$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft File: C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft (raw, json) Hash identifier: Xgrjkp83Kf4UHNPP2feEg/baDY0zxg+jEhTj3dUTcl8= Subject key identifier: 56:86:8B:A0:5C:44:DE:4F:14:5C:A8:8F:22:6A:E5:AD:A8:9E:D2:2D Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Certificate serial: 2A89037B22E8451D1915FAE500BECE5FC27065E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft Manifest number: 0489 Signing time: Sun 29 Jun 2025 05:41:43 +0000 Manifest this update: Sun 29 Jun 2025 05:36:43 +0000 Manifest next update: Wed 02 Jul 2025 09:38:43 +0000 Files and hashes: 1: C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl (hash: wy4JYPpTxP9ieadwjWUM5MNy9eKLYw1A8EJZK8ItFVU=) 2: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: Gu4z/TicFIzPRfVFPjPwNw+O9TKOGKFGxX8ZTBLU804=) 3: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: Fa1BBduh1gl/xBGjjR60dz1JaOLS2OIaiwS3v1AW/hE=) 4: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: MBF2dghp13jDIOU1/lpHNzFCYy94dDfIsyDMymHiQhI=) 5: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: swm7esqrs9+TeJiRu8vyWlNuRSKHTEDLuKkoMRZvt8o=) 6: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: R89NTAfJB/Q21U8fZyxSLP5VcqJL2ym88fO/Tfizi7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:89:03:7b:22:e8:45:1d:19:15:fa:e5:00:be:ce:5f:c2:70:65:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Validity Not Before: Jun 29 05:36:43 2025 GMT Not After : Jul 2 09:38:43 2025 GMT Subject: CN=56868BA05C44DE4F145CA88F226AE5ADA89ED22D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:b8:f9:b8:d8:c5:09:ba:4e:00:71:07:49: 65:aa:91:24:c7:e3:a7:33:82:43:e4:f9:d2:8a:96: 81:79:9b:be:e5:c2:cc:f2:da:15:a2:8b:9f:de:a5: fb:88:19:11:20:eb:e3:ed:3d:99:4e:56:42:3c:44: 3a:1b:c1:09:91:6f:de:d0:f7:eb:b0:5f:2a:fd:34: b7:cc:1d:7f:26:62:a1:39:dd:c4:df:8d:a8:36:d1: 3d:eb:90:70:6c:d8:6a:4e:74:3b:fa:1c:f1:2f:c3: ac:11:c4:25:81:37:34:f9:d4:a8:a6:bb:14:ae:21: f6:83:c7:90:21:ae:3c:17:90:87:bf:e0:b4:fd:9f: 64:4d:46:0d:32:3f:7d:c6:a7:e9:b8:b0:46:12:f8: 7d:64:28:fe:d5:2d:94:2e:a0:0f:03:f2:2b:d3:50: f1:4e:dc:b0:a7:27:c2:e8:cf:de:d9:ec:7f:fd:a5: c4:03:a6:9f:1e:8f:6f:24:72:41:f1:08:1f:60:c2: f4:a7:4b:fd:6c:10:a0:08:8b:c4:fa:c9:7d:7e:29: 65:0a:15:94:9c:b9:1a:c0:d7:1c:64:b8:8b:ef:85: 39:af:7a:dd:ff:fb:6a:ba:cf:b6:61:d9:d4:16:08: ea:fc:b7:f7:57:45:3b:e7:77:30:08:5d:b2:29:69: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:86:8B:A0:5C:44:DE:4F:14:5C:A8:8F:22:6A:E5:AD:A8:9E:D2:2D