$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: Vu+5pDz/1fVuBmKBAW4/7SZsRY8vRV+NT4rRv9dNj6c= Subject key identifier: AE:CB:02:E9:85:0B:0C:E9:F5:11:67:5E:5F:23:A6:F5:48:A3:AC:B0 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 53D46D9D84DF6712449775E21E5AC019F6F1EF90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 01B2 Signing time: Thu 08 May 2025 01:01:39 +0000 Manifest this update: Thu 08 May 2025 00:56:39 +0000 Manifest next update: Sun 11 May 2025 05:58:39 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: LVSCMc7vfnzRcaQCBVnLhOspmvGT6C720G71HkuX20g=) 2: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: KDYzEbdHeFxh0UHouiPCvvLuFetQVIB9V0SyKCEujsk=) 3: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: SEQ6tg3JngKo4EuPEoreDiNfhhs+RQhioJdhjUZ/tYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 05:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:6d:9d:84:df:67:12:44:97:75:e2:1e:5a:c0:19:f6:f1:ef:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: May 8 00:56:39 2025 GMT Not After : May 11 05:58:39 2025 GMT Subject: CN=AECB02E9850B0CE9F511675E5F23A6F548A3ACB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:af:31:69:cd:56:eb:a4:ea:89:1a:03:64: 0d:13:78:6a:2a:2f:85:ba:2f:e9:a0:90:b9:2a:1f: 6e:23:a9:8f:01:7d:5e:73:1a:60:a8:83:79:04:88: 04:76:56:a1:89:9f:6a:aa:13:fc:69:45:93:19:25: f9:a9:ea:77:e2:73:05:66:b6:f5:49:02:d6:22:76: 82:6d:14:55:af:5c:8a:e1:35:1c:4a:e0:c0:99:42: 16:9b:49:61:68:0b:db:9b:12:c1:90:4b:a8:fb:0f: c2:df:fc:9b:a7:dd:42:28:3a:7f:3b:45:ec:0b:8f: 55:d1:cf:62:7c:da:16:b2:0f:13:95:69:03:4d:d1: 18:c7:f1:0d:7c:17:27:45:ed:6e:88:1b:bd:bd:44: 72:cc:d1:4c:da:ef:f8:2c:00:45:b0:e5:69:1f:62: 39:be:ca:fc:73:f8:98:37:fc:41:6e:50:34:da:41: ae:b5:cc:02:d7:8f:34:29:48:f7:08:e5:0c:20:d9: e1:16:cc:3b:38:be:e8:29:f2:b3:4b:29:a8:24:0b: c7:00:2b:37:2b:dc:fc:64:78:5f:3f:7c:76:8f:fb: 1e:40:0a:fb:c7:1e:9e:da:b4:dc:b8:03:28:cf:cc: 6d:ad:b3:f5:3e:de:51:a6:b9:6d:de:30:f7:e6:43: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CB:02:E9:85:0B:0C:E9:F5:11:67:5E:5F:23:A6:F5:48:A3:AC:B0 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:cc:f5:c2:32:65:cd:ac:fc:92:15:41:e1:dd:d1:76:65:69: 85:c0:df:db:03:ad:4c:85:5e:c2:52:e2:2e:cb:39:04:27:9a: a3:c6:fb:ad:a2:79:04:0d:d1:fa:af:36:cb:3f:5f:dc:00:6b: 9a:a3:0f:fa:9c:31:70:e0:8b:07:c7:ed:32:5a:fe:bb:fd:45: 48:9e:ba:6d:8b:58:f8:69:a6:ee:99:3b:f1:ce:e2:60:94:eb: 5d:d9:ef:2a:4e:9d:c9:ca:14:f8:62:f5:62:90:a4:3f:72:be: 99:80:6d:cc:e3:39:67:0f:c6:20:0c:1f:43:55:1f:c2:41:e6: d8:82:3f:39:85:e7:e0:93:d4:10:6c:77:bf:34:a3:b7:1a:15: 97:8c:5f:af:4d:c1:80:c7:0d:e1:65:ab:9b:ed:80:31:36:b8: d6:dc:e5:bc:77:ab:53:7b:e4:61:87:f5:68:d2:9c:a2:38:e6: 64:9e:ad:b1:a0:d4:6c:02:2d:c6:cd:94:f5:5c:5f:04:ed:33: c9:39:4a:1e:0b:24:85:14:be:c5:eb:c4:17:1a:ff:b5:f7:f3: 8a:17:1f:93:3a:83:1c:29:73:ec:f1:98:72:f6:2a:59:e7:d4: 57:72:f4:7a:96:15:e5:6a:e3:da:15:83:22:28:20:29:8d:3a: 3b:78:3d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9RtnYTfZxJEl3XiHlrAGfbx75AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTA1MDgwMDU2MzlaFw0yNTA1MTEwNTU4MzlaMDMxMTAvBgNV BAMTKEFFQ0IwMkU5ODUwQjBDRTlGNTExNjc1RTVGMjNBNkY1NDhBM0FDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6e68xac1W66TqiRoDZA0TeGoq L4W6L+mgkLkqH24jqY8BfV5zGmCog3kEiAR2VqGJn2qqE/xpRZMZJfmp6nficwVm tvVJAtYidoJtFFWvXIrhNRxK4MCZQhabSWFoC9ubEsGQS6j7D8Lf/Jun3UIoOn87 RewLj1XRz2J82hayDxOVaQNN0RjH8Q18FydF7W6IG729RHLM0Uza7/gsAEWw5Wkf Yjm+yvxz+Jg3/EFuUDTaQa61zALXjzQpSPcI5Qwg2eEWzDs4vugp8rNLKagkC8cA Kzcr3PxkeF8/fHaP+x5ACvvHHp7atNy4AyjPzG2ts/U+3lGmuW3eMPfmQ+bjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrssC6YULDOn1EWdeXyOm9UijrLAwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDM9cIyZc2s/JIVQeHd0XZlaYXA39sDrUyF XsJS4i7LOQQnmqPG+62ieQQN0fqvNss/X9wAa5qjD/qcMXDgiwfH7TJa/rv9RUie um2LWPhppu6ZO/HO4mCU613Z7ypOncnKFPhi9WKQpD9yvpmAbczjOWcPxiAMH0NV H8JB5tiCPzmF5+CT1BBsd780o7caFZeMX69NwYDHDeFlq5vtgDE2uNbc5bx3q1N7 5GGH9WjSnKI45mSerbGg1GwCLcbNlPVcXwTtM8k5Sh4LJIUUvsXrxBca/7X384oX H5M6gxwpc+zxmHL2Klnn1Fdy9HqWFeVq49oVgyIoICmNOjt4Pek= -----END CERTIFICATE-----Generated at Thu May 8 11:37:12 2025 by rpki-client