$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: 0UntZUzks937wLXrHNCK2Ay5ZG9dCbhtizYg57RITQY= Subject key identifier: 77:2B:4F:F6:CF:E0:8F:4B:02:BA:31:2F:36:4E:36:D7:34:C3:C5:F2 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 5EFCDEF0C55E8366C970CA06E3CCA0CE32C8ECDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 04FC Signing time: Sat 23 Aug 2025 09:50:55 +0000 Manifest this update: Sat 23 Aug 2025 09:45:55 +0000 Manifest next update: Tue 26 Aug 2025 21:48:55 +0000 Files and hashes: 1: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=) 2: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=) 3: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=) 4: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: lsamoHv1Ldyn+94Fw5/C6oSkZB45Xp7ddoVzfUaW0OY=) 5: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fc:de:f0:c5:5e:83:66:c9:70:ca:06:e3:cc:a0:ce:32:c8:ec:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Aug 23 09:45:55 2025 GMT Not After : Aug 26 21:48:55 2025 GMT Subject: CN=772B4FF6CFE08F4B02BA312F364E36D734C3C5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:8f:cb:f2:69:20:d4:9a:e4:2e:9e:96:8c: d0:a6:5f:c3:b7:a9:cc:3c:4e:52:66:37:43:73:35: d0:d7:43:53:73:67:03:39:a5:25:00:02:4e:1e:c8: 2a:69:db:13:7b:a5:5a:21:9a:a7:c3:8d:1a:d4:d2: 9a:dc:8e:03:00:46:ff:d9:f6:9f:5b:4d:8c:ad:a6: 17:aa:a4:4c:8c:45:ed:c3:48:65:13:fe:1d:56:a1: 68:83:1f:e8:c4:5f:1b:f2:9f:34:3b:56:ea:8c:28: 4c:40:9e:51:9f:73:48:76:f4:a5:e7:ab:98:8a:70: a3:3f:c5:07:9a:69:1c:f0:d1:09:cd:02:ca:4b:5d: 3f:05:2b:8d:e3:98:80:70:fc:15:68:33:a6:26:b7: 7b:dc:9f:06:be:20:de:fc:ed:05:f1:04:70:4f:7e: be:0a:63:cd:25:7a:e8:b8:94:b2:18:27:a4:e2:a5: a1:e9:4d:89:c8:d7:78:9c:f3:8f:04:3f:3b:92:f2: e3:d9:fc:b4:dd:ef:24:9d:d0:bd:d8:ac:32:fd:8b: 8d:82:f5:15:9c:52:c7:b0:f3:54:7c:18:a9:7c:87: 8a:4e:ea:f8:1d:65:f7:ae:55:2b:20:a0:f9:7c:bb: b5:84:01:86:61:e4:18:af:e8:1e:2a:a1:18:61:9e: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2B:4F:F6:CF:E0:8F:4B:02:BA:31:2F:36:4E:36:D7:34:C3:C5:F2 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:69:08:37:8f:7b:f7:57:88:f9:bb:fb:4f:e8:74:ca:2e:38: 81:b2:32:66:0e:1f:3b:cd:7b:c6:11:f3:cb:99:33:1c:9c:3a: 89:a4:67:ae:4a:c4:a8:5d:fb:71:4f:00:8c:90:82:42:8e:d9: f7:4e:b4:f1:30:f6:03:97:81:e0:d0:6e:52:f7:e2:40:37:ae: 12:3c:fa:42:40:e7:49:8b:b7:df:22:7e:31:a7:0b:a2:5d:0b: 0d:9d:3e:67:c2:ce:83:16:31:9f:d9:e4:1b:e0:79:a9:54:bc: 13:ec:b7:15:3f:11:0b:2a:88:5b:47:b4:70:13:6e:48:43:ec: b1:de:e3:ee:c4:12:68:92:78:c1:ca:0a:5a:52:3e:3e:74:ca: e6:43:23:9a:da:06:ba:cd:b1:16:a1:ba:96:6e:b8:9c:4e:c3: f4:70:d7:e1:9a:5a:59:fb:f2:a6:02:76:1a:35:f7:ea:d3:fd: 3a:6b:21:7a:f2:70:e5:48:59:11:de:e8:e2:1a:ba:4f:67:9d: 0c:10:da:03:d8:a0:96:f4:05:2f:a6:08:d3:32:8e:5d:de:d1: 3b:1d:89:b4:06:28:db:3b:cb:a2:39:65:79:9c:8c:bd:8a:1f: 1e:5a:2d:6c:6b:76:e9:35:b9:4d:2a:ff:fa:bf:f5:ad:58:21: 79:ae:75:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvze8MVeg2bJcMoG48ygzjLI7N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTA4MjMwOTQ1NTVaFw0yNTA4MjYyMTQ4NTVaMDMxMTAvBgNV BAMTKDc3MkI0RkY2Q0ZFMDhGNEIwMkJBMzEyRjM2NEUzNkQ3MzRDM0M1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Do/L8mkg1JrkLp6WjNCmX8O3 qcw8TlJmN0NzNdDXQ1NzZwM5pSUAAk4eyCpp2xN7pVohmqfDjRrU0prcjgMARv/Z 9p9bTYytpheqpEyMRe3DSGUT/h1WoWiDH+jEXxvynzQ7VuqMKExAnlGfc0h29KXn q5iKcKM/xQeaaRzw0QnNAspLXT8FK43jmIBw/BVoM6Ymt3vcnwa+IN787QXxBHBP fr4KY80leui4lLIYJ6TipaHpTYnI13ic848EPzuS8uPZ/LTd7ySd0L3YrDL9i42C 9RWcUsew81R8GKl8h4pO6vgdZfeuVSsgoPl8u7WEAYZh5Biv6B4qoRhhnjLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdytP9s/gj0sCujEvNk421zTDxfIwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdpCDePe/dXiPm7+0/odMouOIGyMmYOHzvN e8YR88uZMxycOomkZ65KxKhd+3FPAIyQgkKO2fdOtPEw9gOXgeDQblL34kA3rhI8 +kJA50mLt98ifjGnC6JdCw2dPmfCzoMWMZ/Z5BvgealUvBPstxU/EQsqiFtHtHAT bkhD7LHe4+7EEmiSeMHKClpSPj50yuZDI5raBrrNsRahupZuuJxOw/Rw1+GaWln7 8qYCdho19+rT/TprIXrycOVIWRHe6OIauk9nnQwQ2gPYoJb0BS+mCNMyjl3e0Tsd ibQGKNs7y6I5ZXmcjL2KHx5aLWxrduk1uU0q//q/9a1YIXmuddg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:49 2025 by rpki-client