$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json) Hash identifier: uw0g7z+vaMlnK1gYZh2edxIzzi552nHpR+nvEocKH0I= Subject key identifier: 57:6A:DA:60:0B:CB:84:7E:EF:02:E8:32:B6:D5:42:F8:FA:34:C1:FC Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 7624CD15B923D6FAABE4F228F9F5319D28874CC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft Manifest number: BA Signing time: Mon 21 Jul 2025 04:50:42 +0000 Manifest this update: Mon 21 Jul 2025 04:45:42 +0000 Manifest next update: Thu 24 Jul 2025 13:36:42 +0000 Files and hashes: 1: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=) 2: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=) 3: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=) 4: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: Q9tdZ8jj/dHs+U+ZdCp67vRfLbpwj8OKahWyydpPAKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:24:cd:15:b9:23:d6:fa:ab:e4:f2:28:f9:f5:31:9d:28:87:4c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: Jul 21 04:45:42 2025 GMT Not After : Jul 24 13:36:42 2025 GMT Subject: CN=576ADA600BCB847EEF02E832B6D542F8FA34C1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:4c:f6:14:69:f1:3b:a8:44:8a:95:60:12: c4:c3:95:b7:d1:4d:b6:c7:08:6e:0d:73:1e:33:aa: 5f:52:e2:1b:36:f9:47:b0:3d:77:39:df:89:70:7d: 87:78:65:43:e3:f4:5f:35:74:b5:f6:5a:1c:8c:cb: 67:96:91:ca:59:95:af:4b:54:48:04:63:fd:64:43: 59:f5:d0:e4:aa:75:0e:09:5c:0a:3c:f2:61:d6:37: 7f:3b:41:ae:9d:5f:87:45:d2:a3:0b:d8:65:8c:5b: 43:64:ae:67:79:f8:be:2f:33:a6:e5:6b:4a:cd:72: 9c:18:57:fb:ff:51:52:37:fb:f9:64:3e:d7:9d:47: 32:5c:f1:93:29:29:4a:04:ff:34:84:c6:cb:fc:08: 40:95:02:36:44:1a:0c:32:3e:1b:06:d3:42:63:a3: 4b:b5:5f:6b:8a:bd:01:c8:5c:ed:03:b0:1c:15:15: 5f:d5:9a:80:19:6c:86:a7:ea:8b:0b:8d:e0:ea:01: 9a:6a:a5:3a:79:c3:42:bd:24:44:5c:5a:77:ac:84: 2c:21:06:a6:bf:fb:15:89:d3:6d:a2:98:0b:ee:0c: 11:15:ee:83:13:68:da:f4:15:9f:e4:25:f7:c0:61: 23:30:a7:05:71:6e:36:9d:cb:87:3b:b3:f5:c9:11: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6A:DA:60:0B:CB:84:7E:EF:02:E8:32:B6:D5:42:F8:FA:34:C1:FC X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:d4:3a:6f:79:6f:cb:40:17:f4:8b:e4:7a:d9:16:34:2a: 59:8e:86:91:62:8d:6d:62:e4:3d:72:a8:e0:a5:88:54:7c:c8: fb:7b:05:83:c0:71:ca:5e:bf:ff:f1:34:4f:6c:8c:2f:18:d8: 94:ca:78:8a:e9:f0:c0:9a:66:f2:c5:54:02:49:83:ed:78:73: 45:4f:39:bd:d0:29:c6:e4:86:fe:19:21:60:fb:4a:f8:2e:e0: 5d:79:ec:b4:a6:67:9d:b7:37:d8:af:35:e4:f1:51:d5:e0:dd: bc:2c:d6:bb:07:fa:75:be:a5:0d:1a:be:8d:87:3b:1d:65:ee: 20:2b:f9:50:d0:15:bf:ce:79:6c:5d:2e:be:6a:97:08:80:62: ec:ef:c3:0b:b0:82:f2:2f:cc:d0:e2:7d:04:fd:2f:11:19:32: 37:99:2f:94:62:3d:22:29:7c:1d:5e:e4:b3:06:50:3c:c0:61: c2:cf:b9:6c:98:6c:6b:c2:c7:73:d6:ba:d8:20:ff:e8:1b:2e: 7b:6e:a3:03:ad:25:0f:22:ea:37:30:39:b0:4b:a7:85:ca:55: 48:f5:e2:9d:9d:64:e8:fc:d5:41:b9:a7:d7:db:76:c3:57:72: 32:d8:c1:2d:f3:bd:48:34:37:47:11:50:98:8a:45:6b:27:73: 22:ca:e0:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiTNFbkj1vqr5PIo+fUxnSiHTMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNTA3MjEwNDQ1NDJaFw0yNTA3MjQxMzM2NDJaMDMxMTAvBgNV BAMTKDU3NkFEQTYwMEJDQjg0N0VFRjAyRTgzMkI2RDU0MkY4RkEzNEMxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Tkz2FGnxO6hEipVgEsTDlbfR TbbHCG4Ncx4zql9S4hs2+UewPXc534lwfYd4ZUPj9F81dLX2WhyMy2eWkcpZla9L VEgEY/1kQ1n10OSqdQ4JXAo88mHWN387Qa6dX4dF0qML2GWMW0Nkrmd5+L4vM6bl a0rNcpwYV/v/UVI3+/lkPtedRzJc8ZMpKUoE/zSExsv8CECVAjZEGgwyPhsG00Jj o0u1X2uKvQHIXO0DsBwVFV/VmoAZbIan6osLjeDqAZpqpTp5w0K9JERcWneshCwh Bqa/+xWJ022imAvuDBEV7oMTaNr0FZ/kJffAYSMwpwVxbjady4c7s/XJEd2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2raYAvLhH7vAugyttVC+Po0wfwwHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsz1DpveW/LQBf0i+R62RY0KlmOhpFijW1i 5D1yqOCliFR8yPt7BYPAccpev//xNE9sjC8Y2JTKeIrp8MCaZvLFVAJJg+14c0VP Ob3QKcbkhv4ZIWD7Svgu4F157LSmZ523N9ivNeTxUdXg3bws1rsH+nW+pQ0avo2H Ox1l7iAr+VDQFb/OeWxdLr5qlwiAYuzvwwuwgvIvzNDifQT9LxEZMjeZL5RiPSIp fB1e5LMGUDzAYcLPuWyYbGvCx3PWutgg/+gbLntuowOtJQ8i6jcwObBLp4XKVUj1 4p2dZOj81UG5p9fbdsNXcjLYwS3zvUg0N0cRUJiKRWsncyLK4BI= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:45 2025 by rpki-client