$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: VEin4y7r3UCDTl1Byz/gKdlS80NTBLjpjvc/bAu0J0Q= Subject key identifier: 90:B0:3D:E5:6C:C8:9B:DB:8D:7C:C0:44:DB:C3:E3:4E:5B:EA:4F:FB Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 6F0F44FE7E7D3DCD074F5DFBA45249D2C919A6EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0222 Signing time: Mon 02 Jun 2025 10:40:55 +0000 Manifest this update: Mon 02 Jun 2025 10:35:55 +0000 Manifest next update: Thu 05 Jun 2025 13:13:55 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) 2: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 4: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: XxvNVZTS8+46twlcjdr7CBAUkxzkr+2KstV0XMy3TFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0f:44:fe:7e:7d:3d:cd:07:4f:5d:fb:a4:52:49:d2:c9:19:a6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Jun 2 10:35:55 2025 GMT Not After : Jun 5 13:13:55 2025 GMT Subject: CN=90B03DE56CC89BDB8D7CC044DBC3E34E5BEA4FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:c8:6b:25:0e:fa:85:13:68:65:63:dd:9c: 67:0c:68:73:ad:27:33:5d:fa:2f:25:c3:b6:6b:3d: 26:cd:61:d7:49:4c:a3:24:35:fb:a2:52:a4:9a:29: d5:d3:35:cf:98:b8:79:f5:da:d1:d0:f9:12:a6:f5: 3d:6a:c2:45:99:04:07:50:e5:11:29:a7:54:99:63: 2e:e8:b2:af:16:25:57:db:0b:69:e9:d6:d3:6d:16: d9:45:43:dd:14:50:33:eb:2e:d4:0f:69:9f:bd:0e: 6b:45:a6:e9:42:5a:ae:23:e0:40:c1:23:0a:64:d2: 96:80:d7:0a:72:7a:7e:9b:7d:88:8d:89:e1:39:35: 6f:29:dd:d8:67:2c:6b:32:2b:2f:75:a3:d0:c3:f9: ad:ca:05:e8:da:ff:e9:46:0f:64:30:d1:cb:b9:e0: 4a:78:8c:be:e8:0c:c5:5e:9a:95:94:90:85:fa:36: f4:72:9d:97:46:1f:c0:04:62:c5:f7:1d:a5:7d:4b: ac:18:85:08:27:4e:4f:79:7e:19:70:d7:c3:06:0c: a3:b8:1c:00:a2:72:3d:fe:0f:65:0c:9c:2f:5c:a6: 9a:8d:7d:37:36:6d:9d:a4:7a:90:22:11:a3:0d:ff: a6:81:91:37:ce:90:1f:e0:9b:ed:94:08:24:27:f7: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B0:3D:E5:6C:C8:9B:DB:8D:7C:C0:44:DB:C3:E3:4E:5B:EA:4F:FB X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a2:6f:9e:77:f2:5b:73:f1:e6:b8:00:fc:4a:61:3d:ae:e6: 20:fc:14:18:3b:76:d6:03:ef:d7:c8:46:c4:42:50:9f:a0:b9: 55:3d:b3:03:39:2a:8b:0f:3a:11:04:f3:6f:82:8d:d6:09:13: 8f:c5:25:23:4c:3b:02:0f:8e:47:dd:c6:a9:47:7e:7a:4b:14: 62:55:44:8c:f5:27:b4:12:15:11:31:c5:fa:9c:60:ec:eb:94: ae:91:7e:1e:f2:0c:3f:aa:c5:85:ea:d8:4f:fd:49:1b:d4:c7: 0d:de:1a:89:63:15:1d:45:f1:38:3e:b6:07:f8:b9:55:24:da: 1b:09:35:dd:3b:7a:36:f2:86:41:81:3b:89:12:57:65:c8:53: ee:e7:c3:b3:d1:60:34:bf:e4:75:8c:5e:26:60:aa:75:a5:ff: ab:5d:34:0a:ce:24:b6:53:5b:45:4f:e1:65:ed:c2:f6:f3:69: 02:4b:b6:11:f8:47:3c:de:38:7e:77:35:92:73:f3:53:71:d1: 1d:12:25:23:10:a2:3c:8c:4d:aa:62:4b:ee:4d:9e:91:e4:9c: 0c:b9:e3:4e:a5:90:40:29:f9:19:34:ea:d1:1a:d9:82:ae:49: 29:d8:5e:9c:d5:67:4d:3e:15:b6:3f:e1:a9:42:a7:c1:3d:fe: 08:14:d1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbw9E/n59Pc0HT137pFJJ0skZpu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA2MDIxMDM1NTVaFw0yNTA2MDUxMzEzNTVaMDMxMTAvBgNV BAMTKDkwQjAzREU1NkNDODlCREI4RDdDQzA0NERCQzNFMzRFNUJFQTRGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+chrJQ76hRNoZWPdnGcMaHOt JzNd+i8lw7ZrPSbNYddJTKMkNfuiUqSaKdXTNc+YuHn12tHQ+RKm9T1qwkWZBAdQ 5REpp1SZYy7osq8WJVfbC2np1tNtFtlFQ90UUDPrLtQPaZ+9DmtFpulCWq4j4EDB Iwpk0paA1wpyen6bfYiNieE5NW8p3dhnLGsyKy91o9DD+a3KBeja/+lGD2Qw0cu5 4Ep4jL7oDMVempWUkIX6NvRynZdGH8AEYsX3HaV9S6wYhQgnTk95fhlw18MGDKO4 HACicj3+D2UMnC9cppqNfTc2bZ2kepAiEaMN/6aBkTfOkB/gm+2UCCQn93IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkLA95WzIm9uNfMBE28PjTlvqT/swHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiib5538ltz8ea4APxKYT2u5iD8FBg7dtYD 79fIRsRCUJ+guVU9swM5KosPOhEE82+CjdYJE4/FJSNMOwIPjkfdxqlHfnpLFGJV RIz1J7QSFRExxfqcYOzrlK6Rfh7yDD+qxYXq2E/9SRvUxw3eGoljFR1F8Tg+tgf4 uVUk2hsJNd07ejbyhkGBO4kSV2XIU+7nw7PRYDS/5HWMXiZgqnWl/6tdNArOJLZT W0VP4WXtwvbzaQJLthH4RzzeOH53NZJz81Nx0R0SJSMQojyMTapiS+5NnpHknAy5 406lkEAp+Rk06tEa2YKuSSnYXpzVZ00+FbY/4alCp8E9/ggU0YM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:40 2025 by rpki-client