$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: 0ugLfvvN7cHPjPH2BhMwaYoxguRH6EQ165CQS3U31Z8= Subject key identifier: 61:15:77:00:D0:A6:A6:F0:A8:5D:1C:47:AD:07:BA:88:0F:8B:CD:D4 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 7EC2D9626E05550FFB486C935C29E85FB45FE183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04FB Signing time: Thu 21 Aug 2025 14:51:17 +0000 Manifest this update: Thu 21 Aug 2025 14:46:17 +0000 Manifest next update: Mon 25 Aug 2025 02:02:17 +0000 Files and hashes: 1: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 2: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: e6FKvxSjMl/yadovZh2TtKe+Nuoc+PYxC7qpimp114I=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c2:d9:62:6e:05:55:0f:fb:48:6c:93:5c:29:e8:5f:b4:5f:e1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Aug 21 14:46:17 2025 GMT Not After : Aug 25 02:02:17 2025 GMT Subject: CN=61157700D0A6A6F0A85D1C47AD07BA880F8BCDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:92:fc:3c:6e:7c:fb:27:c3:93:57:15:da: 91:0a:ab:8b:b2:71:af:b1:d1:a3:1f:7c:02:12:28: 84:51:a3:77:5a:89:e5:e4:b3:fa:cf:76:a9:8f:6b: 05:f1:99:03:2d:1e:81:6e:b9:17:7d:a9:8a:d9:2e: 6f:cc:ca:eb:bb:d9:1a:1f:12:1e:56:47:08:c2:af: 4a:9d:b6:45:9c:3f:c8:36:58:4f:84:1f:a3:bb:39: 57:df:15:74:bc:ae:34:bd:89:e2:38:05:da:3a:22: c8:c1:46:c2:84:21:56:4a:c1:a3:4f:7b:67:84:1a: de:24:02:dd:0a:36:40:c4:5a:32:61:86:5a:d9:83: c1:49:5a:f2:c1:df:d2:8d:e1:5d:3c:40:d8:3d:22: d2:ff:51:3c:11:63:23:f6:1d:f4:cd:8d:00:94:59: ab:6e:cb:6b:b8:6a:24:61:d6:64:3b:06:5b:22:9a: e9:27:f8:a0:f5:6f:44:0f:af:ad:f8:9f:d0:3f:99: 38:8f:7b:f1:a0:7a:8c:ea:ef:49:98:82:0b:ad:a3: a4:28:49:2c:59:22:35:f7:08:ab:c7:42:32:de:2d: 3a:bf:64:95:ae:1f:25:13:66:d6:2e:22:79:31:0e: 7e:7d:14:08:58:20:40:0d:ad:62:9a:92:35:82:5f: 7c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:15:77:00:D0:A6:A6:F0:A8:5D:1C:47:AD:07:BA:88:0F:8B:CD:D4 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:2a:61:66:19:d7:59:cb:b4:ce:3e:35:19:a4:fc:40:1d: 1d:6f:80:5e:16:e0:05:74:46:10:3b:0e:b2:f1:49:68:a5:85: 62:ff:d5:1e:18:ca:57:19:37:25:a2:8d:cc:ca:b7:4f:30:02: ce:cd:b8:7a:81:fc:1d:05:68:60:58:8e:e1:52:66:c2:f7:78: 94:32:c4:20:52:c0:5c:5c:8d:e5:d7:ff:ed:95:4d:92:75:f5: 3c:af:87:8c:ba:fa:e5:8a:0a:2f:57:3e:ce:4f:be:63:31:b3: 2e:7a:7d:8e:d8:e1:d0:20:57:21:af:fa:f5:9a:96:79:1c:59: 32:86:5e:84:45:ac:0a:e1:90:be:16:20:44:85:7b:05:a4:7f: 49:be:59:6e:44:b2:c8:d8:52:c5:63:81:8e:34:de:7a:49:fb: ee:89:29:e9:fc:ea:11:04:79:d6:ae:6e:03:8d:f6:aa:32:cc: fc:4e:93:5c:be:45:57:d7:75:2a:1e:36:ec:e1:d5:3c:db:38: 76:75:81:56:d1:d5:84:f0:74:5c:16:ec:92:66:d5:ef:56:c5: 45:33:d1:ce:58:32:89:26:b1:88:4e:f5:72:69:de:25:2c:f7: 2b:6b:07:3d:f1:f9:1a:2b:4e:f8:bf:73:d5:c6:33:1c:d5:6f: 38:56:2c:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsLZYm4FVQ/7SGyTXCnoX7Rf4YMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA4MjExNDQ2MTdaFw0yNTA4MjUwMjAyMTdaMDMxMTAvBgNV BAMTKDYxMTU3NzAwRDBBNkE2RjBBODVEMUM0N0FEMDdCQTg4MEY4QkNERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3pL8PG58+yfDk1cV2pEKq4uy ca+x0aMffAISKIRRo3daieXks/rPdqmPawXxmQMtHoFuuRd9qYrZLm/Myuu72Rof Eh5WRwjCr0qdtkWcP8g2WE+EH6O7OVffFXS8rjS9ieI4Bdo6IsjBRsKEIVZKwaNP e2eEGt4kAt0KNkDEWjJhhlrZg8FJWvLB39KN4V08QNg9ItL/UTwRYyP2HfTNjQCU Watuy2u4aiRh1mQ7Blsimukn+KD1b0QPr634n9A/mTiPe/Ggeozq70mYgguto6Qo SSxZIjX3CKvHQjLeLTq/ZJWuHyUTZtYuInkxDn59FAhYIEANrWKakjWCX3yzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYRV3ANCmpvCoXRxHrQe6iA+LzdQwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTUKmFmGddZy7TOPjUZpPxAHR1vgF4W4AV0 RhA7DrLxSWilhWL/1R4YylcZNyWijczKt08wAs7NuHqB/B0FaGBYjuFSZsL3eJQy xCBSwFxcjeXX/+2VTZJ19Tyvh4y6+uWKCi9XPs5PvmMxsy56fY7Y4dAgVyGv+vWa lnkcWTKGXoRFrArhkL4WIESFewWkf0m+WW5EssjYUsVjgY403npJ++6JKen86hEE edaubgON9qoyzPxOk1y+RVfXdSoeNuzh1TzbOHZ1gVbR1YTwdFwW7JJm1e9WxUUz 0c5YMokmsYhO9XJp3iUs9ytrBz3x+RorTvi/c9XGMxzVbzhWLBI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:08 2025 by rpki-client