$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: KrFEHB7wQlR+JoH8KOYzky0FQ9lzDlK6Ikort8qhdG8= Subject key identifier: 40:DD:DE:71:F3:3F:5A:13:81:25:9E:3F:78:48:D7:FF:F7:49:93:6C Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 7097F0E2374B9EDC127E2759A1FA5F33005CF2CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04ED Signing time: Sun 20 Jul 2025 04:31:17 +0000 Manifest this update: Sun 20 Jul 2025 04:26:17 +0000 Manifest next update: Wed 23 Jul 2025 08:56:17 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: 6Ut64wvxouKHSCt47aZfFZ6L2lYS9Po/5YeNNfANDW0=) 2: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:97:f0:e2:37:4b:9e:dc:12:7e:27:59:a1:fa:5f:33:00:5c:f2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Jul 20 04:26:17 2025 GMT Not After : Jul 23 08:56:17 2025 GMT Subject: CN=40DDDE71F33F5A1381259E3F7848D7FFF749936C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:d2:37:f6:bc:13:44:d7:c7:b7:74:11:9b: 24:87:3e:db:cb:c1:ed:3d:b4:a2:dc:ae:7f:47:e8: f5:85:bc:c3:bc:aa:5f:b7:05:fe:08:f6:cd:c0:09: bc:41:6b:5b:6a:f9:9f:ad:fa:8f:20:f3:f5:2e:21: 25:c9:1a:4a:fb:ce:41:c9:e2:2c:85:1a:f0:57:18: e1:4c:98:87:a6:8f:8e:14:6a:e7:44:74:e6:12:20: 0b:34:29:e8:c5:e7:9a:41:4e:5c:6a:09:f4:ba:22: fd:e2:49:be:37:bb:03:cd:fd:81:e8:1d:7b:d5:0a: 9a:10:c6:14:41:c7:fa:3d:50:98:5c:90:6d:34:47: d5:73:26:6e:74:47:49:c0:dd:5d:a0:ec:75:28:28: 32:96:d4:fa:02:23:0f:9a:f5:3e:27:a4:e0:2e:27: 0a:37:30:55:cf:15:e9:3c:42:c6:97:72:5c:0d:3d: 94:6e:5b:97:ab:34:66:5c:20:d8:5e:ed:bb:69:1d: d5:ac:2f:83:33:b1:07:4f:4e:68:d7:35:90:24:bb: 13:c5:f9:bc:79:84:2a:22:e2:79:9a:67:58:8b:15: 8a:42:ba:a7:ef:f3:52:00:c5:7b:e7:f3:1c:88:2f: 5f:b2:8d:c3:67:3f:b2:f0:7b:ad:45:2d:32:00:f3: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:DE:71:F3:3F:5A:13:81:25:9E:3F:78:48:D7:FF:F7:49:93:6C X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:14:35:4e:a2:2a:d5:55:72:58:88:8a:3f:86:c0:8e:ae:61: 41:7e:b6:52:b6:c2:5a:39:4c:5a:49:c8:74:b4:70:32:71:94: 67:e4:86:5c:9b:c5:29:52:04:d4:a8:f7:a2:98:32:05:34:f2: ef:82:56:c9:d4:7e:7e:ba:83:00:e2:69:9d:88:0b:6d:46:b8: 8b:3b:52:29:29:58:3d:52:f4:bd:df:88:b8:78:09:d7:62:ac: fc:55:34:9c:32:ed:ef:26:0b:3f:ba:f7:e1:2d:20:47:36:75: ad:83:c6:2f:08:69:59:95:09:15:83:fa:c0:de:32:04:cb:88: 75:5c:ed:df:2d:a2:5b:4a:8c:6e:d4:97:f2:5e:64:ce:ee:51: 80:13:7f:e5:df:93:61:b0:5f:3c:93:f2:ff:95:b4:59:5b:03: 83:61:43:04:cc:e6:78:f2:e8:17:5f:3c:a7:18:5d:23:c7:ae: f7:1c:f8:cb:c5:84:4d:7e:e1:19:90:f1:c7:e5:3b:a8:a0:57: 7d:0f:76:28:d7:41:e7:9a:60:70:91:89:9a:3a:ca:f6:00:c4: 5d:3c:14:1f:e0:7c:b6:27:9b:3f:a1:1c:10:a8:ce:6e:b9:65: 1c:c5:a1:4a:34:07:ae:c7:03:c5:df:c1:2a:84:f3:e2:01:d0: 02:1b:fc:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJfw4jdLntwSfidZofpfMwBc8s4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA3MjAwNDI2MTdaFw0yNTA3MjMwODU2MTdaMDMxMTAvBgNV BAMTKDQwRERERTcxRjMzRjVBMTM4MTI1OUUzRjc4NDhEN0ZGRjc0OTkzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyNI39rwTRNfHt3QRmySHPtvL we09tKLcrn9H6PWFvMO8ql+3Bf4I9s3ACbxBa1tq+Z+t+o8g8/UuISXJGkr7zkHJ 4iyFGvBXGOFMmIemj44UaudEdOYSIAs0KejF55pBTlxqCfS6Iv3iSb43uwPN/YHo HXvVCpoQxhRBx/o9UJhckG00R9VzJm50R0nA3V2g7HUoKDKW1PoCIw+a9T4npOAu Jwo3MFXPFek8QsaXclwNPZRuW5erNGZcINhe7btpHdWsL4MzsQdPTmjXNZAkuxPF +bx5hCoi4nmaZ1iLFYpCuqfv81IAxXvn8xyIL1+yjcNnP7Lwe61FLTIA85bJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQN3ecfM/WhOBJZ4/eEjX//dJk2wwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUUNU6iKtVVcliIij+GwI6uYUF+tlK2wlo5 TFpJyHS0cDJxlGfkhlybxSlSBNSo96KYMgU08u+CVsnUfn66gwDiaZ2IC21GuIs7 UikpWD1S9L3fiLh4CddirPxVNJwy7e8mCz+69+EtIEc2da2Dxi8IaVmVCRWD+sDe MgTLiHVc7d8toltKjG7Ul/JeZM7uUYATf+Xfk2GwXzyT8v+VtFlbA4NhQwTM5njy 6BdfPKcYXSPHrvcc+MvFhE1+4RmQ8cflO6igV30PdijXQeeaYHCRiZo6yvYAxF08 FB/gfLYnmz+hHBCozm65ZRzFoUo0B67HA8XfwSqE8+IB0AIb/GI= -----END CERTIFICATE-----Generated at Sun Jul 20 23:56:36 2025 by rpki-client