$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: EfnXimEZMWpMNL5pgMk/i+ik4EVLbzKI5afaLrrFYws= Subject key identifier: 48:07:0E:CD:25:37:B7:E8:AF:CA:BD:73:E1:5D:CD:6D:80:49:B8:04 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 0C6EA434ED018B9BA323A5F378765121D180EB67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0270 Signing time: Sat 18 Oct 2025 09:02:14 +0000 Manifest this update: Sat 18 Oct 2025 08:57:14 +0000 Manifest next update: Tue 21 Oct 2025 20:21:14 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 2: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: t8tSBCH1Qgrhrqc80IupvOot5DMTMO8SmioPNiIvv3Q=) 4: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 5: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 6: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 7: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 8: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6e:a4:34:ed:01:8b:9b:a3:23:a5:f3:78:76:51:21:d1:80:eb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Oct 18 08:57:14 2025 GMT Not After : Oct 21 20:21:14 2025 GMT Subject: CN=48070ECD2537B7E8AFCABD73E15DCD6D8049B804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ba:d7:b3:4e:8a:96:d9:85:33:bd:9b:96:b1: ca:fc:d0:a0:6b:81:f9:d1:d8:06:2e:c9:f0:a2:33: 16:13:83:22:ce:af:ba:b3:05:60:56:58:19:a2:9c: 03:25:0d:05:17:5f:c8:e0:a6:88:c7:3a:1f:74:08: 23:23:b4:c5:5e:bb:76:b7:84:2f:14:09:8c:fb:c1: af:a6:dc:22:55:13:94:24:07:e4:8f:22:88:ff:10: d4:ec:a5:74:11:bf:e8:39:de:23:9d:95:74:b2:23: d4:75:90:8f:f5:3b:ae:91:f5:38:36:38:a5:94:9b: f3:98:cb:f9:e4:a1:a3:a7:eb:7a:24:cc:20:17:ba: fc:b1:8b:31:82:ee:ec:ae:38:f6:77:94:14:53:46: ba:0e:19:d0:76:b8:ed:d3:db:ff:52:d6:d0:b6:19: a3:cc:d8:66:29:0a:69:e7:99:8b:6b:b3:a6:bd:ae: 1b:7a:cf:51:f8:d3:56:07:ef:92:22:28:b7:7c:4d: 10:ee:0f:83:18:67:fa:6e:6b:11:e5:d5:e2:1c:2f: 68:65:a8:bd:db:46:3e:40:0f:08:d9:0e:8f:44:5e: 85:cc:c6:e3:7c:08:e0:49:f3:8b:df:e8:c9:97:6f: ef:9a:0f:ab:93:e1:3c:38:84:93:d4:8b:b7:cc:6d: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:07:0E:CD:25:37:B7:E8:AF:CA:BD:73:E1:5D:CD:6D:80:49:B8:04 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fd:77:c0:a5:c9:30:f1:dd:d1:b1:74:6e:00:49:aa:45:20: 94:93:c1:84:cd:29:d5:4b:1b:07:a1:f5:dc:63:6c:6e:e5:8a: 54:ab:74:43:10:0f:97:26:85:3d:37:2f:4d:fb:38:e1:76:b7: 6f:af:4b:38:5e:7a:a5:f8:7c:89:02:af:11:65:f0:91:af:68: a7:c5:fd:db:7a:25:a9:33:db:22:07:24:88:41:dd:74:b9:35: 48:90:27:84:db:57:f9:bc:3c:d7:28:6b:da:d4:c7:2a:8c:57: 7d:72:23:7b:fc:6c:b9:c2:7b:99:b6:1d:ee:6b:30:00:42:d1: 24:58:86:25:ae:9e:66:30:13:c4:cc:e6:3e:4f:ef:fa:26:14: 42:5b:62:87:26:c3:08:99:5d:72:77:22:d9:93:e5:c4:a3:0b: 15:f1:e8:7f:d2:8a:f5:64:c4:07:37:8c:a7:88:b5:2e:90:aa: 48:c0:2e:e2:7b:99:02:72:74:6d:78:d6:f0:0e:e6:6d:0c:f6: 25:7d:c4:83:24:46:8b:25:b7:68:69:8d:33:76:9f:6a:c4:fd: c0:98:4f:29:14:73:65:9c:87:8d:ab:17:d5:25:cb:6d:a5:60: a1:9f:65:2c:55:ef:88:11:b7:35:e0:64:78:29:85:59:bd:a4: b4:4c:8e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDG6kNO0Bi5ujI6XzeHZRIdGA62cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTEwMTgwODU3MTRaFw0yNTEwMjEyMDIxMTRaMDMxMTAvBgNV BAMTKDQ4MDcwRUNEMjUzN0I3RThBRkNBQkQ3M0UxNURDRDZEODA0OUI4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtutezToqW2YUzvZuWscr80KBr gfnR2AYuyfCiMxYTgyLOr7qzBWBWWBminAMlDQUXX8jgpojHOh90CCMjtMVeu3a3 hC8UCYz7wa+m3CJVE5QkB+SPIoj/ENTspXQRv+g53iOdlXSyI9R1kI/1O66R9Tg2 OKWUm/OYy/nkoaOn63okzCAXuvyxizGC7uyuOPZ3lBRTRroOGdB2uO3T2/9S1tC2 GaPM2GYpCmnnmYtrs6a9rht6z1H401YH75IiKLd8TRDuD4MYZ/puaxHl1eIcL2hl qL3bRj5ADwjZDo9EXoXMxuN8COBJ84vf6MmXb++aD6uT4Tw4hJPUi7fMbdbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAcOzSU3t+ivyr1z4V3NbYBJuAQwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn9d8ClyTDx3dGxdG4ASapFIJSTwYTNKdVL Gweh9dxjbG7lilSrdEMQD5cmhT03L037OOF2t2+vSzheeqX4fIkCrxFl8JGvaKfF /dt6Jakz2yIHJIhB3XS5NUiQJ4TbV/m8PNcoa9rUxyqMV31yI3v8bLnCe5m2He5r MABC0SRYhiWunmYwE8TM5j5P7/omFEJbYocmwwiZXXJ3ItmT5cSjCxXx6H/SivVk xAc3jKeItS6QqkjALuJ7mQJydG141vAO5m0M9iV9xIMkRoslt2hpjTN2n2rE/cCY TykUc2Wch42rF9Uly22lYKGfZSxV74gRtzXgZHgphVm9pLRMjpA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:08 2025 by rpki-client