$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json) Hash identifier: gkiUshzR58/EZ3mPjrANlaHMMCi5a14QRFXaFDuZjYc= Subject key identifier: DA:0B:9A:C9:6E:8D:24:01:57:C7:5C:B8:53:76:9F:89:9D:7D:A3:1F Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 028D2625B7E58BDA30AAAAB186D86DC208C4A269 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft Manifest number: 8D Signing time: Sat 12 Apr 2025 14:41:03 +0000 Manifest this update: Sat 12 Apr 2025 14:36:03 +0000 Manifest next update: Tue 15 Apr 2025 16:08:03 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: BTNIMW516Y60Snrf53RsmV5KL33SHRkTpW5qniWoV9I=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: X8Tudvsjk5JQZe7M1xTFDgdso21np02ozo3uH6oMpQs=) 3: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: VS9Cuwn3t0q97SOCPiAILshVWhFmPtuLTGwgoCrL9Gw=) 4: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: wTAh3ZMmaOFHPMHPc6BBLNH7w6Uv84TturnmjJT0l30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8d:26:25:b7:e5:8b:da:30:aa:aa:b1:86:d8:6d:c2:08:c4:a2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: Apr 12 14:36:03 2025 GMT Not After : Apr 15 16:08:03 2025 GMT Subject: CN=DA0B9AC96E8D240157C75CB853769F899D7DA31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1a:60:b1:32:da:44:26:5e:8c:3e:68:8c:2d: 01:d9:6b:7a:65:aa:1f:17:5d:51:33:ee:21:66:54: 5a:f7:97:c8:bd:22:53:79:55:9b:9b:a1:44:34:df: ef:86:d8:aa:fa:8a:37:f7:68:b1:3a:2f:70:dd:6c: d2:51:b3:a2:a2:df:2c:6c:22:26:ad:b4:19:8e:a5: 62:f6:ef:a0:5a:1d:85:86:64:f0:65:f9:db:f7:86: 8c:b4:3b:c5:81:a6:26:7a:67:89:cf:b1:c2:9b:b7: 69:b4:13:a3:97:5f:09:9f:4d:32:80:a7:6b:37:49: e6:b6:b5:ac:4c:ba:35:9f:fd:ec:6e:c7:3f:5c:65: c3:2d:77:13:29:48:2c:ee:51:28:fc:60:a4:b6:e8: 95:ba:3d:a7:e5:2b:a7:f4:36:06:fe:30:74:ec:f8: 8c:a2:9b:48:8b:89:51:bb:43:bf:2e:db:54:4f:ea: 42:56:ee:32:9f:0a:82:0a:af:8f:9d:06:ae:a5:e4: 1d:86:6c:1b:df:88:4c:25:cf:c2:d7:25:3e:76:c0: 3a:fb:f0:d0:3d:94:da:35:6d:b1:78:fd:87:09:28: 58:be:95:94:80:ec:d0:6a:64:e2:a0:5c:d9:26:1b: 9c:aa:ae:b7:40:f6:9d:02:51:33:9f:86:c6:48:19: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0B:9A:C9:6E:8D:24:01:57:C7:5C:B8:53:76:9F:89:9D:7D:A3:1F X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bb:9d:cc:f8:5e:f8:e6:2e:b6:01:de:52:db:6e:22:bb:0e: a1:29:74:b9:46:64:07:bb:61:e8:5e:d3:81:d4:83:21:8c:d4: 65:1c:5c:b1:b0:96:10:8f:05:95:b1:56:6d:ce:12:f4:c7:89: 12:f4:1f:92:61:9b:60:2c:01:9b:2c:4c:5c:f4:8f:9a:db:50: de:d2:7c:54:fe:4a:4b:0f:e6:1c:be:ca:69:57:db:70:8e:04: c6:9d:3f:2c:cd:d9:32:03:52:4c:90:4c:37:eb:33:0e:48:f3: 4b:e2:09:a3:a6:0f:63:02:3d:70:c7:51:5d:dc:d4:a5:a2:59: 14:5a:45:1d:68:b7:9e:22:28:13:2a:d3:56:91:8e:7f:86:dc: 08:46:a5:12:42:0a:79:a7:9a:25:9e:ea:12:fb:80:69:8a:55: 21:bf:90:71:0f:8d:dd:8e:31:b1:ba:f5:69:69:3e:16:1f:58: 7b:2f:06:05:11:a5:e8:76:be:16:1f:f9:11:fc:5a:d7:fd:ce: 77:1c:bf:01:f8:96:6c:3b:52:ac:1d:c0:e5:6e:38:a0:7d:46: 46:aa:5b:45:b9:05:82:48:b2:ab:06:df:46:af:12:a3:40:ee: ab:22:6f:08:58:07:c4:90:4e:4c:53:a3:3a:62:7a:24:33:53: 3b:bf:d6:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAo0mJbfli9owqqqxhthtwgjEomkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNTA0MTIxNDM2MDNaFw0yNTA0MTUxNjA4MDNaMDMxMTAvBgNV BAMTKERBMEI5QUM5NkU4RDI0MDE1N0M3NUNCODUzNzY5Rjg5OUQ3REEzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGmCxMtpEJl6MPmiMLQHZa3pl qh8XXVEz7iFmVFr3l8i9IlN5VZuboUQ03++G2Kr6ijf3aLE6L3DdbNJRs6Ki3yxs IiattBmOpWL276BaHYWGZPBl+dv3hoy0O8WBpiZ6Z4nPscKbt2m0E6OXXwmfTTKA p2s3Sea2taxMujWf/exuxz9cZcMtdxMpSCzuUSj8YKS26JW6PaflK6f0Ngb+MHTs +Iyim0iLiVG7Q78u21RP6kJW7jKfCoIKr4+dBq6l5B2GbBvfiEwlz8LXJT52wDr7 8NA9lNo1bbF4/YcJKFi+lZSA7NBqZOKgXNkmG5yqrrdA9p0CUTOfhsZIGfcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2guayW6NJAFXx1y4U3afiZ19ox8wHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm7ncz4XvjmLrYB3lLbbiK7DqEpdLlGZAe7 Yehe04HUgyGM1GUcXLGwlhCPBZWxVm3OEvTHiRL0H5Jhm2AsAZssTFz0j5rbUN7S fFT+SksP5hy+ymlX23COBMadPyzN2TIDUkyQTDfrMw5I80viCaOmD2MCPXDHUV3c 1KWiWRRaRR1ot54iKBMq01aRjn+G3AhGpRJCCnmnmiWe6hL7gGmKVSG/kHEPjd2O MbG69WlpPhYfWHsvBgURpeh2vhYf+RH8Wtf9znccvwH4lmw7UqwdwOVuOKB9Rkaq W0W5BYJIsqsG30avEqNA7qsibwhYB8SQTkxTozpieiQzUzu/1ms= -----END CERTIFICATE-----Generated at Sun Apr 13 05:18:50 2025 by rpki-client