$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: N7K2hMjJtfW+Ak2zOetrUPBeV+tElYnPj4oU/qiwhg0= Subject key identifier: 6E:8E:D3:2B:F8:FE:4C:4E:1B:31:F3:20:02:71:04:36:E7:88:76:1B Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 0C0BF05E18F09EE093AFA7AE2FA670C92D9DE6AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0502 Signing time: Sat 06 Sep 2025 18:41:17 +0000 Manifest this update: Sat 06 Sep 2025 18:36:17 +0000 Manifest next update: Wed 10 Sep 2025 06:38:17 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: 9vyB/3NhR8ssTfSgaM28644EitFZXTrh4fMu3TaQzZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0b:f0:5e:18:f0:9e:e0:93:af:a7:ae:2f:a6:70:c9:2d:9d:e6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Sep 6 18:36:17 2025 GMT Not After : Sep 10 06:38:17 2025 GMT Subject: CN=6E8ED32BF8FE4C4E1B31F32002710436E788761B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:f2:98:4b:06:29:ae:80:98:ab:a7:2f:08: b0:52:dd:16:08:af:ad:32:2e:32:a5:45:87:28:b8: ff:ca:69:b6:60:1a:a4:7a:9d:ae:9d:15:7b:0a:54: 95:b3:05:c4:8d:44:2e:b3:11:b4:54:cd:be:ca:4a: a3:32:1f:7d:95:18:a1:cb:d2:69:14:28:ce:a0:07: a4:e1:64:d7:c4:57:6d:62:b8:0a:1b:b5:16:92:75: 57:be:90:8a:fe:c2:73:0f:e3:5e:ed:38:8f:17:de: d3:47:1f:40:1a:b9:b7:ee:fd:02:3d:36:ce:dd:a8: cc:48:6b:ca:35:26:8b:00:7b:37:56:99:a8:e0:e1: 72:a8:05:6a:a2:fb:08:d6:73:34:e1:5d:76:f7:e5: c2:90:c5:05:b8:cf:42:d3:18:64:c7:6d:a5:cd:f8: b8:e1:26:bc:2d:f8:e1:86:4e:23:a0:b4:a3:d4:a3: 0a:89:08:d0:28:95:1d:e0:2a:27:19:b4:6e:4f:f8: 62:1f:83:f4:d1:47:bb:1b:7b:02:4f:c3:47:87:07: 3c:52:5d:1c:3f:93:a9:11:83:58:5e:44:8c:c8:e9: 6c:9b:56:a3:59:56:9a:bd:b5:50:4e:9b:a3:f7:31: bd:f5:f9:c6:d8:3f:0c:1b:1f:8f:5f:bf:98:f8:6a: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8E:D3:2B:F8:FE:4C:4E:1B:31:F3:20:02:71:04:36:E7:88:76:1B X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ca:51:85:a7:47:56:3c:2c:ea:9d:6e:f0:b0:fb:dd:15:7b: e0:77:ae:19:7c:44:b1:b6:37:a8:27:64:64:6a:67:75:5e:5c: d3:89:5b:e8:85:17:64:d3:16:5c:03:de:80:cc:57:b3:eb:05: db:de:78:14:ea:11:e3:e8:b7:13:a0:8e:da:03:68:1c:40:86: 57:56:18:82:b7:ae:bb:37:d0:c0:55:92:82:4e:55:71:b8:c0: 2a:04:ba:e8:07:b3:27:b9:b1:da:fc:80:1f:f0:f6:5e:7a:5f: d6:6a:93:8c:29:63:4d:37:4e:ee:a0:b2:68:99:28:be:52:31: a8:83:7d:e5:f0:e7:dc:04:67:2a:2a:d0:50:6b:0e:c6:35:28: 0c:be:4e:24:7e:a8:c8:73:7d:53:9a:d2:62:0f:da:71:d4:5b: 9a:f4:21:d6:b3:29:46:d5:8e:3f:00:26:0d:0b:c5:cb:74:7f: bb:c5:4c:41:5e:0d:31:c6:2c:87:6a:6b:8e:13:2b:7e:a9:90: a4:20:a0:8f:5f:9a:85:b6:f8:4d:55:89:a8:7e:96:51:c8:96: 0a:25:f1:c5:8c:99:55:82:0e:30:3d:43:b2:28:3d:6c:0c:01: f7:c0:7c:bb:9c:dd:89:28:d3:35:3a:6c:3e:0f:9f:21:b3:b7: eb:c9:ee:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAvwXhjwnuCTr6euL6ZwyS2d5q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA5MDYxODM2MTdaFw0yNTA5MTAwNjM4MTdaMDMxMTAvBgNV BAMTKDZFOEVEMzJCRjhGRTRDNEUxQjMxRjMyMDAyNzEwNDM2RTc4ODc2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUvKYSwYproCYq6cvCLBS3RYI r60yLjKlRYcouP/KabZgGqR6na6dFXsKVJWzBcSNRC6zEbRUzb7KSqMyH32VGKHL 0mkUKM6gB6ThZNfEV21iuAobtRaSdVe+kIr+wnMP417tOI8X3tNHH0Aaubfu/QI9 Ns7dqMxIa8o1JosAezdWmajg4XKoBWqi+wjWczThXXb35cKQxQW4z0LTGGTHbaXN +LjhJrwt+OGGTiOgtKPUowqJCNAolR3gKicZtG5P+GIfg/TRR7sbewJPw0eHBzxS XRw/k6kRg1heRIzI6WybVqNZVpq9tVBOm6P3Mb31+cbYPwwbH49fv5j4amh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbo7TK/j+TE4bMfMgAnEENueIdhswHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/KUYWnR1Y8LOqdbvCw+90Ve+B3rhl8RLG2 N6gnZGRqZ3VeXNOJW+iFF2TTFlwD3oDMV7PrBdveeBTqEePotxOgjtoDaBxAhldW GIK3rrs30MBVkoJOVXG4wCoEuugHsye5sdr8gB/w9l56X9Zqk4wpY003Tu6gsmiZ KL5SMaiDfeXw59wEZyoq0FBrDsY1KAy+TiR+qMhzfVOa0mIP2nHUW5r0IdazKUbV jj8AJg0Lxct0f7vFTEFeDTHGLIdqa44TK36pkKQgoI9fmoW2+E1Viah+llHIlgol 8cWMmVWCDjA9Q7IoPWwMAffAfLuc3Yko0zU6bD4PnyGzt+vJ7sI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:23 2025 by rpki-client