$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: znU+sBLmUsJ4wwDHiP7K58QuCoGiNcZgM7kxZSwRpOk= Subject key identifier: F2:5A:BB:4D:37:FC:93:20:C1:11:0F:80:59:07:22:FF:1A:A7:FD:E9 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 332FABDA155190C2C0C5BE8C05D9D57DACCE3C2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 04EC Signing time: Mon 21 Jul 2025 01:31:07 +0000 Manifest this update: Mon 21 Jul 2025 01:26:07 +0000 Manifest next update: Thu 24 Jul 2025 02:35:07 +0000 Files and hashes: 1: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: V4vDbUOjHOFLOEZPMjj7d7awyv1nAcaiYloNJBG9ZHU=) 2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2f:ab:da:15:51:90:c2:c0:c5:be:8c:05:d9:d5:7d:ac:ce:3c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Jul 21 01:26:07 2025 GMT Not After : Jul 24 02:35:07 2025 GMT Subject: CN=F25ABB4D37FC9320C1110F80590722FF1AA7FDE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:b1:2e:e8:19:83:1e:2e:55:c0:d6:92:19: f9:5e:a0:6f:c3:51:4d:15:a1:4e:6f:f0:45:cf:cc: a1:fc:f1:f0:28:c4:53:e2:39:c5:3c:c9:89:e2:74: 1a:e8:fa:4f:c4:de:cf:c0:7e:4e:45:b6:18:6a:6c: dd:67:05:6e:1a:a0:be:d2:f7:d3:10:eb:f2:46:97: f1:14:37:a0:4a:39:46:5f:e8:ba:2c:31:9a:d2:5f: 50:95:d9:e3:c5:ee:a7:22:ae:40:ec:2b:7c:b2:69: e5:62:e2:ff:81:03:23:98:3a:7e:ca:60:d4:13:2c: 8d:2e:d2:04:e4:bb:12:94:b5:54:c3:e5:98:59:04: 9d:7b:73:25:29:45:94:d4:97:95:51:d8:01:cf:1d: 16:7b:b7:34:d7:56:1e:f3:f4:85:62:9d:4a:e8:64: bd:77:27:77:41:11:97:57:14:e2:7b:7d:7a:60:21: 64:70:29:7b:43:0a:94:cf:1a:39:29:53:a0:24:ea: 74:2f:19:dd:61:23:85:0a:25:b4:7e:15:5c:17:87: 47:5f:84:40:25:25:58:b2:53:b4:eb:b7:11:c2:8a: 64:31:8b:07:ff:e7:1f:15:2d:d5:cb:ed:83:21:9e: dc:b7:69:cd:6a:2b:54:8b:43:e3:97:be:94:fc:71: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:BB:4D:37:FC:93:20:C1:11:0F:80:59:07:22:FF:1A:A7:FD:E9 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:30:41:f5:51:e5:16:3d:24:28:b5:43:3f:31:58:cb:e2:0f: 59:b8:97:e6:b7:72:3e:41:04:8f:96:82:f6:69:7f:15:e7:62: c1:ff:d3:e9:ba:01:58:85:a4:1a:97:ce:a7:c7:54:ab:fe:e4: c0:bb:8f:96:41:c2:26:ca:03:7c:46:28:a0:5d:ac:38:62:df: 08:bd:25:3b:35:10:b0:f1:34:fb:3d:ec:15:0a:95:40:d3:03: 41:7d:f2:2f:5d:b4:9f:84:ae:cc:c3:df:29:94:4e:3e:1e:79: 06:fd:9c:6a:2b:fa:61:e2:b3:78:29:30:48:10:90:6c:c5:58: 25:2c:ae:89:06:d6:45:41:25:03:71:b0:34:bc:c3:7a:8c:2c: e7:0e:d3:84:a8:15:b1:9a:29:dd:b4:46:91:bc:41:2f:1e:92: a1:0c:aa:1c:1a:12:29:e6:95:0e:5a:b7:6f:f4:c7:6d:28:32: 63:8a:de:9f:c4:ac:96:0f:71:53:ae:de:9d:d4:83:8a:27:80: 70:80:00:7e:a1:6c:1d:58:16:6e:c6:f2:76:cf:eb:5c:be:4b: c0:e4:7a:f3:fd:c4:06:5c:27:21:b6:74:9d:c7:2a:1c:2b:e5: d5:83:9f:f4:2f:84:21:94:20:5f:31:c7:a3:ad:6e:26:07:c9: ec:1b:4f:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMy+r2hVRkMLAxb6MBdnVfazOPC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNTA3MjEwMTI2MDdaFw0yNTA3MjQwMjM1MDdaMDMxMTAvBgNV BAMTKEYyNUFCQjREMzdGQzkzMjBDMTExMEY4MDU5MDcyMkZGMUFBN0ZERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0rEu6BmDHi5VwNaSGfleoG/D UU0VoU5v8EXPzKH88fAoxFPiOcU8yYnidBro+k/E3s/Afk5FthhqbN1nBW4aoL7S 99MQ6/JGl/EUN6BKOUZf6LosMZrSX1CV2ePF7qcirkDsK3yyaeVi4v+BAyOYOn7K YNQTLI0u0gTkuxKUtVTD5ZhZBJ17cyUpRZTUl5VR2AHPHRZ7tzTXVh7z9IVinUro ZL13J3dBEZdXFOJ7fXpgIWRwKXtDCpTPGjkpU6Ak6nQvGd1hI4UKJbR+FVwXh0df hEAlJViyU7TrtxHCimQxiwf/5x8VLdXL7YMhnty3ac1qK1SLQ+OXvpT8cS6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8lq7TTf8kyDBEQ+AWQci/xqn/ekwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkwQfVR5RY9JCi1Qz8xWMviD1m4l+a3cj5B BI+WgvZpfxXnYsH/0+m6AViFpBqXzqfHVKv+5MC7j5ZBwibKA3xGKKBdrDhi3wi9 JTs1ELDxNPs97BUKlUDTA0F98i9dtJ+ErszD3ymUTj4eeQb9nGor+mHis3gpMEgQ kGzFWCUsrokG1kVBJQNxsDS8w3qMLOcO04SoFbGaKd20RpG8QS8ekqEMqhwaEinm lQ5at2/0x20oMmOK3p/ErJYPcVOu3p3Ug4ongHCAAH6hbB1YFm7G8nbP61y+S8Dk evP9xAZcJyG2dJ3HKhwr5dWDn/QvhCGUIF8xx6OtbiYHyewbT04= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:50 2025 by rpki-client