$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: jLZ246vm+AzkTVgeeXg2lToOdkuN+6E+EveuBGJLXnU= Subject key identifier: D2:50:31:A2:33:29:76:5B:FA:82:D2:FD:FD:FE:0D:30:56:C3:F8:D9 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 3D68816DB75918A7868F43C6E9FEE6CDAD55D7BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 0523 Signing time: Sun 19 Oct 2025 00:40:44 +0000 Manifest this update: Sun 19 Oct 2025 00:35:44 +0000 Manifest next update: Wed 22 Oct 2025 09:27:44 +0000 Files and hashes: 1: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: wg1ZjpbBC2HlcME0PG5zkcaOaZB72XuFb4r0AP3kd4Q=) 2: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 3: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 4: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) 5: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 6: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: oWA2QFYz4vYF2E7W/J4zDdYB9xBPhSOKzYOOJDzlgls=) 7: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: dVq64zxWLa78rB2/MzuNY9mMV1I4wE6waqwsVjBuNag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:68:81:6d:b7:59:18:a7:86:8f:43:c6:e9:fe:e6:cd:ad:55:d7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Oct 19 00:35:44 2025 GMT Not After : Oct 22 09:27:44 2025 GMT Subject: CN=D25031A23329765BFA82D2FDFDFE0D3056C3F8D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:d1:b7:73:02:05:4f:36:36:05:3c:73:2f: 5f:25:43:06:04:fb:0e:60:d8:f9:67:18:2f:0d:0a: c2:d8:94:ff:d1:03:64:b5:af:4c:5d:b6:94:ca:b7: 05:d4:43:aa:db:d7:0d:83:45:fa:d3:46:7e:68:4f: 9f:56:a7:ff:26:78:18:03:48:38:a0:60:57:0d:bf: 8b:29:21:67:af:3f:b7:fb:d5:cb:f6:a7:dc:b4:71: 35:31:6a:07:03:d9:13:e2:09:1e:31:84:c9:5a:c3: 33:ba:d8:aa:da:27:e3:cc:d2:72:f8:67:80:aa:4d: e1:cc:e0:cc:d4:2b:57:1f:59:98:18:b8:25:8a:e7: 3c:a8:69:b5:01:0d:ff:47:86:55:5b:5d:8d:1e:3c: ec:cd:cf:f1:13:d5:f9:31:c4:a9:c8:c8:1a:45:e4: 8d:cd:44:a1:e0:f6:f2:93:94:5f:4e:94:3c:04:9a: a4:df:07:46:82:0a:be:a7:3d:79:05:dc:d2:17:cd: 9b:5b:38:2e:76:74:ab:cb:42:20:83:e2:06:ac:3f: 57:1c:52:ee:aa:6a:7c:66:2b:aa:e0:d9:db:49:b7: c3:73:b7:97:d0:cb:4c:ae:44:30:f3:5d:98:03:0c: f3:5e:d9:9f:f5:3f:11:98:54:a6:77:f3:b3:d9:be: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:50:31:A2:33:29:76:5B:FA:82:D2:FD:FD:FE:0D:30:56:C3:F8:D9 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:aa:eb:c9:c9:b6:9f:6d:12:d0:a4:ab:7e:e3:a4:f4:9a:32: be:2b:4a:85:e7:2b:d6:d4:8f:2b:58:51:40:32:e8:66:df:99: b4:30:14:69:e7:69:dd:b8:e3:bf:10:60:24:af:06:e1:4e:55: 87:55:6f:8d:ef:75:bf:fc:3e:f5:95:75:10:a7:51:f3:ca:15: dd:65:8f:af:2a:b5:a7:e6:99:50:7e:19:e8:bc:a8:b6:fa:8a: 4f:d1:df:00:bb:58:20:a5:31:cc:39:e9:eb:d5:de:03:67:54: 07:5b:ed:a5:55:4c:b3:16:3d:75:6f:ce:8f:7d:77:7a:28:e8: 13:14:6b:8b:14:c7:99:de:92:36:1e:a8:dd:f1:39:ea:b4:8c: e2:4f:3c:0a:b1:c4:4c:a3:16:02:de:cf:b8:7f:5f:59:e2:ef: 96:3f:52:fa:c0:e9:4e:66:7a:25:d2:51:11:47:de:bb:7f:50: 97:83:0c:69:54:68:5c:9e:62:91:d7:c8:a6:72:00:a4:1f:a9: e5:26:5e:db:4e:1d:88:cf:3f:08:87:c0:5c:d1:06:35:ed:dc: 9b:34:ca:87:ca:7a:4a:7f:75:78:ab:34:a9:46:a7:30:22:c4: a2:72:53:4e:cb:36:5e:76:92:ca:22:ae:01:61:68:7b:44:b2: 87:75:5b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWiBbbdZGKeGj0PG6f7mza1V17wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTEwMTkwMDM1NDRaFw0yNTEwMjIwOTI3NDRaMDMxMTAvBgNV BAMTKEQyNTAzMUEyMzMyOTc2NUJGQTgyRDJGREZERkUwRDMwNTZDM0Y4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsiNG3cwIFTzY2BTxzL18lQwYE +w5g2PlnGC8NCsLYlP/RA2S1r0xdtpTKtwXUQ6rb1w2DRfrTRn5oT59Wp/8meBgD SDigYFcNv4spIWevP7f71cv2p9y0cTUxagcD2RPiCR4xhMlawzO62KraJ+PM0nL4 Z4CqTeHM4MzUK1cfWZgYuCWK5zyoabUBDf9HhlVbXY0ePOzNz/ET1fkxxKnIyBpF 5I3NRKHg9vKTlF9OlDwEmqTfB0aCCr6nPXkF3NIXzZtbOC52dKvLQiCD4gasP1cc Uu6qanxmK6rg2dtJt8Nzt5fQy0yuRDDzXZgDDPNe2Z/1PxGYVKZ387PZvlXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lAxojMpdlv6gtL9/f4NMFbD+NkwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqq68nJtp9tEtCkq37jpPSaMr4rSoXnK9bU jytYUUAy6GbfmbQwFGnnad24478QYCSvBuFOVYdVb43vdb/8PvWVdRCnUfPKFd1l j68qtafmmVB+Gei8qLb6ik/R3wC7WCClMcw56evV3gNnVAdb7aVVTLMWPXVvzo99 d3oo6BMUa4sUx5nekjYeqN3xOeq0jOJPPAqxxEyjFgLez7h/X1ni75Y/UvrA6U5m eiXSURFH3rt/UJeDDGlUaFyeYpHXyKZyAKQfqeUmXttOHYjPPwiHwFzRBjXt3Js0 yofKekp/dXirNKlGpzAixKJyU07LNl52ksoirgFhaHtEsod1W0U= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:31 2025 by rpki-client