$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: I4tWDQbHU+VX0mi9EYazgxJVG30Hp7EQUiHwMkZ8/bM= Subject key identifier: D6:0A:E5:A9:B6:4D:56:0C:EA:CA:7D:79:F4:19:FD:13:55:06:A7:68 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 5007109A100973DBBDEB93BC03EC97726F8D324C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: BD Signing time: Sun 20 Jul 2025 13:11:27 +0000 Manifest this update: Sun 20 Jul 2025 13:06:27 +0000 Manifest next update: Wed 23 Jul 2025 14:51:27 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: /f/hFpwx55MIb4Utvv2KmgbWxTKPRobkBec+CpiuAO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:07:10:9a:10:09:73:db:bd:eb:93:bc:03:ec:97:72:6f:8d:32:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Jul 20 13:06:27 2025 GMT Not After : Jul 23 14:51:27 2025 GMT Subject: CN=D60AE5A9B64D560CEACA7D79F419FD135506A768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:c9:2b:a7:73:0b:89:79:e2:b5:6a:cc:98: be:57:2f:80:ad:a0:73:e5:91:97:b6:3e:2a:0f:c0: ed:67:f2:40:31:82:d3:95:a4:eb:96:78:aa:1a:66: 7f:b2:33:c6:d0:c4:bc:d2:76:50:5e:a4:65:97:39: d6:f3:f6:d2:aa:a9:c4:ca:52:46:70:d7:24:66:4e: 76:04:cf:a7:2a:18:28:80:5d:47:c5:0f:8b:36:c6: e6:3e:a6:d6:26:a4:bd:99:d0:33:99:a0:e6:93:1e: bf:49:ef:ad:8e:7d:39:3e:85:dd:48:59:6e:a2:88: 6f:55:43:98:ea:ba:79:86:d1:51:c4:a1:cf:51:94: 42:a8:39:81:82:86:c1:eb:bb:bb:d9:7c:41:e9:a1: b9:57:41:e1:dd:c6:31:98:90:b4:e0:5f:a0:d5:cd: 81:81:d6:96:d9:95:72:3f:65:6b:92:cb:c4:e3:e5: 57:73:fc:24:a2:58:f3:09:6b:d2:30:06:6b:a2:6e: 78:70:1d:87:8c:fe:2d:da:98:03:23:a3:db:a2:f4: e9:4c:6a:98:32:94:f4:b0:84:13:56:17:7e:4c:67: e3:7e:b3:21:e5:6f:19:b7:21:bb:44:9b:a2:87:db: 74:27:96:f8:a4:c1:0e:12:29:15:40:76:35:07:4f: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:E5:A9:B6:4D:56:0C:EA:CA:7D:79:F4:19:FD:13:55:06:A7:68 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a0:87:76:13:48:58:d4:db:ee:06:58:be:a2:0b:d3:cc:d4: c9:ef:59:df:31:21:3a:16:f1:82:13:5c:2a:90:c2:c0:dc:ce: c2:0d:04:9d:7a:fc:98:e4:17:e4:3e:4f:9d:1d:48:6e:73:31: 2d:3a:80:e1:de:d8:f1:c6:a1:3d:7d:3a:c4:93:37:f0:2e:01: bc:ad:54:39:61:10:c1:87:a1:c0:a7:fa:c1:35:18:ca:78:65: 01:82:2d:44:ce:7f:50:41:57:2f:f5:c9:08:96:29:04:1b:ed: 62:a0:09:2a:d6:b0:6a:41:2c:6a:57:6d:47:89:1d:25:49:18: 95:5e:de:44:6b:01:80:c6:76:da:6e:44:76:1b:ab:5d:65:04: ac:fe:82:77:09:8d:34:2d:b3:d8:d1:f2:37:32:5f:22:a2:c1: ed:8f:11:5d:05:00:70:fd:32:11:0d:af:86:fb:28:92:b5:b3: cf:c6:c0:22:34:57:02:0d:58:b0:6a:9d:88:c2:99:0d:eb:c8: 76:c9:f0:0a:18:c4:50:a3:c4:f9:ff:f8:c9:74:22:83:bf:a1: f0:a4:70:07:df:e8:84:cd:44:36:e9:3b:c3:67:4c:7c:03:94: 12:b1:fd:6a:bd:93:a9:75:77:89:33:6a:1f:0c:c6:90:49:7f: 0b:fe:ba:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAcQmhAJc9u965O8A+yXcm+NMkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA3MjAxMzA2MjdaFw0yNTA3MjMxNDUxMjdaMDMxMTAvBgNV BAMTKEQ2MEFFNUE5QjY0RDU2MENFQUNBN0Q3OUY0MTlGRDEzNTUwNkE3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQskrp3MLiXnitWrMmL5XL4Ct oHPlkZe2PioPwO1n8kAxgtOVpOuWeKoaZn+yM8bQxLzSdlBepGWXOdbz9tKqqcTK UkZw1yRmTnYEz6cqGCiAXUfFD4s2xuY+ptYmpL2Z0DOZoOaTHr9J762OfTk+hd1I WW6iiG9VQ5jqunmG0VHEoc9RlEKoOYGChsHru7vZfEHpoblXQeHdxjGYkLTgX6DV zYGB1pbZlXI/ZWuSy8Tj5Vdz/CSiWPMJa9IwBmuibnhwHYeM/i3amAMjo9ui9OlM apgylPSwhBNWF35MZ+N+syHlbxm3IbtEm6KH23QnlvikwQ4SKRVAdjUHTze7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1grlqbZNVgzqyn159Bn9E1UGp2gwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWgh3YTSFjU2+4GWL6iC9PM1MnvWd8xIToW 8YITXCqQwsDczsINBJ16/JjkF+Q+T50dSG5zMS06gOHe2PHGoT19OsSTN/AuAbyt VDlhEMGHocCn+sE1GMp4ZQGCLUTOf1BBVy/1yQiWKQQb7WKgCSrWsGpBLGpXbUeJ HSVJGJVe3kRrAYDGdtpuRHYbq11lBKz+gncJjTQts9jR8jcyXyKiwe2PEV0FAHD9 MhENr4b7KJK1s8/GwCI0VwINWLBqnYjCmQ3ryHbJ8AoYxFCjxPn/+Ml0IoO/ofCk cAff6ITNRDbpO8NnTHwDlBKx/Wq9k6l1d4kzah8MxpBJfwv+ut0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:26 2025 by rpki-client