$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: GQmlrEsUwwnJIXpfWO4JWWuwt37aXeVmYf84fLme8Pc= Subject key identifier: DA:C1:F2:9A:B2:14:F9:64:03:B5:B2:D8:9D:DB:6E:7C:BF:5E:98:2D Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 4D23E13366781A5CBEF98155D737CAF9F750D6E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 051E Signing time: Mon 03 Nov 2025 06:12:12 +0000 Manifest this update: Mon 03 Nov 2025 06:07:12 +0000 Manifest next update: Thu 06 Nov 2025 10:07:12 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 2: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: o+BxBP2QxMZHidUjuIeCR13MZYr32vD4MA1HjzpjD3o=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:23:e1:33:66:78:1a:5c:be:f9:81:55:d7:37:ca:f9:f7:50:d6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Nov 3 06:07:12 2025 GMT Not After : Nov 6 10:07:12 2025 GMT Subject: CN=DAC1F29AB214F96403B5B2D89DDB6E7CBF5E982D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7d:e4:52:05:68:5a:df:ce:1b:ac:17:b0:50: 90:f4:18:96:7b:c4:88:82:a1:69:e9:ea:cd:e0:01: 91:57:53:71:d6:22:64:38:2a:41:cd:b1:f6:54:5a: 42:34:8c:a0:2e:02:b6:a1:4c:e1:4e:16:ff:0d:e6: 94:2e:3d:0b:c3:9c:70:d8:4d:cd:e1:15:59:e6:27: 92:d9:ff:2a:e0:7f:af:89:95:14:e9:ff:b5:c0:a8: 93:a9:8d:e0:d3:05:21:e3:ab:2c:38:c8:63:85:3b: 70:bd:15:f4:cc:ba:17:0a:09:6e:5e:7a:db:4f:18: 10:3e:ef:75:6b:8f:b2:31:19:3f:4d:e9:97:6b:c6: 4e:bb:6b:3f:97:2f:8b:bd:8c:8a:36:7b:e3:23:87: bc:46:46:95:58:64:4a:b3:6e:8d:3c:f6:c5:ba:bd: eb:5d:0f:f4:b9:b8:3d:6e:b6:60:a8:35:80:8d:3e: 09:a7:79:1d:59:6b:75:f4:7e:cf:5a:8e:c2:38:bf: 90:dd:66:bc:75:1e:0c:92:5c:c8:0d:ed:44:81:dd: c2:52:47:fc:7f:40:b2:ef:a1:6d:a2:45:c4:62:21: 71:4e:85:d4:9c:8f:ab:df:dd:47:0b:5f:ac:e9:c8: 8d:63:3a:d8:bd:01:09:e1:a3:c3:d5:11:c9:34:6a: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:F2:9A:B2:14:F9:64:03:B5:B2:D8:9D:DB:6E:7C:BF:5E:98:2D X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7a:90:30:ba:54:39:44:f2:97:36:85:4f:8f:30:be:8b:99: c0:4c:81:56:24:96:85:a5:bb:b7:44:fd:dc:3d:c3:56:fa:66: 98:3d:b5:d9:e5:b6:50:50:a7:d9:30:98:fb:83:4b:09:47:3f: 7c:6f:db:60:67:fa:d2:b3:8e:01:b1:ea:8d:df:c3:1e:88:95: cb:63:92:5c:2c:fd:1b:71:b8:73:56:7a:e6:14:79:c6:f7:ff: 01:8f:fb:bd:ff:40:c0:c7:ba:8f:3c:2b:ee:b3:0b:b2:d9:af: 9e:fb:13:bd:b1:52:e0:29:c9:10:63:3d:4d:cc:f6:c6:93:b8: 65:ef:5e:4e:8d:34:5d:e6:f9:0b:22:26:25:16:69:f0:d6:33: 6b:44:8a:bc:fb:42:d3:d6:ad:30:dd:f2:53:27:9b:33:14:40: 77:22:0e:e1:ba:90:a4:bb:bb:ae:9e:7e:d7:bc:81:c7:a9:ae: 6d:f2:00:28:c7:c0:ba:cf:14:5a:0e:69:65:07:e4:4e:d5:00: 80:73:0e:32:ac:5a:e3:85:d6:fd:df:f2:ae:06:8e:c1:3c:45: f9:5c:66:1a:8f:c0:64:d1:54:8f:dd:92:9d:72:49:41:bb:33: ca:07:79:c0:78:4e:13:98:e4:a3:a2:2e:5c:54:db:87:51:6e: 8b:27:3a:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSPhM2Z4Gly++YFV1zfK+fdQ1uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTExMDMwNjA3MTJaFw0yNTExMDYxMDA3MTJaMDMxMTAvBgNV BAMTKERBQzFGMjlBQjIxNEY5NjQwM0I1QjJEODlEREI2RTdDQkY1RTk4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfeRSBWha384brBewUJD0GJZ7 xIiCoWnp6s3gAZFXU3HWImQ4KkHNsfZUWkI0jKAuArahTOFOFv8N5pQuPQvDnHDY Tc3hFVnmJ5LZ/yrgf6+JlRTp/7XAqJOpjeDTBSHjqyw4yGOFO3C9FfTMuhcKCW5e ettPGBA+73Vrj7IxGT9N6Zdrxk67az+XL4u9jIo2e+Mjh7xGRpVYZEqzbo089sW6 vetdD/S5uD1utmCoNYCNPgmneR1Za3X0fs9ajsI4v5DdZrx1HgySXMgN7USB3cJS R/x/QLLvoW2iRcRiIXFOhdScj6vf3UcLX6zpyI1jOti9AQnho8PVEck0aukNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sHymrIU+WQDtbLYndtufL9emC0wHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd6kDC6VDlE8pc2hU+PML6LmcBMgVYkloWl u7dE/dw9w1b6Zpg9tdnltlBQp9kwmPuDSwlHP3xv22Bn+tKzjgGx6o3fwx6Ilctj klws/RtxuHNWeuYUecb3/wGP+73/QMDHuo88K+6zC7LZr577E72xUuApyRBjPU3M 9saTuGXvXk6NNF3m+QsiJiUWafDWM2tEirz7QtPWrTDd8lMnmzMUQHciDuG6kKS7 u66efte8gceprm3yACjHwLrPFFoOaWUH5E7VAIBzDjKsWuOF1v3f8q4GjsE8Rflc ZhqPwGTRVI/dkp1ySUG7M8oHecB4ThOY5KOiLlxU24dRbosnOu0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:07:43 2025 by rpki-client