$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: oxWRsddy1oiZoTuCS8soYACD+FEwKOIoIYAaRf/+7dU= Subject key identifier: 35:20:60:84:DF:D4:54:EC:DA:3D:20:A2:4B:4E:82:69:39:08:62:CA Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 7029622845336B1D61D7143BB297B259C92F110F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: CB Signing time: Thu 21 Aug 2025 12:11:25 +0000 Manifest this update: Thu 21 Aug 2025 12:06:25 +0000 Manifest next update: Sun 24 Aug 2025 18:55:25 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: 5JfnYvT8CzPIR3MSHynI6i/vchqqC/4040+FPA0m1FQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:29:62:28:45:33:6b:1d:61:d7:14:3b:b2:97:b2:59:c9:2f:11:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Aug 21 12:06:25 2025 GMT Not After : Aug 24 18:55:25 2025 GMT Subject: CN=35206084DFD454ECDA3D20A24B4E8269390862CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:37:4c:c2:74:4e:8e:a4:ba:ad:67:be:f8: 9e:21:69:00:0e:2c:85:95:65:54:72:8d:2d:ad:86: c8:06:c9:d2:14:7d:dc:ad:cd:3f:20:5a:b4:d7:10: 4d:49:c2:55:5f:18:10:09:2a:05:ce:83:83:1a:9d: 20:5d:e8:ab:d7:a7:7f:3e:83:a5:26:60:5f:ac:b1: 7e:12:a1:c4:d2:9f:07:8f:df:0b:f4:57:fd:3e:1c: 28:dc:f4:ae:75:4f:75:37:49:7e:96:fd:c5:a7:e0: 92:9c:2f:7e:c0:2b:39:ba:46:3c:f3:1b:1c:91:47: 65:d1:05:9f:75:42:56:00:74:4b:38:80:e7:6f:44: a1:85:bc:b1:cc:5e:55:9f:b2:f8:90:ca:7d:33:0b: 57:e4:00:ce:c7:8d:83:20:35:18:c2:20:b4:84:41: 74:1a:6c:7f:a6:52:a2:e4:30:24:ab:4d:33:1b:c0: 6c:df:88:6c:1a:66:71:79:b8:4b:e1:52:eb:99:8e: b1:ff:2c:2c:ce:1d:e7:37:b1:d1:5d:43:14:90:c1: 52:19:f8:11:dc:51:0c:56:8a:be:cd:20:84:0c:68: f6:c9:db:a6:54:79:f2:82:6d:84:50:cc:da:e5:59: 96:59:d4:b0:cf:77:a0:f3:02:26:68:36:df:63:25: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:60:84:DF:D4:54:EC:DA:3D:20:A2:4B:4E:82:69:39:08:62:CA X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c2:15:e6:39:3a:22:42:92:d2:57:bd:a2:a7:aa:2e:cb:51: 21:a0:29:6d:15:c8:5b:47:20:74:d2:03:7e:49:a2:67:69:ff: 2b:59:73:22:ec:4d:ba:1b:e1:19:90:f7:78:5b:7c:58:c1:07: 1a:ff:7f:28:f6:ce:a3:46:d7:2c:bb:83:26:92:d0:67:8b:4f: 0d:00:0e:e9:1b:6f:14:32:6e:38:7a:43:54:70:23:9f:41:ae: f2:98:42:5d:c8:de:57:32:e7:cf:bb:71:56:ed:c8:a0:f2:92: b5:33:10:99:f9:73:69:59:60:60:2f:90:26:9f:91:b9:01:9c: 24:c4:19:96:45:52:2e:05:38:0d:c9:27:c2:6f:41:2e:30:26: a9:43:29:09:3e:f5:ab:ed:21:70:0d:9f:12:50:97:a0:d6:d8: d3:54:7c:d0:7a:68:78:1e:03:58:7f:39:b6:b6:a5:99:6f:e9: 9b:21:4b:75:31:2a:90:d3:92:be:f1:a7:41:88:fa:95:2b:25: 9c:73:d7:82:09:37:14:b6:a5:78:35:89:84:31:9e:2c:9d:82: 66:c9:9f:1a:00:e9:e0:c8:0f:24:bf:f9:a0:24:ac:b1:4a:3b: 32:02:d5:a7:ce:3d:08:9a:ba:2f:b9:19:5e:f6:e3:18:bc:3b: 84:db:e2:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCliKEUzax1h1xQ7speyWckvEQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA4MjExMjA2MjVaFw0yNTA4MjQxODU1MjVaMDMxMTAvBgNV BAMTKDM1MjA2MDg0REZENDU0RUNEQTNEMjBBMjRCNEU4MjY5MzkwODYyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zTdMwnROjqS6rWe++J4haQAO LIWVZVRyjS2thsgGydIUfdytzT8gWrTXEE1JwlVfGBAJKgXOg4ManSBd6KvXp38+ g6UmYF+ssX4SocTSnweP3wv0V/0+HCjc9K51T3U3SX6W/cWn4JKcL37AKzm6Rjzz GxyRR2XRBZ91QlYAdEs4gOdvRKGFvLHMXlWfsviQyn0zC1fkAM7HjYMgNRjCILSE QXQabH+mUqLkMCSrTTMbwGzfiGwaZnF5uEvhUuuZjrH/LCzOHec3sdFdQxSQwVIZ +BHcUQxWir7NIIQMaPbJ26ZUefKCbYRQzNrlWZZZ1LDPd6DzAiZoNt9jJXSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNSBghN/UVOzaPSCiS06CaTkIYsowHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvCFeY5OiJCktJXvaKnqi7LUSGgKW0VyFtH IHTSA35Jomdp/ytZcyLsTbob4RmQ93hbfFjBBxr/fyj2zqNG1yy7gyaS0GeLTw0A DukbbxQybjh6Q1RwI59BrvKYQl3I3lcy58+7cVbtyKDykrUzEJn5c2lZYGAvkCaf kbkBnCTEGZZFUi4FOA3JJ8JvQS4wJqlDKQk+9avtIXANnxJQl6DW2NNUfNB6aHge A1h/Oba2pZlv6ZshS3UxKpDTkr7xp0GI+pUrJZxz14IJNxS2pXg1iYQxniydgmbJ nxoA6eDIDyS/+aAkrLFKOzIC1afOPQiaui+5GV724xi8O4Tb4r0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:39 2025 by rpki-client