$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: a7IFqTLW/2xUHoZCmp3v1A/KiIdbB+qXNFfEKTUQIwQ= Subject key identifier: 7F:D6:E3:0A:B8:3B:53:0B:E3:25:0B:86:97:F5:80:32:80:CE:76:8F Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 42689A10B362AAA30321AB043C5407D06BF7291B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 02ED Signing time: Fri 27 Jun 2025 22:11:51 +0000 Manifest this update: Fri 27 Jun 2025 22:06:51 +0000 Manifest next update: Tue 01 Jul 2025 01:46:51 +0000 Files and hashes: 1: AS23693.roa (hash: XOXPtdNXKpycZveg+x/ywMuUwkbd0inGTsMRbxbqTIo=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: AxdD6+x5zn4Lgvae2/WmtddhDxPJgjDXSy0KWtXKyxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:68:9a:10:b3:62:aa:a3:03:21:ab:04:3c:54:07:d0:6b:f7:29:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Jun 27 22:06:51 2025 GMT Not After : Jul 1 01:46:51 2025 GMT Subject: CN=7FD6E30AB83B530BE3250B8697F5803280CE768F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:74:71:96:13:3d:29:b8:95:d8:7d:f0:79: f8:4b:76:62:a3:95:55:6f:75:75:b2:70:fb:d7:6f: ed:71:85:cd:e5:a5:e1:fd:c8:e4:5b:f2:19:69:d0: 6d:70:72:49:72:13:b5:d9:01:24:ae:c8:ff:e5:b6: bb:9a:82:a1:52:56:e8:c7:30:34:97:ab:f7:15:b2: 39:2c:76:99:50:1c:54:e9:99:2b:3c:44:ba:10:fb: e3:58:23:48:78:65:c4:1f:26:3f:5f:7e:ab:fe:67: 9a:c4:9e:2b:4f:98:cf:57:31:77:30:56:32:9f:66: a1:ba:5b:ab:a4:8d:81:6a:c3:bc:db:d9:84:91:21: db:f8:b5:5b:83:67:15:05:98:51:83:cb:54:ea:65: b1:6a:8b:8c:32:fc:c8:c4:79:2d:17:c5:13:2a:82: cd:d5:48:9c:1d:13:a9:7c:fa:e9:15:a2:ff:4a:9a: 80:39:d6:42:fe:cb:0b:6b:d4:62:91:35:55:8a:28: 24:14:9f:05:30:3d:ae:35:7e:78:37:b4:f5:f8:14: bd:49:85:7e:51:bd:65:31:46:c1:59:73:ab:47:17: 65:b8:8e:ac:86:d9:58:2b:a0:35:49:bd:94:55:dc: fe:e0:fb:a5:c8:39:ed:e1:3e:34:9c:01:1f:b9:a6: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D6:E3:0A:B8:3B:53:0B:E3:25:0B:86:97:F5:80:32:80:CE:76:8F X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c2:52:ed:ea:8c:ec:fb:ec:ef:09:d1:14:e2:7e:89:4a:21: b3:b5:f6:b6:47:b2:22:3b:2f:81:bb:96:8b:94:05:fd:7a:17: 95:54:45:0d:b9:1d:9e:5f:58:13:05:28:57:67:71:83:7c:06: 45:32:09:41:a8:0f:b5:c4:70:a2:d5:be:b1:43:cc:af:fc:99: 89:ac:13:b2:cd:eb:6f:df:ae:b5:50:33:43:02:e5:76:41:fc: 9e:47:78:2c:82:21:2a:2f:b4:d4:db:ec:da:18:f0:ec:fb:50: 18:98:b2:49:bc:05:d4:b5:85:d9:6b:4e:2e:18:04:08:51:bd: f9:e0:1e:3b:98:00:24:a2:7b:77:bf:93:4b:63:54:7e:82:da: ba:0c:01:b1:ae:29:e1:02:c8:d0:20:b7:c1:78:04:27:c5:95: ae:05:de:51:68:e6:f8:c8:5b:cd:84:39:31:7d:e0:88:64:dd: 62:1b:29:9d:3a:4e:b0:0f:8f:b3:dd:61:18:82:9f:43:62:43: a1:6d:7e:35:2b:5e:54:db:26:ba:63:26:f5:21:b8:ae:2a:78: 2c:4c:96:5c:7b:d8:83:99:bb:08:28:7d:9c:d1:58:4d:32:82: a3:f4:36:8f:24:86:ac:05:18:02:5d:fa:f0:fe:bb:34:39:46: 21:7a:66:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmiaELNiqqMDIasEPFQH0Gv3KRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA2MjcyMjA2NTFaFw0yNTA3MDEwMTQ2NTFaMDMxMTAvBgNV BAMTKDdGRDZFMzBBQjgzQjUzMEJFMzI1MEI4Njk3RjU4MDMyODBDRTc2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgnRxlhM9KbiV2H3wefhLdmKj lVVvdXWycPvXb+1xhc3lpeH9yORb8hlp0G1wcklyE7XZASSuyP/ltruagqFSVujH MDSXq/cVsjksdplQHFTpmSs8RLoQ++NYI0h4ZcQfJj9ffqv+Z5rEnitPmM9XMXcw VjKfZqG6W6ukjYFqw7zb2YSRIdv4tVuDZxUFmFGDy1TqZbFqi4wy/MjEeS0XxRMq gs3VSJwdE6l8+ukVov9KmoA51kL+ywtr1GKRNVWKKCQUnwUwPa41fng3tPX4FL1J hX5RvWUxRsFZc6tHF2W4jqyG2VgroDVJvZRV3P7g+6XIOe3hPjScAR+5plL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9bjCrg7UwvjJQuGl/WAMoDOdo8wHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDCUu3qjOz77O8J0RTifolKIbO19rZHsiI7 L4G7louUBf16F5VURQ25HZ5fWBMFKFdncYN8BkUyCUGoD7XEcKLVvrFDzK/8mYms E7LN62/frrVQM0MC5XZB/J5HeCyCISovtNTb7NoY8Oz7UBiYskm8BdS1hdlrTi4Y BAhRvfngHjuYACSie3e/k0tjVH6C2roMAbGuKeECyNAgt8F4BCfFla4F3lFo5vjI W82EOTF94Ihk3WIbKZ06TrAPj7PdYRiCn0NiQ6FtfjUrXlTbJrpjJvUhuK4qeCxM llx72IOZuwgofZzRWE0ygqP0No8khqwFGAJd+vD+uzQ5RiF6Zo0= -----END CERTIFICATE-----Generated at Sun Jun 29 21:11:51 2025 by rpki-client