$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: QsyxX5m5lvKX1fBibc+hqDv7+cULEY0yegTeJMSdgQc= Subject key identifier: AA:EE:3C:42:C7:91:5E:3F:89:68:A2:9B:07:C9:05:BB:75:77:D6:A4 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 2C21D7E4F2851E214771C594AFFA638384F32C8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 03FF Signing time: Mon 20 Oct 2025 04:01:57 +0000 Manifest this update: Mon 20 Oct 2025 03:56:57 +0000 Manifest next update: Thu 23 Oct 2025 14:05:57 +0000 Files and hashes: 1: AS23693.roa (hash: M6b8yK01C3VzF1wuVJ+W//BIfeE1QxnhjbjPh3lk4No=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: aG2mBHgX0bmZHxM02Rq2hbBbw2ZfcQnh7xE3hqOlwXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:21:d7:e4:f2:85:1e:21:47:71:c5:94:af:fa:63:83:84:f3:2c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Oct 20 03:56:57 2025 GMT Not After : Oct 23 14:05:57 2025 GMT Subject: CN=AAEE3C42C7915E3F8968A29B07C905BB7577D6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:c2:a4:64:66:7e:9c:4f:a2:c9:21:56:71: 16:33:2d:d2:aa:60:d5:b6:b3:df:8c:ca:0f:d9:33: 03:1c:bb:a1:50:54:d5:75:12:6f:20:46:ca:44:ce: 38:1e:3a:0a:f8:73:89:38:88:fd:e7:65:f6:f2:5c: e9:85:2a:97:ca:52:e5:f2:9e:0f:38:8a:1f:7a:db: 5f:07:56:f3:5e:ee:dc:2c:97:c3:29:73:68:0d:f5: a8:e0:19:72:ef:cb:80:47:aa:aa:c8:94:b7:f1:2f: 3f:2f:36:b9:93:e3:65:fd:78:f7:3e:2f:b9:37:67: 62:1a:90:e3:91:fd:6a:de:d7:5f:d6:c8:36:8d:97: af:77:fb:83:c9:8c:cb:8e:ba:da:1f:72:02:b1:c0: 26:cf:59:b7:ce:e8:82:5a:cd:02:af:b2:ba:10:96: b4:dd:4e:bc:a0:9b:eb:b1:0c:40:2f:5c:1b:e2:77: 63:89:dd:d7:15:80:58:d0:99:90:88:a4:24:b0:79: be:96:f9:81:d4:72:88:bc:42:8f:4f:34:c7:46:4d: fd:99:2e:e2:d4:cb:64:e9:f8:9c:e8:b2:f8:6c:a9: 21:1f:d1:bb:78:1d:f0:11:b4:17:06:ca:8e:75:20: 82:21:7f:f6:87:dd:38:bf:7b:05:00:c3:a3:05:c7: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:3C:42:C7:91:5E:3F:89:68:A2:9B:07:C9:05:BB:75:77:D6:A4 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:54:5e:47:bb:6f:6e:0f:1e:72:ba:fa:9f:dc:97:30:53:17: 82:36:b9:2a:d3:35:71:06:97:cd:45:fd:0d:74:72:63:76:c4: c3:7f:7c:8b:35:17:ba:83:e4:18:1d:52:05:27:ac:72:2d:35: e3:28:c2:8f:64:32:36:35:60:70:8e:fa:8e:5a:3e:eb:5d:90: b8:15:55:61:e4:ea:4c:b7:13:25:97:76:0a:17:9b:e5:46:55: 38:3e:cc:d3:7e:c1:08:1a:d6:48:8b:dc:ed:a8:a6:1a:bd:f7: 90:3d:f5:10:d8:b1:06:52:3e:51:98:0f:44:1a:e2:91:5a:30: c7:0d:b8:93:ec:4b:ec:52:c7:6b:0d:88:44:e0:a5:dc:5a:2b: a0:03:f3:48:3a:48:a7:07:fc:5a:7f:b6:20:11:d2:72:cb:89: f2:88:ea:ad:f3:67:fc:cc:a5:36:27:4c:b0:f9:81:5c:21:09: bd:e1:e1:b3:b3:46:e0:60:f6:3b:86:a2:55:97:b3:a9:e5:bd: a6:2b:d3:31:17:70:24:36:e0:91:c1:38:f5:7e:4c:8d:88:4c: 39:40:64:6b:fb:4c:f7:8f:ef:c7:62:13:07:cb:8e:d7:04:f7: 1c:4b:27:4c:e3:c0:60:41:52:6e:65:9b:6d:4a:9f:c3:bb:94: 0c:4e:4d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCHX5PKFHiFHccWUr/pjg4TzLIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTEwMjAwMzU2NTdaFw0yNTEwMjMxNDA1NTdaMDMxMTAvBgNV BAMTKEFBRUUzQzQyQzc5MTVFM0Y4OTY4QTI5QjA3QzkwNUJCNzU3N0Q2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dcKkZGZ+nE+iySFWcRYzLdKq YNW2s9+Myg/ZMwMcu6FQVNV1Em8gRspEzjgeOgr4c4k4iP3nZfbyXOmFKpfKUuXy ng84ih96218HVvNe7twsl8Mpc2gN9ajgGXLvy4BHqqrIlLfxLz8vNrmT42X9ePc+ L7k3Z2IakOOR/Wre11/WyDaNl693+4PJjMuOutofcgKxwCbPWbfO6IJazQKvsroQ lrTdTrygm+uxDEAvXBvid2OJ3dcVgFjQmZCIpCSweb6W+YHUcoi8Qo9PNMdGTf2Z LuLUy2Tp+JzosvhsqSEf0bt4HfARtBcGyo51IIIhf/aH3Ti/ewUAw6MFx0IZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqu48QseRXj+JaKKbB8kFu3V31qQwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5UXke7b24PHnK6+p/clzBTF4I2uSrTNXEG l81F/Q10cmN2xMN/fIs1F7qD5BgdUgUnrHItNeMowo9kMjY1YHCO+o5aPutdkLgV VWHk6ky3EyWXdgoXm+VGVTg+zNN+wQga1kiL3O2ophq995A99RDYsQZSPlGYD0Qa 4pFaMMcNuJPsS+xSx2sNiETgpdxaK6AD80g6SKcH/Fp/tiAR0nLLifKI6q3zZ/zM pTYnTLD5gVwhCb3h4bOzRuBg9juGolWXs6nlvaYr0zEXcCQ24JHBOPV+TI2ITDlA ZGv7TPeP78diEwfLjtcE9xxLJ0zjwGBBUm5lm21Kn8O7lAxOTUA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:48:16 2025 by rpki-client