$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: RXTTHRTRC6QZ6lo5xJfeNBDrl9ug2u8PqrTS6kRJnCM= Subject key identifier: D3:F0:3C:4E:27:22:BE:78:E9:0D:19:E7:EC:BB:A2:94:61:7C:33:20 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 58A94412DF80C8EDD203F937A9EEF91D7F3DDA21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0408 Signing time: Fri 07 Nov 2025 12:21:54 +0000 Manifest this update: Fri 07 Nov 2025 12:16:54 +0000 Manifest next update: Mon 10 Nov 2025 17:23:54 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: bjhwCgmzObCMtSetiK2Sr38CykckFMsY5E/uM5oCS+8=) 2: AS23693.roa (hash: e6YJq55VKwIKiknnHEOIon4b/yMDE7iBjib2jqDAxcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 17:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a9:44:12:df:80:c8:ed:d2:03:f9:37:a9:ee:f9:1d:7f:3d:da:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Nov 7 12:16:54 2025 GMT Not After : Nov 10 17:23:54 2025 GMT Subject: CN=D3F03C4E2722BE78E90D19E7ECBBA294617C3320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:43:9e:01:bc:c1:33:46:7d:63:8a:32:f0: 9f:32:4b:c8:7a:02:95:8f:9a:40:38:fe:3f:10:39: 25:7a:ec:2a:46:5b:c7:01:bb:5b:14:43:91:59:a7: 2d:af:e8:73:e0:43:87:95:00:46:2e:83:06:5c:52: 66:20:ef:76:30:d6:5d:c1:c0:09:98:fc:5a:c1:14: 6c:4c:24:f5:28:1e:c3:0d:c6:21:95:d4:86:a4:37: 23:9d:c6:96:73:12:ed:10:f3:be:73:fe:18:e4:3a: 37:ee:89:78:c7:d1:c1:21:dd:45:28:9a:2d:85:ed: 99:9f:26:32:ee:f3:1a:8d:53:59:b8:cd:d7:4e:67: 6e:c8:92:c8:c5:07:3e:d1:f1:94:35:e5:5a:d4:97: b3:f4:9a:2f:21:28:7e:66:b6:3f:78:39:c1:d6:71: 49:22:f6:ae:39:09:80:aa:4c:91:e5:1d:c4:28:93: 04:85:fe:a6:1b:3f:be:20:a9:71:cd:54:91:54:bd: 0d:ec:44:2e:a7:c8:01:f1:bf:09:ee:6e:b8:d6:c9: 17:ab:02:c8:cf:d2:f7:ae:ba:4a:2b:49:ad:94:0b: 83:4c:1c:9f:5d:e2:d2:25:ab:ee:c0:bf:b1:00:ae: f1:18:45:22:2a:d3:9a:ce:21:44:a6:be:13:82:cb: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F0:3C:4E:27:22:BE:78:E9:0D:19:E7:EC:BB:A2:94:61:7C:33:20 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d3:50:cd:94:67:f9:6d:8d:65:af:a0:dc:cc:d7:c4:6f:10: 37:10:ef:1a:ce:28:bf:89:d7:8d:50:9b:39:16:5b:43:8a:44: 44:b2:3c:ad:7d:83:6d:1e:4c:9e:1d:de:00:ad:c0:80:6a:43: 00:ae:7c:86:0f:2a:49:86:ca:27:c5:8e:6b:e2:48:1b:78:2c: 99:63:6e:6e:da:c7:53:78:ec:7c:c7:78:20:3e:c7:07:a7:af: 44:9f:68:93:02:39:64:4c:66:95:37:d5:80:88:23:40:ce:1b: 71:1c:34:a4:cf:b8:57:ba:72:b6:ca:15:06:39:6b:51:2d:41: de:66:86:3a:39:27:ef:f2:c6:1d:60:25:65:c2:75:16:15:fa: 6d:df:00:34:84:7b:ee:51:2f:30:f5:7f:50:48:22:c2:5f:43: 27:a4:91:25:54:80:23:b4:b1:72:07:49:f8:36:ed:50:d7:81: 74:45:70:aa:98:51:e8:fd:68:9e:0d:49:37:d0:40:41:64:bd: a6:79:e9:89:eb:6b:81:31:8b:0f:9b:d6:a5:f7:e4:ae:44:61: e1:a9:0e:60:fb:b8:b0:aa:41:74:9c:b9:3d:a7:80:be:6e:5f: c3:b2:1f:7c:a3:bd:48:13:be:06:70:3c:f6:12:71:1b:0b:4b: ca:d4:56:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKlEEt+AyO3SA/k3qe75HX892iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTExMDcxMjE2NTRaFw0yNTExMTAxNzIzNTRaMDMxMTAvBgNV BAMTKEQzRjAzQzRFMjcyMkJFNzhFOTBEMTlFN0VDQkJBMjk0NjE3QzMzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSeEOeAbzBM0Z9Y4oy8J8yS8h6 ApWPmkA4/j8QOSV67CpGW8cBu1sUQ5FZpy2v6HPgQ4eVAEYugwZcUmYg73Yw1l3B wAmY/FrBFGxMJPUoHsMNxiGV1IakNyOdxpZzEu0Q875z/hjkOjfuiXjH0cEh3UUo mi2F7ZmfJjLu8xqNU1m4zddOZ27IksjFBz7R8ZQ15VrUl7P0mi8hKH5mtj94OcHW cUki9q45CYCqTJHlHcQokwSF/qYbP74gqXHNVJFUvQ3sRC6nyAHxvwnubrjWyRer AsjP0veuukorSa2UC4NMHJ9d4tIlq+7Av7EArvEYRSIq05rOIUSmvhOCy/HpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0/A8TicivnjpDRnn7LuilGF8MyAwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDTUM2UZ/ltjWWvoNzM18RvEDcQ7xrOKL+J 141QmzkWW0OKRESyPK19g20eTJ4d3gCtwIBqQwCufIYPKkmGyifFjmviSBt4LJlj bm7ax1N47HzHeCA+xwenr0SfaJMCOWRMZpU31YCII0DOG3EcNKTPuFe6crbKFQY5 a1EtQd5mhjo5J+/yxh1gJWXCdRYV+m3fADSEe+5RLzD1f1BIIsJfQyekkSVUgCO0 sXIHSfg27VDXgXRFcKqYUej9aJ4NSTfQQEFkvaZ56Ynra4Exiw+b1qX35K5EYeGp DmD7uLCqQXScuT2ngL5uX8OyH3yjvUgTvgZwPPYScRsLS8rUVjA= -----END CERTIFICATE-----Generated at Fri Nov 7 20:38:47 2025 by rpki-client