$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: H0jYvj9tiecFqWs83HxPkcAHVs/hZ2d8/DpHSll6TLc= Subject key identifier: 05:1C:BE:08:65:5E:68:D2:0E:E3:B1:CD:35:84:BB:D5:FB:10:66:90 Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 6A3A792EED3B4610DF36C1BCA152276DCFD972DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 0487 Signing time: Wed 06 Aug 2025 19:21:19 +0000 Manifest this update: Wed 06 Aug 2025 19:16:19 +0000 Manifest next update: Sun 10 Aug 2025 05:30:19 +0000 Files and hashes: 1: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: Miiyo70b9UEsqSD6s3MKnk488M/yLQdFrFnluWJWC9w=) 2: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: XyH2IkcIEuDvVJJGBcIvIdi7tMCNJuIdQc60W8BGrOU=) 3: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: vOKInhLxJlOKWqSeGNTjcSr3BSgeUcccrmxWZI1o+NI=) 4: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: FejRYWwdsuj+4j3TDWSOjALgozWd2vs6Lc0w2q44EY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3a:79:2e:ed:3b:46:10:df:36:c1:bc:a1:52:27:6d:cf:d9:72:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Aug 6 19:16:19 2025 GMT Not After : Aug 10 05:30:19 2025 GMT Subject: CN=051CBE08655E68D20EE3B1CD3584BBD5FB106690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:69:10:a8:4a:70:d6:24:01:fc:a2:64:16: 78:d2:5f:d6:b0:a5:0d:fd:f2:cf:96:20:24:01:57: cb:3a:e0:90:9d:ac:ec:1b:1d:da:2a:8e:2b:94:c8: e9:2f:90:27:42:a7:4e:ab:04:22:4d:d7:94:25:a1: fb:0b:67:e6:fe:f7:f7:43:f2:3e:17:77:e0:de:90: 2a:3e:5b:23:e7:a2:fe:e5:4a:57:91:be:3b:62:2e: 60:8b:bf:fd:13:32:b7:ae:3c:33:de:6a:76:01:5c: 6d:d9:3e:95:47:ae:c5:68:4d:bf:2b:31:ef:9f:2a: 69:bf:91:08:3f:7e:b8:36:e7:b6:f5:ca:58:18:a6: c8:32:9b:20:6f:dc:6a:bb:a6:10:e7:e5:7f:f2:9f: a2:a3:67:bb:45:40:0b:a2:76:07:3a:bc:1f:6f:d7: 3a:17:a6:63:d3:2b:46:db:b7:7d:3a:b4:21:b9:c0: b4:3e:a7:c7:3a:44:85:01:e6:86:34:8f:da:02:44: 1c:b9:f2:6d:e1:3f:cb:d4:c5:6c:a3:54:6d:04:64: ff:0e:fd:7e:a3:6e:07:e5:f1:ff:e6:37:0e:1c:c6: 22:96:2b:2c:f6:4f:a3:8e:10:1e:fc:78:6a:04:ff: 9e:c4:3e:0d:54:27:f3:bb:56:77:cf:73:a7:8f:8d: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:BE:08:65:5E:68:D2:0E:E3:B1:CD:35:84:BB:D5:FB:10:66:90 X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5c:88:0a:41:5d:3d:5b:33:0c:f7:85:16:52:a8:0c:08:b3: a6:fb:45:0c:e0:f3:7e:a8:55:5a:08:71:e9:1d:ca:f2:e4:ba: c7:30:9e:e7:d8:d2:08:a3:ba:08:76:88:36:02:37:31:f6:e9: da:e7:31:26:0d:80:fe:80:e2:7e:98:47:9b:44:82:9f:90:74: 39:08:45:eb:09:d8:eb:32:9c:0e:d3:7d:62:32:3a:d5:a2:d8: 96:9a:af:b8:34:7f:d3:a3:e6:ab:5c:13:8e:44:c1:bf:5b:4f: 3a:1e:1a:be:e6:49:80:9b:12:f1:e3:43:a8:d0:03:3f:9f:13: 02:8e:a8:68:63:d3:b4:1b:0b:53:a3:35:3f:07:3e:c5:b5:07: 1f:6a:81:25:65:53:52:c2:aa:12:fd:ef:47:10:4e:14:98:83: 01:0f:61:43:7d:56:b4:78:7a:be:d1:23:c1:18:cd:ba:1b:96: 96:b8:cb:34:e1:be:2e:3d:c0:f2:47:f1:b9:f8:1b:eb:e7:14: 93:76:b7:6c:6d:1e:2f:24:58:aa:8b:14:5d:a1:c6:96:58:43: 4e:65:58:e5:64:15:bc:05:de:20:6f:ea:cd:f6:1e:75:52:d9: e4:c8:04:34:24:68:1a:bb:46:46:73:fc:eb:e5:81:21:6d:f0: 5e:7a:d7:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajp5Lu07RhDfNsG8oVInbc/ZctwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNTA4MDYxOTE2MTlaFw0yNTA4MTAwNTMwMTlaMDMxMTAvBgNV BAMTKDA1MUNCRTA4NjU1RTY4RDIwRUUzQjFDRDM1ODRCQkQ1RkIxMDY2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoymkQqEpw1iQB/KJkFnjSX9aw pQ398s+WICQBV8s64JCdrOwbHdoqjiuUyOkvkCdCp06rBCJN15QlofsLZ+b+9/dD 8j4Xd+DekCo+WyPnov7lSleRvjtiLmCLv/0TMreuPDPeanYBXG3ZPpVHrsVoTb8r Me+fKmm/kQg/frg257b1ylgYpsgymyBv3Gq7phDn5X/yn6KjZ7tFQAuidgc6vB9v 1zoXpmPTK0bbt306tCG5wLQ+p8c6RIUB5oY0j9oCRBy58m3hP8vUxWyjVG0EZP8O /X6jbgfl8f/mNw4cxiKWKyz2T6OOEB78eGoE/57EPg1UJ/O7VnfPc6ePjc+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRy+CGVeaNIO47HNNYS71fsQZpAwHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNciApBXT1bMwz3hRZSqAwIs6b7RQzg836o VVoIcekdyvLkuscwnufY0gijugh2iDYCNzH26drnMSYNgP6A4n6YR5tEgp+QdDkI ResJ2OsynA7TfWIyOtWi2Jaar7g0f9Oj5qtcE45Ewb9bTzoeGr7mSYCbEvHjQ6jQ Az+fEwKOqGhj07QbC1OjNT8HPsW1Bx9qgSVlU1LCqhL970cQThSYgwEPYUN9VrR4 er7RI8EYzboblpa4yzThvi49wPJH8bn4G+vnFJN2t2xtHi8kWKqLFF2hxpZYQ05l WOVkFbwF3iBv6s32HnVS2eTIBDQkaBq7RkZz/OvlgSFt8F5615A= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:54 2025 by rpki-client