$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: SaUj5VsZA5fl8RiicOGjN+hW6eCUDfn8j6hRVfXuTeo= Subject key identifier: 97:70:1F:19:A3:90:5A:18:BB:A3:4E:F9:5A:A6:C0:22:EA:30:13:8B Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 7C9C3A59DC5FD844776F7D933240CBAD32BE5265 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: AD Signing time: Sat 14 Jun 2025 15:31:22 +0000 Manifest this update: Sat 14 Jun 2025 15:26:22 +0000 Manifest next update: Wed 18 Jun 2025 00:49:22 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: ZupGbZ0pGSndxyTtrspKxEp1Sqest1DJLSJr+QYyx3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9c:3a:59:dc:5f:d8:44:77:6f:7d:93:32:40:cb:ad:32:be:52:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Jun 14 15:26:22 2025 GMT Not After : Jun 18 00:49:22 2025 GMT Subject: CN=97701F19A3905A18BBA34EF95AA6C022EA30138B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:da:5a:41:e0:99:58:76:a4:be:86:8e:58: 2c:94:ec:97:4c:d1:dd:cc:dc:5f:9f:e6:1f:a1:f7: 1c:be:85:c5:5f:24:cc:4e:10:b1:f1:b0:6a:bd:c0: 1e:23:50:8a:82:55:0f:b8:34:11:f8:17:a9:cc:f2: 44:26:d7:a5:2c:8c:56:45:78:b7:1b:91:6f:7e:71: 8c:02:17:09:96:88:7c:7b:16:34:38:e5:b7:10:fc: f5:10:63:55:8c:cb:1c:06:37:c2:1d:6f:d5:99:fb: 0c:ff:34:32:b6:8b:33:05:04:c9:b1:ba:fc:5f:29: 13:42:be:3a:f3:f2:b7:6d:c9:19:f3:ad:f0:fd:2d: 7a:9a:f7:8b:40:3e:c3:45:8e:f7:e6:e0:1e:af:09: ea:99:50:b2:84:16:d7:18:c2:9f:00:21:d4:57:73: ac:61:bf:d7:1c:a0:e3:5f:ac:4f:9b:33:ec:47:10: 3b:6d:6b:88:0d:c0:f2:18:20:ce:fa:3d:0e:ab:96: 98:ad:8a:42:29:df:32:39:3d:0a:02:dc:c2:b9:ce: f2:9c:c3:04:12:ec:57:de:3c:c1:0e:56:ee:11:8b: 61:c9:a9:6c:c2:b5:f9:fd:f5:d3:9a:1d:b1:dc:a7: ed:8c:09:89:f8:c8:e9:22:92:42:ae:fc:00:fd:44: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:1F:19:A3:90:5A:18:BB:A3:4E:F9:5A:A6:C0:22:EA:30:13:8B X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:cb:d0:eb:ad:4c:75:63:23:d2:f1:5e:d0:7e:a0:c2:62:9d: 12:46:7d:f5:07:c2:fb:36:e8:75:14:42:47:62:17:74:cf:96: e0:99:7d:e6:a2:ca:2a:d6:b8:26:18:97:6a:cf:09:3d:82:23: ae:ff:ed:44:67:f7:37:dc:1a:ca:28:0b:d2:3f:b6:31:cf:f7: 24:8d:65:d3:15:9f:89:0d:06:a0:24:a9:f3:19:1c:c2:34:72: 9d:d2:65:83:e1:24:f6:98:57:ef:2b:3d:6c:44:9b:1b:89:9a: dc:8c:8e:28:f2:30:6a:30:04:36:e6:0c:20:a2:9b:5a:37:61: ec:41:7a:23:d3:a1:bf:c7:6d:a6:d4:e1:16:5b:d6:ca:2b:a5: d4:f4:50:ec:ba:8a:c0:a8:a0:e8:78:c3:76:b6:42:d6:26:5a: 16:2a:19:50:43:1f:95:47:9e:f1:09:05:f3:9b:78:2e:8a:9e: 5b:af:29:92:82:ba:4e:59:6c:26:d9:41:99:d6:8a:e7:8c:73: 34:3f:76:f7:7a:bf:bc:10:04:98:4c:44:a3:b0:ba:60:19:25: f2:16:61:5c:94:2d:0a:83:f4:c2:62:98:ad:35:94:8f:25:90: 8d:2b:ce:7d:2c:e4:fa:54:65:4e:be:dd:18:61:11:81:21:fd: 48:03:52:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJw6Wdxf2ER3b32TMkDLrTK+UmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA2MTQxNTI2MjJaFw0yNTA2MTgwMDQ5MjJaMDMxMTAvBgNV BAMTKDk3NzAxRjE5QTM5MDVBMThCQkEzNEVGOTVBQTZDMDIyRUEzMDEzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGtpaQeCZWHakvoaOWCyU7JdM 0d3M3F+f5h+h9xy+hcVfJMxOELHxsGq9wB4jUIqCVQ+4NBH4F6nM8kQm16UsjFZF eLcbkW9+cYwCFwmWiHx7FjQ45bcQ/PUQY1WMyxwGN8Idb9WZ+wz/NDK2izMFBMmx uvxfKRNCvjrz8rdtyRnzrfD9LXqa94tAPsNFjvfm4B6vCeqZULKEFtcYwp8AIdRX c6xhv9ccoONfrE+bM+xHEDtta4gNwPIYIM76PQ6rlpitikIp3zI5PQoC3MK5zvKc wwQS7FfePMEOVu4Ri2HJqWzCtfn99dOaHbHcp+2MCYn4yOkikkKu/AD9ROPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3AfGaOQWhi7o075WqbAIuowE4swHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/L0OutTHVjI9LxXtB+oMJinRJGffUHwvs2 6HUUQkdiF3TPluCZfeaiyirWuCYYl2rPCT2CI67/7URn9zfcGsooC9I/tjHP9ySN ZdMVn4kNBqAkqfMZHMI0cp3SZYPhJPaYV+8rPWxEmxuJmtyMjijyMGowBDbmDCCi m1o3YexBeiPTob/HbabU4RZb1sorpdT0UOy6isCooOh4w3a2QtYmWhYqGVBDH5VH nvEJBfObeC6KnluvKZKCuk5ZbCbZQZnWiueMczQ/dvd6v7wQBJhMRKOwumAZJfIW YVyULQqD9MJimK01lI8lkI0rzn0s5PpUZU6+3RhhEYEh/UgDUr4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:35:02 2025 by rpki-client