$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: JM19pKz7KFASvztD0XPrbHfLVuYBPLvF8I4v+sBH9cM= Subject key identifier: 73:99:71:EE:E2:28:84:91:D4:FF:5C:53:2E:0B:5C:75:95:41:A4:CD Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 0BE435F466EE062ABBCE112AA965692D58ABDE93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: E5 Signing time: Sun 19 Oct 2025 04:31:25 +0000 Manifest this update: Sun 19 Oct 2025 04:26:25 +0000 Manifest next update: Wed 22 Oct 2025 11:33:25 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: H+GcTt4PtcHM4EApt8HGoxj9xesiU6rlXve2jty1B6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e4:35:f4:66:ee:06:2a:bb:ce:11:2a:a9:65:69:2d:58:ab:de:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Oct 19 04:26:25 2025 GMT Not After : Oct 22 11:33:25 2025 GMT Subject: CN=739971EEE2288491D4FF5C532E0B5C759541A4CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:98:7b:8b:8d:61:cc:4e:c7:34:61:10:5c: 39:7d:4e:28:cb:cb:45:c3:d0:e8:40:84:2e:43:53: 23:1a:43:2a:01:e1:19:d7:c1:cd:32:6a:4f:f3:85: c3:fb:ac:04:d3:ba:47:7c:90:de:4f:ca:32:20:ea: 93:29:33:ea:ef:06:8a:8f:30:5c:b0:cd:b8:68:4d: 26:80:d9:34:68:27:16:82:3e:33:7e:7a:da:11:d3: 4c:de:d9:f5:22:1c:17:a7:a1:90:32:5e:91:9b:f4: f2:14:f2:80:4c:26:17:ff:b6:77:be:fc:a0:52:c1: 5b:3f:80:12:d6:51:8c:db:26:7c:18:53:3e:54:2a: 10:48:dc:3e:c5:1c:22:d5:d9:af:1b:fe:f9:05:28: 26:8c:3d:35:de:fc:e7:1e:eb:69:63:d4:2b:05:5a: c5:7c:df:16:f6:71:55:39:4a:06:5a:59:24:a4:a2: b0:27:88:b3:ef:b3:2a:40:5b:dc:05:d1:23:0d:b0: 67:bf:ec:58:e1:40:b3:3c:57:c1:5a:69:ba:51:83: 86:9d:a9:82:ee:40:3f:62:4e:52:41:0a:15:e2:9e: 6d:4b:df:a6:df:e5:d9:6e:47:cb:83:d0:c3:26:57: e8:c9:9c:c2:24:14:dd:e2:76:9d:ba:69:e8:a3:06: 72:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:71:EE:E2:28:84:91:D4:FF:5C:53:2E:0B:5C:75:95:41:A4:CD X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:49:a3:e7:a7:15:69:f1:72:5a:e7:fd:5d:06:a6:c2:93:55: 2c:e5:cb:3d:28:3a:c6:13:55:2a:91:ae:82:31:59:79:11:c6: 4b:af:98:57:14:3c:d5:f7:50:eb:f9:7e:b9:63:3d:24:d9:a8: 30:cd:db:60:cd:46:3f:58:01:c3:4f:6c:7b:5f:50:5f:d9:ff: f8:39:14:ec:4d:ed:9d:63:e6:cd:10:9d:44:00:da:4e:57:15: 57:2a:d4:29:3b:ed:df:7a:e7:90:01:0c:c4:77:2f:21:55:34: 72:88:9e:23:53:c1:02:90:bb:fe:1b:7f:4b:ad:5f:ed:74:e0: 61:3f:19:96:e2:2c:68:c6:b6:ac:5c:fd:d1:dd:e1:74:2b:c0: 09:8d:51:04:02:c6:ec:92:a5:87:22:a4:82:3b:8b:b2:b2:f4: bf:7b:da:29:10:85:9f:7f:e1:5c:fd:a1:78:04:3e:1e:7a:18: bc:ec:9c:73:64:42:27:bb:8d:aa:29:12:f2:31:d8:d3:77:c9: c5:0c:fd:27:df:81:b9:71:ed:bf:8f:13:9a:fe:c8:3f:b0:3e: 5b:e6:04:23:e1:54:d7:02:69:cb:05:fd:82:bc:92:c0:ef:8e: 2c:17:4b:98:d1:b3:6d:51:45:5f:9b:bd:71:b0:e7:71:6a:4e: b9:7d:eb:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+Q19GbuBiq7zhEqqWVpLVir3pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTEwMTkwNDI2MjVaFw0yNTEwMjIxMTMzMjVaMDMxMTAvBgNV BAMTKDczOTk3MUVFRTIyODg0OTFENEZGNUM1MzJFMEI1Qzc1OTU0MUE0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSph7i41hzE7HNGEQXDl9TijL y0XD0OhAhC5DUyMaQyoB4RnXwc0yak/zhcP7rATTukd8kN5PyjIg6pMpM+rvBoqP MFywzbhoTSaA2TRoJxaCPjN+etoR00ze2fUiHBenoZAyXpGb9PIU8oBMJhf/tne+ /KBSwVs/gBLWUYzbJnwYUz5UKhBI3D7FHCLV2a8b/vkFKCaMPTXe/Oce62lj1CsF WsV83xb2cVU5SgZaWSSkorAniLPvsypAW9wF0SMNsGe/7FjhQLM8V8FaabpRg4ad qYLuQD9iTlJBChXinm1L36bf5dluR8uD0MMmV+jJnMIkFN3idp26aeijBnItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc5lx7uIohJHU/1xTLgtcdZVBpM0wHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFJo+enFWnxclrn/V0GpsKTVSzlyz0oOsYT VSqRroIxWXkRxkuvmFcUPNX3UOv5frljPSTZqDDN22DNRj9YAcNPbHtfUF/Z//g5 FOxN7Z1j5s0QnUQA2k5XFVcq1Ck77d9655ABDMR3LyFVNHKIniNTwQKQu/4bf0ut X+104GE/GZbiLGjGtqxc/dHd4XQrwAmNUQQCxuySpYcipII7i7Ky9L972ikQhZ9/ 4Vz9oXgEPh56GLzsnHNkQie7jaopEvIx2NN3ycUM/Sffgblx7b+PE5r+yD+wPlvm BCPhVNcCacsF/YK8ksDvjiwXS5jRs21RRV+bvXGw53FqTrl9628= -----END CERTIFICATE-----Generated at Mon Oct 20 16:53:41 2025 by rpki-client