$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: Hl0xRj/j2u10qWlq/hUstqxo3sn58sZGvmdjq3ooly0= Subject key identifier: 55:C7:0B:F2:E0:2A:13:1F:26:BA:01:0B:F5:F5:7B:DA:05:19:CE:EA Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 41D88370B91D81382438274C1C66F94085EA13E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 023E Signing time: Tue 05 Aug 2025 10:50:57 +0000 Manifest this update: Tue 05 Aug 2025 10:45:57 +0000 Manifest next update: Fri 08 Aug 2025 12:51:57 +0000 Files and hashes: 1: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: EhPN5ULxTVLLULI57JHvCFXlqI5vJfaE/Cwfssh9Q+U=) 3: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d8:83:70:b9:1d:81:38:24:38:27:4c:1c:66:f9:40:85:ea:13:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Aug 5 10:45:57 2025 GMT Not After : Aug 8 12:51:57 2025 GMT Subject: CN=55C70BF2E02A131F26BA010BF5F57BDA0519CEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:1c:89:d7:fd:f9:86:3c:38:e5:88:b5:c2:39: f0:4c:b2:e6:47:cb:3d:b4:99:ab:0d:b6:0b:a1:32: 51:5e:6a:4f:52:dc:67:c5:51:f7:98:c0:35:71:9b: 1d:b1:67:d1:6b:67:6a:fa:6e:c7:da:ae:b0:83:b9: d2:4b:df:ef:8b:c8:fb:da:f2:b0:28:79:cd:5a:00: ce:73:ec:cb:63:41:e3:9d:25:14:7b:dc:f8:b6:30: ab:d8:6f:c7:36:2e:9f:f1:0a:56:9a:41:20:45:8c: 9f:7b:b7:52:ca:55:32:b1:37:04:32:53:5b:af:5b: 98:43:19:fb:2c:5c:06:e6:e5:7a:5b:1b:01:81:b6: ec:96:65:9f:fd:82:22:fa:ac:cc:eb:43:5b:00:b5: b9:f1:d7:05:63:71:bb:e7:cf:3a:d4:91:ef:ed:20: 59:11:6b:ee:cb:ac:b9:2f:db:f2:69:99:2b:08:0a: 2a:20:de:08:7e:ce:d8:b8:ba:f4:c8:ac:ac:b9:19: 5f:2f:aa:95:71:09:94:3d:0a:76:a7:7c:2e:48:ff: 31:35:77:53:76:ca:58:c2:ae:bf:76:43:be:42:9d: 54:ca:e3:36:ef:39:14:67:2c:7c:19:f6:7c:99:d4: 3d:f4:3d:db:fe:57:a5:bb:11:e8:6b:ac:a2:d6:c9: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:0B:F2:E0:2A:13:1F:26:BA:01:0B:F5:F5:7B:DA:05:19:CE:EA X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2f:72:11:28:a0:00:99:64:04:ad:47:26:1e:7d:53:b3:9b: 88:70:33:27:fd:49:2a:20:eb:ab:bf:57:72:cb:5a:a8:2a:e9: e7:1b:fc:39:61:e7:9a:24:77:a2:8f:92:a9:c9:be:be:f7:f8: 58:c1:26:fb:15:56:0f:77:c3:8e:5c:ec:5a:ff:73:af:f2:84: 9f:20:92:f4:42:18:ef:fb:0f:46:bb:77:be:54:1e:a2:ba:16: 62:7f:56:95:6a:2a:48:1c:99:34:e4:de:4b:5c:a9:b8:ae:1c: f8:f5:88:be:9d:7f:c6:8c:ce:be:b1:d8:63:5c:3b:39:f8:e1: 38:77:be:b2:af:3f:e9:81:7f:95:7a:99:13:e4:45:71:1e:a2: 6c:bf:4e:88:e5:9d:3d:e8:5e:56:c2:8e:79:48:99:6f:b0:af: 20:ba:ae:36:7a:8f:f3:13:8c:44:3e:8d:ba:a9:f2:32:af:b4: bb:48:b3:b3:e8:ea:5f:2d:ed:fd:00:1e:ba:d4:9c:a0:65:53: 89:7e:56:34:dc:b8:df:2b:0a:a9:c9:22:79:76:24:86:07:c6: c7:3e:51:29:7e:cf:63:5d:77:c5:a0:59:b1:79:2c:b9:f9:4a: 8c:52:00:04:3f:70:57:c9:84:0a:7a:8e:7b:0a:0e:93:80:13: 75:ab:03:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdiDcLkdgTgkOCdMHGb5QIXqE+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA4MDUxMDQ1NTdaFw0yNTA4MDgxMjUxNTdaMDMxMTAvBgNV BAMTKDU1QzcwQkYyRTAyQTEzMUYyNkJBMDEwQkY1RjU3QkRBMDUxOUNFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8HInX/fmGPDjliLXCOfBMsuZH yz20masNtguhMlFeak9S3GfFUfeYwDVxmx2xZ9FrZ2r6bsfarrCDudJL3++LyPva 8rAoec1aAM5z7MtjQeOdJRR73Pi2MKvYb8c2Lp/xClaaQSBFjJ97t1LKVTKxNwQy U1uvW5hDGfssXAbm5XpbGwGBtuyWZZ/9giL6rMzrQ1sAtbnx1wVjcbvnzzrUke/t IFkRa+7LrLkv2/JpmSsICiog3gh+zti4uvTIrKy5GV8vqpVxCZQ9CnanfC5I/zE1 d1N2yljCrr92Q75CnVTK4zbvORRnLHwZ9nyZ1D30Pdv+V6W7EehrrKLWycepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVccL8uAqEx8mugEL9fV72gUZzuowHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8vchEooACZZAStRyYefVOzm4hwMyf9SSog 66u/V3LLWqgq6ecb/Dlh55okd6KPkqnJvr73+FjBJvsVVg93w45c7Fr/c6/yhJ8g kvRCGO/7D0a7d75UHqK6FmJ/VpVqKkgcmTTk3ktcqbiuHPj1iL6df8aMzr6x2GNc Ozn44Th3vrKvP+mBf5V6mRPkRXEeomy/TojlnT3oXlbCjnlImW+wryC6rjZ6j/MT jEQ+jbqp8jKvtLtIs7Po6l8t7f0AHrrUnKBlU4l+VjTcuN8rCqnJInl2JIYHxsc+ USl+z2Ndd8WgWbF5LLn5SoxSAAQ/cFfJhAp6jnsKDpOAE3WrA8M= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:22 2025 by rpki-client