$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: zjFgu5wVZTrrtI4ZaRwpHH80bPscNHEUz/OFMdPnpfo= Subject key identifier: 98:39:A2:8A:A4:18:BC:D1:24:80:C6:23:7F:A6:C9:16:CA:C0:2E:AF Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 6C5A4EFAAB7DA2C826380DF97A2DBE2DC08CC634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 04E5 Signing time: Tue 03 Jun 2025 11:11:10 +0000 Manifest this update: Tue 03 Jun 2025 11:06:10 +0000 Manifest next update: Fri 06 Jun 2025 22:38:10 +0000 Files and hashes: 1: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 2: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 3: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: K2CBhIUlD5Zw31PiCZ9FRIL9MhIspqOUuEoYb73L3KI=) 4: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 5: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 6: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=) 7: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5a:4e:fa:ab:7d:a2:c8:26:38:0d:f9:7a:2d:be:2d:c0:8c:c6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Jun 3 11:06:10 2025 GMT Not After : Jun 6 22:38:10 2025 GMT Subject: CN=9839A28AA418BCD12480C6237FA6C916CAC02EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:38:b1:e2:88:7a:76:f7:7e:93:e1:54:20: 5e:d9:df:66:7d:75:ad:32:e3:41:e8:11:2f:59:bc: 35:d5:7e:51:aa:55:fd:2c:65:7a:05:42:d0:51:0b: 48:3c:85:54:00:88:d8:2b:c8:37:19:c3:ac:71:b0: 47:93:e2:e2:bb:03:4f:c0:6b:7d:74:d8:98:e9:39: 05:8a:75:c4:5f:cf:98:97:90:ba:50:70:7f:ac:38: 29:2b:cb:ee:3b:54:ac:7c:95:9a:43:03:8e:c6:02: 11:ff:4b:ef:16:4a:51:70:b7:93:c9:0f:52:ad:e3: 90:84:de:00:b5:83:f8:c1:87:22:6e:87:49:5e:d9: 52:c0:21:cc:ed:21:4c:8c:c2:be:07:0e:aa:6f:dd: 96:54:04:a9:7e:63:9e:ee:09:2f:57:5b:6e:d6:2e: a2:bc:04:f8:84:aa:79:87:2a:5f:1a:70:20:d8:08: c6:19:04:34:d0:2e:dd:e2:68:e1:f7:61:10:54:c7: 59:6b:99:86:c4:be:c7:8a:df:47:7e:cf:0b:2f:60: 63:07:a9:ca:f9:59:df:56:3e:e3:ef:e1:bd:4b:a0: 15:cc:76:93:c4:cb:0e:44:ba:41:d9:75:0d:dc:94: 3e:e4:a0:56:7b:13:40:8a:2a:70:d3:06:3d:89:0e: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:39:A2:8A:A4:18:BC:D1:24:80:C6:23:7F:A6:C9:16:CA:C0:2E:AF X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a4:f4:92:dc:c6:93:af:4f:13:02:79:e6:00:f1:9b:7f:2e: 9e:19:07:23:81:40:a1:71:87:52:26:73:20:37:f2:7f:28:f9: 9d:32:d9:16:1e:fb:95:56:06:61:28:28:20:48:e9:cb:fa:14: 5c:96:80:25:67:a9:e7:46:f8:4c:80:c3:94:bd:45:55:d8:0f: 70:c8:40:54:d0:9b:f9:34:9c:ca:13:b0:78:55:e0:c3:a2:bc: 0b:72:56:09:5a:02:ea:2b:1e:a9:73:bd:af:bf:71:b9:d5:0d: ce:7d:a6:40:12:18:88:24:13:fe:f6:07:fc:a2:6c:ea:e3:d9: 2d:ff:6a:51:d3:34:a8:90:3c:e0:2d:24:90:7f:16:c6:ba:ed: 97:f4:a7:99:09:1b:4a:d0:e0:47:da:c3:22:d8:55:5b:81:46: e9:f7:dc:88:e4:c7:73:54:15:b4:c2:9e:eb:b0:cd:30:ac:41: 9a:b5:53:85:37:40:8a:c8:b4:0c:e7:03:c0:e4:da:25:23:8d: 68:21:45:11:1c:d8:2d:09:30:5a:aa:05:2e:a5:a2:a5:e0:0e: 4b:e3:81:d1:00:29:e2:bb:b9:59:69:31:b1:50:06:e4:ea:ab: d8:ec:7e:ee:0d:95:17:12:5c:34:d7:e1:6f:5f:34:05:1d:04: e1:76:f9:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFpO+qt9osgmOA35ei2+LcCMxjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA2MDMxMTA2MTBaFw0yNTA2MDYyMjM4MTBaMDMxMTAvBgNV BAMTKDk4MzlBMjhBQTQxOEJDRDEyNDgwQzYyMzdGQTZDOTE2Q0FDMDJFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuTix4oh6dvd+k+FUIF7Z32Z9 da0y40HoES9ZvDXVflGqVf0sZXoFQtBRC0g8hVQAiNgryDcZw6xxsEeT4uK7A0/A a3102JjpOQWKdcRfz5iXkLpQcH+sOCkry+47VKx8lZpDA47GAhH/S+8WSlFwt5PJ D1Kt45CE3gC1g/jBhyJuh0le2VLAIcztIUyMwr4HDqpv3ZZUBKl+Y57uCS9XW27W LqK8BPiEqnmHKl8acCDYCMYZBDTQLt3iaOH3YRBUx1lrmYbEvseK30d+zwsvYGMH qcr5Wd9WPuPv4b1LoBXMdpPEyw5EukHZdQ3clD7koFZ7E0CKKnDTBj2JDgWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmDmiiqQYvNEkgMYjf6bJFsrALq8wHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAak9JLcxpOvTxMCeeYA8Zt/Lp4ZByOBQKFx h1ImcyA38n8o+Z0y2RYe+5VWBmEoKCBI6cv6FFyWgCVnqedG+EyAw5S9RVXYD3DI QFTQm/k0nMoTsHhV4MOivAtyVglaAuorHqlzva+/cbnVDc59pkASGIgkE/72B/yi bOrj2S3/alHTNKiQPOAtJJB/Fsa67Zf0p5kJG0rQ4EfawyLYVVuBRun33Ijkx3NU FbTCnuuwzTCsQZq1U4U3QIrItAznA8Dk2iUjjWghRREc2C0JMFqqBS6loqXgDkvj gdEAKeK7uVlpMbFQBuTqq9jsfu4NlRcSXDTX4W9fNAUdBOF2+dY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:01 2025 by rpki-client