$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: BhpOTDMldGzrGT9/dFcqeCBAO5N65eeUjU0w1kKFsPI= Subject key identifier: 10:3F:8E:B4:63:99:21:66:B6:6B:6D:6B:CA:3D:9E:C0:6D:FE:76:2B Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 6EA5E8069EFAC6FE29D4545A861C97CDCE5B7EDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 023F Signing time: Sun 29 Jun 2025 14:12:09 +0000 Manifest this update: Sun 29 Jun 2025 14:07:09 +0000 Manifest next update: Wed 02 Jul 2025 20:47:09 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 2: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: UVyL7xrNXP0erjq50O7xapvdC+JK7LM4Cbx+OxItTLQ=) 4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 5: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 6: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 7: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 8: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a5:e8:06:9e:fa:c6:fe:29:d4:54:5a:86:1c:97:cd:ce:5b:7e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Jun 29 14:07:09 2025 GMT Not After : Jul 2 20:47:09 2025 GMT Subject: CN=103F8EB463992166B66B6D6BCA3D9EC06DFE762B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:f4:7a:61:fa:e0:3c:4f:0b:be:11:d3:4c: 0d:2f:f3:ec:18:57:02:41:5b:12:d8:c3:9b:88:ca: fe:97:5a:b0:c0:76:26:57:6c:6d:fc:ce:16:5b:69: 4c:50:a8:7b:12:4b:e1:11:95:4c:b0:cd:10:2f:9d: 10:cf:ec:27:1c:26:43:c6:52:12:4c:34:fa:c3:c4: 1b:11:37:80:8a:84:9b:05:16:52:1f:6c:02:3e:20: 8a:57:d5:71:6f:43:f9:b5:48:2f:67:84:b2:01:f6: ed:8c:d3:25:1c:c4:00:e3:16:8b:22:0b:21:b3:ff: ff:6a:dc:9b:34:bb:ad:a1:17:59:2e:d2:ed:e6:b2: c2:a4:00:da:43:bb:6c:4c:2f:22:12:6f:c2:94:0c: bd:ae:bf:48:d5:25:32:55:71:27:88:ea:05:df:c5: 88:07:d8:c2:53:37:84:0f:06:0e:93:36:73:fb:91: 51:71:5f:4b:62:63:72:49:e4:b4:eb:3b:b1:62:c3: c3:59:66:f8:d2:36:45:37:0e:a0:1e:a2:ce:02:d4: 0a:a3:0b:bf:13:e3:90:5a:92:25:78:b8:c0:22:f7: 71:ec:5e:3f:d1:16:38:24:e3:57:a7:2d:22:16:6e: 2d:d5:54:06:ac:85:1c:d7:e0:3d:ab:f2:0f:6c:d9: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:8E:B4:63:99:21:66:B6:6B:6D:6B:CA:3D:9E:C0:6D:FE:76:2B X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:25:60:b0:09:f8:d7:2e:05:46:e7:23:48:2e:94:9e:d0:ef: f9:ea:db:69:fb:ea:93:f2:97:2d:71:4d:ec:73:a4:95:3d:fe: bd:7f:1f:6a:8d:a2:28:61:f9:63:80:b9:0f:6b:9c:52:ae:05: 7b:a6:07:4d:d4:16:de:69:c7:5e:83:eb:44:a6:3c:80:2c:02: 0b:e5:1d:39:43:0f:c6:17:30:e5:07:1c:14:47:2c:c8:aa:8a: 4b:04:ff:18:f5:0f:12:d6:fb:1c:3d:dc:bd:98:aa:57:c7:25: ef:d3:e7:e1:47:08:8b:69:6e:4c:81:30:aa:ef:79:74:ab:81: 9b:b2:2d:fe:cd:18:e7:68:df:80:ca:5c:ce:85:62:60:c6:86: 17:2c:69:41:57:51:50:85:89:e2:b6:e3:86:df:d2:42:fd:8e: 21:24:c9:47:52:69:13:c6:61:df:3c:07:14:a6:c1:2d:18:07: 71:b1:46:64:c2:22:05:14:8e:e2:0e:09:6e:b1:e8:81:a4:bd: 60:2c:e4:19:8c:cc:2b:83:65:be:51:fd:06:60:fe:86:c6:d7: 78:68:71:71:93:d2:91:88:88:d8:88:e7:27:e0:5e:a1:2a:d7: 3f:14:34:71:4d:d0:04:da:11:01:d7:5a:21:ab:43:f4:81:c3: 22:3d:b7:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqXoBp76xv4p1FRahhyXzc5bft8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA2MjkxNDA3MDlaFw0yNTA3MDIyMDQ3MDlaMDMxMTAvBgNV BAMTKDEwM0Y4RUI0NjM5OTIxNjZCNjZCNkQ2QkNBM0Q5RUMwNkRGRTc2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4vR6YfrgPE8LvhHTTA0v8+wY VwJBWxLYw5uIyv6XWrDAdiZXbG38zhZbaUxQqHsSS+ERlUywzRAvnRDP7CccJkPG UhJMNPrDxBsRN4CKhJsFFlIfbAI+IIpX1XFvQ/m1SC9nhLIB9u2M0yUcxADjFosi CyGz//9q3Js0u62hF1ku0u3mssKkANpDu2xMLyISb8KUDL2uv0jVJTJVcSeI6gXf xYgH2MJTN4QPBg6TNnP7kVFxX0tiY3JJ5LTrO7Fiw8NZZvjSNkU3DqAeos4C1Aqj C78T45BakiV4uMAi93HsXj/RFjgk41enLSIWbi3VVAashRzX4D2r8g9s2TC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUED+OtGOZIWa2a21ryj2ewG3+diswHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHslYLAJ+NcuBUbnI0gulJ7Q7/nq22n76pPy ly1xTexzpJU9/r1/H2qNoihh+WOAuQ9rnFKuBXumB03UFt5px16D60SmPIAsAgvl HTlDD8YXMOUHHBRHLMiqiksE/xj1DxLW+xw93L2YqlfHJe/T5+FHCItpbkyBMKrv eXSrgZuyLf7NGOdo34DKXM6FYmDGhhcsaUFXUVCFieK244bf0kL9jiEkyUdSaRPG Yd88BxSmwS0YB3GxRmTCIgUUjuIOCW6x6IGkvWAs5BmMzCuDZb5R/QZg/obG13ho cXGT0pGIiNiI5yfgXqEq1z8UNHFN0ATaEQHXWiGrQ/SBwyI9tws= -----END CERTIFICATE-----Generated at Mon Jun 30 15:01:06 2025 by rpki-client