$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: +0809QG/mR6ZzIjlYoylkes/YvfDAI/Xc91mcKTEwK0= Subject key identifier: 13:F4:32:E2:41:E0:B8:FD:30:D2:55:ED:59:5D:35:9B:69:50:EB:FE Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: EEE163016F7EFB126A69E2A349F83886E38E62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 04CE Signing time: Mon 14 Apr 2025 04:30:42 +0000 Manifest this update: Mon 14 Apr 2025 04:25:42 +0000 Manifest next update: Thu 17 Apr 2025 10:41:42 +0000 Files and hashes: 1: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 2: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 3: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 4: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 5: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 6: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: 0n3I1/VBzu98cTdVFt1qC7Pkofr2BvlEzdvsLd58Im8=) 7: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: Nu+jtAlR20MdOPPD9+wPS1Li5cWc21ti1twNPSxgOq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 10:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ee:e1:63:01:6f:7e:fb:12:6a:69:e2:a3:49:f8:38:86:e3:8e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Apr 14 04:25:42 2025 GMT Not After : Apr 17 10:41:42 2025 GMT Subject: CN=13F432E241E0B8FD30D255ED595D359B6950EBFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:36:17:bf:3b:5e:eb:79:03:5f:05:3d:72: 13:24:39:58:0f:1f:64:5e:5b:12:47:d8:bb:8d:cd: b1:6d:98:0a:fe:52:c4:7a:ca:71:3a:3f:4b:a0:a1: 04:29:97:8b:03:83:2b:22:7d:92:eb:a6:c6:21:8e: e5:a4:b4:d8:33:2c:a2:33:65:c7:f2:f7:19:0c:94: 63:d3:ab:5e:2a:de:d3:00:f6:15:44:31:77:df:7a: 18:fb:03:73:3a:4f:84:ec:1b:7f:76:bc:69:85:42: 6b:87:de:dd:79:0d:25:a9:c5:4e:04:5a:a2:4b:de: a0:c9:66:91:4c:a1:1a:92:47:ec:a9:c0:06:36:1b: 57:90:81:0a:70:aa:1c:4e:f5:cc:6f:2c:e9:f5:a4: 99:1c:a8:34:dd:2b:fa:bb:2c:53:7b:71:00:4f:12: 5a:cf:58:f4:9d:3d:98:8e:36:b6:32:8d:55:cc:b3: e7:8f:25:a0:87:f5:9b:4d:3e:1d:27:79:65:22:f1: 37:ea:63:3e:a5:a8:68:e7:4c:95:00:25:d5:c2:7a: ee:87:97:16:d6:4d:c8:1c:71:a6:fb:1b:76:41:5f: ff:4d:34:b7:44:22:0f:e8:18:b1:2f:0c:73:59:ca: 00:3b:0a:85:48:a0:11:a6:f3:73:88:96:f8:7e:29: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F4:32:E2:41:E0:B8:FD:30:D2:55:ED:59:5D:35:9B:69:50:EB:FE X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b1:b9:29:1e:3a:db:3f:2f:d0:7f:ec:30:7f:5a:47:3f:cc: e5:ba:3d:44:b4:9a:91:c2:94:ee:31:a7:e1:bd:ec:c8:ba:9f: 55:5e:e0:da:a7:3d:96:e6:9a:2c:45:e2:76:20:59:bc:aa:91: 72:52:53:8a:40:81:e0:9b:7d:a8:fc:7e:a0:90:20:58:54:c8: f9:c3:7b:df:2c:42:22:69:37:3b:00:95:f4:6a:b9:9f:72:46: 3f:70:51:72:dc:c3:ea:7c:a4:fd:a0:ba:ee:6a:d6:ff:ca:22: 5f:6e:93:43:26:6e:9c:ff:66:59:8d:5b:63:5b:0b:8f:a8:48: b8:37:7f:11:05:99:05:79:c8:6a:89:09:79:d4:ba:62:ec:30: a5:2e:58:47:75:c8:ed:61:21:50:7a:2c:12:0e:b0:a6:0e:68: 37:22:c8:f4:ca:ea:42:e8:5b:6b:a2:7d:c0:2d:c0:8a:4c:e4: c1:2e:55:a0:bc:6c:b4:b0:1d:0c:fe:dc:b5:99:c6:5e:11:c9: f8:99:45:fb:76:de:68:16:ce:22:29:f8:f2:b2:49:77:e3:ca: fe:1f:89:8a:05:c0:c2:75:08:ac:79:b3:40:78:48:f6:09:04: 0a:cb:38:88:2a:1e:50:f3:7c:22:cd:93:85:87:76:6a:3a:9d: 8d:89:b5:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAO7hYwFvfvsSamnio0n4OIbjjmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA0MTQwNDI1NDJaFw0yNTA0MTcxMDQxNDJaMDMxMTAvBgNV BAMTKDEzRjQzMkUyNDFFMEI4RkQzMEQyNTVFRDU5NUQzNTlCNjk1MEVCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLzYXvzte63kDXwU9chMkOVgP H2ReWxJH2LuNzbFtmAr+UsR6ynE6P0ugoQQpl4sDgysifZLrpsYhjuWktNgzLKIz Zcfy9xkMlGPTq14q3tMA9hVEMXffehj7A3M6T4TsG392vGmFQmuH3t15DSWpxU4E WqJL3qDJZpFMoRqSR+ypwAY2G1eQgQpwqhxO9cxvLOn1pJkcqDTdK/q7LFN7cQBP ElrPWPSdPZiONrYyjVXMs+ePJaCH9ZtNPh0neWUi8TfqYz6lqGjnTJUAJdXCeu6H lxbWTcgccab7G3ZBX/9NNLdEIg/oGLEvDHNZygA7CoVIoBGm83OIlvh+KfFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE/Qy4kHguP0w0lXtWV01m2lQ6/4wHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECxuSkeOts/L9B/7DB/Wkc/zOW6PUS0mpHC lO4xp+G97Mi6n1Ve4NqnPZbmmixF4nYgWbyqkXJSU4pAgeCbfaj8fqCQIFhUyPnD e98sQiJpNzsAlfRquZ9yRj9wUXLcw+p8pP2guu5q1v/KIl9uk0Mmbpz/ZlmNW2Nb C4+oSLg3fxEFmQV5yGqJCXnUumLsMKUuWEd1yO1hIVB6LBIOsKYOaDciyPTK6kLo W2uifcAtwIpM5MEuVaC8bLSwHQz+3LWZxl4RyfiZRft23mgWziIp+PKySXfjyv4f iYoFwMJ1CKx5s0B4SPYJBArLOIgqHlDzfCLNk4WHdmo6nY2Jtfk= -----END CERTIFICATE-----Generated at Mon Apr 14 21:58:29 2025 by rpki-client