$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: Tt8Q+51xN/cBKztxzfDOQC9UrU1aaGX8b/uTuxrGQwk= Subject key identifier: B2:8D:00:A7:C0:98:58:CA:D2:BB:31:A2:46:E2:CA:0E:51:4D:B7:8A Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 7B852ACDF7D10D791A6C747821629088F0ED18A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0227 Signing time: Fri 13 Jun 2025 20:21:00 +0000 Manifest this update: Fri 13 Jun 2025 20:16:00 +0000 Manifest next update: Tue 17 Jun 2025 03:28:00 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: 4akwVH9c5rPWmGudX7gfQ/2PfDSOvgMrcRs2YWWaoTg=) 3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 4: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:85:2a:cd:f7:d1:0d:79:1a:6c:74:78:21:62:90:88:f0:ed:18:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Jun 13 20:16:00 2025 GMT Not After : Jun 17 03:28:00 2025 GMT Subject: CN=B28D00A7C09858CAD2BB31A246E2CA0E514DB78A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:cc:b7:62:fd:db:ff:93:12:bf:13:58:ae: af:73:a3:44:9a:21:66:0d:14:52:79:16:6e:cf:aa: 6f:0c:e2:45:3f:e3:aa:59:22:b1:f2:8d:77:26:9a: d9:82:40:5a:d7:88:50:dc:61:de:be:3d:5a:4f:0a: 68:c1:c3:79:25:47:66:71:ed:cb:ed:13:13:37:b0: 00:e0:b8:fd:45:a4:be:2e:6d:b8:65:08:f5:ff:5c: 4f:fb:4f:b3:fe:3d:c0:47:ab:93:90:63:a6:12:f5: 35:06:c3:92:c4:6d:97:ed:0a:b1:df:dd:93:d3:56: 3f:1a:61:be:8e:dc:0e:f0:d9:61:2e:19:71:5a:92: 24:1b:5f:0e:23:26:61:c3:18:34:1a:85:b1:d9:b9: 69:04:de:c9:4e:91:50:9a:49:90:39:de:21:e1:f7: fb:5f:0c:0c:a6:ef:44:51:df:97:ac:ab:a0:58:27: d4:e5:12:4a:25:48:67:1e:02:0b:c4:92:ce:3c:69: 67:dd:ea:1e:08:ff:6a:a8:01:02:d2:2c:ff:83:d4: 7e:d8:57:34:eb:3a:bd:f2:21:04:8a:eb:85:a1:ec: d4:40:06:42:69:a4:da:68:e9:4c:1e:77:9b:76:3e: 8b:29:47:a3:f5:18:5d:ab:fd:63:a6:6a:f7:07:4e: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8D:00:A7:C0:98:58:CA:D2:BB:31:A2:46:E2:CA:0E:51:4D:B7:8A X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4a:60:c7:03:b4:c1:43:b8:b4:70:59:a1:13:bf:b5:8c:57: 3f:71:f8:18:80:6a:9e:b0:fd:29:fc:6b:9a:b9:36:1a:b7:05: 60:c6:e3:45:22:1f:49:f1:22:84:7e:aa:a0:8d:6d:22:c0:41: 7c:b4:05:b4:2a:5a:eb:ee:3d:c0:f1:7d:ba:c3:86:68:96:0a: 02:22:cc:8d:e9:63:c7:58:49:3c:c9:71:e1:7e:56:2e:7c:e4: 9c:e6:90:aa:4b:ae:74:05:92:cc:98:e4:65:53:96:a5:a2:30: 2b:cc:94:60:b4:8b:aa:69:6e:07:30:63:e7:f0:6b:4d:37:fe: 0e:58:75:f9:2b:27:4d:5d:92:f2:62:02:57:56:03:cb:bd:df: a6:6b:6e:fa:d9:be:bb:d2:50:8e:2b:6e:fb:0a:1b:43:c3:a0: 06:c7:65:68:0a:21:e5:a7:48:f0:cf:98:d6:e9:83:5e:5f:12: c1:02:cc:bf:98:2b:ad:e3:b9:15:87:a3:3b:1a:5a:89:7d:97: 99:6c:83:03:4f:b1:49:bb:00:b3:28:46:47:aa:7b:e3:cf:f6: 66:cf:e9:26:4b:42:d4:fc:57:d9:c0:c2:ad:25:af:d3:e8:ee: f0:c9:67:b7:9a:56:21:2c:03:ea:b3:96:90:f4:5f:d7:45:d6: 3a:82:31:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4UqzffRDXkabHR4IWKQiPDtGKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA2MTMyMDE2MDBaFw0yNTA2MTcwMzI4MDBaMDMxMTAvBgNV BAMTKEIyOEQwMEE3QzA5ODU4Q0FEMkJCMzFBMjQ2RTJDQTBFNTE0REI3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeMy3Yv3b/5MSvxNYrq9zo0Sa IWYNFFJ5Fm7Pqm8M4kU/46pZIrHyjXcmmtmCQFrXiFDcYd6+PVpPCmjBw3klR2Zx 7cvtExM3sADguP1FpL4ubbhlCPX/XE/7T7P+PcBHq5OQY6YS9TUGw5LEbZftCrHf 3ZPTVj8aYb6O3A7w2WEuGXFakiQbXw4jJmHDGDQahbHZuWkE3slOkVCaSZA53iHh 9/tfDAym70RR35esq6BYJ9TlEkolSGceAgvEks48aWfd6h4I/2qoAQLSLP+D1H7Y VzTrOr3yIQSK64Wh7NRABkJppNpo6Uwed5t2PospR6P1GF2r/WOmavcHTgpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUso0Ap8CYWMrSuzGiRuLKDlFNt4owHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdKYMcDtMFDuLRwWaETv7WMVz9x+BiAap6w /Sn8a5q5Nhq3BWDG40UiH0nxIoR+qqCNbSLAQXy0BbQqWuvuPcDxfbrDhmiWCgIi zI3pY8dYSTzJceF+Vi585JzmkKpLrnQFksyY5GVTlqWiMCvMlGC0i6ppbgcwY+fw a003/g5YdfkrJ01dkvJiAldWA8u936ZrbvrZvrvSUI4rbvsKG0PDoAbHZWgKIeWn SPDPmNbpg15fEsECzL+YK63juRWHozsaWol9l5lsgwNPsUm7ALMoRkeqe+PP9mbP 6SZLQtT8V9nAwq0lr9Po7vDJZ7eaViEsA+qzlpD0X9dF1jqCMYI= -----END CERTIFICATE-----Generated at Mon Jun 16 02:08:58 2025 by rpki-client