$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: 9cESuZ1KVJilLwSKW5Yk7BR4acZjEmNxMAwEIhKxWr0= Subject key identifier: DD:7C:8A:5E:FA:7E:A2:F8:34:FC:72:77:9E:17:F3:6F:61:75:E1:BF Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 1D1015D5FF95565B057AFA4DBAD8E79CCA873C29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 02C8 Signing time: Sun 29 Jun 2025 16:10:45 +0000 Manifest this update: Sun 29 Jun 2025 16:05:45 +0000 Manifest next update: Thu 03 Jul 2025 01:42:45 +0000 Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: /JxFSVFRTGLFHiz6gM1Mbv5Z/TiPlN4MCFyG6+LMipw=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: q0jOFDTEu9kdP+jYVyJ+R6uGc5jc4zqgFJZKBtQfAGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:10:15:d5:ff:95:56:5b:05:7a:fa:4d:ba:d8:e7:9c:ca:87:3c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Jun 29 16:05:45 2025 GMT Not After : Jul 3 01:42:45 2025 GMT Subject: CN=DD7C8A5EFA7EA2F834FC72779E17F36F6175E1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:62:15:89:70:6a:3e:40:b3:a4:f2:f7:80: 6f:2d:10:48:93:81:e8:83:f4:eb:57:1e:a6:71:a6: 33:55:ba:a5:b9:61:24:20:25:65:42:5d:bc:72:46: 3c:f4:d0:22:ca:ca:df:73:de:dc:2d:8a:33:ae:a6: ec:ac:38:98:f2:90:0d:ac:b4:a0:c8:ba:4b:6c:41: 21:a6:61:f6:ae:a0:53:c3:6c:2e:06:79:17:34:28: 7f:2e:2c:b8:fc:b4:c8:45:7f:3e:e3:f2:6e:7d:18: a8:cb:d1:6a:97:a3:b3:f5:a6:74:45:c2:c3:47:11: 4d:06:99:d3:8c:73:26:33:06:ca:6e:b4:af:32:0c: 1c:e6:c6:1d:b1:a2:d1:2f:7c:6a:2f:87:41:55:15: b2:22:1f:b5:5c:d0:f3:b8:da:45:04:cf:b1:b1:05: 29:d7:30:aa:ab:3b:68:3d:9d:8c:8b:9a:b9:89:d3: 84:eb:1b:cb:31:a3:85:04:93:2b:1e:8d:44:44:66: c6:11:6b:68:96:67:ae:89:4b:8c:37:ca:ad:4b:d0: 3a:b6:2f:e6:11:3c:31:39:da:18:95:e9:6b:4b:50: 7a:c7:b2:17:f7:56:c7:b1:2c:74:27:87:a7:89:a8: 7a:d7:1a:f3:a2:d3:99:fa:08:a3:36:41:2d:dd:c9: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:8A:5E:FA:7E:A2:F8:34:FC:72:77:9E:17:F3:6F:61:75:E1:BF X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:07:0f:ca:4a:da:34:31:2c:81:83:88:fb:15:af:ee:2f:4b: 20:26:34:38:c6:e0:c7:2e:06:ab:4d:11:34:9d:6a:85:d6:7a: 8c:00:19:4d:b8:5c:93:a6:55:00:f2:9c:64:be:64:13:58:4a: 21:6e:48:98:e8:64:b5:c0:86:91:37:93:ad:bd:46:3a:7e:7a: 53:00:db:78:9a:00:ea:1e:3f:77:ad:95:6b:ad:f9:e5:3a:cb: 63:07:12:f7:1d:77:99:44:02:57:de:81:ee:32:4e:f3:4c:35: 54:24:41:b5:07:35:10:22:d8:27:b0:50:e5:93:f1:9c:4d:15: 93:a8:97:d8:47:ce:92:ff:c8:9b:49:8f:db:5c:3c:0e:d6:63: 4d:9a:06:7f:9a:e1:8f:33:3a:19:85:d7:19:87:9e:ba:4d:62: a8:6e:9d:ce:6d:12:b7:28:e2:0d:1c:b9:8b:22:e5:98:16:07: 21:eb:37:3a:47:d2:48:48:3f:83:17:81:5b:59:6a:40:c5:17: c5:9b:a0:a6:00:40:18:25:92:b3:88:ad:f2:7d:d6:07:58:68: c2:5e:78:1c:e1:7d:45:18:ff:54:a7:a9:28:47:fd:ea:5d:66: f9:6e:f4:af:59:2d:e4:74:60:69:9b:5c:36:4e:72:c0:f0:ad: 76:ed:8a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRAV1f+VVlsFevpNutjnnMqHPCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTA2MjkxNjA1NDVaFw0yNTA3MDMwMTQyNDVaMDMxMTAvBgNV BAMTKEREN0M4QTVFRkE3RUEyRjgzNEZDNzI3NzlFMTdGMzZGNjE3NUUxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosGIViXBqPkCzpPL3gG8tEEiT geiD9OtXHqZxpjNVuqW5YSQgJWVCXbxyRjz00CLKyt9z3twtijOupuysOJjykA2s tKDIuktsQSGmYfauoFPDbC4GeRc0KH8uLLj8tMhFfz7j8m59GKjL0WqXo7P1pnRF wsNHEU0GmdOMcyYzBsputK8yDBzmxh2xotEvfGovh0FVFbIiH7Vc0PO42kUEz7Gx BSnXMKqrO2g9nYyLmrmJ04TrG8sxo4UEkysejUREZsYRa2iWZ66JS4w3yq1L0Dq2 L+YRPDE52hiV6WtLUHrHshf3VsexLHQnh6eJqHrXGvOi05n6CKM2QS3dyecNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XyKXvp+ovg0/HJ3nhfzb2F14b8wHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYHD8pK2jQxLIGDiPsVr+4vSyAmNDjG4Mcu BqtNETSdaoXWeowAGU24XJOmVQDynGS+ZBNYSiFuSJjoZLXAhpE3k629Rjp+elMA 23iaAOoeP3etlWut+eU6y2MHEvcdd5lEAlfege4yTvNMNVQkQbUHNRAi2CewUOWT 8ZxNFZOol9hHzpL/yJtJj9tcPA7WY02aBn+a4Y8zOhmF1xmHnrpNYqhunc5tErco 4g0cuYsi5ZgWByHrNzpH0khIP4MXgVtZakDFF8WboKYAQBglkrOIrfJ91gdYaMJe eBzhfUUY/1SnqShH/epdZvlu9K9ZLeR0YGmbXDZOcsDwrXbtinc= -----END CERTIFICATE-----Generated at Mon Jun 30 05:02:44 2025 by rpki-client