$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: 8OP4ChVFfGUs0m/AtLi4AFQbdPBO/5L204MePKumYK0= Subject key identifier: 20:1B:5F:9D:30:5C:E6:87:8C:BB:2F:1E:89:F4:BD:6C:53:0F:B7:21 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 378FCB214F7A4A6B7C4A0C4BACCFAF986F9E6583 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 04F0 Signing time: Sun 29 Jun 2025 04:10:42 +0000 Manifest this update: Sun 29 Jun 2025 04:05:42 +0000 Manifest next update: Wed 02 Jul 2025 15:04:42 +0000 Files and hashes: 1: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 2: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 3: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: F2t1Ts6zghoNvIkGXM4bHdZzG6PaPyReOBA7jdcH1fE=) 4: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=) 5: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 6: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 7: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8f:cb:21:4f:7a:4a:6b:7c:4a:0c:4b:ac:cf:af:98:6f:9e:65:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Jun 29 04:05:42 2025 GMT Not After : Jul 2 15:04:42 2025 GMT Subject: CN=201B5F9D305CE6878CBB2F1E89F4BD6C530FB721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:8d:6e:73:7b:59:58:43:bc:d0:18:c5:de: db:5d:e9:a3:a7:10:b6:cd:7d:07:0f:27:e3:93:3e: 1d:7a:cc:2b:60:dc:87:fd:4a:21:73:a8:7d:ae:dd: 75:5b:64:98:21:e9:1d:cb:71:ef:8f:fb:ce:34:6a: ac:1e:1b:ca:17:35:e4:b2:f7:91:19:67:e2:31:39: d9:7c:04:0a:c7:d3:b3:c3:6a:2f:24:9b:6d:1b:96: d1:61:7e:d9:5f:b6:f7:78:28:d1:1c:25:09:23:e8: 12:57:80:1e:1d:1a:a2:6b:91:13:35:77:82:5d:f2: 5d:99:1c:10:77:22:32:04:18:c7:f1:dc:5f:c0:0d: f4:31:5f:76:0b:b2:24:81:16:e9:d7:47:0f:ce:cf: 61:ba:1a:58:42:0f:a7:7c:5c:f3:08:18:e2:af:ea: 97:41:88:3b:ea:0c:09:3f:1a:14:82:15:dc:2a:81: 48:32:9a:e8:1a:88:a8:75:ed:a1:2e:32:49:81:2b: 7a:2e:b9:99:5c:27:80:da:5e:3e:63:7c:9e:ff:24: 6d:8a:69:c6:83:f1:e5:f6:c4:4e:03:f2:41:e5:17: ed:f9:e4:63:96:c6:78:9a:e9:47:03:4b:70:66:8c: 29:bb:4b:41:51:54:72:a8:63:8a:5c:e5:10:68:8c: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1B:5F:9D:30:5C:E6:87:8C:BB:2F:1E:89:F4:BD:6C:53:0F:B7:21 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5e:b1:f1:37:c7:01:ec:ad:d2:dc:0a:ba:44:1d:6c:7a:2f: f7:ce:ca:48:26:e1:26:45:b9:b6:84:48:41:c0:d6:5d:b9:f5: fb:d3:2c:ae:33:3a:62:fe:db:65:90:f3:a2:69:bc:21:dd:8a: 31:fe:e7:25:97:e0:bf:b9:ff:2d:10:0b:be:a8:63:04:06:63: 7b:d9:fc:f7:41:48:c5:32:a3:c2:ed:b1:19:2b:65:6f:1e:b8: 61:a2:23:88:20:4b:5c:93:37:a5:d9:03:2e:2d:5a:7d:34:3e: af:91:14:85:17:9b:81:5a:51:7e:2e:6d:91:d1:4f:0d:74:ad: 81:96:08:a9:c4:f0:ea:98:5b:47:c4:38:6b:39:0a:47:db:74: 22:58:9c:ef:be:fd:bb:dd:ab:48:40:9c:4a:de:1a:5d:16:e0: 16:a0:96:30:c2:5d:ef:25:2e:f1:30:da:45:b5:1e:46:a6:3a: cb:c0:53:16:ad:a4:a2:69:0e:33:4e:1c:b1:c5:97:75:3f:73: 3f:af:e2:25:e2:2e:b2:58:9b:dd:46:37:37:44:15:8f:92:9a: d3:e8:b7:1b:11:e3:3b:4a:fc:f9:b6:fe:a0:c5:fd:fe:e1:55: d4:34:48:92:67:e4:f9:6f:93:b1:e3:c6:f4:30:00:c7:55:48: f0:8e:7d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4/LIU96Smt8SgxLrM+vmG+eZYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA2MjkwNDA1NDJaFw0yNTA3MDIxNTA0NDJaMDMxMTAvBgNV BAMTKDIwMUI1RjlEMzA1Q0U2ODc4Q0JCMkYxRTg5RjRCRDZDNTMwRkI3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv41uc3tZWEO80BjF3ttd6aOn ELbNfQcPJ+OTPh16zCtg3If9SiFzqH2u3XVbZJgh6R3Lce+P+840aqweG8oXNeSy 95EZZ+IxOdl8BArH07PDai8km20bltFhftlftvd4KNEcJQkj6BJXgB4dGqJrkRM1 d4Jd8l2ZHBB3IjIEGMfx3F/ADfQxX3YLsiSBFunXRw/Oz2G6GlhCD6d8XPMIGOKv 6pdBiDvqDAk/GhSCFdwqgUgymugaiKh17aEuMkmBK3ouuZlcJ4DaXj5jfJ7/JG2K acaD8eX2xE4D8kHlF+355GOWxnia6UcDS3BmjCm7S0FRVHKoY4pc5RBojFCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBtfnTBc5oeMuy8eifS9bFMPtyEwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5esfE3xwHsrdLcCrpEHWx6L/fOykgm4SZF ubaESEHA1l259fvTLK4zOmL+22WQ86JpvCHdijH+5yWX4L+5/y0QC76oYwQGY3vZ /PdBSMUyo8LtsRkrZW8euGGiI4ggS1yTN6XZAy4tWn00Pq+RFIUXm4FaUX4ubZHR Tw10rYGWCKnE8OqYW0fEOGs5CkfbdCJYnO++/bvdq0hAnEreGl0W4BagljDCXe8l LvEw2kW1HkamOsvAUxatpKJpDjNOHLHFl3U/cz+v4iXiLrJYm91GNzdEFY+SmtPo txsR4ztK/Pm2/qDF/f7hVdQ0SJJn5Plvk7HjxvQwAMdVSPCOfdo= -----END CERTIFICATE-----Generated at Mon Jun 30 19:46:45 2025 by rpki-client