$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: y/YMX9seiA1DrhufgTedCYVAfQbz56KTgatjEwF/h9I= Subject key identifier: 9C:13:80:36:47:23:39:C5:F2:46:0A:18:06:FC:C2:2F:6C:5C:10:0F Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 51A92258F41D961E249F1CD5187A9833B707CE79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 04FD Signing time: Wed 20 Aug 2025 09:02:13 +0000 Manifest this update: Wed 20 Aug 2025 08:57:13 +0000 Manifest next update: Sat 23 Aug 2025 14:35:13 +0000 Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: ZhEUfuPbNUVTe1WvwlGQtT4sXYmuJTZpmdvNtcAawQM=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 14:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a9:22:58:f4:1d:96:1e:24:9f:1c:d5:18:7a:98:33:b7:07:ce:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Aug 20 08:57:13 2025 GMT Not After : Aug 23 14:35:13 2025 GMT Subject: CN=9C138036472339C5F2460A1806FCC22F6C5C100F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:49:b0:83:2a:fe:02:5d:fc:3a:ba:34:25: bc:2e:71:83:f1:36:f5:a3:71:be:67:86:ee:ef:f3: 3e:ae:32:e2:f3:91:60:94:08:20:17:8a:30:00:c4: b3:84:42:b5:ae:bc:19:9e:53:87:8c:05:12:56:91: a6:80:8f:7b:27:80:9a:47:59:9b:f2:76:0b:fa:ae: 4c:e5:a1:9e:f6:5e:45:d4:76:f9:e6:58:de:9c:45: 9f:e5:48:0f:83:f8:d5:3c:d6:df:fd:4b:0c:00:6e: 36:95:eb:0f:32:88:2a:70:50:02:5e:d6:ab:1f:78: 23:2a:3d:2f:62:29:ad:40:e4:21:b3:b9:27:e8:0c: c9:54:37:cb:37:fa:9e:33:95:fa:35:0c:cd:46:3a: 28:58:6f:c1:b8:47:13:8a:bd:d0:89:85:a0:b1:5c: 9f:3c:1c:63:3f:87:11:d2:69:e6:a8:8f:f4:f6:30: b3:19:30:e8:a9:e3:28:71:cd:1e:07:fe:5c:62:1a: 43:28:ff:0c:41:5f:7b:9e:2f:ce:6e:0c:40:bb:0a: 18:3b:df:c5:17:7c:1a:46:5f:eb:2c:69:02:09:59: f7:0e:54:91:15:79:7a:09:9c:46:3a:3e:a0:6f:5e: bb:e9:7c:55:4c:24:e5:46:5c:06:13:65:2c:4e:80: 95:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:13:80:36:47:23:39:C5:F2:46:0A:18:06:FC:C2:2F:6C:5C:10:0F X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b7:a9:4d:a9:0e:37:6a:5d:78:45:98:2f:11:c6:af:4a:7c: 94:cb:13:42:f3:18:2d:d4:27:59:6b:e4:87:76:a7:b5:b8:c4: 40:ea:06:ff:dd:93:7d:c4:76:0f:b9:aa:ab:55:76:04:e8:30: 67:f7:2a:d2:d5:ca:53:d4:6a:ac:07:7c:b2:ad:47:ce:a6:d5: 94:4f:e7:68:cb:ca:ed:2a:4e:e8:36:fe:a5:e3:8d:89:8d:e4: 30:ef:b2:b1:6c:fc:c6:1d:65:35:dc:5b:aa:b0:d4:34:29:0a: 76:96:d8:7f:73:5e:b4:91:6a:2b:c2:c0:51:3d:e1:f8:06:a6: a7:ae:19:09:33:17:be:06:41:c3:7e:6c:0e:33:02:1b:4a:ce: 83:1e:8c:39:49:38:eb:c3:94:fa:88:22:fe:e0:05:81:40:52: d4:26:3f:a7:29:96:15:84:81:5f:f6:b8:19:2f:d5:dd:13:aa: 81:a0:70:2a:40:b0:ea:2b:70:39:fa:78:75:cd:9a:50:cc:7c: ca:6a:09:42:33:1d:b1:6f:ad:5c:83:9b:f9:97:03:d3:c6:11: 9f:94:c6:54:c3:ef:3b:6d:6b:39:35:35:1c:4c:67:5e:98:aa: 25:a1:aa:20:9f:65:b9:38:90:22:37:c7:bd:36:63:be:44:fd: 11:ad:31:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUakiWPQdlh4knxzVGHqYM7cHznkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTA4MjAwODU3MTNaFw0yNTA4MjMxNDM1MTNaMDMxMTAvBgNV BAMTKDlDMTM4MDM2NDcyMzM5QzVGMjQ2MEExODA2RkNDMjJGNkM1QzEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuUmwgyr+Al38Oro0JbwucYPx NvWjcb5nhu7v8z6uMuLzkWCUCCAXijAAxLOEQrWuvBmeU4eMBRJWkaaAj3sngJpH WZvydgv6rkzloZ72XkXUdvnmWN6cRZ/lSA+D+NU81t/9SwwAbjaV6w8yiCpwUAJe 1qsfeCMqPS9iKa1A5CGzuSfoDMlUN8s3+p4zlfo1DM1GOihYb8G4RxOKvdCJhaCx XJ88HGM/hxHSaeaoj/T2MLMZMOip4yhxzR4H/lxiGkMo/wxBX3ueL85uDEC7Chg7 38UXfBpGX+ssaQIJWfcOVJEVeXoJnEY6PqBvXrvpfFVMJOVGXAYTZSxOgJVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBOANkcjOcXyRgoYBvzCL2xcEA8wHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq3qU2pDjdqXXhFmC8Rxq9KfJTLE0LzGC3U J1lr5Id2p7W4xEDqBv/dk33Edg+5qqtVdgToMGf3KtLVylPUaqwHfLKtR86m1ZRP 52jLyu0qTug2/qXjjYmN5DDvsrFs/MYdZTXcW6qw1DQpCnaW2H9zXrSRaivCwFE9 4fgGpqeuGQkzF74GQcN+bA4zAhtKzoMejDlJOOvDlPqIIv7gBYFAUtQmP6cplhWE gV/2uBkv1d0TqoGgcCpAsOorcDn6eHXNmlDMfMpqCUIzHbFvrVyDm/mXA9PGEZ+U xlTD7zttazk1NRxMZ16YqiWhqiCfZbk4kCI3x702Y75E/RGtMeA= -----END CERTIFICATE-----Generated at Thu Aug 21 06:53:22 2025 by rpki-client