$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: ks0sDGvEE6Wpy5kfTysNtk+zvP2fjbOb1C9URzisV6w= Subject key identifier: D1:70:BF:E6:F3:38:25:F8:93:01:D5:99:D8:92:BF:F0:07:05:94:EA Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 576F89656AC7D20D7D29CA5DAA7717482F6E4778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 11:50:54 +0000 Manifest this update: Sun 19 Oct 2025 11:45:54 +0000 Manifest next update: Wed 22 Oct 2025 13:38:54 +0000 Files and hashes: 1: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=) 2: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=) 3: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=) 4: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: infJFGGTnb0oIZvv8R6TyxikXJRwoO2rcySQsEbs5UY=) 5: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6f:89:65:6a:c7:d2:0d:7d:29:ca:5d:aa:77:17:48:2f:6e:47:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Oct 19 11:45:54 2025 GMT Not After : Oct 22 13:38:54 2025 GMT Subject: CN=D170BFE6F33825F89301D599D892BFF0070594EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:5c:a9:c0:70:27:6f:19:0f:96:9d:38:18: 81:e5:ba:5d:23:48:0d:b6:d6:d5:02:29:dd:d8:7e: 22:62:43:7d:8c:06:34:81:67:f7:53:d1:11:44:64: 1f:1c:4f:17:07:d9:b5:18:36:c9:a6:2f:e2:c2:92: 3b:84:c5:85:15:39:1b:97:73:18:12:2f:7f:2e:a9: 3c:19:1a:ba:36:6f:c9:7d:7d:ba:a1:66:6b:64:09: b5:e7:f5:c0:de:b4:87:93:09:41:74:36:d1:5c:90: e0:cd:d4:46:94:98:47:50:ca:a8:88:a1:1c:1c:ca: 54:3c:fc:bc:10:27:a4:09:bd:3a:f1:11:30:bc:72: d0:f9:3d:0a:59:83:18:3e:95:be:69:89:0f:f1:0d: 76:15:9b:c4:10:55:fd:66:09:13:8d:9d:04:4d:3f: 25:f6:04:18:22:a8:05:9a:97:3e:60:72:f4:80:4c: 06:e2:89:38:2b:56:50:3c:29:e2:27:c9:4a:a3:69: f8:8d:11:33:b9:e6:51:ce:87:96:89:34:b1:3a:4a: 62:d6:b5:5f:71:d4:08:8e:57:56:3a:fb:7f:10:26: 2f:47:f5:b5:08:71:4a:81:43:bf:17:96:8e:2c:24: 6a:bf:e3:10:93:a3:b0:75:c9:20:77:98:72:46:06: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:BF:E6:F3:38:25:F8:93:01:D5:99:D8:92:BF:F0:07:05:94:EA X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:05:5a:00:04:9b:6c:56:3f:3a:04:95:8c:d6:90:2d:b0:2a: 6c:88:8e:da:92:4f:94:e0:1d:b5:a9:4f:15:00:4d:0c:ad:4a: c3:7b:24:f5:bb:97:b4:c3:dd:7a:d7:c1:ae:27:8e:fa:b8:d9: c2:e0:5e:1e:9c:5c:0c:71:2d:90:20:32:e6:ef:77:a6:f3:38: 2b:f9:b7:d5:5d:e4:cc:b6:a1:f5:ac:fa:d5:56:86:bc:05:e8: 33:5f:43:f1:d0:ff:c3:7a:a8:74:dc:9a:b1:82:7b:c9:a5:09: 42:54:7b:fd:34:55:43:63:13:b1:42:86:72:f6:ea:cd:d2:c8: ce:f4:f4:4c:85:94:68:59:0a:03:04:49:36:00:72:36:13:2f: a2:4a:53:5e:11:35:31:e5:53:3e:75:5b:1e:24:41:5e:2a:96: 18:9f:fc:81:37:70:2b:15:0b:df:78:c6:4e:69:c6:04:2c:8d: 51:89:3c:76:0a:f7:6f:bd:b5:05:b8:dc:1f:e3:e6:e6:76:71: e3:ca:6f:17:f9:80:ad:f7:13:34:38:9d:42:7b:e5:4d:5f:b6: 1e:ba:36:0e:78:6a:33:2e:45:ba:7a:b5:2f:8b:44:b5:ac:6b: 38:2e:58:65:13:d6:09:e3:4b:ee:d0:cf:bb:73:2c:9a:73:90: 90:27:9b:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2+JZWrH0g19KcpdqncXSC9uR3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTEwMTkxMTQ1NTRaFw0yNTEwMjIxMzM4NTRaMDMxMTAvBgNV BAMTKEQxNzBCRkU2RjMzODI1Rjg5MzAxRDU5OUQ4OTJCRkYwMDcwNTk0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pFypwHAnbxkPlp04GIHlul0j SA221tUCKd3YfiJiQ32MBjSBZ/dT0RFEZB8cTxcH2bUYNsmmL+LCkjuExYUVORuX cxgSL38uqTwZGro2b8l9fbqhZmtkCbXn9cDetIeTCUF0NtFckODN1EaUmEdQyqiI oRwcylQ8/LwQJ6QJvTrxETC8ctD5PQpZgxg+lb5piQ/xDXYVm8QQVf1mCRONnQRN PyX2BBgiqAWalz5gcvSATAbiiTgrVlA8KeInyUqjafiNETO55lHOh5aJNLE6SmLW tV9x1AiOV1Y6+38QJi9H9bUIcUqBQ78Xlo4sJGq/4xCTo7B1ySB3mHJGBjOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XC/5vM4JfiTAdWZ2JK/8AcFlOowHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8FWgAEm2xWPzoElYzWkC2wKmyIjtqST5Tg HbWpTxUATQytSsN7JPW7l7TD3XrXwa4njvq42cLgXh6cXAxxLZAgMubvd6bzOCv5 t9Vd5My2ofWs+tVWhrwF6DNfQ/HQ/8N6qHTcmrGCe8mlCUJUe/00VUNjE7FChnL2 6s3SyM709EyFlGhZCgMESTYAcjYTL6JKU14RNTHlUz51Wx4kQV4qlhif/IE3cCsV C994xk5pxgQsjVGJPHYK92+9tQW43B/j5uZ2cePKbxf5gK33EzQ4nUJ75U1fth66 Ng54ajMuRbp6tS+LRLWsazguWGUT1gnjS+7Qz7tzLJpzkJAnm74= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:57 2025 by rpki-client