30:40:e9:6d:97:1d:2f:6d:ef:79:ab:ae:c5:f7: 61:a2:4a:15:84:b9:b6:39:34:a6:14:d6:60:95:38:14:7d:36: 6a:df:ab:45:70:15:a4:08:4e:66:d2:d5:64:51:a2:9a:06:39: 4e:f7:f6:6e:e9:47:53:b2:d1:a5:90:94:96:a1:63:ce:c4:9a: 6b:e5:7e:7a:c0:a0:95:a8:72:21:6f:3a:52:8a:1a:52:09:15: 26:51:c9:d1:d8:7d:59:d5:50:5e:70:3d:34:64:61:85:c9:60: 91:d5:7a:ce:65:4f:77:09:1f:1d:25:12:4a:92:90:0d:67:f0: 6b:25:dc:dd:9b:cf:4c:2d:f7:7d:10:0f:e0:60:5d:b9:d9:09: 30:bf:8f:5f:5d:95:6e:5c:ca:88:f0:7e:d9:ba:25:68:70:0c: d9:66:14:d3:61:c8:76:99:d7:7b:31:7f:f6:ce:3b:12:70:5e: 97:7e:07:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDTEcvf71Ul/yg9UAE5kjFogGOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTA3MTkyMTI3MDBaFw0yNTA3MjMwMTU5MDBaMDMxMTAvBgNV BAMTKEU0MTE3QjE1MDY5OEFEN0Q1QzVEQjQ1OUM2RTMwMzdFMEE5OENGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIC5WE5AbYXLUKgpr1K1o43ef s8zKAKoQUfnxBKlJGIY65lLx/Jbfml3k0SiR7Wsx6rksic+fcwKs4rJLeWc/HIli 2STspn1ZBr+cTCuepsIp50RzrgKD4ziJL/HZDy+mQS269cRL6esWmd4NTyUyko9e 4eIN2jhOIz3/GkLGP8ljCdIirYticRlEEIFMNLVx/oiZyj9VHAeKmsns1lSSV4Yw wdckLfG4fq4uhEJ0y8bOvPFopMSRLQpeRPbYogStvoXGuRPi1el5AE+tSxapLzDu nSmuwOoTS5JzUsI6lUiGQGOlzTq9cAk9OL8hTWEsIa9iF+9TJRdEZ/kjfE1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BF7FQaYrX1cXbRZxuMDfgqYz0IwHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPc9y7phnCNBNCQirb4ISRUEYCf+zLs/miW 0f3z0d2JpdYjmnYUZyyytH+QvLQTeyY0xNrh+JsB58GfW+FUjap7hX4Cfguk7dkz H7UwQOltlx0vbe95q67F92GiShWEubY5NKYU1mCVOBR9Nmrfq0VwFaQITmbS1WRR opoGOU739m7pR1Oy0aWQlJahY87EmmvlfnrAoJWociFvOlKKGlIJFSZRydHYfVnV UF5wPTRkYYXJYJHVes5lT3cJHx0lEkqSkA1n8Gsl3N2bz0wt930QD+BgXbnZCTC/ j19dlW5cyojwftm6JWhwDNlmFNNhyHaZ13sxf/bOOxJwXpd+B8M= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:27 2025 by rpki-client