$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft File: C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft (raw, json) Hash identifier: 2VbAwHphWRuQDbY59XrUgGKMrECbqlQ1VM5zmu9+Rbg= Subject key identifier: 35:85:5B:E9:C3:73:B3:DE:FF:3B:CA:85:C8:1E:2A:12:DD:06:45:80 Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Certificate serial: 193D0B538354189FA5ED340786A3DAA02191180F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft Manifest number: 04A1 Signing time: Sat 23 Aug 2025 05:31:43 +0000 Manifest this update: Sat 23 Aug 2025 05:26:43 +0000 Manifest next update: Tue 26 Aug 2025 16:06:43 +0000 Files and hashes: 1: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: R89NTAfJB/Q21U8fZyxSLP5VcqJL2ym88fO/Tfizi7k=) 2: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: Gu4z/TicFIzPRfVFPjPwNw+O9TKOGKFGxX8ZTBLU804=) 3: C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl (hash: lf8eWD7E/1N624EkTSWgMvd9vI5zfRW4feWGC+VFros=) 4: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: MBF2dghp13jDIOU1/lpHNzFCYy94dDfIsyDMymHiQhI=) 5: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: Fa1BBduh1gl/xBGjjR60dz1JaOLS2OIaiwS3v1AW/hE=) 6: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: swm7esqrs9+TeJiRu8vyWlNuRSKHTEDLuKkoMRZvt8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3d:0b:53:83:54:18:9f:a5:ed:34:07:86:a3:da:a0:21:91:18:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Validity Not Before: Aug 23 05:26:43 2025 GMT Not After : Aug 26 16:06:43 2025 GMT Subject: CN=35855BE9C373B3DEFF3BCA85C81E2A12DD064580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:35:e9:9a:d2:93:bb:c4:78:c1:ee:34:88: 29:e6:f5:54:fc:14:ec:fc:ce:b6:e1:62:0f:8a:78: ac:7b:fb:cd:1b:d7:4d:e4:87:ee:36:67:32:36:3d: 32:9f:de:4f:93:4a:36:1b:f6:4d:e9:b9:32:d6:7d: 56:34:3b:ee:3b:d1:31:9f:69:78:72:e2:72:fc:43: 33:06:50:35:9e:74:1b:2c:f3:6f:42:74:27:34:4c: 66:75:94:18:3f:f4:d9:20:12:47:dc:25:e6:9d:19: c5:0d:9d:96:48:e8:78:ee:d8:ea:d6:a6:42:9a:6b: 62:70:07:94:7d:01:c9:95:25:8d:f5:f6:40:0e:0a: 3f:91:cb:02:e9:f2:9e:e2:1a:77:8d:3b:88:93:d5: 25:47:64:59:31:b3:1c:8d:aa:5d:2d:70:b7:a7:e3: e6:ce:77:ee:e5:b5:be:6d:1d:8e:1e:1a:34:78:85: d8:51:a6:23:cf:1f:16:80:22:9f:28:94:44:fa:f2: 3c:84:39:36:c9:10:fa:49:31:06:9b:b1:37:7e:2d: ea:c5:bc:b7:1f:35:4b:02:1a:48:1e:59:2f:b7:46: c9:eb:3e:3c:7b:fa:76:21:1a:fe:21:b3:0b:54:39: 7c:75:77:85:ad:30:29:aa:45:80:bb:53:76:80:3b: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:85:5B:E9:C3:73:B3:DE:FF:3B:CA:85:C8:1E:2A:12:DD:06:45:80 X509v3 Authority Key Identifier: keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6e:b4:3b:21:4f:a5:76:6d:84:bd:0e:1d:78:0a:ab:f3:5b: 8a:91:87:76:d8:fc:59:06:23:c5:2b:d2:7b:e3:04:8d:e7:18: 4d:ff:f9:59:cb:41:97:e2:5f:b3:00:6b:94:06:75:8a:b1:0b: 9b:e8:68:73:34:e3:c6:88:94:75:f4:d0:bf:7c:8e:45:4d:3b: 26:61:8f:9e:f7:f8:51:3b:68:c2:62:f0:38:92:9d:9d:43:ef: 15:54:c4:79:09:78:0f:e5:d2:0f:67:29:52:16:b7:ae:3a:70: 21:3a:59:ff:f4:4d:b0:ab:6b:ab:d0:37:8e:6e:42:c8:b4:12: 7a:eb:b0:a9:c9:ba:99:68:d0:15:9a:2d:3a:a4:c9:13:eb:bd: ba:90:d5:c7:64:a9:69:27:40:16:be:b7:54:80:c2:15:f5:0c: cc:d8:65:ea:6f:bc:8d:38:54:97:d5:e1:15:25:32:97:aa:68: 74:57:91:a8:ec:b8:56:27:b5:66:74:c7:d4:0a:40:d2:4f:05: f9:72:bc:8f:df:6f:67:86:5b:e5:0f:d4:9d:36:fd:43:ac:af: 5e:c1:21:7c:3f:4b:ed:b5:f7:86:3a:df:90:fb:53:ba:86:fd: 2c:0c:c2:67:8c:cb:3c:ac:2b:4d:e7:20:39:ca:53:d6:d1:80: f1:6a:91:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGT0LU4NUGJ+l7TQHhqPaoCGRGA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5 NThERUZGNzAeFw0yNTA4MjMwNTI2NDNaFw0yNTA4MjYxNjA2NDNaMDMxMTAvBgNV BAMTKDM1ODU1QkU5QzM3M0IzREVGRjNCQ0E4NUM4MUUyQTEyREQwNjQ1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWDXpmtKTu8R4we40iCnm9VT8 FOz8zrbhYg+KeKx7+80b103kh+42ZzI2PTKf3k+TSjYb9k3puTLWfVY0O+470TGf aXhy4nL8QzMGUDWedBss829CdCc0TGZ1lBg/9NkgEkfcJeadGcUNnZZI6Hju2OrW pkKaa2JwB5R9AcmVJY319kAOCj+RywLp8p7iGneNO4iT1SVHZFkxsxyNql0tcLen 4+bOd+7ltb5tHY4eGjR4hdhRpiPPHxaAIp8olET68jyEOTbJEPpJMQabsTd+LerF vLcfNUsCGkgeWS+3RsnrPjx7+nYhGv4hswtUOXx1d4WtMCmqRYC7U3aAOys/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYVb6cNzs97/O8qFyB4qEt0GRYAwHwYDVR0j BBgwFoAUxipUHHMj9s0jj1SbH4c27ZWN7/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc0ODU2Zi03NDUzLTRkMDItYmMzNS0zNDgyZWI1NjQ2YTIvMC9DNjJBNTQxQzcz MjNGNkNEMjM4RjU0OUIxRjg3MzZFRDk1OERFRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5NThE RUZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2 RUQ5NThERUZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNutDshT6V2bYS9Dh14CqvzW4qRh3bY/FkG I8Ur0nvjBI3nGE3/+VnLQZfiX7MAa5QGdYqxC5voaHM048aIlHX00L98jkVNOyZh j573+FE7aMJi8DiSnZ1D7xVUxHkJeA/l0g9nKVIWt646cCE6Wf/0TbCra6vQN45u Qsi0EnrrsKnJuplo0BWaLTqkyRPrvbqQ1cdkqWknQBa+t1SAwhX1DMzYZepvvI04 VJfV4RUlMpeqaHRXkajsuFYntWZ0x9QKQNJPBflyvI/fb2eGW+UP1J02/UOsr17B IXw/S+2194Y635D7U7qG/SwMwmeMyzysK03nIDnKU9bRgPFqkWA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:07 2025 by rpki-client