$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: +Z/CCdydskI03WHxwrSM3zBtaLGUngaOvnQ4nQkceVc= Subject key identifier: D1:44:F4:0E:56:A9:A4:30:F8:20:10:4F:FC:7C:AC:47:74:83:D4:85 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 287AA3D8D6285EB411BEC96A4DF88F28226EA572 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0250 Signing time: Wed 06 Aug 2025 07:42:15 +0000 Manifest this update: Wed 06 Aug 2025 07:37:15 +0000 Manifest next update: Sat 09 Aug 2025 16:17:15 +0000 Files and hashes: 1: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 2: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 3: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 5: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 6: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: sYXPlz+dn1vMyYXA0OGU71Yv5qbSXQwTyJWGqPCONiQ=) 7: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 8: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7a:a3:d8:d6:28:5e:b4:11:be:c9:6a:4d:f8:8f:28:22:6e:a5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Aug 6 07:37:15 2025 GMT Not After : Aug 9 16:17:15 2025 GMT Subject: CN=D144F40E56A9A430F820104FFC7CAC477483D485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:b3:67:c7:b8:b7:3c:07:d2:a2:22:ee:e6: cf:fd:94:05:cd:a6:1f:81:98:81:fc:cd:af:e7:fb: 90:51:c4:ee:66:11:11:c5:30:b5:ce:5d:05:71:cf: cf:93:e6:fc:ed:3d:e4:bf:cc:98:b2:29:be:43:22: c1:85:1f:9a:c9:df:f2:39:fc:1d:5a:bd:42:d5:18: 63:47:ce:7d:72:36:3e:93:bd:fe:e3:06:29:9c:b5: e2:e7:32:89:f8:fa:9b:a9:f3:1c:bf:4c:c0:88:4d: 30:ab:18:33:82:80:89:c7:83:9e:77:c4:f7:09:26: 52:a5:5e:70:05:d9:ea:a5:24:f1:a8:06:65:14:25: 0b:a7:d7:4b:e0:50:04:ad:d8:04:c4:a8:c0:77:ea: a8:80:3b:da:23:81:3e:2f:74:8e:c9:b7:03:e5:d9: bc:03:e1:de:58:03:67:a9:4c:9e:7b:48:db:58:8b: 54:b9:75:98:32:64:c3:75:fe:73:be:0d:74:25:72: d3:e6:14:52:7e:8b:2b:cb:97:36:b0:cd:1d:ce:1a: 32:93:4e:61:ef:a0:3d:2b:5c:f4:ca:22:f3:87:07: da:be:f8:b2:b8:74:86:89:92:04:0f:37:ab:d0:d3: 4d:ab:f7:89:75:87:3f:32:14:bf:a6:2e:b2:e0:45: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:44:F4:0E:56:A9:A4:30:F8:20:10:4F:FC:7C:AC:47:74:83:D4:85 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:af:45:d2:66:36:ca:39:c5:be:15:0a:53:38:b2:88:7c:ba: 17:d5:d6:2f:b0:98:79:46:6e:1b:ca:2c:fd:86:6c:64:30:3b: fd:26:0d:00:ad:1f:08:56:11:40:bc:fc:73:f8:b6:f3:ef:29: b2:12:18:66:90:d4:28:1b:d2:b1:cf:7a:1a:34:51:2d:a4:45: c5:22:95:86:af:02:ca:a0:d0:49:a0:3a:12:d5:d9:d3:5c:16: 88:18:98:3a:77:c1:90:22:dc:23:96:84:bf:88:6b:4e:71:e4: 4b:d6:50:7a:d6:23:ca:16:9c:3d:5c:ef:03:5f:28:16:69:8d: 8c:21:93:d1:b2:28:48:b8:f0:12:bb:37:e3:27:4a:b3:c2:96: 5d:17:66:8a:16:49:f7:3b:67:a2:08:0b:ee:66:a9:a9:d2:f4: a8:8d:a0:13:8e:da:87:0f:74:81:02:8e:9a:8d:75:bb:ec:1c: b3:3f:d0:bb:85:cd:b1:2c:4a:bd:9c:4e:38:eb:56:e5:35:0f: c6:85:79:31:0c:d0:59:bd:43:d4:6d:ee:23:1f:2f:f5:42:15: ee:ff:83:90:c9:25:fb:a4:b1:21:cf:b8:00:c6:fa:58:1c:ea: 6c:19:2d:cb:1d:89:66:fe:71:ca:76:bd:1c:67:62:03:2a:d5: e0:ee:72:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHqj2NYoXrQRvslqTfiPKCJupXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA4MDYwNzM3MTVaFw0yNTA4MDkxNjE3MTVaMDMxMTAvBgNV BAMTKEQxNDRGNDBFNTZBOUE0MzBGODIwMTA0RkZDN0NBQzQ3NzQ4M0Q0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCrNnx7i3PAfSoiLu5s/9lAXN ph+BmIH8za/n+5BRxO5mERHFMLXOXQVxz8+T5vztPeS/zJiyKb5DIsGFH5rJ3/I5 /B1avULVGGNHzn1yNj6Tvf7jBimcteLnMon4+pup8xy/TMCITTCrGDOCgInHg553 xPcJJlKlXnAF2eqlJPGoBmUUJQun10vgUASt2ATEqMB36qiAO9ojgT4vdI7JtwPl 2bwD4d5YA2epTJ57SNtYi1S5dZgyZMN1/nO+DXQlctPmFFJ+iyvLlzawzR3OGjKT TmHvoD0rXPTKIvOHB9q++LK4dIaJkgQPN6vQ002r94l1hz8yFL+mLrLgRdOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UT0DlappDD4IBBP/HysR3SD1IUwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWvRdJmNso5xb4VClM4soh8uhfV1i+wmHlG bhvKLP2GbGQwO/0mDQCtHwhWEUC8/HP4tvPvKbISGGaQ1Cgb0rHPeho0US2kRcUi lYavAsqg0EmgOhLV2dNcFogYmDp3wZAi3COWhL+Ia05x5EvWUHrWI8oWnD1c7wNf KBZpjYwhk9GyKEi48BK7N+MnSrPCll0XZooWSfc7Z6IIC+5mqanS9KiNoBOO2ocP dIECjpqNdbvsHLM/0LuFzbEsSr2cTjjrVuU1D8aFeTEM0Fm9Q9Rt7iMfL/VCFe7/ g5DJJfuksSHPuADG+lgc6mwZLcsdiWb+ccp2vRxnYgMq1eDuckg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:59 2025 by rpki-client