$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: +vAHnozZq0lL1r9tzqP+1jv6EXoC1LRvU4rr1bhuDOo= Subject key identifier: CF:20:FF:BB:04:70:12:D8:42:78:B7:9B:1A:E4:D7:8A:25:2E:AC:1A Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 205C8BDA961C0C647ADAC8CE33C0D516E2E2FA94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0257 Signing time: Fri 22 Aug 2025 17:12:15 +0000 Manifest this update: Fri 22 Aug 2025 17:07:15 +0000 Manifest next update: Mon 25 Aug 2025 21:49:15 +0000 Files and hashes: 1: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 2: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: r8OF9/9hpOzPNT2f9ddPjsvXM/JFx2FFRNKBR+GC9+I=) 3: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 4: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 5: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 6: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 7: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 8: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5c:8b:da:96:1c:0c:64:7a:da:c8:ce:33:c0:d5:16:e2:e2:fa:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Aug 22 17:07:15 2025 GMT Not After : Aug 25 21:49:15 2025 GMT Subject: CN=CF20FFBB047012D84278B79B1AE4D78A252EAC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:3d:7c:5a:b5:79:ca:62:ed:0c:54:16:3b: 07:92:5c:05:7b:eb:1e:36:6a:c6:96:07:b7:aa:aa: 28:44:be:29:51:02:32:59:ce:46:c5:94:68:a6:07: ca:63:b1:d9:1e:43:15:38:fc:74:18:8e:d1:eb:99: 59:f8:b1:1d:92:e4:7d:95:e7:6e:c0:ec:61:fb:0c: 98:72:5a:39:43:2c:27:ef:df:42:11:57:a0:72:47: 56:8d:a7:73:6b:32:df:f2:73:12:c8:9e:fd:d7:c6: 3d:89:b9:50:e9:62:04:6e:cf:01:7b:7e:49:a9:e9: bf:30:d5:51:65:42:40:3e:63:d5:9c:c4:c8:c2:37: 40:80:33:97:28:1d:dd:5f:6d:6a:1e:a2:93:59:90: 2e:dd:be:55:5c:a0:e3:8f:ff:a4:b3:9a:0e:28:ac: 17:e3:97:20:cd:ce:e7:b8:2a:97:f6:be:c3:48:fc: b8:79:9c:95:ec:14:f0:3f:60:25:2e:14:a6:5e:45: 0e:75:58:be:7f:32:ea:98:61:48:ac:9b:bd:9f:17: 2f:53:37:08:12:d6:ae:f2:58:c4:1c:e9:04:55:84: f2:35:e5:76:8a:20:e1:e6:a6:57:7d:d6:c3:bb:d9: 2c:38:5c:42:c4:4f:98:58:08:71:6f:ee:81:18:c5: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:FF:BB:04:70:12:D8:42:78:B7:9B:1A:E4:D7:8A:25:2E:AC:1A X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:82:df:db:fd:a4:66:b4:ba:f8:73:03:3a:75:2a:ad:ae:5d: 2e:bc:4c:f6:2f:8b:73:b7:fa:47:d1:df:2b:0c:3e:5c:d5:5f: 50:0f:24:46:18:71:65:85:64:60:db:29:92:d2:29:df:3d:0a: cf:22:38:9b:bb:d9:d9:dc:9c:ee:e5:87:dd:af:84:52:48:e8: 09:12:59:ee:5c:51:81:ff:3e:3f:50:13:0b:5d:bf:1a:5d:8a: 54:df:d1:36:fb:55:4b:fb:70:de:44:58:8d:c7:c6:f6:39:63: 5d:ab:41:18:e4:53:14:a6:4e:24:54:f8:24:30:ff:a0:06:82: 1c:e2:51:6d:f4:31:c3:2f:dc:f8:72:1b:c3:d2:b8:4b:4e:8c: 21:7a:dd:16:ab:fa:a7:72:94:93:7a:7b:39:83:fc:5a:28:66: c4:c9:cb:d6:5b:84:41:40:48:9d:e2:80:02:af:9c:d7:4f:d2: bf:3b:93:77:02:98:06:ec:a0:3b:1f:26:99:65:f3:35:94:d6: d1:0e:8f:2f:69:99:4e:23:c2:fe:86:57:cf:55:2f:e5:4a:d1: 81:61:26:76:27:60:7a:7d:f4:95:9e:af:fe:7d:21:ea:23:6e: d7:68:d2:a2:cb:8f:ca:c6:37:9f:35:8f:de:87:61:96:e6:cb: bc:28:75:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFyL2pYcDGR62sjOM8DVFuLi+pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA4MjIxNzA3MTVaFw0yNTA4MjUyMTQ5MTVaMDMxMTAvBgNV BAMTKENGMjBGRkJCMDQ3MDEyRDg0Mjc4Qjc5QjFBRTRENzhBMjUyRUFDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCT18WrV5ymLtDFQWOweSXAV7 6x42asaWB7eqqihEvilRAjJZzkbFlGimB8pjsdkeQxU4/HQYjtHrmVn4sR2S5H2V 527A7GH7DJhyWjlDLCfv30IRV6ByR1aNp3NrMt/ycxLInv3Xxj2JuVDpYgRuzwF7 fkmp6b8w1VFlQkA+Y9WcxMjCN0CAM5coHd1fbWoeopNZkC7dvlVcoOOP/6Szmg4o rBfjlyDNzue4Kpf2vsNI/Lh5nJXsFPA/YCUuFKZeRQ51WL5/MuqYYUism72fFy9T NwgS1q7yWMQc6QRVhPI15XaKIOHmpld91sO72Sw4XELET5hYCHFv7oEYxaMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyD/uwRwEthCeLebGuTXiiUurBowHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaC39v9pGa0uvhzAzp1Kq2uXS68TPYvi3O3 +kfR3ysMPlzVX1APJEYYcWWFZGDbKZLSKd89Cs8iOJu72dncnO7lh92vhFJI6AkS We5cUYH/Pj9QEwtdvxpdilTf0Tb7VUv7cN5EWI3HxvY5Y12rQRjkUxSmTiRU+CQw /6AGghziUW30McMv3PhyG8PSuEtOjCF63Rar+qdylJN6ezmD/FooZsTJy9ZbhEFA SJ3igAKvnNdP0r87k3cCmAbsoDsfJpll8zWU1tEOjy9pmU4jwv6GV89VL+VK0YFh JnYnYHp99JWer/59Ieojbtdo0qLLj8rGN581j96HYZbmy7wodfo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:24:41 2025 by rpki-client