$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: +0xS7OK2FT5E8nBy0WFfp52r1LGMEvoocAVRdkVd9UI= Subject key identifier: 18:28:C1:F8:09:D9:2D:71:68:19:52:1B:EB:44:F1:2B:68:30:3E:83 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 61DD7254C94C73B3FBB1460279ED1B3A4CFEBA51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0396 Signing time: Thu 21 Aug 2025 22:41:55 +0000 Manifest this update: Thu 21 Aug 2025 22:36:55 +0000 Manifest next update: Mon 25 Aug 2025 09:50:55 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: b0jFAHUZTNEm/vKodLE3Id++G8YTG+WooeMtncvIP1w=) 2: AS23693.roa (hash: FZxfAqThrDcvMz4ZQuhWna9INpRNBWT+FOFzFpLtRZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dd:72:54:c9:4c:73:b3:fb:b1:46:02:79:ed:1b:3a:4c:fe:ba:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Aug 21 22:36:55 2025 GMT Not After : Aug 25 09:50:55 2025 GMT Subject: CN=1828C1F809D92D716819521BEB44F12B68303E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:d9:45:80:41:89:ff:af:a8:41:04:3c:ef: 90:72:70:00:48:40:9b:3a:0f:41:29:f8:c9:58:99: 70:ae:5a:33:c1:7e:ec:35:dc:f1:60:f7:f9:38:08: b2:1f:84:c3:77:29:31:80:5b:17:65:90:d6:b9:f1: 05:30:bc:8e:2b:cc:4c:f0:45:c7:65:ad:9d:0c:92: 28:05:1c:72:60:58:75:4e:8a:aa:6b:11:f5:82:30: 46:aa:cc:da:34:c1:e7:4a:5f:78:77:50:0d:94:55: 91:1a:8e:d7:4b:94:56:21:e5:46:79:ed:0d:70:5c: 43:17:c3:7f:2d:e2:62:dd:d5:1a:7f:23:c8:07:d6: b9:55:2f:88:31:3c:18:51:25:17:62:0e:4a:ff:2d: c9:93:70:2d:57:14:37:b5:46:47:3a:19:2e:2a:7c: b9:b2:4b:cb:42:f0:c8:08:91:25:7d:7a:29:35:de: 35:8d:ce:c8:6f:e4:7b:d2:0e:fc:0b:b4:99:a8:9d: cc:4f:38:57:0f:56:1e:f4:59:0f:c4:ff:79:5f:c7: 7e:eb:f0:8f:19:5d:13:5a:e1:62:aa:88:83:e7:1f: 89:4c:b9:57:45:cf:45:88:e3:62:ed:02:52:92:ae: 15:5d:82:ea:20:89:a2:92:b3:eb:d7:52:bc:6b:90: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:C1:F8:09:D9:2D:71:68:19:52:1B:EB:44:F1:2B:68:30:3E:83 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4c:46:48:91:91:06:ff:85:37:58:68:d5:73:ea:63:77:17: 8f:48:cc:0c:b2:7c:da:97:5f:f4:68:91:44:58:fc:4d:a1:e8: 24:a6:ae:30:13:c0:a8:2c:21:e1:26:2b:a4:b2:82:09:e3:55: fa:3e:cc:f7:b5:95:10:8f:1a:2b:91:c5:b4:bb:a0:0f:48:ae: 1a:1b:dc:ce:be:1b:61:cb:6d:5a:23:8d:57:3e:70:cd:c9:15: 10:d0:94:5e:6e:bc:57:bb:23:c4:c7:3d:a6:78:46:7d:fa:4a: 2d:95:ac:7e:3a:73:c0:b3:e4:de:c7:5a:95:35:d8:f3:a2:6e: 86:be:e0:0e:65:bd:ce:35:b9:8c:e5:9b:99:8e:d4:07:f1:67: 5f:27:91:87:be:5f:e3:49:04:86:df:6e:48:85:e6:c7:87:2a: 5e:35:39:83:31:79:a1:2d:a8:6c:ab:6c:d3:cb:a1:c2:08:92: 11:7f:e4:2f:ce:81:f1:ee:91:3f:bd:72:c7:99:5c:22:7e:a8: 8c:f3:67:1f:b0:3b:a1:55:ae:90:58:04:28:a3:f8:9a:0f:97: 7b:62:7b:5f:7c:f4:dd:67:56:fb:6b:07:ff:f7:3c:38:87:37: 07:da:f9:1d:f8:b3:cc:da:95:69:b8:17:f4:20:f3:9c:7f:13: 35:57:98:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYd1yVMlMc7P7sUYCee0bOkz+ulEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA4MjEyMjM2NTVaFw0yNTA4MjUwOTUwNTVaMDMxMTAvBgNV BAMTKDE4MjhDMUY4MDlEOTJENzE2ODE5NTIxQkVCNDRGMTJCNjgzMDNFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqdlFgEGJ/6+oQQQ875BycABI QJs6D0Ep+MlYmXCuWjPBfuw13PFg9/k4CLIfhMN3KTGAWxdlkNa58QUwvI4rzEzw RcdlrZ0MkigFHHJgWHVOiqprEfWCMEaqzNo0wedKX3h3UA2UVZEajtdLlFYh5UZ5 7Q1wXEMXw38t4mLd1Rp/I8gH1rlVL4gxPBhRJRdiDkr/LcmTcC1XFDe1Rkc6GS4q fLmyS8tC8MgIkSV9eik13jWNzshv5HvSDvwLtJmoncxPOFcPVh70WQ/E/3lfx37r 8I8ZXRNa4WKqiIPnH4lMuVdFz0WI42LtAlKSrhVdguogiaKSs+vXUrxrkCgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCjB+AnZLXFoGVIb60TxK2gwPoMwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9MRkiRkQb/hTdYaNVz6mN3F49IzAyyfNqX X/RokURY/E2h6CSmrjATwKgsIeEmK6SyggnjVfo+zPe1lRCPGiuRxbS7oA9Irhob 3M6+G2HLbVojjVc+cM3JFRDQlF5uvFe7I8THPaZ4Rn36Si2VrH46c8Cz5N7HWpU1 2POiboa+4A5lvc41uYzlm5mO1AfxZ18nkYe+X+NJBIbfbkiF5seHKl41OYMxeaEt qGyrbNPLocIIkhF/5C/OgfHukT+9cseZXCJ+qIzzZx+wO6FVrpBYBCij+JoPl3ti e1989N1nVvtrB//3PDiHNwfa+R34s8zalWm4F/Qg85x/EzVXmCY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:43:55 2025 by rpki-client