$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: BxR2dKIiFHDhV4acUWmLBmLCmKTHeF7Ag9LPg1Oz5OQ= Subject key identifier: 12:0F:72:2B:FE:21:CF:15:50:4A:AE:C8:E6:7F:26:99:A3:ED:94:5E Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 34CBCFFDFA22C7EA7AA9F939F6B7F68A736A6C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 024C Signing time: Sat 06 Sep 2025 19:30:57 +0000 Manifest this update: Sat 06 Sep 2025 19:25:57 +0000 Manifest next update: Tue 09 Sep 2025 20:44:57 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 2: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: ecEhVXOdikqjTnzaLVawgQhjmyKcrB5opgfI4zHaulM=) 4: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cb:cf:fd:fa:22:c7:ea:7a:a9:f9:39:f6:b7:f6:8a:73:6a:6c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Sep 6 19:25:57 2025 GMT Not After : Sep 9 20:44:57 2025 GMT Subject: CN=120F722BFE21CF15504AAEC8E67F2699A3ED945E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:ef:d0:2b:c8:96:75:0c:9e:f2:0b:bb:8f: 09:ba:a5:f2:b5:e8:f9:54:d9:a3:f5:a8:82:9e:2c: 3b:60:a9:dc:a6:a2:5e:70:f5:f2:cc:23:61:31:1d: 25:9a:41:d8:47:a1:cd:a9:e3:4c:e2:69:b5:9a:0d: d1:fd:61:02:d6:a9:68:7c:a3:9e:45:24:c1:a2:2d: ef:b8:ca:6c:de:c6:1a:60:a6:96:4f:73:10:cc:19: b5:c1:dc:9a:94:f1:50:fa:9c:b6:c7:24:05:d7:c7: 27:a1:32:06:1b:35:bd:53:18:56:16:ca:c0:f3:d0: 88:2c:49:5e:a0:6e:55:44:dc:d2:71:c7:1b:82:33: f7:3b:10:e5:db:94:81:25:4d:3d:53:cc:88:47:f8: ce:95:2a:76:aa:37:10:3d:5b:ed:63:d7:c4:f3:77: 21:ab:4d:9f:fd:a5:24:5b:82:ad:64:5a:ee:27:37: eb:31:8d:b2:ec:82:51:37:e7:d5:84:f9:02:28:89: cd:22:09:42:de:38:4e:6c:90:a5:db:0c:d8:bb:9c: fd:d7:d4:2a:e7:5a:e9:a5:76:49:44:45:fd:57:d6: c5:69:d2:ac:94:ea:dd:fc:39:1a:18:7d:fb:3a:08: 0b:38:5c:d6:b0:df:26:44:5a:ab:1b:73:4e:ef:7d: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0F:72:2B:FE:21:CF:15:50:4A:AE:C8:E6:7F:26:99:A3:ED:94:5E X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:14:f7:4f:b1:e5:34:15:34:ab:c5:38:4d:92:ad:c3:24:f1: cc:5f:0d:84:59:4b:71:20:e4:22:a2:37:8f:60:79:bd:d2:89: 3e:28:77:6f:fb:8b:26:da:e6:1d:b1:a6:fd:32:69:cb:7a:b4: 3d:d7:c7:e3:da:bf:b5:9f:6b:11:f8:6a:8e:49:5b:e4:c8:f0: 9c:b8:65:cb:1d:e2:09:82:82:a8:8d:8d:23:0c:e0:76:ca:cb: 7e:33:8f:af:bc:2e:08:78:85:e9:fb:8a:50:08:ed:67:61:d6: 1e:25:ff:f4:3a:86:6d:ce:8c:fc:78:c9:ec:8a:a3:1d:19:4f: 10:9b:a5:a3:7f:db:22:4a:5a:b6:a8:c2:45:6b:59:f4:df:0d: bb:64:17:90:61:4c:2a:1d:08:dc:52:b1:9d:e4:58:47:49:07: bb:8d:fb:24:58:0e:db:fe:72:d5:8a:21:e1:93:eb:68:4c:7e: 57:cd:a0:6a:54:b7:13:d7:1d:95:ce:ee:99:82:e3:5e:ce:77: d2:fe:d7:b2:b8:7a:07:4a:2e:f7:7d:41:ee:ed:7d:c2:de:5f: af:10:a9:94:26:a4:ec:17:c4:13:95:55:6c:33:cd:d3:96:76: 3a:67:05:6a:bf:f0:69:72:4a:56:31:a0:fc:62:b8:e5:97:18: fa:da:a2:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMvP/foix+p6qfk59rf2inNqbIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA5MDYxOTI1NTdaFw0yNTA5MDkyMDQ0NTdaMDMxMTAvBgNV BAMTKDEyMEY3MjJCRkUyMUNGMTU1MDRBQUVDOEU2N0YyNjk5QTNFRDk0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBO/QK8iWdQye8gu7jwm6pfK1 6PlU2aP1qIKeLDtgqdymol5w9fLMI2ExHSWaQdhHoc2p40ziabWaDdH9YQLWqWh8 o55FJMGiLe+4ymzexhpgppZPcxDMGbXB3JqU8VD6nLbHJAXXxyehMgYbNb1TGFYW ysDz0IgsSV6gblVE3NJxxxuCM/c7EOXblIElTT1TzIhH+M6VKnaqNxA9W+1j18Tz dyGrTZ/9pSRbgq1kWu4nN+sxjbLsglE359WE+QIoic0iCULeOE5skKXbDNi7nP3X 1CrnWumldklERf1X1sVp0qyU6t38ORoYffs6CAs4XNaw3yZEWqsbc07vfYRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEg9yK/4hzxVQSq7I5n8mmaPtlF4wHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsU90+x5TQVNKvFOE2SrcMk8cxfDYRZS3Eg 5CKiN49geb3SiT4od2/7iyba5h2xpv0yact6tD3Xx+Pav7WfaxH4ao5JW+TI8Jy4 Zcsd4gmCgqiNjSMM4HbKy34zj6+8Lgh4hen7ilAI7Wdh1h4l//Q6hm3OjPx4yeyK ox0ZTxCbpaN/2yJKWraowkVrWfTfDbtkF5BhTCodCNxSsZ3kWEdJB7uN+yRYDtv+ ctWKIeGT62hMflfNoGpUtxPXHZXO7pmC417Od9L+17K4egdKLvd9Qe7tfcLeX68Q qZQmpOwXxBOVVWwzzdOWdjpnBWq/8GlySlYxoPxiuOWXGPraoh4= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:44 2025 by rpki-client