$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: EH9QntmVu0HwiJ/DcMxOLOO1CS1qio/MKapxEQXiaMo= Subject key identifier: 39:B5:24:2C:73:7B:8E:9A:AF:9F:6B:3D:52:8D:11:CA:DF:A4:9C:2F Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 5282BD9D6999BE4859068CE8EBAC04DF1AA29281 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: C5 Signing time: Thu 07 Aug 2025 16:41:26 +0000 Manifest this update: Thu 07 Aug 2025 16:36:26 +0000 Manifest next update: Sun 10 Aug 2025 21:06:26 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: 2OJHZuoJysJcEFXswkLv9oITxdF5bw9ygTh9rQV77QU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:82:bd:9d:69:99:be:48:59:06:8c:e8:eb:ac:04:df:1a:a2:92:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Aug 7 16:36:26 2025 GMT Not After : Aug 10 21:06:26 2025 GMT Subject: CN=39B5242C737B8E9AAF9F6B3D528D11CADFA49C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:a6:04:b0:46:09:bf:b5:75:25:d5:aa:e6: 67:95:49:cc:c1:7c:2a:6d:53:91:3a:51:60:76:f9: a6:49:ba:ee:91:89:d4:66:35:db:33:a3:83:b8:44: 95:33:51:0f:e7:dc:b4:21:f4:4d:67:e7:78:3a:73: f6:45:d1:33:0d:08:0b:bd:1c:0c:d6:13:cd:c9:51: 3e:fe:49:c5:f0:a7:75:dd:b6:cd:07:51:82:81:99: 5e:c6:ec:41:8c:ad:93:23:a6:2c:2c:74:cd:82:fa: b6:e2:b9:eb:3e:39:b3:48:cc:c9:16:64:67:22:6b: 4e:e3:d7:b5:5b:8f:cc:ba:34:e6:f0:dc:7c:10:a3: 69:f7:df:94:ab:fa:da:88:0e:bf:b7:23:51:5b:78: e7:a6:e6:bc:5d:20:fa:0f:e1:f3:2a:2b:22:df:e1: 01:47:7c:74:43:1c:e8:05:90:4a:a7:c2:5d:a0:d5: 40:c3:d4:45:f7:08:f0:01:9a:80:8c:da:35:90:4b: f2:e2:c2:07:8e:98:a2:4f:38:72:49:17:c3:e2:b0: 26:24:ca:b0:7b:5b:d1:d4:1d:ba:1e:94:94:9a:fc: 55:62:26:78:b3:ba:b6:a7:55:12:bb:0c:3c:33:1b: cc:1e:4f:f9:c4:ed:54:b0:33:1c:61:5a:8f:72:bc: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B5:24:2C:73:7B:8E:9A:AF:9F:6B:3D:52:8D:11:CA:DF:A4:9C:2F X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9d:e9:9f:83:9b:27:2e:42:44:36:b6:12:a4:cd:ce:b8:84: 2e:a0:d2:6f:9a:ee:8d:3b:d9:f0:99:d8:5b:5e:d4:dc:6c:bf: 9c:3f:ad:49:36:4f:03:a9:be:c4:0d:b6:96:1f:12:27:c0:b0: 08:9a:c3:c0:3a:2e:c8:8c:e7:93:52:7b:bf:de:4c:cb:f7:0d: 63:1c:c4:51:46:32:19:11:d0:91:94:97:84:e9:e4:e0:8c:09: 50:30:a2:59:75:18:ae:18:25:c7:45:7b:bf:ac:b7:36:13:fd: 92:cd:15:a9:0f:02:b6:cc:fa:5d:88:7b:af:24:09:77:fb:48: d0:fa:d2:72:38:9a:74:38:16:46:2a:4f:d0:ef:18:00:92:99: a8:ff:27:74:c1:20:34:b4:7f:8e:84:89:55:ab:21:36:fc:c4: 9e:d7:e3:df:06:5c:4c:1d:16:9e:ba:6f:0e:ee:71:70:86:8e: c0:2e:50:11:bd:fd:2e:27:8f:c8:54:7f:44:82:ff:97:a3:2a: 0f:dc:6f:4b:65:35:f2:7b:6a:cd:ce:b7:7e:1b:ce:45:20:2e: b9:78:e3:3a:3e:ed:14:52:93:17:d2:12:56:6f:9d:00:89:a3: b2:43:2d:dc:52:51:d2:f1:6d:b9:30:ee:e6:48:27:a9:e6:2e: 56:0b:38:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUoK9nWmZvkhZBozo66wE3xqikoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA4MDcxNjM2MjZaFw0yNTA4MTAyMTA2MjZaMDMxMTAvBgNV BAMTKDM5QjUyNDJDNzM3QjhFOUFBRjlGNkIzRDUyOEQxMUNBREZBNDlDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTy6YEsEYJv7V1JdWq5meVSczB fCptU5E6UWB2+aZJuu6RidRmNdszo4O4RJUzUQ/n3LQh9E1n53g6c/ZF0TMNCAu9 HAzWE83JUT7+ScXwp3Xdts0HUYKBmV7G7EGMrZMjpiwsdM2C+rbiues+ObNIzMkW ZGcia07j17Vbj8y6NObw3HwQo2n335Sr+tqIDr+3I1FbeOem5rxdIPoP4fMqKyLf 4QFHfHRDHOgFkEqnwl2g1UDD1EX3CPABmoCM2jWQS/LiwgeOmKJPOHJJF8PisCYk yrB7W9HUHboelJSa/FViJnizuranVRK7DDwzG8weT/nE7VSwMxxhWo9yvKP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObUkLHN7jpqvn2s9Uo0Ryt+knC8wHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCd6Z+DmycuQkQ2thKkzc64hC6g0m+a7o07 2fCZ2Fte1Nxsv5w/rUk2TwOpvsQNtpYfEifAsAiaw8A6LsiM55NSe7/eTMv3DWMc xFFGMhkR0JGUl4Tp5OCMCVAwoll1GK4YJcdFe7+stzYT/ZLNFakPArbM+l2Ie68k CXf7SND60nI4mnQ4FkYqT9DvGACSmaj/J3TBIDS0f46EiVWrITb8xJ7X498GXEwd Fp66bw7ucXCGjsAuUBG9/S4nj8hUf0SC/5ejKg/cb0tlNfJ7as3Ot34bzkUgLrl4 4zo+7RRSkxfSElZvnQCJo7JDLdxSUdLxbbkw7uZIJ6nmLlYLOHU= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:40 2025 by rpki-client