$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: NWHILCNZ/tQIFMxejU/AXs+DTLYQAu16kWklmQu6psU= Subject key identifier: 57:EC:75:82:51:B0:60:7B:C6:EB:39:13:7E:38:12:3C:CF:7D:0F:1C Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 79A40237EB86B63555FA947F137C2C253C700A88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 0495 Signing time: Mon 20 Oct 2025 04:12:04 +0000 Manifest this update: Mon 20 Oct 2025 04:07:04 +0000 Manifest next update: Thu 23 Oct 2025 11:07:04 +0000 Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: 37Na13ceKxwy7/MxF6iCFolj+zTVulov5Ebf5kXzs0E=) 2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: TWcHbjdQqd+hAJSdwalC5yzuV210stqYpt3j5m86DWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a4:02:37:eb:86:b6:35:55:fa:94:7f:13:7c:2c:25:3c:70:0a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Oct 20 04:07:04 2025 GMT Not After : Oct 23 11:07:04 2025 GMT Subject: CN=57EC758251B0607BC6EB39137E38123CCF7D0F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:c0:42:9d:5e:ec:9f:5c:cd:45:fc:81:0d: 87:bb:f6:ce:69:d5:a5:5b:6f:5c:d2:8b:46:67:57: d0:58:bb:33:3e:34:85:40:4b:58:4e:cd:91:6a:11: b0:64:4d:28:fa:f7:1a:fe:41:4a:1f:2a:55:bd:1d: 0c:b2:d1:45:3d:88:98:d4:72:50:b6:08:58:f0:65: 5f:4a:72:ce:ac:5e:8b:89:ce:1f:51:f0:2c:77:89: 51:9e:b7:31:f4:9a:8f:0b:70:a5:f4:6a:81:e7:33: 4d:7d:e6:02:99:3a:39:1b:85:a9:0f:3e:2a:bc:71: a0:3e:f2:25:89:19:28:a8:ae:92:26:c3:24:64:b2: fc:d3:a0:3e:b8:f8:f9:0f:85:96:15:6d:1c:9b:79: 37:c8:9d:69:63:3d:c5:d1:ba:d8:d8:46:fa:95:5a: 60:3e:63:12:6a:23:cc:c7:36:3d:d7:1f:7c:c6:f5: 41:b2:e6:05:65:74:35:5f:50:4e:8e:2d:f3:03:6b: fd:f2:e9:ce:aa:f8:82:82:9d:7a:bf:b2:87:72:3f: 23:2e:e1:bc:4e:bd:af:e5:b0:65:ae:bd:99:b9:ba: be:fc:41:d6:35:95:e9:4e:fc:de:6f:ea:7e:e0:9d: cf:62:75:e0:a9:f6:a3:6d:d3:e4:4d:70:93:2b:61: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:75:82:51:B0:60:7B:C6:EB:39:13:7E:38:12:3C:CF:7D:0F:1C X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:64:6b:1c:45:55:2f:44:fd:55:ad:ce:74:b9:6f:fd:fc:be: 65:0c:26:85:14:7e:69:b7:1f:32:21:51:32:7f:e3:10:58:86: ec:47:eb:d7:55:10:45:8a:8e:31:6f:4e:57:25:6e:72:ae:b4: 49:d5:ab:06:7d:55:c8:c0:da:ea:89:9b:d6:3e:bf:a7:3f:df: c5:cf:e6:a7:81:d7:ff:17:2b:64:81:81:4c:0d:a1:03:c8:3b: 99:57:2b:47:90:1f:48:e5:10:73:30:b9:ca:cd:4a:19:32:17: 59:39:38:b7:96:33:d2:23:c3:5e:26:d2:ba:cb:82:b5:27:be: 77:25:7c:68:5d:2e:03:96:06:16:6e:12:49:25:42:4c:7f:2d: da:a4:dd:5d:e0:65:17:29:b8:3b:9a:bd:34:a9:15:9e:83:ec: 5d:0b:eb:59:48:a8:71:df:96:ca:c0:25:c7:b5:a8:14:d8:4d: 43:c6:54:75:47:53:5e:f9:c2:de:3b:11:9c:87:0d:4c:f2:40: 37:59:bf:22:93:53:15:f5:28:c3:80:e3:a3:40:f1:5f:9d:48: 48:94:ea:a6:7c:72:6b:ff:dc:a3:da:df:3d:73:e8:fc:da:22: 84:33:e7:50:73:08:77:b1:13:d0:23:a0:31:48:ea:3a:9a:eb: 75:40:62:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaQCN+uGtjVV+pR/E3wsJTxwCogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTEwMjAwNDA3MDRaFw0yNTEwMjMxMTA3MDRaMDMxMTAvBgNV BAMTKDU3RUM3NTgyNTFCMDYwN0JDNkVCMzkxMzdFMzgxMjNDQ0Y3RDBGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUcBCnV7sn1zNRfyBDYe79s5p 1aVbb1zSi0ZnV9BYuzM+NIVAS1hOzZFqEbBkTSj69xr+QUofKlW9HQyy0UU9iJjU clC2CFjwZV9Kcs6sXouJzh9R8Cx3iVGetzH0mo8LcKX0aoHnM0195gKZOjkbhakP Piq8caA+8iWJGSiorpImwyRksvzToD64+PkPhZYVbRybeTfInWljPcXRutjYRvqV WmA+YxJqI8zHNj3XH3zG9UGy5gVldDVfUE6OLfMDa/3y6c6q+IKCnXq/sodyPyMu 4bxOva/lsGWuvZm5ur78QdY1lelO/N5v6n7gnc9ideCp9qNt0+RNcJMrYfbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+x1glGwYHvG6zkTfjgSPM99DxwwHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJkaxxFVS9E/VWtznS5b/38vmUMJoUUfmm3 HzIhUTJ/4xBYhuxH69dVEEWKjjFvTlclbnKutEnVqwZ9VcjA2uqJm9Y+v6c/38XP 5qeB1/8XK2SBgUwNoQPIO5lXK0eQH0jlEHMwucrNShkyF1k5OLeWM9Ijw14m0rrL grUnvnclfGhdLgOWBhZuEkklQkx/Ldqk3V3gZRcpuDuavTSpFZ6D7F0L61lIqHHf lsrAJce1qBTYTUPGVHVHU175wt47EZyHDUzyQDdZvyKTUxX1KMOA46NA8V+dSEiU 6qZ8cmv/3KPa3z1z6PzaIoQz51BzCHexE9AjoDFI6jqa63VAYrk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:57 2025 by rpki-client