$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: bIqSnlanHJjMPdnCZQehmDVX2N7jQNpi3NTCP28YQb8= Subject key identifier: 7A:40:6D:43:44:73:4D:94:66:5C:26:90:5C:04:4D:59:73:A2:FB:A9 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 614EFF7875035BB8CDD1712DFA19070BD7BD77A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04D9 Signing time: Wed 04 Jun 2025 05:41:15 +0000 Manifest this update: Wed 04 Jun 2025 05:36:15 +0000 Manifest next update: Sat 07 Jun 2025 05:44:15 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: 55qcjPDmQ44SToZrphlgmKn8yMfA/PAap5oFQjdihV0=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4e:ff:78:75:03:5b:b8:cd:d1:71:2d:fa:19:07:0b:d7:bd:77:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Jun 4 05:36:15 2025 GMT Not After : Jun 7 05:44:15 2025 GMT Subject: CN=7A406D4344734D94665C26905C044D5973A2FBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:d8:2e:00:fa:8d:85:1d:63:b1:71:6e:1d: e7:0f:8f:04:11:b7:f8:5e:31:f9:b4:0c:65:04:76: 44:2e:79:81:c8:e6:94:11:cd:45:eb:f3:1e:59:dd: 11:5d:16:9a:68:65:40:52:4a:de:6a:24:3d:d1:36: 07:9b:25:31:f7:db:39:38:c4:9f:2d:f3:77:7e:fe: d4:ca:e5:29:28:65:46:8c:bf:78:f2:59:e1:73:2c: ae:49:61:2c:20:8e:fa:9f:a8:c2:50:82:08:a1:cf: 8b:49:2c:e1:a5:de:b4:98:44:98:35:60:67:d3:a7: ec:a5:10:bc:ce:d4:04:df:4a:ae:d6:24:1b:7d:a6: 99:26:f3:d4:9f:62:48:d3:95:ae:97:d9:ca:88:da: 09:59:e2:fc:11:42:d8:6c:02:9d:b8:37:f0:e2:d8: 8b:6f:31:ab:2a:f4:c9:f2:a7:1d:b3:87:8a:f0:e7: 83:cb:08:79:e1:86:13:6a:2b:6a:0b:7d:68:56:e1: 5a:5c:ef:24:1f:4d:1e:c3:05:20:bb:64:34:64:c6: e5:42:f5:c4:40:d4:cc:b0:ba:a9:e1:1f:33:f1:f2: c8:55:68:a9:e6:2c:7a:d9:b7:fb:5f:4e:67:b3:40: dd:5b:0c:2e:2e:ab:ab:36:25:01:ef:c8:09:9f:bd: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:40:6D:43:44:73:4D:94:66:5C:26:90:5C:04:4D:59:73:A2:FB:A9 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:1e:0e:48:a5:27:76:4f:ec:d9:29:42:a9:51:99:a5:07: d4:7e:bc:c6:ab:96:3d:93:a3:f3:c6:2a:97:7b:de:c9:70:30: b3:91:31:76:86:6d:d9:34:7a:a0:8f:d7:9a:8c:5a:c9:e7:e6: e2:91:e5:71:a6:32:05:16:1f:6e:fe:8d:1e:ed:17:2f:05:ca: fd:75:4d:28:12:82:8f:9f:85:79:5b:a8:ed:8d:ec:cc:7e:db: a1:0d:ff:22:1f:d2:9f:da:40:ba:aa:f4:e3:c2:2b:24:ed:f3: 39:e4:ce:96:70:a2:b4:87:2e:b9:89:b9:1e:13:6d:f1:97:f6: d0:25:98:a9:42:74:de:11:f9:20:19:7f:64:ff:4d:1d:b0:af: 40:9c:7c:82:40:a2:52:54:7f:5f:60:fa:c6:97:91:c2:a7:d0: 90:af:07:5b:35:9e:2a:3c:68:29:dd:56:6c:1f:4a:40:91:e2: 60:5d:d0:57:5f:7b:6d:c4:6d:f8:13:aa:10:5b:8c:99:e3:4e: 37:95:a4:56:74:73:5a:3b:f1:ab:62:0a:78:ad:04:a4:8d:b2: 2c:6c:bf:2b:66:3c:1a:77:7d:d5:32:a2:05:3e:14:c0:11:43: fc:b0:34:7e:79:40:7d:22:35:b5:43:23:ab:fc:95:bc:4b:bf: 4c:72:d0:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYU7/eHUDW7jN0XEt+hkHC9e9d6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA2MDQwNTM2MTVaFw0yNTA2MDcwNTQ0MTVaMDMxMTAvBgNV BAMTKDdBNDA2RDQzNDQ3MzREOTQ2NjVDMjY5MDVDMDQ0RDU5NzNBMkZCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyNguAPqNhR1jsXFuHecPjwQR t/heMfm0DGUEdkQueYHI5pQRzUXr8x5Z3RFdFppoZUBSSt5qJD3RNgebJTH32zk4 xJ8t83d+/tTK5SkoZUaMv3jyWeFzLK5JYSwgjvqfqMJQggihz4tJLOGl3rSYRJg1 YGfTp+ylELzO1ATfSq7WJBt9ppkm89SfYkjTla6X2cqI2glZ4vwRQthsAp24N/Di 2ItvMasq9Mnypx2zh4rw54PLCHnhhhNqK2oLfWhW4Vpc7yQfTR7DBSC7ZDRkxuVC 9cRA1MywuqnhHzPx8shVaKnmLHrZt/tfTmezQN1bDC4uq6s2JQHvyAmfvaBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUekBtQ0RzTZRmXCaQXARNWXOi+6kwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE13Hg5IpSd2T+zZKUKpUZmlB9R+vMarlj2T o/PGKpd73slwMLORMXaGbdk0eqCP15qMWsnn5uKR5XGmMgUWH27+jR7tFy8Fyv11 TSgSgo+fhXlbqO2N7Mx+26EN/yIf0p/aQLqq9OPCKyTt8znkzpZworSHLrmJuR4T bfGX9tAlmKlCdN4R+SAZf2T/TR2wr0CcfIJAolJUf19g+saXkcKn0JCvB1s1nio8 aCndVmwfSkCR4mBd0Fdfe23EbfgTqhBbjJnjTjeVpFZ0c1o78atiCnitBKSNsixs vytmPBp3fdUyogU+FMARQ/ywNH55QH0iNbVDI6v8lbxLv0xy0JU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:25 2025 by rpki-client