$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: EmWAeruOMfiwsbVjIcb+H63lDjb7sbTk/8Ex2jy3uFM= Subject key identifier: C1:6B:F9:68:D9:5E:DA:2A:44:AD:DD:E6:04:CE:34:F3:B5:D0:FD:E5 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 433CF4F299E54FB21417722AAE0A1E11FDBC1D10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 04DC Signing time: Fri 06 Jun 2025 20:42:13 +0000 Manifest this update: Fri 06 Jun 2025 20:37:13 +0000 Manifest next update: Tue 10 Jun 2025 00:46:13 +0000 Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: 6WpXa6wKzRmPJdp4Qx/1E/1QTeNXo89PzgqGXfwgL8I=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3c:f4:f2:99:e5:4f:b2:14:17:72:2a:ae:0a:1e:11:fd:bc:1d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Jun 6 20:37:13 2025 GMT Not After : Jun 10 00:46:13 2025 GMT Subject: CN=C16BF968D95EDA2A44ADDDE604CE34F3B5D0FDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:5a:28:29:7c:05:b2:fa:5e:17:c9:8d:b5: fd:d1:57:98:2f:e8:49:00:b0:88:51:b7:01:33:e2: 3f:c8:ab:c2:dd:87:c2:87:ab:c7:c7:02:21:bf:6e: b5:f9:7b:c9:4c:bb:ab:e3:cc:17:5b:48:09:14:0e: 48:4e:13:7b:68:af:72:0b:a5:c1:d2:02:f2:85:88: 4f:f2:45:53:da:aa:3e:46:78:9a:e4:1f:0b:b4:1a: df:2e:a0:71:c5:69:4c:6e:b6:32:e6:1e:9b:b8:4b: de:de:6b:a2:ab:e0:cd:43:d9:23:b5:6e:52:e1:d8: ee:90:15:b6:7e:e7:e8:58:d5:b3:f1:50:b0:6d:b4: 50:bb:ae:08:f1:01:b5:e3:38:f0:80:5d:21:7a:9c: 11:72:ce:29:49:9a:dd:01:cf:43:b0:c9:7a:e8:4a: 7f:fd:fa:8a:07:66:55:df:ec:0f:7d:b3:e1:db:54: ab:ba:39:f4:72:ca:e1:7e:98:2b:06:97:fd:56:49: 69:70:a2:44:4b:45:aa:9a:88:fa:c3:13:65:7e:dd: 69:2f:09:2a:2a:98:61:bc:4e:59:21:76:05:c7:5c: f4:8d:05:15:fd:10:e2:de:6f:8a:1b:ca:18:0d:81: 9f:c4:5f:c1:43:9b:7f:8d:57:5c:97:c6:5f:67:17: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6B:F9:68:D9:5E:DA:2A:44:AD:DD:E6:04:CE:34:F3:B5:D0:FD:E5 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:ea:5a:ea:ad:4a:78:bc:a5:a4:83:e3:62:28:71:d5:5f: 97:6b:0d:2a:e3:4c:07:41:b3:21:23:6b:97:99:90:74:52:12: 6f:bc:01:c2:67:c5:6e:9f:de:37:62:0d:6c:1c:62:81:25:1b: 3e:79:c7:af:4c:69:cd:42:ba:b8:6c:bb:27:dd:ec:e4:1b:4e: 03:a5:7d:1b:8a:98:1d:9b:5f:92:35:d1:c7:30:fc:7e:36:45: 99:09:9f:3e:08:5c:ef:b8:39:df:d0:08:38:1b:8c:06:9b:b7: 90:ac:68:81:b6:73:67:6b:73:ff:68:30:38:0e:e1:9b:05:e7: 26:a1:6a:1d:35:46:dc:cb:2a:93:4e:9c:8d:55:bd:1b:62:e1: 6f:2a:a4:e9:c3:6e:27:fc:85:8c:56:96:87:59:28:4d:15:0d: 4e:35:ef:a0:5f:cc:26:e5:d2:02:fe:5c:08:b2:4f:bf:cd:c7: c2:ea:1e:24:57:66:4e:3c:5c:de:61:4b:c1:40:ab:9c:f3:c7: 43:71:dd:31:80:72:93:a2:e4:0d:8d:3c:d9:b7:10:a0:f7:c1: 06:6c:9c:55:f7:50:a8:04:41:4f:1e:4a:ca:e4:4a:52:02:1d: 77:65:90:43:4e:e5:7a:22:98:e1:9a:77:54:81:11:ac:da:59: 48:de:ca:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzz08pnlT7IUF3IqrgoeEf28HRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTA2MDYyMDM3MTNaFw0yNTA2MTAwMDQ2MTNaMDMxMTAvBgNV BAMTKEMxNkJGOTY4RDk1RURBMkE0NEFERERFNjA0Q0UzNEYzQjVEMEZERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz0VooKXwFsvpeF8mNtf3RV5gv 6EkAsIhRtwEz4j/Iq8Ldh8KHq8fHAiG/brX5e8lMu6vjzBdbSAkUDkhOE3tor3IL pcHSAvKFiE/yRVPaqj5GeJrkHwu0Gt8uoHHFaUxutjLmHpu4S97ea6Kr4M1D2SO1 blLh2O6QFbZ+5+hY1bPxULBttFC7rgjxAbXjOPCAXSF6nBFyzilJmt0Bz0OwyXro Sn/9+ooHZlXf7A99s+HbVKu6OfRyyuF+mCsGl/1WSWlwokRLRaqaiPrDE2V+3Wkv CSoqmGG8TlkhdgXHXPSNBRX9EOLeb4obyhgNgZ/EX8FDm3+NV1yXxl9nF4TnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWv5aNle2ipErd3mBM4087XQ/eUwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqY6lrqrUp4vKWkg+NiKHHVX5drDSrjTAdB syEja5eZkHRSEm+8AcJnxW6f3jdiDWwcYoElGz55x69Mac1Curhsuyfd7OQbTgOl fRuKmB2bX5I10ccw/H42RZkJnz4IXO+4Od/QCDgbjAabt5CsaIG2c2drc/9oMDgO 4ZsF5yahah01RtzLKpNOnI1VvRti4W8qpOnDbif8hYxWlodZKE0VDU4176BfzCbl 0gL+XAiyT7/Nx8LqHiRXZk48XN5hS8FAq5zzx0Nx3TGAcpOi5A2NPNm3EKD3wQZs nFX3UKgEQU8eSsrkSlICHXdlkENO5XoimOGad1SBEazaWUjeylQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:33 2025 by rpki-client