$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json) Hash identifier: F4z45wngSK+sB/UWwjanGN8SzNvbkYg/jFDNz8yMG3I= Subject key identifier: 70:2A:97:47:0F:1E:A1:F0:68:B3:A4:34:0A:2C:78:BF:D6:67:B1:6D Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 341DFAC3B8412C384D9B085071450B4FC0B0B570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft Manifest number: D0 Signing time: Mon 08 Sep 2025 01:10:43 +0000 Manifest this update: Mon 08 Sep 2025 01:05:43 +0000 Manifest next update: Thu 11 Sep 2025 02:57:43 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=) 3: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: c7hLQEp9MxsAj0kzlPn1aXQSXVFTm8t4XxiP/6LYIMY=) 4: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1d:fa:c3:b8:41:2c:38:4d:9b:08:50:71:45:0b:4f:c0:b0:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: Sep 8 01:05:43 2025 GMT Not After : Sep 11 02:57:43 2025 GMT Subject: CN=702A97470F1EA1F068B3A4340A2C78BFD667B16D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:7a:8b:93:c2:6a:e5:66:78:22:58:83:27: a4:1e:be:76:fe:c2:7b:0a:b1:d5:80:a7:ec:a8:1d: 70:69:47:bf:17:4d:2e:51:bd:47:02:bf:d8:87:d9: ee:c1:c7:39:c5:49:ce:86:92:32:28:da:db:2e:f5: 6d:2b:74:8d:8c:5c:5b:a9:16:39:15:7e:d3:fe:7b: ea:ec:3b:c9:eb:8e:11:45:3e:00:27:24:17:a7:60: e7:58:2a:4a:bf:0c:c6:e5:30:18:ef:67:07:99:0f: 82:b6:eb:30:83:f8:6c:9c:c8:eb:fb:88:96:98:85: 47:31:2d:82:0c:90:a7:49:28:91:cb:54:30:46:21: 50:93:2e:a1:f9:dd:85:c7:7e:6b:25:00:50:8a:10: 47:94:90:b0:fa:c6:98:db:3e:69:33:05:81:1d:cd: ff:28:08:44:5c:f8:bc:63:56:d7:ac:63:c0:94:c9: 80:95:6d:de:3b:33:7d:87:8e:fe:fa:05:74:84:b8: c3:25:46:f2:a5:91:1d:9e:a5:ec:74:55:b3:23:e3: 60:4a:0c:f4:24:10:12:09:b6:91:59:bd:e9:91:05: 03:cb:64:a4:ea:af:55:6e:4d:1c:7b:99:0d:26:9d: a6:f1:bd:e8:1a:ae:73:c8:bf:0c:10:46:d7:fe:d8: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2A:97:47:0F:1E:A1:F0:68:B3:A4:34:0A:2C:78:BF:D6:67:B1:6D X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b3:3b:dd:09:19:2f:1d:57:9e:62:5c:b8:6b:1c:4c:5d:b7: ef:a4:4a:ac:7b:c1:bc:07:f5:06:68:36:94:23:a5:b9:58:aa: 8d:a7:2f:ed:1a:56:82:02:5f:e7:bf:7c:83:ef:5d:e1:b7:31: ac:cc:11:0e:1d:1b:4c:40:41:42:d3:78:6c:1a:39:9a:3d:62: 4f:7a:cc:93:65:dc:9d:6e:fb:5c:38:fb:af:e5:0c:5c:8f:30: a1:0e:89:f0:71:01:19:e4:33:fe:65:1c:81:bb:01:ef:a2:7c: 14:d2:7b:20:a5:5f:cf:94:e1:08:ca:72:51:d2:75:7f:3a:9e: 89:9b:ea:cb:06:a9:eb:a7:1e:c7:f1:0b:2d:b1:e5:5b:2a:88: 13:7d:74:2d:78:9b:df:f1:a2:6d:1a:fa:88:ee:ad:a4:8b:e7: c7:35:9a:88:93:f2:e8:61:3a:01:86:03:6b:9e:a1:aa:85:55: 99:d4:33:93:ea:86:57:df:1b:fa:46:9b:ed:d8:ca:22:f2:c6: 81:da:d1:11:f1:bf:d7:8b:0e:cb:d6:65:59:99:a8:2f:af:77: f4:8b:ea:73:95:4c:e6:5b:be:01:1c:aa:0a:71:39:c4:8d:e4: d4:cf:84:af:dd:cd:8c:c8:b2:59:4d:29:a7:fa:cf:5e:fb:15: 48:e3:6e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNB36w7hBLDhNmwhQcUULT8CwtXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNTA5MDgwMTA1NDNaFw0yNTA5MTEwMjU3NDNaMDMxMTAvBgNV BAMTKDcwMkE5NzQ3MEYxRUExRjA2OEIzQTQzNDBBMkM3OEJGRDY2N0IxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bHqLk8Jq5WZ4IliDJ6Qevnb+ wnsKsdWAp+yoHXBpR78XTS5RvUcCv9iH2e7BxznFSc6GkjIo2tsu9W0rdI2MXFup FjkVftP+e+rsO8nrjhFFPgAnJBenYOdYKkq/DMblMBjvZweZD4K26zCD+GycyOv7 iJaYhUcxLYIMkKdJKJHLVDBGIVCTLqH53YXHfmslAFCKEEeUkLD6xpjbPmkzBYEd zf8oCERc+LxjVtesY8CUyYCVbd47M32Hjv76BXSEuMMlRvKlkR2epex0VbMj42BK DPQkEBIJtpFZvemRBQPLZKTqr1VuTRx7mQ0mnabxvegarnPIvwwQRtf+2KsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCqXRw8eofBos6Q0Cix4v9ZnsW0wHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2zO90JGS8dV55iXLhrHExdt++kSqx7wbwH 9QZoNpQjpblYqo2nL+0aVoICX+e/fIPvXeG3MazMEQ4dG0xAQULTeGwaOZo9Yk96 zJNl3J1u+1w4+6/lDFyPMKEOifBxARnkM/5lHIG7Ae+ifBTSeyClX8+U4QjKclHS dX86nomb6ssGqeunHsfxCy2x5VsqiBN9dC14m9/xom0a+ojuraSL58c1moiT8uhh OgGGA2ueoaqFVZnUM5PqhlffG/pGm+3YyiLyxoHa0RHxv9eLDsvWZVmZqC+vd/SL 6nOVTOZbvgEcqgpxOcSN5NTPhK/dzYzIsllNKaf6z177FUjjbqU= -----END CERTIFICATE-----Generated at Mon Sep 8 05:18:29 2025 by rpki-client