$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: 5d4oale1uCt5A/sBEN3Ab3hRYtfgh/KauxumReN7LfE= Subject key identifier: 4A:AD:22:5C:22:FA:20:CA:DC:1F:34:2C:EF:A0:2F:39:D3:B8:DB:11 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 1D23ED7B5EC4EB9EBBAE4AB84F2CCE5446E53BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0226 Signing time: Fri 09 May 2025 06:02:09 +0000 Manifest this update: Fri 09 May 2025 05:57:09 +0000 Manifest next update: Mon 12 May 2025 07:38:09 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: dznTYUq/hlOgzr7tq1QdOQNeZPsy/c8Pv0hfpBFl9Oo=) 2: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 3: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: E6zY9IF+LuOZ3BAlN5O+kmO2W8oIfhWG4MJCZRG/08w=) 4: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 0j/OnwOdFjaxB+FdHyREBb9GsfY0gUkr8uOJgHM40w0=) 5: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: HZ2RlTa0ShtMozsl632wUCBjGvdspqNpWVFnePh2zho=) 6: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: YfvhmzxuHIqaS1cTdx6gq5F/wm0mssQ8diZL1hGW5V0=) 7: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: k5t3dTLbkf5cumobFfO0JB27WkNENVQf5Ox/fOqEPps=) 8: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: 3yNadH5UObiEmtHARrnQZT+Op/4Y8C9oXLlSYOYGT5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 07:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:23:ed:7b:5e:c4:eb:9e:bb:ae:4a:b8:4f:2c:ce:54:46:e5:3b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: May 9 05:57:09 2025 GMT Not After : May 12 07:38:09 2025 GMT Subject: CN=4AAD225C22FA20CADC1F342CEFA02F39D3B8DB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:c8:d4:39:ad:e8:0b:35:5f:c9:23:25:8f: 0d:04:a8:6a:1b:7a:9b:e2:40:2b:86:20:c3:8f:27: ab:d5:73:00:fe:7d:d9:cd:9f:ba:3d:a3:46:18:ca: 45:47:1e:ca:3b:6a:34:a0:d3:8a:e6:83:b7:af:e0: 3a:62:34:4b:e4:96:d2:23:be:e5:b2:a8:d8:bb:8f: 8b:2f:d4:76:86:04:ca:dc:e9:c0:40:e3:78:07:a3: 80:e8:a5:5b:4e:c4:c9:63:b1:e6:dc:9c:e4:0d:88: 5b:44:ff:08:e1:20:f2:ea:bd:0a:2e:45:ae:0f:d9: b7:a1:6c:e8:41:38:7f:ae:57:94:3c:1e:ae:37:b3: c7:b7:ea:a8:26:bd:55:36:4c:7c:f1:df:10:52:73: d8:47:eb:46:83:a4:cd:c6:88:1d:20:c8:36:e7:68: 68:54:35:bc:dd:6e:18:99:59:9f:8f:3a:c0:a0:c4: 25:19:3b:f9:3a:9d:83:54:e4:eb:6d:a0:56:e9:47: 26:e7:96:29:a4:6c:38:37:7d:c2:21:bd:c3:91:b3: 56:b8:e1:aa:84:06:44:cb:5a:2a:42:05:72:c3:97: 93:2a:19:83:2d:c7:9a:82:83:c6:81:1d:a6:21:ef: 3b:d6:41:27:88:cd:d8:18:b4:b6:c4:29:b2:82:8b: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:22:5C:22:FA:20:CA:DC:1F:34:2C:EF:A0:2F:39:D3:B8:DB:11 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:95:4c:28:23:1f:95:4a:f6:c8:74:58:86:b9:09:9c:9c:36: 2e:29:93:0f:e6:4d:f4:c1:5a:ac:b2:11:53:08:c0:1e:99:3a: f9:54:ee:7f:c6:b4:d3:e1:ee:11:e2:30:e6:78:88:3b:a6:3d: 22:0f:b5:2b:8b:26:1d:24:04:58:d7:45:d3:40:19:ac:85:94: 39:57:99:31:ae:37:ec:63:77:b8:9c:e1:16:a8:9d:d7:06:d6: dd:b1:88:7e:00:f6:fa:8c:9a:9b:03:33:13:d7:eb:c3:41:50: d4:a6:3f:f6:5e:ff:90:de:cf:e9:2a:da:13:b4:92:47:f9:99: 79:2c:bf:75:68:d9:be:e4:1c:fd:44:ef:04:83:c1:db:d4:fd: a6:52:47:64:e7:75:1f:3c:39:6a:4c:4f:f8:7c:f8:5c:06:63: 8f:b3:50:f0:80:f3:2f:fc:3e:9a:e7:79:30:48:f2:f0:30:d8: 2b:f8:ed:0e:6a:2e:33:28:80:92:2d:ea:fb:01:e9:2e:b3:28: b4:61:65:26:7e:66:89:2f:1f:51:a2:49:be:a9:b8:9a:ef:06: 1e:c6:86:7e:71:1e:b6:36:45:6a:51:29:a4:8c:2f:5b:44:dd: e9:8f:7a:a8:78:cb:d8:5f:44:ee:87:2a:58:6e:6f:9c:63:c3: 76:08:7c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSPte17E6567rkq4TyzOVEblO9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA1MDkwNTU3MDlaFw0yNTA1MTIwNzM4MDlaMDMxMTAvBgNV BAMTKDRBQUQyMjVDMjJGQTIwQ0FEQzFGMzQyQ0VGQTAyRjM5RDNCOERCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAM8jUOa3oCzVfySMljw0EqGob epviQCuGIMOPJ6vVcwD+fdnNn7o9o0YYykVHHso7ajSg04rmg7ev4DpiNEvkltIj vuWyqNi7j4sv1HaGBMrc6cBA43gHo4DopVtOxMljsebcnOQNiFtE/wjhIPLqvQou Ra4P2behbOhBOH+uV5Q8Hq43s8e36qgmvVU2THzx3xBSc9hH60aDpM3GiB0gyDbn aGhUNbzdbhiZWZ+POsCgxCUZO/k6nYNU5OttoFbpRybnlimkbDg3fcIhvcORs1a4 4aqEBkTLWipCBXLDl5MqGYMtx5qCg8aBHaYh7zvWQSeIzdgYtLbEKbKCi3HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSq0iXCL6IMrcHzQs76AvOdO42xEwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOVTCgjH5VK9sh0WIa5CZycNi4pkw/mTfTB WqyyEVMIwB6ZOvlU7n/GtNPh7hHiMOZ4iDumPSIPtSuLJh0kBFjXRdNAGayFlDlX mTGuN+xjd7ic4RaondcG1t2xiH4A9vqMmpsDMxPX68NBUNSmP/Ze/5Dez+kq2hO0 kkf5mXksv3Vo2b7kHP1E7wSDwdvU/aZSR2TndR88OWpMT/h8+FwGY4+zUPCA8y/8 PprneTBI8vAw2Cv47Q5qLjMogJIt6vsB6S6zKLRhZSZ+ZokvH1GiSb6puJrvBh7G hn5xHrY2RWpRKaSML1tE3emPeqh4y9hfRO6HKlhub5xjw3YIfOQ= -----END CERTIFICATE-----Generated at Sat May 10 09:51:51 2025 by rpki-client