$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: k6N0BLyE06gSu5WGEoQFkGgjnbODilThBkzm0p9Jznw= Subject key identifier: B7:44:17:61:62:67:FE:AA:AB:FE:BC:EC:E4:50:B8:53:C8:10:41:68 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 72BCCB4924F60A10D2B782F0E0FB6CBCA6F1B4EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 01E5 Signing time: Fri 22 Aug 2025 20:41:43 +0000 Manifest this update: Fri 22 Aug 2025 20:36:43 +0000 Manifest next update: Mon 25 Aug 2025 23:53:43 +0000 Files and hashes: 1: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: UCfbt2czfVbi7BcmzN33QPlvrOzGMxrbgQvqUsJmymc=) 2: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=) 3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=) 4: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bc:cb:49:24:f6:0a:10:d2:b7:82:f0:e0:fb:6c:bc:a6:f1:b4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Aug 22 20:36:43 2025 GMT Not After : Aug 25 23:53:43 2025 GMT Subject: CN=B74417616267FEAAABFEBCECE450B853C8104168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:8e:8c:c4:3f:6f:b7:2f:0b:26:b6:76:a2: e4:49:3d:d0:cc:a2:14:bf:ed:e8:a0:43:54:5f:f0: f3:47:16:a7:57:dc:c6:60:8e:ca:51:81:1c:f9:cc: 5a:f6:7e:4c:f8:3c:01:04:44:20:bc:4c:82:f9:54: 6c:32:3b:3c:5d:82:1d:a3:49:3b:eb:b0:3d:f3:31: 41:6a:9e:fa:bf:da:07:9d:a7:ec:f0:22:0f:87:3a: 21:d6:6c:50:a4:50:a0:8b:29:e7:ff:97:fc:67:cf: 8c:16:d4:57:e1:ed:04:47:1e:8c:ed:f7:c3:27:f7: 5c:ef:cf:16:77:73:5d:29:f7:8d:ff:cb:af:1d:49: 99:4a:31:7b:b7:51:7e:e2:fa:4b:ae:a2:b9:c9:4d: 81:b7:db:a9:08:e3:e2:80:93:b9:6c:2a:59:f0:0a: 4d:35:ca:56:ec:18:f6:f7:b7:16:74:e4:b4:c9:74: 09:42:89:0d:89:f8:ed:06:96:7a:2f:84:7c:86:8c: 5a:79:9b:d6:f6:2f:81:65:91:43:65:5a:31:5c:9e: 33:c4:6a:92:22:58:83:ca:80:63:bf:60:e5:a7:b2: 8a:d1:32:d0:bb:28:2c:6a:19:bc:18:1f:ba:c4:91: 3d:27:d5:be:24:ab:bb:f2:0e:64:d7:c4:b5:8b:ad: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:44:17:61:62:67:FE:AA:AB:FE:BC:EC:E4:50:B8:53:C8:10:41:68 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:55:d9:3f:bf:0a:cc:4e:0e:29:4f:3e:dd:b0:a1:46:f5:ae: 8a:8a:c0:71:67:a6:03:bf:d1:07:94:79:f2:8c:f5:80:67:76: 51:ba:f4:bf:00:f9:fa:cd:37:e9:a3:dd:9b:53:30:fa:ac:34: 7e:9b:35:91:5b:eb:f0:d3:7b:71:3a:cf:a3:ac:86:ee:04:3f: 67:af:97:44:c7:ba:78:97:fb:7a:bf:03:9a:64:1a:8f:da:60: 7a:ac:5f:16:69:3e:91:2e:e1:49:9a:83:ef:18:28:0b:95:39: 7d:4f:da:43:6d:ad:c5:c5:a7:31:94:84:38:43:7f:26:05:bb: 9d:c4:0f:50:7d:ef:be:90:85:9a:e7:cc:ca:b1:6d:54:15:9f: 17:9d:7c:fa:3e:9d:fd:0f:05:5e:05:58:4d:82:2e:60:08:57: 1d:55:21:74:54:8d:3d:5d:7c:79:35:80:fc:e7:20:25:cf:6a: db:8d:fd:a4:6e:89:1e:5c:83:39:55:ab:28:07:1a:be:0b:d0: 0b:11:58:1b:74:53:03:9f:70:f3:36:8b:e5:fa:1c:3d:5e:68: c2:73:53:d6:80:95:8a:af:96:68:03:c7:cf:21:d1:ca:63:ff: 1a:cd:d6:03:41:0f:36:7b:99:f7:3f:94:93:fd:b7:48:7e:13: e2:0f:5b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrzLSST2ChDSt4Lw4PtsvKbxtO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTA4MjIyMDM2NDNaFw0yNTA4MjUyMzUzNDNaMDMxMTAvBgNV BAMTKEI3NDQxNzYxNjI2N0ZFQUFBQkZFQkNFQ0U0NTBCODUzQzgxMDQxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCI6MxD9vty8LJrZ2ouRJPdDM ohS/7eigQ1Rf8PNHFqdX3MZgjspRgRz5zFr2fkz4PAEERCC8TIL5VGwyOzxdgh2j STvrsD3zMUFqnvq/2gedp+zwIg+HOiHWbFCkUKCLKef/l/xnz4wW1Ffh7QRHHozt 98Mn91zvzxZ3c10p943/y68dSZlKMXu3UX7i+kuuornJTYG326kI4+KAk7lsKlnw Ck01ylbsGPb3txZ05LTJdAlCiQ2J+O0GlnovhHyGjFp5m9b2L4FlkUNlWjFcnjPE apIiWIPKgGO/YOWnsorRMtC7KCxqGbwYH7rEkT0n1b4kq7vyDmTXxLWLrXyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0QXYWJn/qqr/rzs5FC4U8gQQWgwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBV2T+/CsxODilPPt2woUb1roqKwHFnpgO/ 0QeUefKM9YBndlG69L8A+frNN+mj3ZtTMPqsNH6bNZFb6/DTe3E6z6Oshu4EP2ev l0THuniX+3q/A5pkGo/aYHqsXxZpPpEu4Umag+8YKAuVOX1P2kNtrcXFpzGUhDhD fyYFu53ED1B9776QhZrnzMqxbVQVnxedfPo+nf0PBV4FWE2CLmAIVx1VIXRUjT1d fHk1gPznICXPatuN/aRuiR5cgzlVqygHGr4L0AsRWBt0UwOfcPM2i+X6HD1eaMJz U9aAlYqvlmgDx88h0cpj/xrN1gNBDzZ7mfc/lJP9t0h+E+IPWy0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:48 2025 by rpki-client