$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: Sn8n7vJK3VtGl96TDS1LVsJ5VluF4GvOs19cMq6a0/g= Subject key identifier: 26:F8:3A:DC:36:2B:33:8F:0E:77:3A:44:E0:9F:C9:A3:27:02:3A:1C Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 1FA50991C5D3F3426DA8D7CE0EB0B64CB66E9082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 04D9 Signing time: Thu 08 May 2025 23:00:42 +0000 Manifest this update: Thu 08 May 2025 22:55:42 +0000 Manifest next update: Mon 12 May 2025 02:05:42 +0000 Files and hashes: 1: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 2: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 3: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 4: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 5: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: z26nFezGa2n/3ne2w2RvDx0z1SC1rat9LTuXnOb4Cm8=) 6: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 7: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: 0n3I1/VBzu98cTdVFt1qC7Pkofr2BvlEzdvsLd58Im8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a5:09:91:c5:d3:f3:42:6d:a8:d7:ce:0e:b0:b6:4c:b6:6e:90:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: May 8 22:55:42 2025 GMT Not After : May 12 02:05:42 2025 GMT Subject: CN=26F83ADC362B338F0E773A44E09FC9A327023A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:2a:b2:34:8b:80:0c:cb:e6:e2:85:5f:ed:4d: ad:b4:8d:fe:d3:be:80:b2:48:56:b8:03:cc:21:cf: fc:99:fd:66:4c:39:bc:1f:d2:8f:d6:f3:dd:42:cb: 63:cb:95:0d:54:4d:5f:66:b7:1c:5f:85:e8:2a:00: 7c:fe:bc:8a:14:85:e7:1e:11:fe:c9:38:40:db:f3: 22:be:1f:56:6b:89:30:29:75:4b:74:36:6a:9f:b3: f6:ee:ff:13:04:9a:0f:08:36:08:d2:4c:ed:e3:8b: 9c:ef:b1:62:5a:6f:57:23:5d:db:78:e5:5a:86:b1: 3f:9b:fc:68:cd:16:1d:35:ef:41:58:34:80:af:3f: 8f:6e:b5:a8:a2:49:bc:57:4b:32:bd:08:f9:1a:a8: 59:5b:fb:dd:cf:90:73:43:65:ba:db:03:26:2c:05: ec:aa:ad:fa:7b:1b:88:44:fe:c2:41:c4:c0:41:3c: de:9e:a2:f1:a1:02:54:ed:82:17:cb:ab:4f:ec:56: 51:23:ea:cc:68:45:21:f6:37:ba:2f:f0:3b:da:0c: 05:2d:04:98:8d:e2:a6:76:2a:f2:fb:28:6f:ae:d3: ff:7d:53:29:12:ae:73:00:6a:2c:2b:87:09:ac:1c: 6e:44:7e:48:39:d0:37:7b:41:d8:45:31:8e:20:c7: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F8:3A:DC:36:2B:33:8F:0E:77:3A:44:E0:9F:C9:A3:27:02:3A:1C X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:bb:a7:66:ee:8e:13:0f:c6:15:fb:1f:a7:ce:f4:a7:43: 72:4c:9e:67:79:ae:24:12:a0:5d:62:47:b1:97:9b:6f:3f:08: ed:4b:03:aa:4f:68:79:f7:24:85:f3:cf:11:0b:b9:6a:cc:24: 01:b4:be:bb:b8:0c:40:4a:fd:e3:e0:cc:b1:02:47:e7:f3:99: ca:9f:05:6c:7f:48:37:9e:5a:ac:23:fb:a4:1a:2b:a8:74:e6: 95:4b:99:56:08:f9:b0:15:60:1c:8c:76:9f:b1:d5:43:80:86: 37:ec:e3:35:2e:ac:6a:38:0a:b6:20:24:90:09:81:2b:27:d2: db:c4:d5:8b:f3:fd:ba:e7:a1:80:2e:3b:20:20:62:52:c6:33: 4d:ac:c3:f1:58:5c:ad:42:4a:1e:b7:7a:34:83:89:6b:fd:f6: 42:4a:e2:85:8a:14:b3:38:2c:50:c8:82:99:52:a6:20:aa:3f: d1:ce:e5:cc:b5:c0:78:0e:ee:3f:68:ad:bb:9e:08:ed:fa:3b: 89:f1:5a:3c:ca:1c:1a:5e:12:2a:a3:c3:3c:d7:d2:cf:49:69: 3d:c7:0c:8b:7f:b0:45:e3:7d:44:0a:28:ac:6b:b7:4b:38:23: 3a:50:b8:58:4d:5b:ae:74:2f:40:4a:5c:ca:91:6d:c8:29:6a: e5:c3:d8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6UJkcXT80JtqNfODrC2TLZukIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA1MDgyMjU1NDJaFw0yNTA1MTIwMjA1NDJaMDMxMTAvBgNV BAMTKDI2RjgzQURDMzYyQjMzOEYwRTc3M0E0NEUwOUZDOUEzMjcwMjNBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8KrI0i4AMy+bihV/tTa20jf7T voCySFa4A8whz/yZ/WZMObwf0o/W891Cy2PLlQ1UTV9mtxxfhegqAHz+vIoUhece Ef7JOEDb8yK+H1ZriTApdUt0Nmqfs/bu/xMEmg8INgjSTO3ji5zvsWJab1cjXdt4 5VqGsT+b/GjNFh0170FYNICvP49utaiiSbxXSzK9CPkaqFlb+93PkHNDZbrbAyYs Beyqrfp7G4hE/sJBxMBBPN6eovGhAlTtghfLq0/sVlEj6sxoRSH2N7ov8DvaDAUt BJiN4qZ2KvL7KG+u0/99UykSrnMAaiwrhwmsHG5Efkg50Dd7QdhFMY4gx6/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJvg63DYrM48OdzpE4J/JoycCOhwwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT5u6dm7o4TD8YV+x+nzvSnQ3JMnmd5riQS oF1iR7GXm28/CO1LA6pPaHn3JIXzzxELuWrMJAG0vru4DEBK/ePgzLECR+fzmcqf BWx/SDeeWqwj+6QaK6h05pVLmVYI+bAVYByMdp+x1UOAhjfs4zUurGo4CrYgJJAJ gSsn0tvE1Yvz/brnoYAuOyAgYlLGM02sw/FYXK1CSh63ejSDiWv99kJK4oWKFLM4 LFDIgplSpiCqP9HO5cy1wHgO7j9orbueCO36O4nxWjzKHBpeEiqjwzzX0s9JaT3H DIt/sEXjfUQKKKxrt0s4IzpQuFhNW650L0BKXMqRbcgpauXD2FU= -----END CERTIFICATE-----Generated at Sat May 10 16:38:01 2025 by rpki-client