$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: KPigDpdVr9nXI0BTHzsHP518HzZ/OxtxIjiL7xes+dI= Subject key identifier: 63:DE:69:59:8C:C9:9A:A1:DD:E1:6C:A3:BF:AF:3B:BE:0F:8D:D6:40 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 1E6A5F65751BB6BB8F27E72E15EA4050D1D6B5AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 0509 Signing time: Fri 22 Aug 2025 14:40:43 +0000 Manifest this update: Fri 22 Aug 2025 14:35:43 +0000 Manifest next update: Mon 25 Aug 2025 20:38:43 +0000 Files and hashes: 1: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 2: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 3: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=) 4: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 5: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: dVq64zxWLa78rB2/MzuNY9mMV1I4wE6waqwsVjBuNag=) 6: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 7: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: 93ABn3+BGkkR8ocBGD0MgTKXstRYeXwdUuGAJrgZpM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6a:5f:65:75:1b:b6:bb:8f:27:e7:2e:15:ea:40:50:d1:d6:b5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Aug 22 14:35:43 2025 GMT Not After : Aug 25 20:38:43 2025 GMT Subject: CN=63DE69598CC99AA1DDE16CA3BFAF3BBE0F8DD640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:e9:6f:51:54:7f:b8:45:59:0c:1b:9d:13: 0f:5a:8b:1e:94:cc:68:82:07:33:08:83:5b:28:d1: f8:f9:d2:1b:1d:56:a1:cb:16:a4:5f:07:18:ba:59: 4e:ac:3f:54:81:8c:2f:b9:c2:8d:66:0b:ac:f7:07: 78:fa:69:53:e5:54:51:5c:53:64:f3:a1:7b:f2:9d: 97:3d:48:64:4d:ea:ef:42:bf:b0:52:0a:5d:aa:00: 86:e0:45:0a:9f:71:73:31:ab:2c:3c:24:a5:eb:26: 3d:81:0e:bb:8e:13:c2:f4:38:fa:23:34:22:7b:98: 42:e8:ad:15:60:cf:61:b1:7c:f2:b3:64:e9:56:37: 2b:de:91:07:48:66:0e:4d:17:12:aa:1f:fc:44:dd: 14:e1:c1:c5:1c:e6:fc:d4:f0:91:7e:b3:8f:80:70: e9:0b:0c:de:d3:20:4f:34:fe:f9:fd:14:c0:3c:6b: a2:9f:9e:2b:a4:d9:0d:33:27:7e:8b:e4:58:5c:93: ab:05:68:7b:7f:b6:0c:7d:ce:8f:f0:72:d4:58:5b: 64:45:98:8f:48:88:a8:ba:d6:fd:9c:33:f4:c6:d7: d5:a8:b7:4e:bd:34:bc:ba:87:8e:51:e2:bb:35:09: c5:2d:93:a7:07:58:2b:66:66:84:49:4e:52:c0:39: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:69:59:8C:C9:9A:A1:DD:E1:6C:A3:BF:AF:3B:BE:0F:8D:D6:40 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:30:3a:b3:6c:31:c8:4c:0b:b7:80:b8:2b:e7:ea:71:b0:e9: f7:59:e3:51:c5:cf:a3:b0:65:40:68:28:bb:91:aa:50:af:1d: 90:30:07:9c:04:0f:0f:e5:01:b0:55:e2:da:10:cd:b0:b7:4c: dc:c8:e8:37:c4:63:56:1e:80:1f:9c:ff:f3:ed:60:8b:bc:6d: bd:09:41:18:35:95:14:a6:b9:94:ab:8c:a8:b2:6f:61:33:29: 5c:d6:24:6f:0f:45:67:aa:43:aa:1d:54:06:aa:db:bc:27:26: d3:d6:6d:4b:f1:1b:a7:e2:8b:1c:be:0b:eb:e4:59:03:87:02: 37:0b:f6:2e:17:6a:a0:1f:4d:14:ea:ee:10:0a:2c:8b:21:cf: 9d:95:3f:af:ef:36:d8:9f:6a:66:99:38:3e:41:89:b1:af:46: 70:61:55:0a:4d:2a:4d:35:27:f7:12:7b:e6:a0:70:50:24:9f: f8:e2:46:34:d6:e5:34:f8:7e:78:9e:7a:fa:56:4b:cc:b1:42: 92:1f:89:6b:ca:1b:dd:56:fa:91:55:3c:c7:db:af:3d:79:a7: 85:00:33:82:05:c7:05:da:20:7a:be:a1:d8:94:11:c7:37:f2: 66:8a:92:70:b4:7e:52:d4:06:21:cd:0d:e9:d6:d5:0e:e2:78: e5:48:b6:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmpfZXUbtruPJ+cuFepAUNHWtawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA4MjIxNDM1NDNaFw0yNTA4MjUyMDM4NDNaMDMxMTAvBgNV BAMTKDYzREU2OTU5OENDOTlBQTFEREUxNkNBM0JGQUYzQkJFMEY4REQ2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTulvUVR/uEVZDBudEw9aix6U zGiCBzMIg1so0fj50hsdVqHLFqRfBxi6WU6sP1SBjC+5wo1mC6z3B3j6aVPlVFFc U2TzoXvynZc9SGRN6u9Cv7BSCl2qAIbgRQqfcXMxqyw8JKXrJj2BDruOE8L0OPoj NCJ7mELorRVgz2GxfPKzZOlWNyvekQdIZg5NFxKqH/xE3RThwcUc5vzU8JF+s4+A cOkLDN7TIE80/vn9FMA8a6Kfniuk2Q0zJ36L5Fhck6sFaHt/tgx9zo/wctRYW2RF mI9IiKi61v2cM/TG19Wot069NLy6h45R4rs1CcUtk6cHWCtmZoRJTlLAOfnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY95pWYzJmqHd4Wyjv687vg+N1kAwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIwOrNsMchMC7eAuCvn6nGw6fdZ41HFz6Ow ZUBoKLuRqlCvHZAwB5wEDw/lAbBV4toQzbC3TNzI6DfEY1YegB+c//PtYIu8bb0J QRg1lRSmuZSrjKiyb2EzKVzWJG8PRWeqQ6odVAaq27wnJtPWbUvxG6fiixy+C+vk WQOHAjcL9i4XaqAfTRTq7hAKLIshz52VP6/vNtifamaZOD5BibGvRnBhVQpNKk01 J/cSe+agcFAkn/jiRjTW5TT4fnieevpWS8yxQpIfiWvKG91W+pFVPMfbrz15p4UA M4IFxwXaIHq+odiUEcc38maKknC0flLUBiHNDenW1Q7ieOVItsQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:02 2025 by rpki-client