$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: mxSBHfCpMoDsvBtwDi2S2tlmQaL4EtQ1IDfbJeaSOaI= Subject key identifier: DB:6B:82:40:47:F9:7E:62:4B:77:F1:12:CA:47:E8:C7:8F:76:07:94 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 2974AC3DB793ED04F9F396EF5A7CA5580AA9EDAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0515 Signing time: Mon 20 Oct 2025 06:31:16 +0000 Manifest this update: Mon 20 Oct 2025 06:26:16 +0000 Manifest next update: Thu 23 Oct 2025 16:28:16 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: YyEHRmLe+DI875NOjKmPyug2YCyuzGEUmlZxiqfrkHA=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:74:ac:3d:b7:93:ed:04:f9:f3:96:ef:5a:7c:a5:58:0a:a9:ed:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Oct 20 06:26:16 2025 GMT Not After : Oct 23 16:28:16 2025 GMT Subject: CN=DB6B824047F97E624B77F112CA47E8C78F760794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:bd:9c:2d:9c:ae:ec:e3:e4:50:1e:9f:cd: 03:2b:8c:e7:88:ad:71:b6:52:87:ae:49:34:77:8a: ce:35:68:68:87:d3:77:0e:eb:d4:0b:36:ee:39:d5: 92:da:f8:2b:19:5e:f8:3e:21:ba:0a:ec:d3:09:31: 91:c1:7f:b6:88:04:d3:c8:c1:86:f7:fc:bf:04:ac: f4:67:ed:fe:65:a5:14:c1:ed:4b:7d:19:57:a7:61: 99:54:d1:5c:1e:d2:28:9d:bc:07:dd:f1:37:3a:c0: 1e:40:e4:56:e3:e3:07:aa:d8:66:50:05:70:bf:9f: e9:b9:20:46:7f:f6:26:fa:c1:0a:fe:5d:de:a5:12: 45:f4:ee:e9:6e:d7:f9:2e:38:42:92:45:5d:69:df: 7f:b2:ec:2f:5a:2c:33:a1:f2:56:07:68:a7:7a:3c: c6:5b:17:a6:11:62:0f:36:f0:50:75:a5:41:c9:e5: 6a:ac:b2:4f:79:16:3e:e9:25:47:1a:af:a1:2f:66: ba:e6:56:ab:d0:81:4a:a1:10:23:b8:db:0f:a0:d8: a0:a4:e0:14:8e:2c:f6:08:3c:8b:fd:be:25:1b:c4: f8:d4:45:2c:70:32:41:f9:cd:11:dc:03:49:70:16: b6:7d:55:a6:d4:94:65:e5:0d:41:e2:38:25:a4:66: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6B:82:40:47:F9:7E:62:4B:77:F1:12:CA:47:E8:C7:8F:76:07:94 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a7:5f:f1:aa:98:63:c7:e5:54:dd:a8:c0:5c:7b:7e:ac:fa: 66:88:6e:fc:05:6a:d7:20:90:d9:67:26:0b:0c:3e:32:81:38: a3:c2:0d:28:79:17:f6:02:bb:fa:18:63:69:4c:a5:be:ef:22: 60:c7:10:14:61:96:3e:ef:54:11:71:7f:e9:7e:0b:69:09:4d: 28:53:aa:58:3c:6b:e4:11:bd:4d:d1:47:ae:c2:e3:c4:44:2f: 01:bf:71:a3:63:33:ea:3e:b3:54:d0:92:03:d0:82:8f:48:aa: 7e:6c:70:0d:ae:58:29:a6:1c:04:c0:b3:73:e8:64:44:cb:61: 7a:f0:19:35:c0:e0:cc:2a:bd:c9:43:68:09:4c:21:77:75:58: fc:8f:41:b8:e8:21:32:cf:8b:14:5c:14:91:6a:f0:04:e2:4f: e5:45:66:a1:71:70:c5:57:61:0a:77:75:be:e7:4e:cd:e2:0a: fb:5e:10:09:d4:bd:fa:0a:3a:d3:f2:51:d9:bc:27:83:cb:7d: 13:57:db:f0:46:30:d5:97:c1:ce:7e:ff:c9:a6:ea:4b:99:92: 1a:28:92:a8:a3:25:8d:ff:33:51:fd:d5:02:89:a5:ec:f8:e6: ea:33:78:d1:52:63:35:cc:ae:8d:37:6d:ef:04:f0:c5:cc:45: 46:5c:11:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXSsPbeT7QT585bvWnylWAqp7aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTEwMjAwNjI2MTZaFw0yNTEwMjMxNjI4MTZaMDMxMTAvBgNV BAMTKERCNkI4MjQwNDdGOTdFNjI0Qjc3RjExMkNBNDdFOEM3OEY3NjA3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeL2cLZyu7OPkUB6fzQMrjOeI rXG2UoeuSTR3is41aGiH03cO69QLNu451ZLa+CsZXvg+IboK7NMJMZHBf7aIBNPI wYb3/L8ErPRn7f5lpRTB7Ut9GVenYZlU0Vwe0iidvAfd8Tc6wB5A5Fbj4weq2GZQ BXC/n+m5IEZ/9ib6wQr+Xd6lEkX07ulu1/kuOEKSRV1p33+y7C9aLDOh8lYHaKd6 PMZbF6YRYg828FB1pUHJ5Wqssk95Fj7pJUcar6EvZrrmVqvQgUqhECO42w+g2KCk 4BSOLPYIPIv9viUbxPjURSxwMkH5zRHcA0lwFrZ9VabUlGXlDUHiOCWkZiv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22uCQEf5fmJLd/ESykfox492B5QwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWnX/GqmGPH5VTdqMBce36s+maIbvwFatcg kNlnJgsMPjKBOKPCDSh5F/YCu/oYY2lMpb7vImDHEBRhlj7vVBFxf+l+C2kJTShT qlg8a+QRvU3RR67C48RELwG/caNjM+o+s1TQkgPQgo9Iqn5scA2uWCmmHATAs3Po ZETLYXrwGTXA4MwqvclDaAlMIXd1WPyPQbjoITLPixRcFJFq8ATiT+VFZqFxcMVX YQp3db7nTs3iCvteEAnUvfoKOtPyUdm8J4PLfRNX2/BGMNWXwc5+/8mm6kuZkhoo kqijJY3/M1H91QKJpez45uozeNFSYzXMro03be8E8MXMRUZcEWQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:09 2025 by rpki-client