$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: iayvFu9AHnsyWRyl6VhoLZ6JwcvklkVAQfG4x/EmWQw= Subject key identifier: 13:7C:D6:DF:A9:76:3F:16:8F:8D:3F:57:06:23:FF:A3:16:CA:DA:38 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 0FADA54334203D31736BE03167249CBA1C51006B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 01EB Signing time: Fri 05 Sep 2025 16:51:39 +0000 Manifest this update: Fri 05 Sep 2025 16:46:39 +0000 Manifest next update: Mon 08 Sep 2025 18:49:39 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=) 2: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: MY/ffoeqpqiGrzTXCRMM7v8nTlSjiBj4pPAQf8R+kuc=) 3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=) 4: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ad:a5:43:34:20:3d:31:73:6b:e0:31:67:24:9c:ba:1c:51:00:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Sep 5 16:46:39 2025 GMT Not After : Sep 8 18:49:39 2025 GMT Subject: CN=137CD6DFA9763F168F8D3F570623FFA316CADA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:9c:63:c7:6d:10:9c:3c:3b:63:36:25:f0: 35:64:5d:81:8b:f0:56:2a:4a:a0:0a:ac:49:e0:36: 0f:b8:c9:d9:d6:82:8b:20:9e:63:d6:41:c4:74:9b: ca:bf:05:22:75:56:d6:cd:7d:52:c6:de:cd:c1:64: 43:a3:83:57:da:a7:9a:ae:5e:1c:0f:07:2a:84:1c: 60:a1:c8:77:aa:0b:66:fc:96:71:16:1a:05:d9:8a: 50:b9:ff:fc:94:4e:16:80:e6:8f:e8:47:0d:56:1c: 90:73:11:48:86:1d:10:8d:bf:cf:6f:52:e0:96:33: 6b:bc:17:7c:5c:5d:c1:ba:a0:95:18:96:d5:67:1b: 3d:56:7d:29:4a:a4:44:d2:a4:80:fb:52:d4:af:45: 11:f9:68:44:60:3e:f5:e5:5f:ad:47:ca:36:81:6b: 7f:12:e0:ec:ac:71:f7:60:6d:2a:0b:66:77:8f:30: bb:0f:a9:a8:ea:78:51:64:0c:5b:6a:ef:8d:52:f1: 05:c7:dd:1d:5d:07:bc:fe:e0:2c:16:9c:82:1d:8a: e7:93:f0:ff:aa:16:85:e0:fc:fc:7f:ad:f5:c3:96: aa:5d:89:70:ca:81:5e:3f:8f:34:ca:36:99:dd:03: 40:fb:2a:d8:9f:f0:b7:bb:35:a1:eb:81:bf:54:3c: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:D6:DF:A9:76:3F:16:8F:8D:3F:57:06:23:FF:A3:16:CA:DA:38 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:58:0b:b5:eb:12:5f:77:4e:0f:fa:a5:1c:0d:7b:35:5d:93: 64:37:57:25:6c:da:4b:9c:59:c3:ab:d0:52:d7:6d:fb:e1:c3: 1b:c1:82:0a:35:13:0d:03:14:13:d2:07:06:ea:3c:05:38:38: 01:2a:3d:57:17:95:ef:55:40:d0:d9:fd:29:0d:04:5c:dc:c3: 7d:0e:72:bb:f5:a4:27:d4:25:91:f8:af:e1:36:51:42:0e:1e: 8b:36:ef:99:87:1b:07:5b:f3:2e:8a:54:e0:94:77:cb:4e:68: f4:30:5f:d7:3b:a7:b0:d1:a7:aa:6b:1d:fd:ef:d2:d6:59:16: dc:3e:b4:07:d1:77:d6:49:69:27:79:a6:e2:f9:78:cb:1e:c5: e5:d7:78:cb:75:f1:49:39:b7:9f:08:20:1f:b8:85:bb:eb:39: 4e:1f:e5:b0:71:1e:e8:30:1d:c6:52:20:af:6c:30:34:52:74: 65:f3:70:c4:e1:7c:24:ae:bf:35:e5:a1:8e:84:0c:e6:d0:f5: 59:d8:f2:a4:e1:ad:8b:71:33:ba:3b:ae:23:7c:19:68:e5:1d: 8d:b2:dc:54:e8:3f:b4:ee:d0:5f:5a:6b:68:f9:ed:e0:3d:cd: 2c:2c:21:11:84:b3:35:96:5e:d7:c3:fe:91:fb:5d:2f:c4:83: 20:f7:3c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD62lQzQgPTFza+AxZyScuhxRAGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTA5MDUxNjQ2MzlaFw0yNTA5MDgxODQ5MzlaMDMxMTAvBgNV BAMTKDEzN0NENkRGQTk3NjNGMTY4RjhEM0Y1NzA2MjNGRkEzMTZDQURBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CJxjx20QnDw7YzYl8DVkXYGL 8FYqSqAKrEngNg+4ydnWgosgnmPWQcR0m8q/BSJ1VtbNfVLG3s3BZEOjg1fap5qu XhwPByqEHGChyHeqC2b8lnEWGgXZilC5//yUThaA5o/oRw1WHJBzEUiGHRCNv89v UuCWM2u8F3xcXcG6oJUYltVnGz1WfSlKpETSpID7UtSvRRH5aERgPvXlX61HyjaB a38S4OyscfdgbSoLZnePMLsPqajqeFFkDFtq741S8QXH3R1dB7z+4CwWnIIdiueT 8P+qFoXg/Px/rfXDlqpdiXDKgV4/jzTKNpndA0D7Ktif8Le7NaHrgb9UPDZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3zW36l2PxaPjT9XBiP/oxbK2jgwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpYC7XrEl93Tg/6pRwNezVdk2Q3VyVs2kuc WcOr0FLXbfvhwxvBggo1Ew0DFBPSBwbqPAU4OAEqPVcXle9VQNDZ/SkNBFzcw30O crv1pCfUJZH4r+E2UUIOHos275mHGwdb8y6KVOCUd8tOaPQwX9c7p7DRp6prHf3v 0tZZFtw+tAfRd9ZJaSd5puL5eMsexeXXeMt18Uk5t58IIB+4hbvrOU4f5bBxHugw HcZSIK9sMDRSdGXzcMThfCSuvzXloY6EDObQ9VnY8qThrYtxM7o7riN8GWjlHY2y 3FToP7Tu0F9aa2j57eA9zSwsIRGEszWWXtfD/pH7XS/EgyD3PBo= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:42 2025 by rpki-client