$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: HUQvNWiel5fZPD7OW8BKwytBm8sgE9TCpgMdZNhMV08= Subject key identifier: 6C:A9:BA:DE:B6:EE:7D:3E:BC:FE:F8:40:17:5B:7D:34:31:39:79:80 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 7AD0BFDD30E1F5E525C6BFF4A19BFBCABC710955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 11:11:14 +0000 Manifest this update: Sun 15 Jun 2025 11:06:14 +0000 Manifest next update: Wed 18 Jun 2025 17:50:14 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: ITX0tTJyp9Kqc/ykhTRv3xa/9e1smmPuHkRoJlK/42g=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d0:bf:dd:30:e1:f5:e5:25:c6:bf:f4:a1:9b:fb:ca:bc:71:09:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Jun 15 11:06:14 2025 GMT Not After : Jun 18 17:50:14 2025 GMT Subject: CN=6CA9BADEB6EE7D3EBCFEF840175B7D3431397980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e7:01:c7:2f:c9:1b:8b:82:ba:93:2d:57:b5: a3:85:04:94:e9:a2:fd:68:71:98:d0:44:40:81:9b: ed:f0:d9:9c:0e:b6:9d:11:6b:51:95:30:5d:59:52: 7e:f9:c1:4d:48:3f:47:88:a4:19:81:a2:40:ba:96: c4:10:b7:c7:b7:15:99:fe:29:17:4e:d9:2c:44:fc: a7:7c:87:37:76:0d:0f:fa:25:2e:a2:34:de:07:57: 31:5c:02:7c:63:d6:29:e0:92:be:bc:55:b5:23:f6: 31:26:fe:19:b6:ae:db:9a:b8:f0:80:b3:e2:08:aa: 75:d2:b9:9a:32:3d:d3:ea:5a:b9:f0:ed:a7:c7:2e: 03:a0:93:1c:41:ff:29:f0:8d:9e:67:18:ac:3d:78: 41:c1:37:6e:9e:2c:66:b0:73:d2:e8:51:65:5c:f3: 2c:ca:85:c8:bf:f2:13:3a:28:16:0d:44:0a:8b:7c: f4:d5:99:5f:e5:1b:aa:b7:cb:b8:7d:bd:fd:f5:11: f4:f8:ba:09:e2:61:11:09:85:b8:c7:84:26:02:e5: 8f:58:07:1c:91:4a:40:85:21:e0:e8:cb:36:c8:0b: 2d:4e:7e:b2:28:7d:c2:e0:30:58:63:b6:31:79:4c: 7a:b8:98:ca:a7:19:49:c8:2c:e1:2d:c0:69:d7:c2: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A9:BA:DE:B6:EE:7D:3E:BC:FE:F8:40:17:5B:7D:34:31:39:79:80 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:52:95:74:4e:04:a2:92:47:8d:4b:71:ce:2d:85:b7:9d:96: 8b:f7:3b:fd:e8:ac:d1:ad:5a:b9:b9:27:2e:06:25:c4:24:7c: 21:85:79:ef:86:ed:48:1d:03:9c:90:16:12:39:8b:a6:06:5c: 1b:18:9c:47:5d:fa:f5:80:2a:11:48:ad:1d:61:28:1a:82:85: 65:45:58:b1:78:ba:a1:93:d4:d6:84:e4:63:84:cf:e5:a1:87: f2:78:c5:7d:60:c4:d4:03:7a:6d:7d:f9:a9:6e:79:77:b5:38: ea:09:e1:4e:ea:0c:42:8f:86:44:6f:e1:73:19:51:a6:62:b3: 29:55:80:81:74:12:8a:80:eb:cd:cb:b7:0c:f8:bb:b8:2f:48: 4d:f3:80:6a:4c:b4:ae:35:0c:d2:2d:50:4a:e2:12:d0:b8:91: ea:f8:cd:1e:4c:a4:20:06:5b:fb:3b:91:17:e5:2a:2e:2b:cf: bc:b5:50:4f:97:93:47:7e:ea:5a:54:3e:ef:a2:81:76:0b:ad: 24:7e:b8:25:45:73:6a:14:c1:8d:a5:1d:5f:c8:cd:72:7a:a1: 06:e3:9f:d8:32:8b:67:1b:6d:8d:4e:45:10:21:35:d9:6e:af: e6:b9:b1:a3:76:fc:7b:5e:e3:ca:b1:18:4b:a6:f5:c4:12:24: 6e:a5:9d:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetC/3TDh9eUlxr/0oZv7yrxxCVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA2MTUxMTA2MTRaFw0yNTA2MTgxNzUwMTRaMDMxMTAvBgNV BAMTKDZDQTlCQURFQjZFRTdEM0VCQ0ZFRjg0MDE3NUI3RDM0MzEzOTc5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn5wHHL8kbi4K6ky1XtaOFBJTp ov1ocZjQRECBm+3w2ZwOtp0Ra1GVMF1ZUn75wU1IP0eIpBmBokC6lsQQt8e3FZn+ KRdO2SxE/Kd8hzd2DQ/6JS6iNN4HVzFcAnxj1ingkr68VbUj9jEm/hm2rtuauPCA s+IIqnXSuZoyPdPqWrnw7afHLgOgkxxB/ynwjZ5nGKw9eEHBN26eLGawc9LoUWVc 8yzKhci/8hM6KBYNRAqLfPTVmV/lG6q3y7h9vf31EfT4ugniYREJhbjHhCYC5Y9Y BxyRSkCFIeDoyzbICy1OfrIofcLgMFhjtjF5THq4mMqnGUnILOEtwGnXwrD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKm63rbufT68/vhAF1t9NDE5eYAwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5SlXROBKKSR41Lcc4thbedlov3O/3orNGt Wrm5Jy4GJcQkfCGFee+G7UgdA5yQFhI5i6YGXBsYnEdd+vWAKhFIrR1hKBqChWVF WLF4uqGT1NaE5GOEz+Whh/J4xX1gxNQDem19+alueXe1OOoJ4U7qDEKPhkRv4XMZ UaZisylVgIF0EoqA683Ltwz4u7gvSE3zgGpMtK41DNItUEriEtC4ker4zR5MpCAG W/s7kRflKi4rz7y1UE+Xk0d+6lpUPu+igXYLrSR+uCVFc2oUwY2lHV/IzXJ6oQbj n9gyi2cbbY1ORRAhNdlur+a5saN2/Hte48qxGEum9cQSJG6lnac= -----END CERTIFICATE-----Generated at Sun Jun 15 23:59:16 2025 by rpki-client