$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json) Hash identifier: YpMryHAmuT9eqxXsZNK29xWJ9ti9iNzh+cpwKUbAMEI= Subject key identifier: 15:F4:61:0E:C1:BF:C5:17:29:FF:00:75:C5:D9:BF:B3:69:94:4B:9C Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 420AF2394E689C5147B0C627030EF3E39FA5AE67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft Manifest number: 94 Signing time: Mon 28 Apr 2025 13:00:42 +0000 Manifest this update: Mon 28 Apr 2025 12:55:42 +0000 Manifest next update: Thu 01 May 2025 21:12:42 +0000 Files and hashes: 1: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: pGEYm+rvGfsfcgAmIKA8KboeTYGzWWGS/p3/ZGYY7qA=) 2: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: BTNIMW516Y60Snrf53RsmV5KL33SHRkTpW5qniWoV9I=) 3: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: VS9Cuwn3t0q97SOCPiAILshVWhFmPtuLTGwgoCrL9Gw=) 4: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: X8Tudvsjk5JQZe7M1xTFDgdso21np02ozo3uH6oMpQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0a:f2:39:4e:68:9c:51:47:b0:c6:27:03:0e:f3:e3:9f:a5:ae:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: Apr 28 12:55:42 2025 GMT Not After : May 1 21:12:42 2025 GMT Subject: CN=15F4610EC1BFC51729FF0075C5D9BFB369944B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fb:e5:c4:e3:8c:7a:ff:0a:47:df:70:0e:5f: 95:04:32:b5:5e:3f:dc:1c:10:e2:b9:8f:e7:20:ca: d1:7e:bd:68:40:92:e2:44:d8:0c:c1:0b:f0:fa:3b: da:0a:40:6c:54:7e:55:f1:1f:2f:5d:91:57:4d:ec: d5:1b:26:52:1a:0c:f7:ad:87:06:af:32:97:84:29: 2d:2b:be:0f:0c:a6:a7:ee:21:57:e0:13:16:23:1e: de:64:be:30:d4:1e:00:7f:23:a1:98:01:93:48:9b: 4f:e2:de:7f:b8:d8:c8:0f:fe:eb:5e:0a:3a:64:dd: 09:ae:e4:fe:54:85:44:f0:80:bb:4a:40:d6:a0:d8: dd:29:98:70:63:0e:38:6e:2e:d9:77:f2:44:c6:14: 0c:2a:58:5f:1c:48:f2:dc:19:27:79:64:86:0a:0d: 0a:98:29:ea:62:b3:0d:4e:94:bc:ee:71:94:4e:be: 30:b0:da:48:b1:f5:71:9a:ad:3f:4a:9c:c7:8e:3c: 7f:20:75:59:37:33:f4:c8:07:98:5e:2d:b7:a9:01: f8:b1:bf:2f:1f:79:73:f0:c3:fa:1c:78:ac:20:ee: b5:a0:40:54:50:b0:51:fb:16:76:09:57:cf:e4:48: ed:ea:57:41:6c:c9:b0:cd:33:44:bf:c0:b4:55:7b: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:61:0E:C1:BF:C5:17:29:FF:00:75:C5:D9:BF:B3:69:94:4B:9C X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ee:a7:65:e8:ee:9c:c0:8f:d2:05:9a:05:fc:11:b7:92:bc: 0f:5d:6b:61:2b:6f:3c:f4:3e:d9:22:9b:66:6c:73:b2:28:c5: f6:e0:25:82:40:92:1a:cd:7c:9f:87:53:c7:a2:17:9d:fe:50: 42:e7:e9:5d:36:e5:d0:2e:eb:35:f7:71:87:ec:34:7c:31:10: 48:e9:4f:6a:25:db:a5:e9:fe:90:c9:bc:da:e0:b9:19:ca:7b: 26:cb:fd:6a:dd:c3:d3:cb:53:ac:68:ef:58:2f:a5:a6:67:38: d6:d0:8f:ac:83:96:a0:b3:4c:b6:b3:90:4c:e2:f4:c4:38:aa: ca:76:db:ba:4f:87:8a:90:05:09:db:75:7a:f9:d6:14:0e:0d: 9a:ef:1a:62:5a:f6:47:e0:ec:eb:b0:fd:07:93:df:42:26:29: a2:05:99:94:28:51:a4:fe:a8:ea:14:bd:e0:f1:56:62:c8:3e: 3d:e4:14:54:4f:aa:48:ec:79:5a:c2:ae:b9:09:c4:89:2e:ff: 1d:87:4a:d5:67:68:e2:96:35:dc:b1:4d:90:b0:28:ae:af:26: 80:3b:52:ad:8f:b5:d0:87:08:20:14:b4:3c:bf:4e:0f:d6:e3: 32:7d:1c:2b:fc:e3:5b:91:76:5a:52:60:c9:bc:79:e6:63:0b: f8:06:61:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgryOU5onFFHsMYnAw7z45+lrmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNTA0MjgxMjU1NDJaFw0yNTA1MDEyMTEyNDJaMDMxMTAvBgNV BAMTKDE1RjQ2MTBFQzFCRkM1MTcyOUZGMDA3NUM1RDlCRkIzNjk5NDRCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1++XE44x6/wpH33AOX5UEMrVe P9wcEOK5j+cgytF+vWhAkuJE2AzBC/D6O9oKQGxUflXxHy9dkVdN7NUbJlIaDPet hwavMpeEKS0rvg8MpqfuIVfgExYjHt5kvjDUHgB/I6GYAZNIm0/i3n+42MgP/ute Cjpk3Qmu5P5UhUTwgLtKQNag2N0pmHBjDjhuLtl38kTGFAwqWF8cSPLcGSd5ZIYK DQqYKepisw1OlLzucZROvjCw2kix9XGarT9KnMeOPH8gdVk3M/TIB5heLbepAfix vy8feXPww/oceKwg7rWgQFRQsFH7FnYJV8/kSO3qV0FsybDNM0S/wLRVezJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfRhDsG/xRcp/wB1xdm/s2mUS5wwHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnup2Xo7pzAj9IFmgX8EbeSvA9da2Erbzz0 Ptkim2Zsc7IoxfbgJYJAkhrNfJ+HU8eiF53+UELn6V025dAu6zX3cYfsNHwxEEjp T2ol26Xp/pDJvNrguRnKeybL/Wrdw9PLU6xo71gvpaZnONbQj6yDlqCzTLazkEzi 9MQ4qsp227pPh4qQBQnbdXr51hQODZrvGmJa9kfg7Ouw/QeT30ImKaIFmZQoUaT+ qOoUveDxVmLIPj3kFFRPqkjseVrCrrkJxIku/x2HStVnaOKWNdyxTZCwKK6vJoA7 Uq2PtdCHCCAUtDy/Tg/W4zJ9HCv841uRdlpSYMm8eeZjC/gGYWw= -----END CERTIFICATE-----Generated at Tue Apr 29 07:54:51 2025 by rpki-client