$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: 3iQ8Q9da1VPal/wk/KFfgooCKbaDyY4fLVk+iVQ21/U= Subject key identifier: EA:E0:83:B3:E5:AB:A3:09:31:98:F2:DC:A7:8B:C8:C2:8D:E2:E4:73 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 0AB814D57704F2BCD20471DE9DE169F6E3BB2A5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 04E2 Signing time: Sat 28 Jun 2025 13:21:06 +0000 Manifest this update: Sat 28 Jun 2025 13:16:06 +0000 Manifest next update: Tue 01 Jul 2025 16:58:06 +0000 Files and hashes: 1: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: iz3H6DWJgLGKu/yJXugtBRC8hugrnho5J8fc6SN8I/U=) 2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b8:14:d5:77:04:f2:bc:d2:04:71:de:9d:e1:69:f6:e3:bb:2a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Jun 28 13:16:06 2025 GMT Not After : Jul 1 16:58:06 2025 GMT Subject: CN=EAE083B3E5ABA3093198F2DCA78BC8C28DE2E473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7e:e8:7f:2f:d0:11:55:e9:a3:81:84:4b:f4: 69:66:67:2f:ce:e6:96:19:e6:a7:70:29:b6:f7:c6: be:7f:9d:52:ac:d7:2a:53:55:e7:2b:4e:49:03:b7: 44:85:c2:2b:ed:92:ef:a4:09:f8:db:87:d3:47:66: 96:7d:1b:a7:0a:a3:31:fa:72:91:61:a4:8a:b2:ae: 5a:85:f0:3b:04:df:4e:a1:16:ea:1f:a6:79:f5:b8: 2a:7f:e9:5f:ae:5b:59:41:d8:04:16:e0:f4:14:a6: 9c:b9:f8:45:b0:e8:d5:f0:2b:90:ec:89:eb:ab:f5: 6c:59:69:d5:60:9f:1a:2c:f6:46:ef:16:e4:9a:44: ee:29:cc:14:e2:5e:48:fe:00:63:7d:ab:51:5a:f7: 8c:19:6d:67:b1:27:0f:f2:29:47:fa:bd:16:4b:2a: 1d:8a:c8:8d:cb:2c:68:df:28:bf:a5:a8:5f:71:39: e6:ee:8d:e7:45:4c:a3:31:c1:30:dc:6b:3e:42:97: df:48:ae:37:97:75:11:77:23:a7:1e:4a:8b:55:cb: 3a:7d:0c:dc:c9:44:70:b3:ab:a8:d4:64:bc:19:f7: 8b:86:05:47:62:94:a1:8f:71:c9:79:a1:2c:05:78: cb:4d:19:b9:75:4d:c5:a7:8e:d6:54:80:74:0c:36: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E0:83:B3:E5:AB:A3:09:31:98:F2:DC:A7:8B:C8:C2:8D:E2:E4:73 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cb:00:1f:28:d8:0b:c0:3c:c8:8a:49:30:b0:1d:51:fc:e5: e3:40:b0:07:b8:f5:e2:91:a8:67:e5:fa:84:d4:c8:f7:ca:ee: 4a:3d:b4:b6:16:39:c5:dc:dc:cc:24:56:40:a1:03:20:84:3f: b6:48:1a:d2:98:e0:ca:1e:70:53:93:cc:c6:04:d0:5f:e7:4b: b7:f2:1e:d2:69:78:2f:41:dc:a9:e5:59:cc:b8:c0:83:bd:d2: 38:7a:11:b5:79:ba:64:22:03:88:e6:60:07:2d:db:fe:ba:e6: 51:f4:f7:b6:18:c6:9e:e9:ba:b5:96:47:2e:b6:09:7c:26:0f: 3b:96:11:0d:3d:dd:b9:4f:51:a5:41:9b:bf:b7:f3:9f:78:bb: cc:98:c4:a7:b3:b1:11:9c:53:34:5a:f5:79:aa:81:be:e6:8a: 48:9b:d0:60:a2:38:d7:32:63:4c:d3:5a:84:e6:34:cd:96:40: 6c:88:8e:f9:f4:bf:36:e0:66:b7:e2:c1:89:99:b9:28:7d:50: fc:72:51:d0:e8:dc:ae:17:14:bb:cd:31:d0:08:64:bf:ec:6f: 33:9d:a5:08:cc:c6:5a:72:72:71:e9:a6:3c:0f:cc:1d:10:85: d4:0b:4d:77:59:2c:cf:c5:12:79:91:d8:74:e9:14:53:df:ad: ed:d4:53:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrgU1XcE8rzSBHHeneFp9uO7Kl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNTA2MjgxMzE2MDZaFw0yNTA3MDExNjU4MDZaMDMxMTAvBgNV BAMTKEVBRTA4M0IzRTVBQkEzMDkzMTk4RjJEQ0E3OEJDOEMyOERFMkU0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfuh/L9ARVemjgYRL9GlmZy/O 5pYZ5qdwKbb3xr5/nVKs1ypTVecrTkkDt0SFwivtku+kCfjbh9NHZpZ9G6cKozH6 cpFhpIqyrlqF8DsE306hFuofpnn1uCp/6V+uW1lB2AQW4PQUppy5+EWw6NXwK5Ds ieur9WxZadVgnxos9kbvFuSaRO4pzBTiXkj+AGN9q1Fa94wZbWexJw/yKUf6vRZL Kh2KyI3LLGjfKL+lqF9xOebujedFTKMxwTDcaz5Cl99IrjeXdRF3I6ceSotVyzp9 DNzJRHCzq6jUZLwZ94uGBUdilKGPccl5oSwFeMtNGbl1TcWnjtZUgHQMNun3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uCDs+WrowkxmPLcp4vIwo3i5HMwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvLAB8o2AvAPMiKSTCwHVH85eNAsAe49eKR qGfl+oTUyPfK7ko9tLYWOcXc3MwkVkChAyCEP7ZIGtKY4MoecFOTzMYE0F/nS7fy HtJpeC9B3KnlWcy4wIO90jh6EbV5umQiA4jmYAct2/665lH097YYxp7purWWRy62 CXwmDzuWEQ093blPUaVBm7+38594u8yYxKezsRGcUzRa9Xmqgb7mikib0GCiONcy Y0zTWoTmNM2WQGyIjvn0vzbgZrfiwYmZuSh9UPxyUdDo3K4XFLvNMdAIZL/sbzOd pQjMxlpycnHppjwPzB0QhdQLTXdZLM/FEnmR2HTpFFPfre3UU4M= -----END CERTIFICATE-----Generated at Mon Jun 30 00:45:42 2025 by rpki-client