$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft File: C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft (raw, json) Hash identifier: gNfd6JGcNKsDj7gryB/xP5q9KSxTWnCRKzEhYs8I0YM= Subject key identifier: 4B:41:37:8E:92:8A:84:D3:5B:F8:A1:9A:B7:C8:1C:CC:3A:DA:0B:E9 Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 Certificate issuer: /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Certificate serial: 23A71141B52190560E4FDB48A1EF1DA4C0207DCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft Manifest number: 04C2 Signing time: Mon 03 Nov 2025 11:41:41 +0000 Manifest this update: Mon 03 Nov 2025 11:36:41 +0000 Manifest next update: Thu 06 Nov 2025 17:44:41 +0000 Files and hashes: 1: C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl (hash: Qip7fHTyOXU/oo+aecKsF8t6KrQrTtqy4XcCsCYOezM=) 2: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: KHtiEx3W38SvszbKHvX80D8vQUAYBT6FDdynUOoUkpY=) 3: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: GBrLCHtlb2Jafhwmf0ULsw2VIcKkSNSTUpaf2LZdkT0=) 4: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: OKNkVEc7P0U9abUfRQ+kpCtkFiEHCA5wN5OYP+3DpYM=) 5: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: Yue0OeY9zNd13c9ik6Jsx2eyurp8CzVN+CzOusZXP3E=) 6: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: mHuAtsMxpsqqYgVgU/J4GaS+obKCkf5RQ02z88MxYFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:11:41:b5:21:90:56:0e:4f:db:48:a1:ef:1d:a4:c0:20:7d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7 Validity Not Before: Nov 3 11:36:41 2025 GMT Not After : Nov 6 17:44:41 2025 GMT Subject: CN=4B41378E928A84D35BF8A19AB7C81CCC3ADA0BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:ef:82:d6:92:0a:d2:be:7a:7e:cb:34:46: 33:25:57:0a:e6:05:17:9e:ba:28:3f:b4:5e:5f:0a: c6:0f:08:3a:12:5f:05:8c:e7:f5:fc:45:ae:09:be: 08:d3:69:68:e1:a2:85:4c:42:b0:de:b1:ab:8b:02: 48:59:be:7c:18:36:dc:c1:eb:88:e0:4f:a3:0e:0f: 23:32:35:d2:16:80:c8:06:e7:eb:7e:84:6c:93:a9: a6:77:88:f4:f1:f0:b4:76:04:cd:df:32:60:09:de: e8:32:92:e2:c5:0c:3c:00:a9:a2:0e:a8:ef:82:17: 7a:9f:95:d4:8b:02:17:6d:29:8b:36:92:57:60:fe: 78:a2:82:e8:0f:14:52:88:2b:37:9f:e8:f0:bc:d0: 55:53:09:2e:53:5a:ae:f5:ec:30:23:93:41:71:8d: 06:66:c5:6f:f3:74:bd:ba:44:8b:dc:10:a7:f8:13: 7c:5b:7b:61:da:ab:a5:9c:2b:91:78:e1:8d:a0:9a: b2:fd:60:03:c5:97:2e:2b:d6:43:71:eb:e6:84:fa: 96:86:7c:e3:d5:6b:0a:f0:54:9f:23:ff:88:63:73: 95:d5:61:dc:28:2c:02:02:4d:3c:60:ec:58:ff:01: 64:79:12:cc:c5:2a:2e:bf:a8:14:a8:ed:49:fc:c2: