$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: h4inQAUm6AB1PXvn/IJPqn+caxu19MmItqu6bp3T2CU= Subject key identifier: FF:EA:ED:3D:9F:BE:48:00:DA:89:9A:94:39:27:96:74:59:CB:EA:D1 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 76D271195CB2B5967404A2DF553A66DCA52FEE1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0358 Signing time: Sun 20 Jul 2025 08:41:51 +0000 Manifest this update: Sun 20 Jul 2025 08:36:51 +0000 Manifest next update: Wed 23 Jul 2025 19:48:51 +0000 Files and hashes: 1: AS23693.roa (hash: 5MBGmCd0XnCZIiH52hEA5cDRA6awqxeZv5iSASn4P/0=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: DSRH5Y0pJXuynKXYEa5EG6MP7xRXFVf4KlWn9yX9sMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 19:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d2:71:19:5c:b2:b5:96:74:04:a2:df:55:3a:66:dc:a5:2f:ee:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Jul 20 08:36:51 2025 GMT Not After : Jul 23 19:48:51 2025 GMT Subject: CN=FFEAED3D9FBE4800DA899A943927967459CBEAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:a5:0d:7a:93:17:28:1c:78:80:20:c8:36: 42:9b:c9:ec:e1:8d:3f:04:0c:74:fe:dd:ee:f3:75: 91:e8:d5:e6:f6:d0:85:1d:1e:cf:9e:84:31:1e:e0: 9a:7f:d0:99:01:0a:23:14:5d:20:12:3a:2c:ac:86: bb:60:6a:ce:70:3b:90:a2:6b:93:58:7d:aa:ef:c7: 14:5c:0f:d3:6d:2e:67:fc:9e:67:15:31:b9:e8:ec: e2:36:e3:de:11:48:af:b6:c9:2d:12:4a:ac:8a:9b: 8d:78:dd:c3:e7:d7:44:93:df:8b:c1:31:ac:da:d4: d3:b4:90:f8:96:59:8b:fe:aa:d9:82:b4:14:5b:85: 83:0f:e6:8f:0a:fc:04:d9:eb:50:f9:64:b3:f8:b2: e2:0b:bb:08:38:10:61:48:a3:63:91:25:07:c1:3f: 57:b7:8d:fa:c0:78:f8:7f:af:e8:c9:90:45:3a:39: 23:6e:5a:2a:6d:8b:10:68:0e:2c:40:f8:36:c1:45: 8c:04:a6:21:1d:4d:a2:80:87:52:ce:6e:ea:da:f0: ea:e8:fe:9c:1a:02:e2:04:f7:bd:79:5e:82:ad:4b: 74:b0:f7:ca:7c:43:4a:71:f7:11:ee:bc:5f:50:74: 54:e2:71:fd:9c:2b:5e:c9:35:02:ab:00:38:0e:0f: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EA:ED:3D:9F:BE:48:00:DA:89:9A:94:39:27:96:74:59:CB:EA:D1 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6d:3b:48:22:e6:df:e0:9b:ff:75:a8:5a:c1:2d:e1:46:93: e1:8a:52:d9:c7:4c:a6:c3:3e:05:bc:6c:a1:8a:63:50:81:56: 47:51:65:83:92:f7:dd:e9:f4:ad:10:cd:6b:02:d0:fb:a5:7b: 30:6d:66:d0:c6:85:3e:02:a8:d6:c9:6c:fa:8f:d9:cf:a3:8a: eb:a4:61:df:7c:0a:56:3a:51:a2:94:7a:5c:9a:88:0f:82:98: e5:45:08:a3:b6:64:f3:72:67:6b:bb:c8:ce:b7:e4:16:10:70: 14:38:47:11:46:f2:99:c9:88:dc:44:f9:20:17:75:20:e3:11: 1c:2d:c8:39:dd:5d:53:f3:1b:1d:6b:fb:71:33:c6:58:e9:92: a1:52:bb:1b:4a:fe:c2:42:40:dd:09:ec:8c:3a:b0:5c:63:3e: db:55:7f:1d:16:d9:a2:ed:28:e4:8a:df:4f:45:68:0c:05:c4: c1:d9:2e:97:70:c9:ff:bc:a2:6d:e3:e8:24:2a:a4:34:15:e4: 10:49:12:e5:c4:07:cb:42:75:4f:ee:5c:27:0a:db:09:8f:8c: 26:60:4b:26:0c:b9:15:4e:da:0b:99:0d:be:22:ee:0a:5d:26: dc:5a:dc:4d:24:c9:71:6f:43:b1:47:87:6f:b9:e0:dc:a9:80: a5:ee:e5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtJxGVyytZZ0BKLfVTpm3KUv7h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA3MjAwODM2NTFaFw0yNTA3MjMxOTQ4NTFaMDMxMTAvBgNV BAMTKEZGRUFFRDNEOUZCRTQ4MDBEQTg5OUE5NDM5Mjc5Njc0NTlDQkVBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nKUNepMXKBx4gCDINkKbyezh jT8EDHT+3e7zdZHo1eb20IUdHs+ehDEe4Jp/0JkBCiMUXSASOiyshrtgas5wO5Ci a5NYfarvxxRcD9NtLmf8nmcVMbno7OI2494RSK+2yS0SSqyKm4143cPn10ST34vB Maza1NO0kPiWWYv+qtmCtBRbhYMP5o8K/ATZ61D5ZLP4suILuwg4EGFIo2ORJQfB P1e3jfrAePh/r+jJkEU6OSNuWiptixBoDixA+DbBRYwEpiEdTaKAh1LObura8Oro /pwaAuIE9715XoKtS3Sw98p8Q0px9xHuvF9QdFTicf2cK17JNQKrADgOD93HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/+rtPZ++SADaiZqUOSeWdFnL6tEwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZtO0gi5t/gm/91qFrBLeFGk+GKUtnHTKbD PgW8bKGKY1CBVkdRZYOS993p9K0QzWsC0PulezBtZtDGhT4CqNbJbPqP2c+jiuuk Yd98ClY6UaKUelyaiA+CmOVFCKO2ZPNyZ2u7yM635BYQcBQ4RxFG8pnJiNxE+SAX dSDjERwtyDndXVPzGx1r+3EzxljpkqFSuxtK/sJCQN0J7Iw6sFxjPttVfx0W2aLt KOSK309FaAwFxMHZLpdwyf+8om3j6CQqpDQV5BBJEuXEB8tCdU/uXCcK2wmPjCZg SyYMuRVO2guZDb4i7gpdJtxa3E0kyXFvQ7FHh2+54NypgKXu5fA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:34 2025 by rpki-client