$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: thkNZXJwS4U+RXk6sYxB6D0XLu179nsDF9opXdzmM4s= Subject key identifier: 3A:27:1A:14:4F:84:24:EB:0E:9F:D4:B1:D6:4C:F2:AC:7A:6B:B6:94 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 4B1ACD6979EB96E976FC22AD001191B9620FD210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04E4 Signing time: Sun 29 Jun 2025 02:51:16 +0000 Manifest this update: Sun 29 Jun 2025 02:46:16 +0000 Manifest next update: Wed 02 Jul 2025 11:50:16 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: E7Gf2ZP1sMUunn5+elu0lXCBaXlLqB9pAL3oNJMmiiI=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1a:cd:69:79:eb:96:e9:76:fc:22:ad:00:11:91:b9:62:0f:d2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Jun 29 02:46:16 2025 GMT Not After : Jul 2 11:50:16 2025 GMT Subject: CN=3A271A144F8424EB0E9FD4B1D64CF2AC7A6BB694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:c3:7a:5f:30:8a:d0:27:22:ac:35:37:e0: df:ab:35:ab:1c:e2:f1:97:3b:12:e8:e7:54:f6:fe: a7:e0:b1:3b:a4:f4:ed:50:59:6d:2a:e9:d7:e0:bc: 3e:95:10:32:ab:de:86:45:cd:0a:b9:1e:41:70:83: d1:16:a4:0e:b8:95:bb:5f:7d:e1:71:50:15:c5:30: 32:1f:06:a4:6b:e1:56:c6:bc:c7:fe:b4:68:2f:5c: 50:49:46:56:38:6e:d7:ee:2d:13:2f:e8:0d:79:05: ad:82:3c:93:d8:28:26:fe:c2:91:04:e5:e5:60:f6: 11:77:14:54:78:f3:76:22:c0:e5:e6:d3:bd:4d:c5: 62:7e:c1:83:cc:86:7e:f7:f4:f5:c2:13:d2:ad:e0: 37:76:63:63:51:c0:92:69:10:83:4d:85:13:4f:21: ba:b9:45:ca:f4:43:66:27:50:a0:3c:17:6c:da:59: 30:62:a6:2c:b2:ac:7d:10:c3:a6:2d:f5:d1:5c:a5: b3:1f:4c:15:46:f4:87:31:c3:d7:9a:56:84:e4:ee: 6b:63:ae:5d:63:97:2d:1f:b6:ce:e8:89:73:65:50: c5:29:29:be:d4:80:a8:ca:80:35:c9:e4:21:f9:c8: 51:ad:91:ad:9f:83:f3:1a:6f:d6:a2:0f:26:79:38: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:1A:14:4F:84:24:EB:0E:9F:D4:B1:D6:4C:F2:AC:7A:6B:B6:94 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f7:ef:ef:c8:5b:b2:c7:2c:2f:97:61:07:a9:f1:6a:c4:2e: c2:35:22:b6:a7:8f:a8:bb:06:ee:28:b8:bf:b7:b0:bf:f4:90: 30:25:29:2c:3f:55:da:f4:c2:c9:55:b3:99:2b:47:c2:1c:d8: 8f:d7:09:2c:cd:83:6c:31:fc:27:d8:23:e4:ba:86:ef:c8:b9: db:ce:3b:d5:2f:f1:1a:76:bb:55:28:e7:ef:1d:96:1f:cf:fc: 72:70:df:3b:f5:26:85:47:61:37:3e:43:48:bb:3b:e3:62:5b: ab:62:74:47:e5:f2:87:74:bb:fa:f2:0a:aa:51:11:53:c4:81: 92:24:3b:c8:c5:5c:18:cf:62:15:4a:31:df:98:07:a9:ce:2a: bd:75:84:04:3d:f8:a3:3f:79:2e:17:3f:70:1b:d4:b3:b6:ae: 97:b7:11:bb:77:17:c1:d2:9e:20:cf:ed:d0:80:5b:1a:e4:87: d5:12:1d:a3:29:b9:b7:31:b8:c6:31:72:0f:e7:9f:c3:8f:d4: a2:c4:09:b9:b5:54:6d:39:11:b4:8d:bd:db:66:1d:d7:19:3d: dc:8e:48:a1:e2:04:3f:d3:ba:41:2e:ec:a0:4f:4a:ca:41:46: d4:f7:5e:44:26:3d:cf:26:4e:46:fd:fe:c2:8d:23:74:63:25: b0:1f:31:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxrNaXnrlul2/CKtABGRuWIP0hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA2MjkwMjQ2MTZaFw0yNTA3MDIxMTUwMTZaMDMxMTAvBgNV BAMTKDNBMjcxQTE0NEY4NDI0RUIwRTlGRDRCMUQ2NENGMkFDN0E2QkI2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbcN6XzCK0CcirDU34N+rNasc 4vGXOxLo51T2/qfgsTuk9O1QWW0q6dfgvD6VEDKr3oZFzQq5HkFwg9EWpA64lbtf feFxUBXFMDIfBqRr4VbGvMf+tGgvXFBJRlY4btfuLRMv6A15Ba2CPJPYKCb+wpEE 5eVg9hF3FFR483YiwOXm071NxWJ+wYPMhn739PXCE9Kt4Dd2Y2NRwJJpEINNhRNP Ibq5Rcr0Q2YnUKA8F2zaWTBipiyyrH0Qw6Yt9dFcpbMfTBVG9Icxw9eaVoTk7mtj rl1jly0fts7oiXNlUMUpKb7UgKjKgDXJ5CH5yFGtka2fg/Mab9aiDyZ5OJrzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOicaFE+EJOsOn9Sx1kzyrHprtpQwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb37+/IW7LHLC+XYQep8WrELsI1Iranj6i7 Bu4ouL+3sL/0kDAlKSw/Vdr0wslVs5krR8Ic2I/XCSzNg2wx/CfYI+S6hu/IudvO O9Uv8Rp2u1Uo5+8dlh/P/HJw3zv1JoVHYTc+Q0i7O+NiW6tidEfl8od0u/ryCqpR EVPEgZIkO8jFXBjPYhVKMd+YB6nOKr11hAQ9+KM/eS4XP3Ab1LO2rpe3Ebt3F8HS niDP7dCAWxrkh9USHaMpubcxuMYxcg/nn8OP1KLECbm1VG05EbSNvdtmHdcZPdyO SKHiBD/TukEu7KBPSspBRtT3XkQmPc8mTkb9/sKNI3RjJbAfMa4= -----END CERTIFICATE-----Generated at Mon Jun 30 00:32:28 2025 by rpki-client