$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: lBHNTe3x90w7RcUrQp2jcYwooJTzzd0wqfJK2aIhXLc= Subject key identifier: 2E:07:CD:7D:C2:96:90:E9:8F:7F:46:EB:B7:F9:27:52:BA:DF:10:09 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 594A535C20D6FC619FB8FA8D1E64C5BC1E5441B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 04F4 Signing time: Tue 05 Aug 2025 01:50:54 +0000 Manifest this update: Tue 05 Aug 2025 01:45:54 +0000 Manifest next update: Fri 08 Aug 2025 13:02:54 +0000 Files and hashes: 1: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=) 2: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=) 3: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: iJRK3jhm6mAZXAj4HY8z6rxSeP9/5XH68wYVpaRDIy0=) 4: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=) 5: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4a:53:5c:20:d6:fc:61:9f:b8:fa:8d:1e:64:c5:bc:1e:54:41:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Aug 5 01:45:54 2025 GMT Not After : Aug 8 13:02:54 2025 GMT Subject: CN=2E07CD7DC29690E98F7F46EBB7F92752BADF1009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:0f:54:ae:53:b8:da:42:f8:14:bb:d3:51: 84:de:47:e3:d3:71:25:37:c4:df:74:50:52:58:da: 8b:c2:48:b4:be:c3:4f:aa:89:29:f4:0e:2e:e1:06: ac:13:45:d3:75:51:37:82:14:32:90:96:c6:b3:9b: 69:66:6b:28:72:47:f6:37:ca:e2:f9:51:79:7a:9b: 49:7c:9b:b9:57:e3:bb:a9:63:51:06:39:cc:9c:c3: 00:74:30:4f:dd:77:c6:df:e0:0f:71:f2:5b:5e:2d: bf:cb:77:1e:a7:11:a2:e7:d6:f1:9b:ec:a2:ee:9d: 70:1d:36:e4:18:66:5e:3e:a6:c8:d7:53:88:05:0a: c5:b7:08:ec:15:5a:9a:5d:40:99:c0:3a:c3:34:2c: 49:02:95:22:fe:54:1b:a6:6e:60:ab:95:99:e0:b0: b8:62:53:b8:55:97:f4:b7:6d:fb:86:d9:24:51:d0: 51:3d:a0:4f:6a:7a:77:67:0a:30:0c:bb:ea:24:4b: 34:02:c8:48:a1:f6:20:1d:16:a8:85:cf:89:d1:dc: e4:50:74:7f:30:31:19:ab:dd:f2:3c:03:59:ba:db: 2b:26:d0:69:1b:f6:ad:3a:29:a6:50:1f:52:30:93: dd:61:70:85:fe:b8:26:e8:ef:3c:bb:06:82:ea:3d: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:07:CD:7D:C2:96:90:E9:8F:7F:46:EB:B7:F9:27:52:BA:DF:10:09 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:dc:27:10:f0:61:5d:1f:33:18:f1:30:42:7c:8a:bb:c8: 1b:1d:24:7a:72:68:2f:c9:93:12:8e:6b:f8:ce:19:c2:2f:e0: 5c:8a:ac:ea:fa:dd:18:66:e1:fc:17:07:bc:2c:a4:69:9f:71: a9:67:77:04:40:5d:bb:9e:bf:cb:0b:23:56:c3:6c:ed:78:75: 04:10:b7:9b:5b:76:57:ee:b7:d5:d7:e2:fc:ad:59:c9:4a:f7: 67:1d:2b:07:7b:bc:80:78:3f:48:46:ea:cc:33:81:9e:e9:cf: 0b:92:f1:9f:11:af:b7:2f:d3:81:9c:4c:47:62:89:13:80:8a: 18:99:e9:e8:2e:fe:d9:29:7f:c6:4e:3e:63:86:8f:31:07:3d: 7d:67:1e:95:6d:dd:84:ca:b7:e2:d6:70:5e:88:ad:dc:e8:6d: 98:35:25:44:82:9f:9b:3c:60:e7:b2:c0:47:67:6b:16:40:9a: f2:a4:ef:b4:22:06:89:68:5a:39:5b:a4:00:ed:bf:64:db:4a: 0e:c8:36:32:92:8a:ab:1a:be:66:6a:83:0b:85:7e:bf:ea:a1: 1a:1a:05:c0:26:17:94:d8:a3:2f:ec:76:54:4c:d6:3c:23:aa: 3d:e3:c8:a3:3d:1e:3d:68:e7:22:1f:12:a3:5a:93:94:62:fb: 7d:ea:7a:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUpTXCDW/GGfuPqNHmTFvB5UQbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTA4MDUwMTQ1NTRaFw0yNTA4MDgxMzAyNTRaMDMxMTAvBgNV BAMTKDJFMDdDRDdEQzI5NjkwRTk4RjdGNDZFQkI3RjkyNzUyQkFERjEwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVA9UrlO42kL4FLvTUYTeR+PT cSU3xN90UFJY2ovCSLS+w0+qiSn0Di7hBqwTRdN1UTeCFDKQlsazm2lmayhyR/Y3 yuL5UXl6m0l8m7lX47upY1EGOcycwwB0ME/dd8bf4A9x8lteLb/Ldx6nEaLn1vGb 7KLunXAdNuQYZl4+psjXU4gFCsW3COwVWppdQJnAOsM0LEkClSL+VBumbmCrlZng sLhiU7hVl/S3bfuG2SRR0FE9oE9qendnCjAMu+okSzQCyEih9iAdFqiFz4nR3ORQ dH8wMRmr3fI8A1m62ysm0Gkb9q06KaZQH1Iwk91hcIX+uCbo7zy7BoLqPQj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgfNfcKWkOmPf0brt/knUrrfEAkwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTF3CcQ8GFdHzMY8TBCfIq7yBsdJHpyaC/J kxKOa/jOGcIv4FyKrOr63Rhm4fwXB7wspGmfcalndwRAXbuev8sLI1bDbO14dQQQ t5tbdlfut9XX4vytWclK92cdKwd7vIB4P0hG6swzgZ7pzwuS8Z8Rr7cv04GcTEdi iROAihiZ6egu/tkpf8ZOPmOGjzEHPX1nHpVt3YTKt+LWcF6IrdzobZg1JUSCn5s8 YOeywEdnaxZAmvKk77QiBoloWjlbpADtv2TbSg7INjKSiqsavmZqgwuFfr/qoRoa BcAmF5TYoy/sdlRM1jwjqj3jyKM9Hj1o5yIfEqNak5Ri+33qegY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:44:53 2025 by rpki-client