$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: I7d7MCSK4VWrwi2fyVWNDon3S84Wz8ox7JIhOFZ94n4= Subject key identifier: C7:E6:71:28:C0:61:F7:93:A7:89:A2:96:2E:EB:ED:51:F3:2A:E2:B1 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 2B32D1FD93856F8793EEC4B3BBEC2F2904CA0FA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 14:42:10 +0000 Manifest this update: Fri 22 Aug 2025 14:37:10 +0000 Manifest next update: Mon 25 Aug 2025 21:34:10 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 2: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: RtxNIYHMKJDAmVZbqUOo4NwsQjFYZ7RcR6fPnyWanx4=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:32:d1:fd:93:85:6f:87:93:ee:c4:b3:bb:ec:2f:29:04:ca:0f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Aug 22 14:37:10 2025 GMT Not After : Aug 25 21:34:10 2025 GMT Subject: CN=C7E67128C061F793A789A2962EEBED51F32AE2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:76:37:78:4b:ba:f9:fd:da:b5:0c:42:db: 86:45:a2:4e:25:05:7c:7d:5e:d8:6b:04:6b:d7:de: 2b:85:f5:ae:ae:0b:98:7f:18:7d:7c:46:60:14:8c: c2:f7:e3:03:b3:80:c5:87:dc:b8:7c:39:60:7a:f1: 9f:b7:15:e0:1a:a2:54:29:38:05:67:5a:cc:47:d4: 7a:81:f7:e4:df:e2:6c:07:24:e0:0b:b6:a3:8c:2b: db:f9:86:24:50:83:40:51:41:53:41:48:a0:4e:d1: 9a:c0:64:93:d3:c7:a9:1c:4f:da:01:3b:79:13:6d: 85:c7:45:71:ba:16:36:90:35:03:b7:84:fd:15:c1: 4d:a2:87:ef:6c:07:66:ae:95:d4:ac:d0:f6:89:07: 13:0e:eb:28:6f:d7:4b:35:9e:d2:5e:51:d0:f5:e6: 1b:2d:08:6f:10:d6:ea:ec:13:c8:8d:8d:f9:ef:64: 31:cf:51:5f:9f:0b:27:8e:9c:4f:ed:a5:76:71:c3: 23:ef:15:bd:df:44:88:09:43:19:41:64:25:eb:68: 61:25:e8:78:34:18:fd:68:29:a3:f8:0a:b1:ef:1b: 4d:3e:b2:f2:f9:3d:36:00:32:60:e9:7b:24:46:ec: cb:95:7c:01:6d:66:07:1f:63:f4:87:7b:9c:66:46: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E6:71:28:C0:61:F7:93:A7:89:A2:96:2E:EB:ED:51:F3:2A:E2:B1 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b9:e0:02:e3:9b:46:9d:7b:7a:ff:7e:e8:da:a1:5f:aa:17: 2f:77:8d:58:ac:37:9f:26:11:99:dd:e5:4e:7f:ef:92:ce:4e: aa:d2:57:09:3c:5d:9d:9f:05:c4:cc:ba:6c:f1:3f:b4:e2:b1: a5:2b:79:ed:d0:2f:34:8f:2c:d6:1e:20:26:a2:a5:bd:54:05: 2e:d1:95:b8:96:9d:33:f5:ef:c3:2c:2d:5f:ce:85:f0:14:d1: 40:7e:0f:04:21:6a:11:ab:44:77:9c:54:e1:a3:cc:73:41:1e: 5e:f9:a6:2c:78:93:bb:77:ef:03:d9:b8:c0:90:12:57:98:2f: a0:e8:b4:57:b7:f4:81:b4:e7:50:c9:64:00:c9:b1:94:0a:58: 01:0d:77:5e:b2:e8:93:2d:3c:fa:d0:06:08:3b:8a:3d:66:bc: 5b:68:d8:c7:44:98:a8:64:73:1c:9b:f9:6f:0d:f4:f4:9a:e8: 28:63:4f:23:da:9a:b4:59:df:ba:be:4c:e1:71:5d:d6:70:3c: cd:51:55:e2:f9:f7:1d:d4:8d:28:c2:33:a0:9a:46:4e:b9:9a: fe:e9:32:09:d2:72:c7:30:b8:0f:6f:da:05:8e:48:49:40:65: 2e:8e:4b:ae:c8:20:7c:1d:ff:d6:41:60:8f:98:a9:61:fa:b7: 85:02:1e:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzLR/ZOFb4eT7sSzu+wvKQTKD6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTA4MjIxNDM3MTBaFw0yNTA4MjUyMTM0MTBaMDMxMTAvBgNV BAMTKEM3RTY3MTI4QzA2MUY3OTNBNzg5QTI5NjJFRUJFRDUxRjMyQUUyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEnY3eEu6+f3atQxC24ZFok4l BXx9XthrBGvX3iuF9a6uC5h/GH18RmAUjML34wOzgMWH3Lh8OWB68Z+3FeAaolQp OAVnWsxH1HqB9+Tf4mwHJOALtqOMK9v5hiRQg0BRQVNBSKBO0ZrAZJPTx6kcT9oB O3kTbYXHRXG6FjaQNQO3hP0VwU2ih+9sB2auldSs0PaJBxMO6yhv10s1ntJeUdD1 5hstCG8Q1ursE8iNjfnvZDHPUV+fCyeOnE/tpXZxwyPvFb3fRIgJQxlBZCXraGEl 6Hg0GP1oKaP4CrHvG00+svL5PTYAMmDpeyRG7MuVfAFtZgcfY/SHe5xmRutfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+ZxKMBh95OniaKWLuvtUfMq4rEwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu54ALjm0ade3r/fujaoV+qFy93jVisN58m EZnd5U5/75LOTqrSVwk8XZ2fBcTMumzxP7TisaUree3QLzSPLNYeICaipb1UBS7R lbiWnTP178MsLV/OhfAU0UB+DwQhahGrRHecVOGjzHNBHl75pix4k7t37wPZuMCQ EleYL6DotFe39IG051DJZADJsZQKWAENd16y6JMtPPrQBgg7ij1mvFto2MdEmKhk cxyb+W8N9PSa6ChjTyPamrRZ37q+TOFxXdZwPM1RVeL59x3UjSjCM6CaRk65mv7p MgnScscwuA9v2gWOSElAZS6OS67IIHwd/9ZBYI+YqWH6t4UCHqI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:00 2025 by rpki-client