$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: LZIjQAAP31OvMx4H6mSbGwsXCoVl2zXQJ/8Su1t03nM= Subject key identifier: D0:2B:5D:3F:7B:82:78:91:97:BD:4E:B5:23:AA:51:FD:B9:1D:5C:99 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 2E4C548E9E554A99A60147C0EFDA0CF25B8D9C2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 04E4 Signing time: Sun 29 Jun 2025 06:00:52 +0000 Manifest this update: Sun 29 Jun 2025 05:55:52 +0000 Manifest next update: Wed 02 Jul 2025 14:41:52 +0000 Files and hashes: 1: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=) 2: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=) 3: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=) 4: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: 2NT2UuOxuSd5/dO/rpWryFS68Wsm9dm3H03vEW4pUT8=) 5: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4c:54:8e:9e:55:4a:99:a6:01:47:c0:ef:da:0c:f2:5b:8d:9c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Jun 29 05:55:52 2025 GMT Not After : Jul 2 14:41:52 2025 GMT Subject: CN=D02B5D3F7B82789197BD4EB523AA51FDB91D5C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:b4:ef:d5:4b:69:38:a5:18:9b:a1:f8:90: 1b:56:80:97:d6:c6:2a:c8:93:74:15:7b:4c:d6:24: 76:f3:e7:03:21:ac:bf:cb:fc:49:59:de:9a:99:0f: a2:0c:81:cf:e8:b0:a5:85:02:d1:f2:fb:f1:7a:f0: ef:ab:64:4a:43:fa:ea:59:57:72:e8:93:7f:4a:24: da:9c:90:67:7c:27:11:ef:c7:15:49:75:7b:c6:83: 14:80:b7:c9:69:2f:b3:df:a6:80:0f:ec:ea:e5:54: a2:50:20:b0:1e:68:23:d0:e2:5f:53:4b:23:4d:7c: be:d5:62:d1:b4:51:db:86:74:60:a2:2d:f6:71:18: 3d:e6:86:67:59:c1:91:a6:6a:d4:06:c9:65:f5:65: 11:97:2e:fe:33:1e:37:54:4b:22:5e:e0:6b:64:8a: 6f:b5:ee:9d:40:d6:f4:9c:bc:12:84:7a:d6:fb:12: 77:50:80:7a:4c:a4:3c:bf:b9:cb:24:50:89:a8:a9: 17:38:1a:82:b1:ef:d7:8f:34:8b:8d:2b:33:c0:d1: ae:e0:e8:8f:df:95:7b:74:b9:a5:50:49:6e:1d:3d: 09:83:56:92:87:84:2d:ff:42:db:3e:10:d3:60:b5: 9f:3a:a6:ed:8c:d2:95:c5:c8:29:22:41:d5:35:0b: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2B:5D:3F:7B:82:78:91:97:BD:4E:B5:23:AA:51:FD:B9:1D:5C:99 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d6:d3:be:14:a1:d8:c8:ef:2a:01:76:ef:dd:3e:11:5f:ab: 1d:30:bb:de:e5:07:57:f7:d9:ad:20:52:78:3f:05:f7:06:05: d5:2d:3f:ef:ba:a2:0a:fc:cc:2f:75:32:66:21:34:7e:ef:2b: 67:d1:47:4f:59:99:2c:0e:22:26:92:c6:cd:62:08:34:2d:cc: f5:d3:47:46:13:e5:7a:bc:c9:c2:a4:0a:08:3b:c3:fe:6a:88: 33:67:f3:fd:ca:64:51:08:ee:f0:02:52:47:08:98:d4:2b:35: 60:5a:9f:76:1d:95:3a:a9:a6:f7:21:4c:e7:b4:97:a6:cb:39: d3:13:82:34:93:f4:46:03:ee:e3:25:37:87:78:d2:83:82:88: 4d:41:81:f8:2c:51:53:1f:ab:41:81:b6:ba:3b:3e:67:eb:f2: 0c:cf:8f:d8:99:a1:e3:e7:76:31:d6:69:21:02:06:74:71:37: 85:37:66:c2:f0:f1:f2:45:d5:ec:33:27:5c:a8:2f:3f:b2:19: b5:57:ad:f3:95:71:07:b9:2e:de:33:ff:21:d1:6e:65:64:1c: 5c:fc:1b:53:be:5d:55:04:84:55:40:37:2b:99:9c:ba:ec:3c: 07:50:e9:cb:af:87:5e:d8:cf:74:83:d3:1d:c6:fc:b5:d5:87: 74:c1:44:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkxUjp5VSpmmAUfA79oM8luNnC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTA2MjkwNTU1NTJaFw0yNTA3MDIxNDQxNTJaMDMxMTAvBgNV BAMTKEQwMkI1RDNGN0I4Mjc4OTE5N0JENEVCNTIzQUE1MUZEQjkxRDVDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsjbTv1UtpOKUYm6H4kBtWgJfW xirIk3QVe0zWJHbz5wMhrL/L/ElZ3pqZD6IMgc/osKWFAtHy+/F68O+rZEpD+upZ V3Lok39KJNqckGd8JxHvxxVJdXvGgxSAt8lpL7PfpoAP7OrlVKJQILAeaCPQ4l9T SyNNfL7VYtG0UduGdGCiLfZxGD3mhmdZwZGmatQGyWX1ZRGXLv4zHjdUSyJe4Gtk im+17p1A1vScvBKEetb7EndQgHpMpDy/ucskUImoqRc4GoKx79ePNIuNKzPA0a7g 6I/flXt0uaVQSW4dPQmDVpKHhC3/Qts+ENNgtZ86pu2M0pXFyCkiQdU1C6MDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CtdP3uCeJGXvU61I6pR/bkdXJkwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTW074UodjI7yoBdu/dPhFfqx0wu97lB1f3 2a0gUng/BfcGBdUtP++6ogr8zC91MmYhNH7vK2fRR09ZmSwOIiaSxs1iCDQtzPXT R0YT5Xq8ycKkCgg7w/5qiDNn8/3KZFEI7vACUkcImNQrNWBan3YdlTqppvchTOe0 l6bLOdMTgjST9EYD7uMlN4d40oOCiE1BgfgsUVMfq0GBtro7Pmfr8gzPj9iZoePn djHWaSECBnRxN4U3ZsLw8fJF1ewzJ1yoLz+yGbVXrfOVcQe5Lt4z/yHRbmVkHFz8 G1O+XVUEhFVANyuZnLrsPAdQ6cuvh17Yz3SD0x3G/LXVh3TBRIQ= -----END CERTIFICATE-----Generated at Mon Jun 30 02:44:56 2025 by rpki-client