$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: /3r1USrwJK3Gz+5cWeA0708JPswc7R4FvN+nlnJVND4= Subject key identifier: BB:11:20:D4:61:63:06:0E:62:F9:19:69:5B:C0:86:90:03:AF:F5:5B Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 010ED7D0BB3BD4D56A21BD07AD6A9E1FF26395C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 0475 Signing time: Sat 09 Aug 2025 04:12:03 +0000 Manifest this update: Sat 09 Aug 2025 04:07:03 +0000 Manifest next update: Tue 12 Aug 2025 07:01:03 +0000 Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: wZIxpj3dwGCzcl7cZh9X0VQ9p0ml4TLvq9R2W6nIlhM=) 2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: XoXxuVWtpp9DK1XJvJpQuePsBxqEYy5eoz3jb1x0LpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0e:d7:d0:bb:3b:d4:d5:6a:21:bd:07:ad:6a:9e:1f:f2:63:95:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Aug 9 04:07:03 2025 GMT Not After : Aug 12 07:01:03 2025 GMT Subject: CN=BB1120D46163060E62F919695BC0869003AFF55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:9b:e8:3c:45:97:8d:b1:c8:4b:05:6c:e8: ea:f5:b4:4c:0a:9d:bf:dc:91:13:f4:8b:76:a1:77: 96:36:c8:03:05:d1:07:bb:c7:cf:c2:c7:14:05:9d: 12:ea:42:74:dd:7c:b4:aa:79:37:f6:ec:c9:31:01: 32:6e:98:77:51:f4:a5:79:9f:39:c3:5d:15:13:a6: ed:9c:30:f6:c4:f7:2e:30:ab:d5:a0:4d:54:22:e5: 11:2d:55:2b:49:1f:b7:b0:4d:33:7a:dc:c7:c4:32: 9a:05:cb:39:0b:25:a5:71:7a:fe:be:ee:54:f2:ec: 79:92:33:97:24:53:29:c9:0c:fa:fb:fb:a4:40:7c: c9:f0:87:8c:8c:50:28:20:e0:16:f6:1c:fb:03:0c: 37:8c:67:bd:b9:25:36:30:39:90:56:e0:09:23:a5: 58:c0:c5:22:67:4f:0b:75:a9:db:2d:83:5c:4d:f9: a1:98:4c:d9:bd:15:6b:d4:7e:2d:f4:e3:33:8d:36: 70:f7:d8:4f:93:27:eb:a3:e5:c2:95:6b:5a:3d:94: 6d:93:1f:27:0e:80:f2:c3:79:d7:c5:53:be:32:ec: 52:4a:19:ab:c5:d7:54:82:11:a8:6b:fd:43:d0:49: 76:28:29:63:d1:58:15:eb:7d:3e:a2:e8:12:f5:fa: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:11:20:D4:61:63:06:0E:62:F9:19:69:5B:C0:86:90:03:AF:F5:5B X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0e:01:48:58:55:bb:f5:e0:e5:26:9a:e0:ea:d3:4a:4c:c5: d5:db:f3:7d:6b:89:82:45:fe:c7:1e:e9:59:14:89:a7:92:63: 79:3e:5a:94:3f:bc:fd:ba:86:8a:ac:c9:fc:6a:c3:3e:cd:14: 45:e0:cb:59:04:2a:f9:70:43:66:13:20:59:54:83:cc:d0:0b: 25:8a:b0:e8:b8:2a:3e:3e:3c:b8:a8:dd:0a:6b:09:ef:3b:3d: 3f:bc:ba:19:6b:1f:86:c1:a0:8a:8c:4b:b3:d2:91:22:76:af: 7a:c5:44:35:27:eb:f6:9e:05:5b:3d:03:91:e0:9e:f2:41:98: f2:94:50:e5:12:cb:39:79:6b:60:11:cd:73:39:a2:ec:5b:ce: 19:67:38:b4:c7:ea:4f:e7:5a:02:c8:11:19:2e:dd:e1:38:ea: b1:69:3f:3b:06:16:d5:35:91:4c:e9:68:7b:8d:04:d9:3f:f2: 8c:76:cc:be:d6:4b:2e:e5:45:02:67:c2:e5:8e:75:47:0e:5e: 44:f0:ab:16:46:67:aa:0b:a8:fc:5c:b2:27:78:3f:19:5a:1d: 63:2c:39:12:7b:ad:fc:6e:84:04:2d:77:20:0f:25:e8:b6:1c: 44:cb:a1:42:34:92:60:35:b0:51:9c:b9:f1:33:03:e2:06:10: 3f:c7:47:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQ7X0Ls71NVqIb0HrWqeH/JjlcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTA4MDkwNDA3MDNaFw0yNTA4MTIwNzAxMDNaMDMxMTAvBgNV BAMTKEJCMTEyMEQ0NjE2MzA2MEU2MkY5MTk2OTVCQzA4NjkwMDNBRkY1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7ZvoPEWXjbHISwVs6Or1tEwK nb/ckRP0i3ahd5Y2yAMF0Qe7x8/CxxQFnRLqQnTdfLSqeTf27MkxATJumHdR9KV5 nznDXRUTpu2cMPbE9y4wq9WgTVQi5REtVStJH7ewTTN63MfEMpoFyzkLJaVxev6+ 7lTy7HmSM5ckUynJDPr7+6RAfMnwh4yMUCgg4Bb2HPsDDDeMZ725JTYwOZBW4Akj pVjAxSJnTwt1qdstg1xN+aGYTNm9FWvUfi304zONNnD32E+TJ+uj5cKVa1o9lG2T HycOgPLDedfFU74y7FJKGavF11SCEahr/UPQSXYoKWPRWBXrfT6i6BL1+rt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuxEg1GFjBg5i+RlpW8CGkAOv9VswHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQOAUhYVbv14OUmmuDq00pMxdXb831riYJF /sce6VkUiaeSY3k+WpQ/vP26hoqsyfxqwz7NFEXgy1kEKvlwQ2YTIFlUg8zQCyWK sOi4Kj4+PLio3QprCe87PT+8uhlrH4bBoIqMS7PSkSJ2r3rFRDUn6/aeBVs9A5Hg nvJBmPKUUOUSyzl5a2ARzXM5ouxbzhlnOLTH6k/nWgLIERku3eE46rFpPzsGFtU1 kUzpaHuNBNk/8ox2zL7WSy7lRQJnwuWOdUcOXkTwqxZGZ6oLqPxcsid4PxlaHWMs ORJ7rfxuhAQtdyAPJei2HETLoUI0kmA1sFGcufEzA+IGED/HR4o= -----END CERTIFICATE-----Generated at Sun Aug 10 13:43:51 2025 by rpki-client