$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: v08Nrm/BrWQ4aUGYsMIDMk+XAdSv7btkAh9owJeR5G4= Subject key identifier: F5:C0:0C:68:1A:AD:31:98:F3:4F:DD:FC:09:7A:CB:17:7E:A0:0B:1F Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 2C1D2D69AB79C888776E0322A3BDCD95DEF1C43C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 021D Signing time: Fri 18 Apr 2025 11:32:07 +0000 Manifest this update: Fri 18 Apr 2025 11:27:07 +0000 Manifest next update: Mon 21 Apr 2025 20:13:07 +0000 Files and hashes: 1: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: E6zY9IF+LuOZ3BAlN5O+kmO2W8oIfhWG4MJCZRG/08w=) 2: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: dznTYUq/hlOgzr7tq1QdOQNeZPsy/c8Pv0hfpBFl9Oo=) 3: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: HZ2RlTa0ShtMozsl632wUCBjGvdspqNpWVFnePh2zho=) 4: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: k5t3dTLbkf5cumobFfO0JB27WkNENVQf5Ox/fOqEPps=) 5: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: 3yNadH5UObiEmtHARrnQZT+Op/4Y8C9oXLlSYOYGT5c=) 6: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 7: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: WTlSSacZ5ULYcxXFTFm5kh26SThjoGFNgZfcLYf9cxY=) 8: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 0j/OnwOdFjaxB+FdHyREBb9GsfY0gUkr8uOJgHM40w0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 20:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1d:2d:69:ab:79:c8:88:77:6e:03:22:a3:bd:cd:95:de:f1:c4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Apr 18 11:27:07 2025 GMT Not After : Apr 21 20:13:07 2025 GMT Subject: CN=F5C00C681AAD3198F34FDDFC097ACB177EA00B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:0e:e1:ca:8b:3a:e9:18:e6:d6:5c:4a:78: 47:81:21:33:ee:90:7e:15:42:90:07:ad:c6:46:da: e9:f3:a8:81:42:64:a7:43:14:69:7e:88:68:dd:f7: a0:1b:c5:11:dd:75:70:78:e3:0e:d0:84:f7:8a:9a: dc:5e:03:0b:37:3c:39:5c:11:3d:ab:04:36:ca:91: 26:bd:42:c1:56:fb:c5:e7:99:a2:2b:4d:b8:31:8a: 8e:80:5c:5a:c4:60:55:c3:ba:74:14:2e:57:0f:1d: 19:b9:42:74:60:61:f1:88:06:92:e0:80:62:6b:6e: 3e:4a:2d:ef:0e:71:75:f2:39:d5:b1:56:93:26:31: 51:3e:f9:3a:aa:ee:2f:e1:a9:1a:41:3c:ba:fe:53: c3:c8:86:98:e5:07:db:77:95:d9:90:bd:4e:5e:f1: 44:03:11:84:53:0d:31:a9:4f:eb:ce:7e:57:da:16: 40:e0:01:0e:9c:09:9f:bf:cc:2c:fd:c8:b0:97:c8: a1:70:d1:1f:39:68:7d:7f:32:d3:8b:63:e7:65:11: 45:65:6d:89:35:ed:3c:82:39:2e:4d:52:06:11:28: 62:98:ae:eb:80:cc:1e:62:d1:70:1a:8c:7a:38:62: 97:31:49:5c:bb:dd:a2:7f:4b:26:38:eb:01:ab:58: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:0C:68:1A:AD:31:98:F3:4F:DD:FC:09:7A:CB:17:7E:A0:0B:1F X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:ba:e1:bf:d4:a6:2d:a5:cc:45:ab:07:31:c8:4a:26:57: 75:4c:0c:07:25:65:3b:ca:d0:b2:56:0a:1f:7f:37:58:ab:cc: 39:4f:eb:7c:ad:0a:02:02:00:08:40:ff:79:2b:7e:1f:42:b4: 93:d6:b8:05:29:40:ed:03:09:4f:92:03:e0:cc:70:6f:ac:e8: 4b:54:f9:5d:60:b9:66:4f:fc:a8:33:39:c8:02:29:15:8d:2f: 0e:bc:52:dc:7d:ad:64:62:14:94:53:4c:8c:85:f5:01:3c:77: 67:6d:2c:b1:35:1a:64:71:8a:2c:97:4e:3b:3b:5c:f2:77:dc: cd:8b:35:58:e5:0d:05:fd:c3:b6:90:29:3b:c6:f4:01:63:44: 12:db:9a:2b:91:8f:95:34:40:87:f4:52:0a:e8:f9:17:ae:3a: 46:b1:7f:ca:14:4c:29:92:79:3c:7c:15:fc:f2:64:30:e8:09: 4c:1d:b9:a2:cf:48:2b:a3:68:cf:08:60:52:d1:b1:76:3a:00: 29:df:35:5c:1e:81:c2:27:cd:33:29:92:ce:90:29:fb:5c:1b: d7:02:f5:f3:e9:93:da:e7:69:5a:6b:83:7e:c2:b0:f2:66:f4: 6d:75:4d:cd:76:17:42:75:be:4d:6b:20:92:91:c9:d5:5a:6e: 39:15:f7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULB0taat5yIh3bgMio73Nld7xxDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA0MTgxMTI3MDdaFw0yNTA0MjEyMDEzMDdaMDMxMTAvBgNV BAMTKEY1QzAwQzY4MUFBRDMxOThGMzRGRERGQzA5N0FDQjE3N0VBMDBCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSg7hyos66Rjm1lxKeEeBITPu kH4VQpAHrcZG2unzqIFCZKdDFGl+iGjd96AbxRHddXB44w7QhPeKmtxeAws3PDlc ET2rBDbKkSa9QsFW+8XnmaIrTbgxio6AXFrEYFXDunQULlcPHRm5QnRgYfGIBpLg gGJrbj5KLe8OcXXyOdWxVpMmMVE++Tqq7i/hqRpBPLr+U8PIhpjlB9t3ldmQvU5e 8UQDEYRTDTGpT+vOflfaFkDgAQ6cCZ+/zCz9yLCXyKFw0R85aH1/MtOLY+dlEUVl bYk17TyCOS5NUgYRKGKYruuAzB5i0XAajHo4YpcxSVy73aJ/SyY46wGrWOv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9cAMaBqtMZjzT938CXrLF36gCx8wHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHMuuG/1KYtpcxFqwcxyEomV3VMDAclZTvK 0LJWCh9/N1irzDlP63ytCgICAAhA/3krfh9CtJPWuAUpQO0DCU+SA+DMcG+s6EtU +V1guWZP/KgzOcgCKRWNLw68Utx9rWRiFJRTTIyF9QE8d2dtLLE1GmRxiiyXTjs7 XPJ33M2LNVjlDQX9w7aQKTvG9AFjRBLbmiuRj5U0QIf0Ugro+ReuOkaxf8oUTCmS eTx8FfzyZDDoCUwduaLPSCujaM8IYFLRsXY6ACnfNVwegcInzTMpks6QKftcG9cC 9fPpk9rnaVprg37CsPJm9G11Tc12F0J1vk1rIJKRydVabjkV99I= -----END CERTIFICATE-----Generated at Sat Apr 19 12:36:29 2025 by rpki-client