$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: gHd7Y2jk14QUFf4Y3WCafBoP8TZkrfvDRYTprMleC5Q= Subject key identifier: E8:DC:44:AB:52:0E:50:83:05:71:1F:D1:80:10:56:04:3F:A3:2B:43 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 4D9A4F62D5413DA4F651451A8B23F7F1F2DFFEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0237 Signing time: Sun 20 Jul 2025 15:20:55 +0000 Manifest this update: Sun 20 Jul 2025 15:15:55 +0000 Manifest next update: Wed 23 Jul 2025 16:24:55 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 2: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: 6xLTMHLrodIjWf1REJS54P3LTH6B6k4Nfte5uQjsZjY=) 3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9a:4f:62:d5:41:3d:a4:f6:51:45:1a:8b:23:f7:f1:f2:df:fe:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Jul 20 15:15:55 2025 GMT Not After : Jul 23 16:24:55 2025 GMT Subject: CN=E8DC44AB520E508305711FD1801056043FA32B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:52:ec:da:63:3e:e7:48:6c:26:89:44:1e: 13:5e:8d:a5:f6:df:a1:4b:a5:bb:b9:86:5f:58:9e: 66:51:bd:c9:bd:4e:64:c4:31:f7:bb:f0:f7:80:07: f8:02:1e:ca:c0:b4:d6:eb:a3:d9:d5:5b:0e:40:7c: 1d:1c:20:a9:e2:a9:8b:72:e2:cc:05:e8:82:8b:d2: 6f:a2:d6:10:37:d1:10:86:55:a3:1e:0d:2e:59:a3: 85:05:3e:ad:e5:f4:58:bf:4b:45:93:87:0f:07:b0: 27:54:55:24:43:32:14:dc:2b:af:1a:96:eb:bb:cb: be:86:48:b2:c7:a0:b0:70:40:31:a5:d8:79:87:d6: 43:0f:09:34:53:7e:fe:24:55:0f:54:92:6b:03:a4: f7:6b:49:2f:3d:7e:37:e1:4f:36:84:4b:5b:a2:0c: 8b:c0:fe:fc:39:1b:92:fa:45:3f:e3:c7:6e:8c:de: 75:50:8a:82:b2:75:35:07:b6:2a:65:51:60:e3:c4: 53:c0:53:f4:55:7f:8c:8b:3b:a3:86:3d:10:68:19: af:e6:80:86:6b:ae:58:ce:aa:42:b5:ff:1f:4b:15: 32:b9:b1:f3:b4:b5:6d:0c:1e:00:08:81:03:b5:f4: 45:f7:82:d7:aa:4e:ee:8c:09:55:60:e4:c5:89:ec: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DC:44:AB:52:0E:50:83:05:71:1F:D1:80:10:56:04:3F:A3:2B:43 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:06:db:01:8e:a0:18:9b:80:9d:9e:3a:a6:36:99:78:f9:3b: 9a:9d:0e:f3:6b:ca:d9:65:df:bd:e7:a1:f5:4c:a0:1d:78:76: 9e:e8:57:7f:47:04:de:f2:29:46:14:90:b7:b1:a5:f6:6a:86: c2:64:4a:54:88:c6:b4:53:5e:3a:a6:c2:d2:6d:f8:52:b6:e3: 35:03:0c:21:01:19:38:1c:58:b2:b6:9a:c1:36:ce:0f:0c:33: af:3f:56:1a:fa:89:dc:d5:14:c7:69:3c:90:a6:2b:d9:cb:4c: ff:da:38:7d:61:e8:20:46:7f:6d:b2:d6:db:30:fe:12:27:11: 3f:10:03:0a:e2:7f:70:10:a0:bf:b9:6d:5b:da:d6:5b:ef:a2: 14:8e:9e:8f:aa:e4:be:fa:30:09:89:15:bd:ec:5f:20:8d:1b: 15:0e:b2:27:cb:0e:e5:d2:cc:3b:0c:a3:25:b3:88:91:1e:76: c9:d8:a3:55:29:71:8f:39:4c:8c:d3:73:7e:2f:1f:06:ce:42: fe:34:0a:c4:dd:d3:cd:a7:12:d2:9c:da:dc:07:c1:f5:0f:dd: 31:6a:75:0d:07:a6:65:65:af:d0:f8:1c:4b:ea:70:25:ea:2d: b8:42:90:cb:a7:75:93:5f:44:c3:3d:fe:73:3b:62:ca:ca:64: 8c:78:74:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZpPYtVBPaT2UUUaiyP38fLf/qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA3MjAxNTE1NTVaFw0yNTA3MjMxNjI0NTVaMDMxMTAvBgNV BAMTKEU4REM0NEFCNTIwRTUwODMwNTcxMUZEMTgwMTA1NjA0M0ZBMzJCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DFLs2mM+50hsJolEHhNejaX2 36FLpbu5hl9YnmZRvcm9TmTEMfe78PeAB/gCHsrAtNbro9nVWw5AfB0cIKniqYty 4swF6IKL0m+i1hA30RCGVaMeDS5Zo4UFPq3l9Fi/S0WThw8HsCdUVSRDMhTcK68a luu7y76GSLLHoLBwQDGl2HmH1kMPCTRTfv4kVQ9UkmsDpPdrSS89fjfhTzaES1ui DIvA/vw5G5L6RT/jx26M3nVQioKydTUHtiplUWDjxFPAU/RVf4yLO6OGPRBoGa/m gIZrrljOqkK1/x9LFTK5sfO0tW0MHgAIgQO19EX3gteqTu6MCVVg5MWJ7H4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NxEq1IOUIMFcR/RgBBWBD+jK0MwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkG2wGOoBibgJ2eOqY2mXj5O5qdDvNrytll 373nofVMoB14dp7oV39HBN7yKUYUkLexpfZqhsJkSlSIxrRTXjqmwtJt+FK24zUD DCEBGTgcWLK2msE2zg8MM68/Vhr6idzVFMdpPJCmK9nLTP/aOH1h6CBGf22y1tsw /hInET8QAwrif3AQoL+5bVva1lvvohSOno+q5L76MAmJFb3sXyCNGxUOsifLDuXS zDsMoyWziJEedsnYo1UpcY85TIzTc34vHwbOQv40CsTd082nEtKc2twHwfUP3TFq dQ0HpmVlr9D4HEvqcCXqLbhCkMundZNfRMM9/nM7YsrKZIx4dDg= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:52 2025 by rpki-client