X509v3 Authority Key Identifier: keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e1:eb:57:64:db:e6:95:59:53:e4:c7:63:8c:61:d6:23:02: b0:07:39:54:02:42:1b:db:5b:93:e6:ac:2f:8b:bb:d7:64:46: 4a:d6:33:4e:ff:df:5b:95:e6:e6:78:2e:1a:64:fe:d0:c1:ee: 1f:36:3f:37:e1:85:62:f9:98:0f:98:b6:89:e0:02:8e:f5:08: f5:ab:8b:61:88:69:be:b2:b1:ab:f0:94:77:e5:23:f8:1e:38: 43:92:5c:0e:f0:6e:c2:ec:a0:b0:20:84:63:8f:54:86:54:af: f2:b4:40:74:ca:c0:51:19:e3:fc:76:c5:c8:8a:ed:d9:8e:cf: 77:b2:55:33:cb:8a:e2:b0:64:d1:9c:16:01:35:92:5f:04:83: 2f:53:4e:fd:90:6e:ea:f7:3a:c3:9e:a7:30:f4:ed:69:e1:ed: 74:bd:a6:b3:84:85:b3:74:90:c4:8b:40:ee:cf:f1:a9:4d:ef: 11:33:e9:36:70:b0:f3:a6:02:ea:ca:ad:44:16:8f:d4:f3:54: e9:1a:61:fb:a9:43:b3:bd:e7:c8:79:7a:16:e0:ea:06:51:a6: 2a:12:ea:df:2e:3e:63:d5:5a:7f:58:17:b6:8c:10:9b:84:da: 5e:28:da:72:09:47:69:47:4f:9f:d0:74:2d:0c:7f:b5:19:32: 9e:1f:0c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKokDeyLoRR0ZFfrlAL7OX8JwZeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5 NThERUZGNzAeFw0yNTA2MjkwNTM2NDNaFw0yNTA3MDIwOTM4NDNaMDMxMTAvBgNV BAMTKDU2ODY4QkEwNUM0NERFNEYxNDVDQTg4RjIyNkFFNUFEQTg5RUQyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHbj5uNjFCbpOAHEHSWWqkSTH 46czgkPk+dKKloF5m77lwszy2hWii5/epfuIGREg6+PtPZlOVkI8RDobwQmRb97Q 9+uwXyr9NLfMHX8mYqE53cTfjag20T3rkHBs2GpOdDv6HPEvw6wRxCWBNzT51Kim uxSuIfaDx5AhrjwXkIe/4LT9n2RNRg0yP33Gp+m4sEYS+H1kKP7VLZQuoA8D8ivT UPFO3LCnJ8Loz97Z7H/9pcQDpp8ej28kckHxCB9gwvSnS/1sEKAIi8T6yX1+KWUK FZScuRrA1xxkuIvvhTmvet3/+2q6z7Zh2dQWCOr8t/dXRTvndzAIXbIpaeMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVoaLoFxE3k8UXKiPImrlraie0i0wHwYDVR0j BBgwFoAUxipUHHMj9s0jj1SbH4c27ZWN7/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc0ODU2Zi03NDUzLTRkMDItYmMzNS0zNDgyZWI1NjQ2YTIvMC9DNjJBNTQxQzcz MjNGNkNEMjM4RjU0OUIxRjg3MzZFRDk1OERFRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5NThE RUZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2 RUQ5NThERUZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDh61dk2+aVWVPkx2OMYdYjArAHOVQCQhvb W5PmrC+Lu9dkRkrWM07/31uV5uZ4Lhpk/tDB7h82PzfhhWL5mA+YtongAo71CPWr i2GIab6ysavwlHflI/geOEOSXA7wbsLsoLAghGOPVIZUr/K0QHTKwFEZ4/x2xciK 7dmOz3eyVTPLiuKwZNGcFgE1kl8Egy9TTv2Qbur3OsOepzD07Wnh7XS9prOEhbN0 kMSLQO7P8alN7xEz6TZwsPOmAurKrUQWj9TzVOkaYfupQ7O958h5ehbg6gZRpioS 6t8uPmPVWn9YF7aMEJuE2l4o2nIJR2lHT5/QdC0Mf7UZMp4fDOI= -----END CERTIFICATE-----Generated at Tue Jul 1 09:07:43 2025 by rpki-client