$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: cCREn7RPmrl1P126fbP4GdG5FJ2j5fHY10kLBaNpVM0= Subject key identifier: 21:0C:8C:D9:55:F6:A1:2C:11:02:0B:90:9B:08:69:81:36:C4:7B:40 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 4A397B821FE90135F904A147186E1A5CFBA83746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 0510 Signing time: Sun 07 Sep 2025 04:00:43 +0000 Manifest this update: Sun 07 Sep 2025 03:55:43 +0000 Manifest next update: Wed 10 Sep 2025 13:15:43 +0000 Files and hashes: 1: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: HrQv5Mq48t9t3QOZCaOVHfGMA0eF/zE2nmNJAnp44Zk=) 2: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 3: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: dVq64zxWLa78rB2/MzuNY9mMV1I4wE6waqwsVjBuNag=) 4: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 5: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 6: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 7: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 13:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:39:7b:82:1f:e9:01:35:f9:04:a1:47:18:6e:1a:5c:fb:a8:37:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Sep 7 03:55:43 2025 GMT Not After : Sep 10 13:15:43 2025 GMT Subject: CN=210C8CD955F6A12C11020B909B08698136C47B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:72:bb:04:6a:92:48:ba:71:1f:97:82:03: 69:18:2b:0e:3c:45:22:5f:7d:73:0f:cb:a9:cb:7a: 8d:56:3f:78:b5:d2:30:cf:5a:90:3c:ab:f3:4e:7f: 87:a3:9e:e7:41:7f:16:91:67:7b:cf:5c:b5:b8:cd: 92:fd:1d:fc:19:6a:46:b1:92:d6:67:e2:f4:02:45: 32:83:6b:c7:d3:35:47:30:4b:61:8c:85:42:75:f5: 68:02:7e:76:71:74:25:91:a3:f5:9d:11:77:a0:ce: a0:e3:3f:4d:d0:c0:17:e1:b9:93:04:e2:b4:b8:15: f6:08:e7:af:2b:52:d1:65:7d:82:e5:c9:49:07:fc: 18:9f:46:d5:83:75:a8:cf:cb:99:59:5a:98:c3:81: 7d:ea:ef:93:dd:c9:70:22:43:6c:67:c9:37:25:fa: 7b:66:9a:d6:41:6d:59:1d:12:2d:f6:0b:7a:4d:11: 1f:60:4c:69:4d:3a:44:eb:42:f4:16:b3:83:d7:60: e4:d5:7a:73:da:d2:fa:9c:b1:d2:27:47:56:91:1d: 48:dc:65:cf:d2:a5:59:33:c8:61:f5:31:99:ff:c4: 7d:a7:a0:1c:db:5c:f4:66:52:00:00:ae:b2:67:05: e7:c3:56:7a:08:8d:41:ee:c4:5c:a8:33:57:81:6e: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0C:8C:D9:55:F6:A1:2C:11:02:0B:90:9B:08:69:81:36:C4:7B:40 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8d:b6:82:b3:d6:ea:7a:74:08:62:3c:5c:3a:01:17:f9:a1: 3f:3e:5e:6f:69:f5:bf:f5:93:e1:fd:6b:2e:30:cb:5d:fa:0d: 86:7d:9b:22:a5:a3:be:e3:24:a5:14:38:61:c0:97:16:a4:53: aa:a4:57:a8:e4:b2:8e:ce:77:bd:ef:1b:0b:57:9a:9e:7d:b6: 1a:7c:12:85:d9:45:d9:81:93:97:90:1e:33:9a:d0:7a:3b:cb: 2e:0c:bb:a2:a6:56:75:7d:16:26:b8:9a:5a:02:bf:84:70:93: 1c:cd:42:c4:a5:4a:e8:3a:10:35:54:ab:3b:f6:ca:a2:f9:2c: b5:b9:12:2e:6e:71:2e:1e:2d:90:39:da:5f:ab:2c:54:70:15: 57:46:5a:ba:38:74:4e:72:2b:ae:84:41:c8:c6:75:e3:ba:5b: 7b:a1:78:d4:b6:3b:b9:1f:5a:d4:c6:8f:c8:e2:2c:c8:3b:32: e3:e6:85:bb:54:7b:de:4e:b8:81:50:66:b9:bb:6c:50:92:c7: 3b:4f:bf:91:04:06:58:07:6b:90:4c:ff:97:2f:0c:91:5c:b8: 16:4d:48:3d:ba:41:89:26:8f:a0:a9:84:e2:9d:ee:4c:5b:74: 9d:a1:0f:34:6a:7a:22:36:27:a6:0d:41:37:db:d1:23:be:34: c5:e1:e3:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjl7gh/pATX5BKFHGG4aXPuoN0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA5MDcwMzU1NDNaFw0yNTA5MTAxMzE1NDNaMDMxMTAvBgNV BAMTKDIxMEM4Q0Q5NTVGNkExMkMxMTAyMEI5MDlCMDg2OTgxMzZDNDdCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFq3K7BGqSSLpxH5eCA2kYKw48 RSJffXMPy6nLeo1WP3i10jDPWpA8q/NOf4ejnudBfxaRZ3vPXLW4zZL9HfwZakax ktZn4vQCRTKDa8fTNUcwS2GMhUJ19WgCfnZxdCWRo/WdEXegzqDjP03QwBfhuZME 4rS4FfYI568rUtFlfYLlyUkH/BifRtWDdajPy5lZWpjDgX3q75PdyXAiQ2xnyTcl +ntmmtZBbVkdEi32C3pNER9gTGlNOkTrQvQWs4PXYOTVenPa0vqcsdInR1aRHUjc Zc/SpVkzyGH1MZn/xH2noBzbXPRmUgAArrJnBefDVnoIjUHuxFyoM1eBbq3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIQyM2VX2oSwRAguQmwhpgTbEe0AwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaNtoKz1up6dAhiPFw6ARf5oT8+Xm9p9b/1 k+H9ay4wy136DYZ9myKlo77jJKUUOGHAlxakU6qkV6jkso7Od73vGwtXmp59thp8 EoXZRdmBk5eQHjOa0Ho7yy4Mu6KmVnV9Fia4mloCv4RwkxzNQsSlSug6EDVUqzv2 yqL5LLW5Ei5ucS4eLZA52l+rLFRwFVdGWro4dE5yK66EQcjGdeO6W3uheNS2O7kf WtTGj8jiLMg7MuPmhbtUe95OuIFQZrm7bFCSxztPv5EEBlgHa5BM/5cvDJFcuBZN SD26QYkmj6CphOKd7kxbdJ2hDzRqeiI2J6YNQTfb0SO+NMXh4+w= -----END CERTIFICATE-----Generated at Mon Sep 8 12:50:33 2025 by rpki-client