$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: RDcMIBoPyx2WUIy/Yw0D490Z/ntp881WqY4YnxVyvEI= Subject key identifier: 0E:F2:A8:E9:BF:05:9B:0B:AD:68:30:01:81:78:03:29:5E:42:EA:B7 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 1CCDDC535CB5C842C4FC59BD6FA877AAA84097A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 0502 Signing time: Fri 05 Sep 2025 20:41:01 +0000 Manifest this update: Fri 05 Sep 2025 20:36:01 +0000 Manifest next update: Tue 09 Sep 2025 02:20:01 +0000 Files and hashes: 1: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: DfMzs8hkuRsgEApksUHbsXGCBKWASxf4XgO39RfOHhA=) 2: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=) 3: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=) 4: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=) 5: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 02:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cd:dc:53:5c:b5:c8:42:c4:fc:59:bd:6f:a8:77:aa:a8:40:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Sep 5 20:36:01 2025 GMT Not After : Sep 9 02:20:01 2025 GMT Subject: CN=0EF2A8E9BF059B0BAD683001817803295E42EAB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:17:db:21:4a:53:e0:ac:25:58:9e:b9:94: 0d:b6:ff:f9:4e:3b:c7:76:eb:cf:f8:62:39:62:2a: 82:d3:d0:a9:f4:ef:16:fe:56:9a:99:a5:47:b8:0c: 81:d2:6c:b2:3f:5f:c4:03:02:39:a1:6e:ff:04:5a: 78:48:76:01:1a:c0:fb:c2:6f:06:59:c2:65:34:ba: 81:bd:71:f0:1c:de:83:47:6e:c9:80:d2:1c:a5:62: 35:cf:b7:ec:f3:6d:24:15:db:9d:20:9b:c4:97:25: 11:4d:65:57:4b:65:18:2d:1d:20:62:be:23:98:fe: b9:69:d5:49:4e:f4:0d:0a:8d:e4:c3:89:35:60:1a: 05:57:22:3d:41:76:b7:9d:e2:f9:ed:b0:96:d2:e0: a3:01:a7:a6:1e:23:a4:5f:1e:5e:dc:e2:21:29:e3: eb:73:c1:a2:bd:65:0c:44:6b:b6:a9:09:3f:76:aa: aa:cd:9a:c7:9c:d0:17:7f:f7:c2:fb:dd:84:3e:92: a3:ea:7c:8e:1a:5a:a8:83:2c:ab:67:80:27:87:81: 4d:d6:75:3a:74:f0:71:3a:13:94:5d:98:c9:93:2f: 17:8d:c6:26:44:4a:cb:65:b4:6d:cf:3d:63:09:f6: e4:12:2c:88:0c:e9:89:80:8e:f8:db:bf:c5:c8:5a: c2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F2:A8:E9:BF:05:9B:0B:AD:68:30:01:81:78:03:29:5E:42:EA:B7 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:82:67:2f:71:f0:8e:da:fc:1c:77:65:6a:26:cc:ae:32:ff: d9:bb:bf:3f:f7:b1:b1:e1:a3:27:1b:66:95:c9:1c:8c:66:91: aa:bc:3c:a5:d1:ba:ad:09:f2:a7:e1:1e:44:d8:35:5e:b8:4f: c5:5d:44:f1:86:06:c9:00:29:e4:31:79:2a:7b:b5:2a:85:02: ab:09:80:d3:e4:89:7a:2a:53:50:f2:eb:36:79:dc:4a:9a:ed: d0:56:8d:08:49:6e:8c:60:ff:55:45:c2:05:b8:08:c5:bc:aa: 9a:e5:c3:4d:b6:73:7a:d3:2f:78:0d:07:96:c0:99:79:58:25: 72:f9:91:34:fa:20:54:5f:ac:33:82:69:4e:bf:2f:6b:cb:40: 0e:93:40:02:77:8f:bf:58:1e:b8:1c:6f:39:d5:d2:02:1a:b6: 17:15:20:f0:e7:d4:da:66:7f:cf:94:36:13:0d:b6:40:fd:96: 3c:5c:4e:ed:4f:2f:7e:27:58:ae:87:f0:98:3e:37:c0:64:d0: 2c:2a:7d:80:08:20:5d:e4:99:23:df:0a:93:58:51:d9:8d:d7: 6f:d9:89:ee:25:78:dd:9d:5d:a9:7f:19:fa:f8:9b:f8:48:58: 78:2e:c0:bd:f8:6f:7d:e9:b7:62:34:e6:df:cf:1d:3c:79:30: e4:1f:34:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM3cU1y1yELE/Fm9b6h3qqhAl6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTA5MDUyMDM2MDFaFw0yNTA5MDkwMjIwMDFaMDMxMTAvBgNV BAMTKDBFRjJBOEU5QkYwNTlCMEJBRDY4MzAwMTgxNzgwMzI5NUU0MkVBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZxfbIUpT4KwlWJ65lA22//lO O8d268/4YjliKoLT0Kn07xb+VpqZpUe4DIHSbLI/X8QDAjmhbv8EWnhIdgEawPvC bwZZwmU0uoG9cfAc3oNHbsmA0hylYjXPt+zzbSQV250gm8SXJRFNZVdLZRgtHSBi viOY/rlp1UlO9A0KjeTDiTVgGgVXIj1Bdred4vntsJbS4KMBp6YeI6RfHl7c4iEp 4+tzwaK9ZQxEa7apCT92qqrNmsec0Bd/98L73YQ+kqPqfI4aWqiDLKtngCeHgU3W dTp08HE6E5RdmMmTLxeNxiZESstltG3PPWMJ9uQSLIgM6YmAjvjbv8XIWsK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDvKo6b8FmwutaDABgXgDKV5C6rcwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6CZy9x8I7a/Bx3ZWomzK4y/9m7vz/3sbHh oycbZpXJHIxmkaq8PKXRuq0J8qfhHkTYNV64T8VdRPGGBskAKeQxeSp7tSqFAqsJ gNPkiXoqU1Dy6zZ53Eqa7dBWjQhJboxg/1VFwgW4CMW8qprlw022c3rTL3gNB5bA mXlYJXL5kTT6IFRfrDOCaU6/L2vLQA6TQAJ3j79YHrgcbznV0gIathcVIPDn1Npm f8+UNhMNtkD9ljxcTu1PL34nWK6H8Jg+N8Bk0CwqfYAIIF3kmSPfCpNYUdmN12/Z ie4leN2dXal/Gfr4m/hIWHguwL34b33pt2I05t/PHTx5MOQfNNc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:35 2025 by rpki-client