$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: upvXoNPRa79zOgy/al8DYJV8N8zflk/ZNQSdnMerH3o= Subject key identifier: 73:8E:E2:12:4B:7F:8C:0C:3D:30:33:9B:D9:EA:C6:E5:76:5A:BD:E2 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 5FE69293756896911D9493B2CC8149BB0FC85802 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 022E Signing time: Sun 29 Jun 2025 20:20:57 +0000 Manifest this update: Sun 29 Jun 2025 20:15:57 +0000 Manifest next update: Thu 03 Jul 2025 06:29:57 +0000 Files and hashes: 1: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 2: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: iDia3cKgM6ZSJ+oUChqxL/NqCPfACM2qagFAGfLvRJM=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e6:92:93:75:68:96:91:1d:94:93:b2:cc:81:49:bb:0f:c8:58:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Jun 29 20:15:57 2025 GMT Not After : Jul 3 06:29:57 2025 GMT Subject: CN=738EE2124B7F8C0C3D30339BD9EAC6E5765ABDE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:9b:25:78:4e:96:66:0f:6f:93:be:ea:66: 3e:4a:e0:70:36:df:b5:42:d5:d8:e0:cb:15:74:60: c9:6a:06:12:dc:f6:4e:a8:0c:88:e2:03:09:c7:8d: 3d:eb:5d:ba:27:48:49:e7:65:1b:49:3e:22:12:b8: 9f:54:0b:15:f3:bb:0a:2e:46:6d:b3:1e:af:d0:c8: fc:48:f3:5a:0a:2c:1d:20:b2:35:ab:79:25:db:c8: e6:32:f0:ad:2a:20:0c:54:60:a3:da:60:6e:97:b4: 9c:a6:ef:27:b1:a0:6e:15:a6:54:c7:7c:07:35:60: 21:d9:71:f8:31:c0:ea:7b:c9:8d:67:fd:24:c0:1e: 6c:a7:6e:e4:83:35:64:3e:66:74:59:c5:9e:94:dc: 1b:87:e9:fe:88:6f:1f:54:d2:54:57:2a:6c:19:be: c2:22:c4:09:c7:9f:f6:37:16:31:c3:3c:d8:fd:7a: f7:63:6a:b5:2a:c1:37:8c:d8:25:3f:cd:2a:de:fe: 4d:19:7e:18:58:64:5b:1e:67:91:50:b3:8d:14:c6: 57:1c:d3:c3:75:df:12:7c:78:58:ae:d4:6b:6a:ae: 9a:cf:f7:e4:ee:14:c0:67:34:bb:f6:6d:63:ac:0f: c1:e2:c5:16:6d:b6:f5:4b:68:ce:ff:d7:ec:a4:fd: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8E:E2:12:4B:7F:8C:0C:3D:30:33:9B:D9:EA:C6:E5:76:5A:BD:E2 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:df:9b:27:93:e7:e8:3b:64:fe:67:3d:cd:73:5c:6d:2a:e4: e1:b0:0f:f5:9a:f9:2b:97:ca:ee:8f:8e:63:08:0d:f5:60:10: bd:2e:e1:b7:85:b4:c6:7b:1a:c9:b8:f6:c9:71:3c:dc:02:1c: 41:b9:18:24:74:1a:7d:51:78:4b:e1:e9:84:7e:b9:8b:d0:9d: fa:48:f7:f7:d0:9f:e4:7c:b0:85:10:68:04:51:aa:45:13:fb: b4:26:6f:cb:a1:e5:72:ee:de:fb:fa:fd:98:e4:f5:0e:89:38: a1:89:e0:54:64:dc:d2:c6:2e:75:8a:cb:4f:7c:b2:65:73:2a: 2f:a4:7f:6c:0e:6b:b2:8c:b2:7b:d4:e3:9d:b1:9a:da:19:2e: f5:89:a4:da:9c:98:f2:22:23:66:fa:e4:1d:ae:bb:62:dc:58: 80:79:95:cf:5e:9d:e0:04:fa:d6:a9:79:fd:18:3c:3b:34:0a: ed:6a:eb:a3:d5:c9:6b:19:b1:e5:64:6b:88:4e:27:fd:62:26: 38:ae:49:04:db:66:6c:67:bd:ea:6a:b2:63:6a:1b:f3:35:cf: 02:1a:27:57:74:87:cf:24:93:1b:fb:26:86:a1:95:7c:2b:16: 2d:d7:a5:28:0e:25:84:a7:90:29:65:89:6a:91:51:9f:c3:40: b8:42:1f:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+aSk3VolpEdlJOyzIFJuw/IWAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA2MjkyMDE1NTdaFw0yNTA3MDMwNjI5NTdaMDMxMTAvBgNV BAMTKDczOEVFMjEyNEI3RjhDMEMzRDMwMzM5QkQ5RUFDNkU1NzY1QUJERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuJsleE6WZg9vk77qZj5K4HA2 37VC1djgyxV0YMlqBhLc9k6oDIjiAwnHjT3rXbonSEnnZRtJPiISuJ9UCxXzuwou Rm2zHq/QyPxI81oKLB0gsjWreSXbyOYy8K0qIAxUYKPaYG6XtJym7yexoG4VplTH fAc1YCHZcfgxwOp7yY1n/STAHmynbuSDNWQ+ZnRZxZ6U3BuH6f6Ibx9U0lRXKmwZ vsIixAnHn/Y3FjHDPNj9evdjarUqwTeM2CU/zSre/k0ZfhhYZFseZ5FQs40Uxlcc 08N13xJ8eFiu1GtqrprP9+TuFMBnNLv2bWOsD8HixRZttvVLaM7/1+yk/WV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc47iEkt/jAw9MDOb2erG5XZaveIwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7fmyeT5+g7ZP5nPc1zXG0q5OGwD/Wa+SuX yu6PjmMIDfVgEL0u4beFtMZ7Gsm49slxPNwCHEG5GCR0Gn1ReEvh6YR+uYvQnfpI 9/fQn+R8sIUQaARRqkUT+7Qmb8uh5XLu3vv6/Zjk9Q6JOKGJ4FRk3NLGLnWKy098 smVzKi+kf2wOa7KMsnvU452xmtoZLvWJpNqcmPIiI2b65B2uu2LcWIB5lc9eneAE +tapef0YPDs0Cu1q66PVyWsZseVka4hOJ/1iJjiuSQTbZmxnvepqsmNqG/M1zwIa J1d0h88kkxv7JoahlXwrFi3XpSgOJYSnkClliWqRUZ/DQLhCH+k= -----END CERTIFICATE-----Generated at Sun Jun 29 23:33:11 2025 by rpki-client