$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: 9VvxcoNK67LnbtO9rRvkuqIcyULRl66FaZ0bH2GhpDo= Subject key identifier: DF:AC:8D:41:C5:C1:73:60:62:6E:BD:8F:79:F4:E7:46:E1:61:F7:0D Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 6CC2981937678B19918E1549DB7B6D87DE83AF52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 051A Signing time: Sat 25 Oct 2025 13:12:11 +0000 Manifest this update: Sat 25 Oct 2025 13:07:11 +0000 Manifest next update: Tue 28 Oct 2025 17:17:11 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 2: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: Iq90uUnG00hl/kW5v6TdaXVziW/kJCeuzwjF4gA//WQ=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 17:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c2:98:19:37:67:8b:19:91:8e:15:49:db:7b:6d:87:de:83:af:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Oct 25 13:07:11 2025 GMT Not After : Oct 28 17:17:11 2025 GMT Subject: CN=DFAC8D41C5C17360626EBD8F79F4E746E161F70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:23:b4:53:05:fa:09:7b:d7:3d:4b:06:af: 2e:39:5a:12:b4:f6:17:1f:67:ef:db:db:0c:26:33: 60:e0:9f:3b:1e:8b:91:73:d6:07:8a:ae:05:b4:9f: 08:f6:6d:1d:e9:e3:2c:36:9a:cf:51:c6:ac:8c:85: 0e:dd:30:08:5b:e0:f7:87:5d:96:ef:81:d0:b6:dc: 0c:95:ee:88:4f:1c:21:a8:07:be:c3:dd:c4:d0:c0: fb:a5:2a:65:48:9d:bf:97:78:c5:39:0a:be:e5:1b: 75:dd:10:3f:f6:6b:00:e2:eb:cf:16:69:26:c4:e5: d3:03:70:33:2c:d1:b8:26:b8:e8:74:13:42:64:b8: 05:b5:fe:26:93:97:b6:28:11:3c:4c:e5:fa:72:8b: 51:e2:13:44:54:30:86:1e:78:9a:fd:b9:33:5f:01: 65:7b:fe:11:ff:73:d9:cf:bd:f2:03:91:08:96:8d: 44:94:ca:a6:f0:ce:77:f5:e4:fb:6e:fc:51:8a:1c: 52:f0:e9:d1:de:5f:99:8b:dd:7b:6b:cb:10:f8:1a: c0:a8:94:6d:e6:e2:53:db:c4:9c:ca:d2:36:2c:50: 4b:95:58:76:e6:e6:e7:37:af:90:7b:53:dd:25:36: c7:10:34:5f:f1:5d:58:e3:8d:9a:ac:92:88:f9:35: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AC:8D:41:C5:C1:73:60:62:6E:BD:8F:79:F4:E7:46:E1:61:F7:0D X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:20:52:f3:ee:8b:ac:39:0e:c8:4b:39:11:ac:8a:60:c1:b0: 72:c2:9e:69:36:5a:f4:ec:2c:33:bc:72:9d:01:9a:d7:ad:d9: c3:42:1c:bc:f1:65:3c:95:bf:13:3d:2e:e7:16:13:65:53:9c: 72:64:48:7a:80:09:46:e7:1a:61:18:1d:39:e5:8b:ba:7d:3e: 22:4a:2b:f5:d1:08:0b:dd:7e:a1:fe:90:35:a9:8c:07:0d:4e: 33:65:e3:48:b7:16:3e:8a:48:4d:b5:f3:1c:64:28:e8:97:ac: 4e:06:d3:5a:9c:3b:78:1b:75:47:49:4e:4e:f3:21:e6:79:e7: c0:3c:9a:51:e8:c2:08:84:18:cb:e7:8d:ef:21:dc:e2:47:b3: 63:2f:2f:a8:d8:96:de:1f:66:d1:08:fd:b2:1a:2c:c2:87:69: 64:18:e0:a7:4d:f3:a3:df:0a:1f:75:3e:57:e1:28:55:96:a0: 27:2f:ad:36:c0:a1:fb:32:25:ac:00:da:3a:21:05:78:9d:68: a1:d9:62:5c:18:0b:b2:39:4a:0e:e1:bd:ec:53:93:b7:20:0b: 71:6d:8a:dc:38:42:c5:17:db:4a:80:db:ea:8c:e2:c6:06:25: 44:1f:69:b4:89:5d:30:f4:ca:b7:c2:6e:4f:90:a0:e2:dc:fb: ea:bd:58:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMKYGTdnixmRjhVJ23tth96Dr1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTEwMjUxMzA3MTFaFw0yNTEwMjgxNzE3MTFaMDMxMTAvBgNV BAMTKERGQUM4RDQxQzVDMTczNjA2MjZFQkQ4Rjc5RjRFNzQ2RTE2MUY3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmaCO0UwX6CXvXPUsGry45WhK0 9hcfZ+/b2wwmM2Dgnzsei5Fz1geKrgW0nwj2bR3p4yw2ms9RxqyMhQ7dMAhb4PeH XZbvgdC23AyV7ohPHCGoB77D3cTQwPulKmVInb+XeMU5Cr7lG3XdED/2awDi688W aSbE5dMDcDMs0bgmuOh0E0JkuAW1/iaTl7YoETxM5fpyi1HiE0RUMIYeeJr9uTNf AWV7/hH/c9nPvfIDkQiWjUSUyqbwznf15Ptu/FGKHFLw6dHeX5mL3XtryxD4GsCo lG3m4lPbxJzK0jYsUEuVWHbm5uc3r5B7U90lNscQNF/xXVjjjZqskoj5Nf+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU36yNQcXBc2Bibr2PefTnRuFh9w0wHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEgUvPui6w5DshLORGsimDBsHLCnmk2WvTs LDO8cp0Bmtet2cNCHLzxZTyVvxM9LucWE2VTnHJkSHqACUbnGmEYHTnli7p9PiJK K/XRCAvdfqH+kDWpjAcNTjNl40i3Fj6KSE218xxkKOiXrE4G01qcO3gbdUdJTk7z IeZ558A8mlHowgiEGMvnje8h3OJHs2MvL6jYlt4fZtEI/bIaLMKHaWQY4KdN86Pf Ch91PlfhKFWWoCcvrTbAofsyJawA2johBXidaKHZYlwYC7I5Sg7hvexTk7cgC3Ft itw4QsUX20qA2+qM4sYGJUQfabSJXTD0yrfCbk+QoOLc++q9WDM= -----END CERTIFICATE-----Generated at Mon Oct 27 05:47:16 2025 by rpki-client