dd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:37:8E:92:8A:84:D3:5B:F8:A1:9A:B7:C8:1C:CC:3A:DA:0B:E9 X509v3 Authority Key Identifier: keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c7:01:2f:38:06:43:cb:55:00:22:96:70:c0:29:ea:c8:cf: 33:89:b9:80:b5:a3:5f:77:44:68:c5:64:2a:75:88:7e:38:ae: a9:4f:b4:58:09:df:5c:6f:9d:00:11:6f:c7:71:a2:06:fb:66: 7c:fd:e1:db:59:42:51:ef:bb:c6:82:1b:cb:51:87:e1:9f:47: 09:97:64:1f:ce:55:25:78:ee:f4:8f:b4:74:29:12:ea:19:ed: 37:2a:0f:9e:87:79:52:32:ed:57:7d:8b:03:d4:4f:0b:20:53: e3:43:95:c7:dd:26:01:5e:27:5b:19:ab:29:42:7b:99:bf:97: f0:bf:01:2e:8e:6d:1d:c1:d6:34:bc:2f:19:eb:3f:b0:87:9f: 5f:ca:fc:0d:94:af:5b:16:1e:50:c0:d9:a5:dc:fd:99:59:3e: 3d:1e:c6:ba:46:b5:04:0d:94:af:f9:75:21:78:f4:d5:5c:f3: 2c:0d:a1:01:63:2e:87:4a:b5:a2:5a:59:e3:a3:3f:b1:6b:67: 49:0d:fa:ba:93:7d:7a:7c:0d:7c:98:5f:6c:f9:27:a0:9d:6b: 9d:10:52:bc:30:7e:81:5b:eb:42:75:5e:43:25:7f:63:fd:ee: d1:74:3f:c6:80:35:ff:22:2b:44:f4:86:c3:e6:d4:2e:1f:4a: 81:f5:17:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6cRQbUhkFYOT9tIoe8dpMAgfcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5 NThERUZGNzAeFw0yNTExMDMxMTM2NDFaFw0yNTExMDYxNzQ0NDFaMDMxMTAvBgNV BAMTKDRCNDEzNzhFOTI4QTg0RDM1QkY4QTE5QUI3QzgxQ0NDM0FEQTBCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscu+C1pIK0r56fss0RjMlVwrm BReeuig/tF5fCsYPCDoSXwWM5/X8Ra4JvgjTaWjhooVMQrDesauLAkhZvnwYNtzB 64jgT6MODyMyNdIWgMgG5+t+hGyTqaZ3iPTx8LR2BM3fMmAJ3ugykuLFDDwAqaIO qO+CF3qfldSLAhdtKYs2kldg/niigugPFFKIKzef6PC80FVTCS5TWq717DAjk0Fx jQZmxW/zdL26RIvcEKf4E3xbe2Haq6WcK5F44Y2gmrL9YAPFly4r1kNx6+aE+paG fOPVawrwVJ8j/4hjc5XVYdwoLAICTTxg7Fj/AWR5EszFKi6/qBSo7Un8wt03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0E3jpKKhNNb+KGat8gczDraC+kwHwYDVR0j BBgwFoAUxipUHHMj9s0jj1SbH4c27ZWN7/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc0ODU2Zi03NDUzLTRkMDItYmMzNS0zNDgyZWI1NjQ2YTIvMC9DNjJBNTQxQzcz MjNGNkNEMjM4RjU0OUIxRjg3MzZFRDk1OERFRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2RUQ5NThE RUZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvQzYyQTU0MUM3MzIzRjZDRDIzOEY1NDlCMUY4NzM2 RUQ5NThERUZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjHAS84BkPLVQAilnDAKerIzzOJuYC1o193 RGjFZCp1iH44rqlPtFgJ31xvnQARb8dxogb7Znz94dtZQlHvu8aCG8tRh+GfRwmX ZB/OVSV47vSPtHQpEuoZ7TcqD56HeVIy7Vd9iwPUTwsgU+NDlcfdJgFeJ1sZqylC e5m/l/C/AS6ObR3B1jS8LxnrP7CHn1/K/A2Ur1sWHlDA2aXc/ZlZPj0exrpGtQQN lK/5dSF49NVc8ywNoQFjLodKtaJaWeOjP7FrZ0kN+rqTfXp8DXyYX2z5J6Cda50Q UrwwfoFb60J1XkMlf2P97tF0P8aANf8iK0T0hsPm1C4fSoH1F78= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:38 2025 by rpki-client