$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: QjLmBn0gbCACisWI6j9b/0JsKUWE53jJLeW1OVo1N2A= Subject key identifier: 49:AF:C3:2C:EE:81:BE:49:2B:67:A0:3D:CD:D4:E0:B9:FE:36:5A:AC Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 6A3A2260C2FE8E4F25E26016C7C2C2EBF677C2BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 0517 Signing time: Sat 18 Oct 2025 23:32:12 +0000 Manifest this update: Sat 18 Oct 2025 23:27:12 +0000 Manifest next update: Wed 22 Oct 2025 05:55:12 +0000 Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: 75f5RXbSMPmaJw8ccgVCPCgR0bDGkA7yuuNZuxRrfrQ=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3a:22:60:c2:fe:8e:4f:25:e2:60:16:c7:c2:c2:eb:f6:77:c2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Oct 18 23:27:12 2025 GMT Not After : Oct 22 05:55:12 2025 GMT Subject: CN=49AFC32CEE81BE492B67A03DCDD4E0B9FE365AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:63:d4:2f:ec:06:4f:d8:b1:7b:d4:cb:9f: 5b:a2:6b:66:00:7b:21:b5:23:a4:d0:16:48:1f:31: 52:52:54:a4:6b:d4:a4:a6:7d:ac:8e:e1:34:7a:48: 88:0d:27:9a:55:c6:86:8f:cc:6f:64:9d:69:5b:e2: 7c:bd:c6:56:c2:27:34:4a:b6:3c:58:05:ad:04:00: 53:f0:b2:e9:62:35:3b:45:46:ff:b1:39:09:aa:e9: c3:bf:72:77:4c:22:54:aa:e9:29:e8:5f:dd:f2:79: 61:31:a4:aa:c8:05:f0:6a:20:ea:26:c1:81:87:da: 44:a8:d3:0e:3a:11:0c:40:c2:f1:ad:10:e2:ef:8e: 37:e3:87:ed:53:01:8c:0c:b6:f1:61:87:67:89:92: c9:78:2a:41:d5:83:9d:21:d5:ff:f2:11:1b:e8:09: a8:6f:9e:5b:4f:f3:19:76:f3:8c:bb:81:79:d8:e5: 61:fd:87:ac:2f:e1:f1:5c:f8:62:04:73:cb:13:85: c3:e1:97:d1:72:37:e5:44:4d:5a:e8:3d:c0:95:fb: 06:e8:ab:1b:f1:6f:97:18:6a:b9:07:eb:f6:15:26: 63:7a:26:55:1e:09:6b:84:0b:4d:39:fe:a4:46:9b: d4:e7:37:b8:5a:74:35:09:c6:b3:9b:f9:39:86:de: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:C3:2C:EE:81:BE:49:2B:67:A0:3D:CD:D4:E0:B9:FE:36:5A:AC X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ba:e2:30:ab:61:7d:f8:a3:35:e8:fb:4c:a3:5f:0c:46:a7: b9:9b:f8:41:5d:f8:80:35:37:ad:05:a7:8f:fe:53:78:5b:b6: a4:62:2d:26:11:cd:2d:07:5a:f8:f2:60:5d:85:ea:40:ee:5b: 7b:f7:2d:56:ae:9b:d9:6f:a0:6d:c3:d2:77:80:de:61:86:8d: 58:e5:87:dd:74:eb:d1:66:e2:2e:a9:1c:16:48:9d:b8:31:af: cd:6e:20:b6:68:9b:2f:90:fb:7f:b9:d2:79:db:e2:ab:02:07: fd:6a:d3:80:08:5d:ec:94:4c:ef:7f:b6:08:ec:f7:01:be:cf: a3:f1:12:6c:a8:2b:29:34:29:bf:b8:32:98:e1:3c:41:62:37: 0b:86:2a:e1:d7:a1:be:24:e7:d1:ce:9e:3f:cb:a5:94:d9:0f: ef:51:30:3b:e1:bf:e6:5e:e5:34:4b:96:c4:e6:70:f5:7e:3f: 56:52:7e:b0:7d:0f:67:0c:5f:fc:f5:e4:62:d5:a1:62:62:3a: 91:ab:9c:62:5a:2d:79:7a:6d:12:3e:1d:de:d4:25:0b:b5:e4: fd:33:fa:b8:8f:ae:05:8f:99:72:36:75:06:a8:f7:bd:85:34: c5:5b:5c:fc:0c:97:22:c8:5a:2b:2c:be:a6:53:30:69:ad:a7: 12:c5:34:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajoiYML+jk8l4mAWx8LC6/Z3wr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTEwMTgyMzI3MTJaFw0yNTEwMjIwNTU1MTJaMDMxMTAvBgNV BAMTKDQ5QUZDMzJDRUU4MUJFNDkyQjY3QTAzRENERDRFMEI5RkUzNjVBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrWPUL+wGT9ixe9TLn1uia2YA eyG1I6TQFkgfMVJSVKRr1KSmfayO4TR6SIgNJ5pVxoaPzG9knWlb4ny9xlbCJzRK tjxYBa0EAFPwsuliNTtFRv+xOQmq6cO/cndMIlSq6SnoX93yeWExpKrIBfBqIOom wYGH2kSo0w46EQxAwvGtEOLvjjfjh+1TAYwMtvFhh2eJksl4KkHVg50h1f/yERvo CahvnltP8xl284y7gXnY5WH9h6wv4fFc+GIEc8sThcPhl9FyN+VETVroPcCV+wbo qxvxb5cYarkH6/YVJmN6JlUeCWuEC005/qRGm9TnN7hadDUJxrOb+TmG3l4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSa/DLO6BvkkrZ6A9zdTguf42WqwwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK264jCrYX34ozXo+0yjXwxGp7mb+EFd+IA1 N60Fp4/+U3hbtqRiLSYRzS0HWvjyYF2F6kDuW3v3LVaum9lvoG3D0neA3mGGjVjl h91069Fm4i6pHBZInbgxr81uILZomy+Q+3+50nnb4qsCB/1q04AIXeyUTO9/tgjs 9wG+z6PxEmyoKyk0Kb+4MpjhPEFiNwuGKuHXob4k59HOnj/LpZTZD+9RMDvhv+Ze 5TRLlsTmcPV+P1ZSfrB9D2cMX/z15GLVoWJiOpGrnGJaLXl6bRI+Hd7UJQu15P0z +riPrgWPmXI2dQao972FNMVbXPwMlyLIWissvqZTMGmtpxLFNE4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:35 2025 by rpki-client