$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: GeMrxkBIZrwWo2YWZCLVRIzlMu7wTSz1wnjKxkgn81o= Subject key identifier: 65:94:2A:E9:D4:25:A8:27:12:86:18:AB:76:45:75:CE:B0:1D:0C:DE Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 0469D4BF02CBE1223EF0CFDAC7E735288D60B86E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 047B Signing time: Fri 22 Aug 2025 14:32:04 +0000 Manifest this update: Fri 22 Aug 2025 14:27:04 +0000 Manifest next update: Mon 25 Aug 2025 23:11:04 +0000 Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: wZIxpj3dwGCzcl7cZh9X0VQ9p0ml4TLvq9R2W6nIlhM=) 2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: 6oLXEq2ka7NegCpven8+Le5uOAXZ5DC0rSF9sofsrZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:69:d4:bf:02:cb:e1:22:3e:f0:cf:da:c7:e7:35:28:8d:60:b8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Aug 22 14:27:04 2025 GMT Not After : Aug 25 23:11:04 2025 GMT Subject: CN=65942AE9D425A827128618AB764575CEB01D0CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:6e:5f:da:59:26:d2:72:fd:ae:bc:e7:a6: d8:91:48:22:8d:bf:92:7a:60:4b:ca:e2:e0:fd:66: 0e:60:cc:68:1f:48:28:4b:a9:e1:75:c3:f4:9a:77: ca:bc:e3:3b:5b:96:a0:ee:b4:c8:a8:a1:bd:89:06: 86:ee:2a:16:b1:71:86:73:bb:20:1e:0e:b5:b7:80: c1:24:ef:92:3d:bd:fd:7f:83:4d:c5:e0:f4:a9:aa: f9:25:f2:3b:fa:11:5e:cc:e0:f5:77:a6:5d:85:6c: 07:76:9a:a7:14:e1:0c:85:9a:0b:32:26:bc:4d:fb: 29:6c:a4:21:fc:a7:3b:22:d2:90:bd:10:a2:e7:59: b3:de:ed:aa:3f:70:50:89:96:fc:67:95:7a:cf:c0: 2a:ac:10:e8:22:56:3f:d8:1f:af:a2:ce:e0:e2:48: 3a:d7:c8:22:39:36:5b:2f:fc:bf:ac:2d:43:25:77: d9:ed:93:ea:4e:fc:a5:0b:35:b0:f7:e4:cf:05:1a: 69:5e:1d:27:b1:27:7b:5a:9d:e0:cd:d9:3c:a6:91: ef:31:72:5b:43:1f:16:2f:44:4a:22:7e:2f:ae:4a: 2f:43:64:91:88:7b:c3:0c:20:1b:62:ce:b9:ff:6b: 82:8c:dc:35:37:e6:9b:6a:d1:97:ce:af:63:d4:f6: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:2A:E9:D4:25:A8:27:12:86:18:AB:76:45:75:CE:B0:1D:0C:DE X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ec:ba:5b:c4:f2:b9:8c:2e:45:a6:d0:58:a7:4f:ff:c6:bc: 98:85:28:c9:1b:12:8b:a9:64:97:4f:8f:49:8c:d6:a7:7c:b8: ba:cd:b6:2f:fd:56:5c:ee:dc:2f:28:bc:ae:48:b6:a3:1f:cd: 2d:b7:5b:1e:0f:73:9d:b8:fa:bd:a3:82:ce:de:e7:07:3c:fa: c8:93:c0:b5:f4:35:df:8c:b9:4c:aa:46:3a:d5:c0:2b:9c:68: 38:d2:b5:47:55:b1:e6:9f:f5:ab:ab:ad:b3:b1:1a:36:6f:02: e9:de:ee:58:2e:63:27:9f:79:b3:34:5d:22:91:45:a6:77:03: 62:c5:e7:2a:97:2f:e2:86:79:4d:d9:64:dc:cf:aa:cd:a6:83: 75:6a:e7:79:4c:76:b3:64:4a:fb:7a:8c:4d:52:7b:e2:17:43: 2c:09:54:ac:99:61:91:94:18:b0:04:e9:59:82:c6:be:60:b4: 14:16:75:f1:fb:dc:45:11:35:04:85:a4:86:e3:ef:38:e5:92: 1c:64:d3:18:bf:8e:a5:49:83:a0:5f:ac:00:cf:22:8b:c4:bc: ac:29:23:c3:1b:44:d3:24:cf:56:13:f9:ee:f2:21:b7:49:44: 48:f8:b9:d9:76:11:25:59:0c:4a:9c:83:d1:39:c6:3e:1b:12: 13:83:a0:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGnUvwLL4SI+8M/ax+c1KI1guG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTA4MjIxNDI3MDRaFw0yNTA4MjUyMzExMDRaMDMxMTAvBgNV BAMTKDY1OTQyQUU5RDQyNUE4MjcxMjg2MThBQjc2NDU3NUNFQjAxRDBDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwt25f2lkm0nL9rrznptiRSCKN v5J6YEvK4uD9Zg5gzGgfSChLqeF1w/Sad8q84ztblqDutMioob2JBobuKhaxcYZz uyAeDrW3gMEk75I9vf1/g03F4PSpqvkl8jv6EV7M4PV3pl2FbAd2mqcU4QyFmgsy JrxN+ylspCH8pzsi0pC9EKLnWbPe7ao/cFCJlvxnlXrPwCqsEOgiVj/YH6+izuDi SDrXyCI5Nlsv/L+sLUMld9ntk+pO/KULNbD35M8FGmleHSexJ3taneDN2Tymke8x cltDHxYvREoifi+uSi9DZJGIe8MMIBtizrn/a4KM3DU35ptq0ZfOr2PU9v3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZQq6dQlqCcShhirdkV1zrAdDN4wHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHsulvE8rmMLkWm0FinT//GvJiFKMkbEoup ZJdPj0mM1qd8uLrNti/9Vlzu3C8ovK5ItqMfzS23Wx4Pc524+r2jgs7e5wc8+siT wLX0Nd+MuUyqRjrVwCucaDjStUdVseaf9aurrbOxGjZvAune7lguYyefebM0XSKR RaZ3A2LF5yqXL+KGeU3ZZNzPqs2mg3Vq53lMdrNkSvt6jE1Se+IXQywJVKyZYZGU GLAE6VmCxr5gtBQWdfH73EURNQSFpIbj7zjlkhxk0xi/jqVJg6BfrADPIovEvKwp I8MbRNMkz1YT+e7yIbdJREj4udl2ESVZDEqcg9E5xj4bEhODoIE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:08 2025 by rpki-client