$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: o0sQPQhFsbHn1uBm1mBqjCY+wxQf7zuYf5sTVa+i5Wc= Subject key identifier: 82:04:BA:15:17:05:A6:24:0D:A2:E5:1A:27:6F:E7:2F:0E:6A:B8:95 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 5D6FFD02E0D98CFD227DB0AEB1AC32A68BA88188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 01A4 Signing time: Mon 07 Apr 2025 02:11:38 +0000 Manifest this update: Mon 07 Apr 2025 02:06:38 +0000 Manifest next update: Thu 10 Apr 2025 04:10:38 +0000 Files and hashes: 1: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: SEQ6tg3JngKo4EuPEoreDiNfhhs+RQhioJdhjUZ/tYA=) 2: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: LVSCMc7vfnzRcaQCBVnLhOspmvGT6C720G71HkuX20g=) 3: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: x+3MBtcAzggw/gTCufimrmYVmNqCuxsFgl19KnMDarc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6f:fd:02:e0:d9:8c:fd:22:7d:b0:ae:b1:ac:32:a6:8b:a8:81:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Apr 7 02:06:38 2025 GMT Not After : Apr 10 04:10:38 2025 GMT Subject: CN=8204BA151705A6240DA2E51A276FE72F0E6AB895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:2e:20:ac:83:f0:5e:d1:4c:17:4d:cb:6a: de:71:aa:f5:dd:4c:a6:86:dd:b5:27:b0:5b:c2:0a: 2e:4d:d3:48:84:dd:87:76:13:4f:e0:8c:a8:6c:9e: ca:2e:e6:b9:07:65:3f:42:2c:8a:41:3b:54:e8:e6: 02:28:ef:f7:f5:cb:c1:59:c0:e3:d1:a8:a0:34:dd: 00:7f:99:1c:57:52:27:d9:c6:cb:e2:a3:e0:f4:63: f4:3e:21:cf:2f:53:bc:62:f7:44:ff:31:08:4c:3e: c9:d2:a9:a3:eb:dd:4e:ba:e8:16:14:1f:58:b7:48: e0:da:2f:5e:6c:e7:d0:b0:c9:00:f4:3b:56:bf:47: 8a:db:05:88:81:1d:91:17:07:2d:4e:5e:65:67:ed: a7:a4:27:ee:35:6a:6b:10:f1:8b:9c:4d:14:f5:41: 1c:39:2b:6d:1c:74:11:d6:bc:9a:fb:32:31:fe:69: 68:31:a3:f8:c1:a1:0d:da:aa:a8:6e:16:18:24:bb: 6e:af:53:f3:2c:6c:50:ab:f1:15:f1:fa:e1:08:ab: 8f:c0:a6:23:28:ca:db:ba:70:b8:49:9e:bc:82:5e: 09:0c:12:ad:88:87:68:c2:20:59:a0:4f:cd:1d:f3: 6f:12:b0:46:27:ab:7b:ff:33:d9:87:d3:ba:7b:6b: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:04:BA:15:17:05:A6:24:0D:A2:E5:1A:27:6F:E7:2F:0E:6A:B8:95 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:02:08:a4:76:dc:fb:19:ad:a2:ca:b3:ab:3b:11:c1:a9:4a: 0c:b3:37:c8:8e:13:1b:03:db:0e:34:77:05:cc:4e:53:72:7f: dc:ea:de:d6:a4:e2:09:75:5b:9d:00:a3:9e:d5:1e:90:79:66: 07:a5:22:97:a5:7a:77:b8:ae:bc:fc:29:c1:a0:20:e8:7d:0c: dd:65:27:1d:37:00:4e:07:8b:e2:b0:ba:ec:8d:a8:c3:fc:a5: ea:96:93:42:9b:e3:64:df:ac:97:33:18:a8:96:bc:17:70:b3: 00:87:a9:c7:49:e1:a9:26:aa:e3:61:91:27:0c:76:70:ff:d3: b1:69:23:2f:ba:79:8d:33:6a:6b:c7:b5:65:77:d1:8d:12:4f: 23:ca:3d:5d:6d:49:de:c5:b9:d0:a4:57:7e:ad:ea:2a:88:a3: aa:8d:aa:5e:d5:e2:c4:be:67:fd:2d:f5:0c:26:f4:22:f3:20: c7:04:4a:9c:ba:1e:5e:b1:2a:98:7b:cc:b1:44:98:df:71:91: 7a:de:ea:45:ca:54:09:9c:10:6d:f8:2d:79:94:f3:08:e5:dc: db:72:d4:aa:96:6f:a2:ef:ba:1e:06:de:75:a5:a0:21:cc:b2: 8a:64:98:ea:22:cc:9f:f1:02:ec:06:07:81:60:ee:f2:44:75: 8a:18:0d:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXW/9AuDZjP0ifbCusawypouogYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTA0MDcwMjA2MzhaFw0yNTA0MTAwNDEwMzhaMDMxMTAvBgNV BAMTKDgyMDRCQTE1MTcwNUE2MjQwREEyRTUxQTI3NkZFNzJGMEU2QUI4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbC4grIPwXtFMF03Lat5xqvXd TKaG3bUnsFvCCi5N00iE3Yd2E0/gjKhsnsou5rkHZT9CLIpBO1To5gIo7/f1y8FZ wOPRqKA03QB/mRxXUifZxsvio+D0Y/Q+Ic8vU7xi90T/MQhMPsnSqaPr3U666BYU H1i3SODaL15s59CwyQD0O1a/R4rbBYiBHZEXBy1OXmVn7aekJ+41amsQ8YucTRT1 QRw5K20cdBHWvJr7MjH+aWgxo/jBoQ3aqqhuFhgku26vU/MsbFCr8RXx+uEIq4/A piMoytu6cLhJnryCXgkMEq2Ih2jCIFmgT80d828SsEYnq3v/M9mH07p7a8YzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggS6FRcFpiQNouUaJ2/nLw5quJUwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8CCKR23PsZraLKs6s7EcGpSgyzN8iOExsD 2w40dwXMTlNyf9zq3tak4gl1W50Ao57VHpB5ZgelIpelene4rrz8KcGgIOh9DN1l Jx03AE4Hi+KwuuyNqMP8peqWk0Kb42TfrJczGKiWvBdwswCHqcdJ4akmquNhkScM dnD/07FpIy+6eY0zamvHtWV30Y0STyPKPV1tSd7FudCkV36t6iqIo6qNql7V4sS+ Z/0t9Qwm9CLzIMcESpy6Hl6xKph7zLFEmN9xkXre6kXKVAmcEG34LXmU8wjl3Nty 1KqWb6Lvuh4G3nWloCHMsopkmOoizJ/xAuwGB4Fg7vJEdYoYDXk= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:23 2025 by rpki-client