$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: 9iAGYeU4gSiJxMLUcGtZ8TQDgRF0U/UshxMXZvzRP3s= Subject key identifier: DD:A3:07:46:74:82:12:8B:BC:E2:7B:15:FF:DA:B3:7B:2C:1D:77:21 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 236FE9A6CA031A0239173E1D0AA15285592424C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 04F7 Signing time: Wed 06 Aug 2025 17:42:13 +0000 Manifest this update: Wed 06 Aug 2025 17:37:13 +0000 Manifest next update: Sat 09 Aug 2025 18:24:13 +0000 Files and hashes: 1: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) 2: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: 5SC6oY6GH8QbZQcqQiYPjlx7bOj00rylpO2EHWEyQRA=) 3: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6f:e9:a6:ca:03:1a:02:39:17:3e:1d:0a:a1:52:85:59:24:24:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Aug 6 17:37:13 2025 GMT Not After : Aug 9 18:24:13 2025 GMT Subject: CN=DDA307467482128BBCE27B15FFDAB37B2C1D7721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:f0:47:e1:ea:88:93:4a:c6:6f:81:ee:cd: 88:1f:08:69:0d:7d:2a:81:53:24:c2:07:80:80:1a: 22:1b:db:36:fc:d0:e6:81:10:af:c2:2f:a7:52:c9: de:5b:23:e2:8a:5b:b5:05:b0:ed:0f:7f:51:a8:39: e0:75:fb:1f:ca:84:40:f2:86:4e:f0:6f:1a:8a:38: e2:80:76:c3:3d:05:27:57:ec:15:e6:34:17:46:c6: 11:e7:fb:43:c8:ea:af:68:cd:68:5c:b7:ac:05:f3: d5:ae:7a:f7:f9:06:26:e1:33:4a:04:c3:89:69:3a: 8a:f2:07:33:de:de:a3:98:6a:49:55:3e:b0:b1:c3: 83:1f:62:40:21:a0:e9:d7:d6:42:c4:f7:3a:38:b0: c5:e0:24:11:6c:f2:a3:ca:a2:66:16:a2:68:de:2f: 5b:0e:75:7a:95:4a:75:ee:67:6e:92:c4:d0:d6:b6: 44:0d:85:9b:6f:cc:08:00:d9:b5:cf:c6:08:3d:e6: fa:38:f2:1d:71:39:39:fb:63:86:16:3a:5a:97:ae: 5b:a3:2b:2d:05:86:57:02:82:26:8e:e4:3d:fe:4d: 6f:67:b6:5d:69:c4:db:2e:8b:da:1e:c5:a5:9c:ed: f8:3b:c8:5f:11:78:ed:63:26:d3:3a:2d:d4:ce:21: 94:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A3:07:46:74:82:12:8B:BC:E2:7B:15:FF:DA:B3:7B:2C:1D:77:21 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6f:eb:09:d0:18:3c:6b:3f:0e:14:ec:a0:89:a6:3a:7d:ab: b8:0e:d9:41:36:b6:da:71:a9:73:e4:ef:db:7a:6b:69:4d:6b: e7:9d:65:42:11:26:a3:14:b5:94:09:18:2d:a0:6c:6a:a2:1b: d6:70:8e:5a:70:a0:10:fa:25:a8:80:3f:85:38:39:d8:10:88: 6c:44:41:82:72:80:fc:1f:57:ad:39:8f:d0:a8:27:89:63:c1: bd:b9:32:73:e9:4c:40:de:13:f6:5b:7c:fe:ca:33:85:71:83: 44:04:d7:90:54:cb:a1:64:44:aa:2a:e3:e4:ec:1a:f4:0b:1f: e6:66:62:8c:9d:11:b3:81:ef:14:a9:0f:30:5c:27:ae:84:23: 0d:82:4c:1a:71:31:3c:3f:cb:64:df:ef:61:37:d7:0a:59:be: 60:ed:01:a9:f8:03:fc:17:15:29:b0:b9:6c:cb:32:87:f3:c0: b2:b5:f8:58:af:ca:23:ed:fa:b3:6b:d3:19:32:3f:52:47:85: 79:39:ba:0f:5b:59:45:79:08:6a:5c:00:ca:31:95:64:dd:f3: 79:aa:1e:ce:43:bf:70:c0:37:2a:44:68:b6:44:9f:32:f9:63: f2:ba:d7:d8:3f:9b:dc:b8:e1:c4:f4:e6:39:0a:15:b5:fe:8a: 66:72:3d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2/ppsoDGgI5Fz4dCqFShVkkJMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTA4MDYxNzM3MTNaFw0yNTA4MDkxODI0MTNaMDMxMTAvBgNV BAMTKEREQTMwNzQ2NzQ4MjEyOEJCQ0UyN0IxNUZGREFCMzdCMkMxRDc3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWevBH4eqIk0rGb4HuzYgfCGkN fSqBUyTCB4CAGiIb2zb80OaBEK/CL6dSyd5bI+KKW7UFsO0Pf1GoOeB1+x/KhEDy hk7wbxqKOOKAdsM9BSdX7BXmNBdGxhHn+0PI6q9ozWhct6wF89Wuevf5BibhM0oE w4lpOoryBzPe3qOYaklVPrCxw4MfYkAhoOnX1kLE9zo4sMXgJBFs8qPKomYWomje L1sOdXqVSnXuZ26SxNDWtkQNhZtvzAgA2bXPxgg95vo48h1xOTn7Y4YWOlqXrluj Ky0FhlcCgiaO5D3+TW9ntl1pxNsui9oexaWc7fg7yF8ReO1jJtM6LdTOIZQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aMHRnSCEou84nsV/9qzeywddyEwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZv6wnQGDxrPw4U7KCJpjp9q7gO2UE2ttpx qXPk79t6a2lNa+edZUIRJqMUtZQJGC2gbGqiG9ZwjlpwoBD6JaiAP4U4OdgQiGxE QYJygPwfV605j9CoJ4ljwb25MnPpTEDeE/ZbfP7KM4Vxg0QE15BUy6FkRKoq4+Ts GvQLH+ZmYoydEbOB7xSpDzBcJ66EIw2CTBpxMTw/y2Tf72E31wpZvmDtAan4A/wX FSmwuWzLMofzwLK1+FivyiPt+rNr0xkyP1JHhXk5ug9bWUV5CGpcAMoxlWTd83mq Hs5Dv3DANypEaLZEnzL5Y/K619g/m9y44cT05jkKFbX+imZyPUA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:54 2025 by rpki-client