$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: xM4wni0pMPe5VVEOzz7t6rfN8d0ose+XIEXJo6JKEWA= Subject key identifier: 84:96:49:5B:DA:E5:F5:CE:1E:B3:7A:10:E6:3E:AB:2B:2D:F7:68:C4 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 0105D4A862B240234227411221D2D887B6FF5A27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0245 Signing time: Thu 21 Aug 2025 05:10:56 +0000 Manifest this update: Thu 21 Aug 2025 05:05:56 +0000 Manifest next update: Sun 24 Aug 2025 11:10:56 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: ANFowHN9jOdZODN63/cn5pFzJPPfRysM2b9auKBKrEo=) 3: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 4: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:05:d4:a8:62:b2:40:23:42:27:41:12:21:d2:d8:87:b6:ff:5a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Aug 21 05:05:56 2025 GMT Not After : Aug 24 11:10:56 2025 GMT Subject: CN=8496495BDAE5F5CE1EB37A10E63EAB2B2DF768C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:7f:21:00:c5:7c:fe:5e:b3:fd:4f:0e:53: 58:3b:9d:34:27:16:74:8d:c4:62:1f:72:3f:dd:94: ff:be:e6:1a:51:85:a8:f3:68:fd:6c:df:4e:a6:83: 7c:38:00:5f:34:23:ea:54:0b:50:82:f9:e6:a9:b5: d4:f0:81:5d:21:7a:2a:5c:76:a0:9e:9d:85:0c:57: 7c:84:70:32:31:38:a4:6c:27:24:d8:4d:88:7a:26: 6d:8f:fe:f2:fe:f3:a8:5a:4c:d9:5d:aa:22:11:02: ef:33:ca:6f:9a:fb:d5:ac:e0:bf:c3:33:5d:3a:e5: 0f:aa:25:3f:d1:32:68:f0:1e:77:9f:26:51:79:1f: 4a:29:9d:89:d2:5b:80:a8:64:9c:53:86:60:8b:af: 98:5c:20:c6:0d:2a:f9:dc:92:80:1b:21:03:68:c9: bf:41:40:00:cf:e5:bd:b2:60:e8:f9:99:91:8e:f6: 2c:55:c7:06:31:5d:20:f9:1d:75:81:4a:fc:8f:04: ce:c8:e2:7c:c2:57:f4:9a:9a:76:4e:29:a4:3a:eb: 63:60:92:ef:13:1f:5e:00:aa:e0:fa:b9:5f:d0:5e: 19:a7:5b:3a:2a:02:44:18:27:39:95:b8:79:56:06: 76:75:3f:d5:df:14:58:c4:1d:f4:27:1a:61:97:13: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:49:5B:DA:E5:F5:CE:1E:B3:7A:10:E6:3E:AB:2B:2D:F7:68:C4 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:db:4d:de:8f:44:8e:4e:cb:36:f3:e4:a4:c6:28:33:d3:54: 3e:54:f7:ac:c2:cf:ac:1b:19:45:2a:ee:cd:31:e1:c9:6f:b9: 48:15:59:6b:a4:53:29:8f:00:de:94:63:43:de:13:38:33:15: 87:46:34:9a:0e:dc:02:df:30:e6:3b:3d:c7:16:e1:19:16:ed: c7:7c:91:12:b9:b0:b3:0e:d1:38:ba:87:4c:8f:c8:79:53:c3: a6:01:bd:28:d7:01:61:74:d0:8d:2d:07:9a:8b:42:27:6d:5d: b2:b4:ff:82:64:2c:d4:1b:a4:7c:f8:3d:3d:2c:f7:65:bd:18: c0:ef:db:be:c2:fb:21:9e:e5:d1:a3:10:21:33:ed:2d:2e:d6: 01:8e:e4:84:ca:e0:0e:40:31:5f:2d:18:de:6b:d6:c3:1d:b9: 5c:d0:ad:13:b8:24:97:3e:4e:26:b2:c7:c3:35:f0:0a:74:d5: a6:27:b0:89:bf:0b:8a:d0:5f:e8:58:9c:90:d7:81:02:01:d2: b3:ff:9f:77:42:9f:02:d7:6d:17:5a:68:11:06:56:28:98:18: 5b:51:ae:aa:73:e8:20:df:a8:f5:fa:99:1b:c7:b4:a2:28:57: e4:4d:03:fa:fe:96:99:1f:40:b5:c6:34:f4:39:10:e4:cf:4d: 5a:6f:2a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQXUqGKyQCNCJ0ESIdLYh7b/WicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA4MjEwNTA1NTZaFw0yNTA4MjQxMTEwNTZaMDMxMTAvBgNV BAMTKDg0OTY0OTVCREFFNUY1Q0UxRUIzN0ExMEU2M0VBQjJCMkRGNzY4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYn8hAMV8/l6z/U8OU1g7nTQn FnSNxGIfcj/dlP++5hpRhajzaP1s306mg3w4AF80I+pUC1CC+eaptdTwgV0heipc dqCenYUMV3yEcDIxOKRsJyTYTYh6Jm2P/vL+86haTNldqiIRAu8zym+a+9Ws4L/D M1065Q+qJT/RMmjwHnefJlF5H0opnYnSW4CoZJxThmCLr5hcIMYNKvnckoAbIQNo yb9BQADP5b2yYOj5mZGO9ixVxwYxXSD5HXWBSvyPBM7I4nzCV/SamnZOKaQ662Ng ku8TH14AquD6uV/QXhmnWzoqAkQYJzmVuHlWBnZ1P9XfFFjEHfQnGmGXEzhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJZJW9rl9c4es3oQ5j6rKy33aMQwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzbTd6PRI5Oyzbz5KTGKDPTVD5U96zCz6wb GUUq7s0x4clvuUgVWWukUymPAN6UY0PeEzgzFYdGNJoO3ALfMOY7PccW4RkW7cd8 kRK5sLMO0Ti6h0yPyHlTw6YBvSjXAWF00I0tB5qLQidtXbK0/4JkLNQbpHz4PT0s 92W9GMDv277C+yGe5dGjECEz7S0u1gGO5ITK4A5AMV8tGN5r1sMduVzQrRO4JJc+ Tiayx8M18Ap01aYnsIm/C4rQX+hYnJDXgQIB0rP/n3dCnwLXbRdaaBEGViiYGFtR rqpz6CDfqPX6mRvHtKIoV+RNA/r+lpkfQLXGNPQ5EOTPTVpvKvs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:29 2025 by rpki-client