$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: WoW8HpZ5XU8uZfzUAuZCTwp52WOXYW43I2ygeD27OY4= Subject key identifier: 87:BA:AD:A9:C8:04:73:63:2B:DA:22:6A:A6:4A:92:AD:78:A4:61:40 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 54B74E29F30425F0820404D074457AF9F74420CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0235 Signing time: Sat 07 Jun 2025 04:32:12 +0000 Manifest this update: Sat 07 Jun 2025 04:27:12 +0000 Manifest next update: Tue 10 Jun 2025 10:43:12 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 2: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 3: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 4: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 5: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 6: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 7: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 8: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: GZYDk5shr5x8O6J3xoCNvP2OSfGZxwuAQj/eRLi6GIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b7:4e:29:f3:04:25:f0:82:04:04:d0:74:45:7a:f9:f7:44:20:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Jun 7 04:27:12 2025 GMT Not After : Jun 10 10:43:12 2025 GMT Subject: CN=87BAADA9C80473632BDA226AA64A92AD78A46140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:11:f4:60:ee:3d:ea:95:d7:24:75:fa:38: 20:3b:78:ad:77:d1:2f:1f:67:e0:ba:78:51:7a:1b: 9b:ad:14:6a:80:19:11:7f:a2:37:41:38:3b:df:c0: c2:e3:b9:5c:0c:5c:aa:4a:8c:8d:ed:35:71:73:29: 6d:d9:9a:8e:a3:b3:b0:90:0c:8f:d9:cb:fa:0d:f2: d7:3f:0e:b5:36:fe:b9:12:5f:2a:98:74:d3:cf:f0: a9:67:a9:07:58:d9:31:86:36:45:c9:d0:4b:ae:f0: 0e:02:19:e4:31:35:8d:6b:83:f7:5b:98:ea:1d:44: 51:56:6a:e4:52:92:cd:7a:0c:35:44:42:ee:b6:fd: 78:6e:c9:3c:73:4f:90:ab:0b:1b:4c:d7:38:89:a7: 07:a2:b0:1a:d0:e4:1b:ef:93:00:c1:1a:30:cf:5f: 99:f3:1b:92:e1:68:25:0d:93:26:90:b9:b5:d8:2a: f4:ec:8e:ea:7e:0a:2a:c0:d3:d4:a6:a3:9d:9b:cb: f0:17:05:8a:e2:cf:9e:01:f2:d3:13:29:e9:69:57: e2:4a:e5:7f:b3:61:cc:7b:76:bd:6f:5d:79:fc:43: 22:c4:7f:85:a5:bc:18:2e:67:45:a4:ac:5f:6c:2f: 3e:11:93:ab:ce:c8:5d:34:f8:98:3a:a3:8e:d6:e2: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:AD:A9:C8:04:73:63:2B:DA:22:6A:A6:4A:92:AD:78:A4:61:40 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:00:0a:7c:00:e7:2e:25:d7:bb:0a:0c:54:19:59:c2:c7:0d: c5:c8:32:e5:84:31:ac:f3:72:82:f1:15:71:90:f4:7e:2f:45: 60:da:dd:7f:f5:96:52:c3:6b:f5:4e:c7:28:fc:58:5b:6d:a3: 59:65:eb:52:b6:0d:fc:9f:77:8b:ac:df:10:f8:8e:40:88:50: 1e:5f:44:5e:e4:ee:a9:1a:63:87:2c:bc:0d:2f:91:2b:2d:7c: 07:a9:0f:0d:bd:1d:a1:66:84:06:a9:75:27:8e:58:04:0c:da: 26:77:0f:0f:76:a3:3d:47:4e:ae:85:ca:b8:0b:e2:79:09:8f: 59:4d:ad:d6:15:2d:8f:7d:d4:9e:76:b3:bf:e8:b1:8f:2e:49: d1:28:c7:ac:88:01:b0:d3:c3:73:31:4f:08:f2:cb:6d:92:23: 1a:0f:28:9d:21:ca:c2:17:2f:21:b7:79:2e:e5:0d:34:60:fb: 92:43:eb:b4:66:44:e3:71:e7:ac:c4:4d:65:a9:5d:b7:b4:9b: 60:60:04:53:d7:f4:62:e9:69:05:6b:8f:30:ae:d6:5d:5a:fc: 68:c3:0c:95:e5:1f:8b:80:cc:e0:b7:03:11:b7:8b:8e:2d:cb: 12:f4:d4:11:2f:5f:97:62:e9:bf:15:d3:15:30:b0:56:59:ce: 24:67:ed:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLdOKfMEJfCCBATQdEV6+fdEIMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA2MDcwNDI3MTJaFw0yNTA2MTAxMDQzMTJaMDMxMTAvBgNV BAMTKDg3QkFBREE5QzgwNDczNjMyQkRBMjI2QUE2NEE5MkFENzhBNDYxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uBH0YO496pXXJHX6OCA7eK13 0S8fZ+C6eFF6G5utFGqAGRF/ojdBODvfwMLjuVwMXKpKjI3tNXFzKW3Zmo6js7CQ DI/Zy/oN8tc/DrU2/rkSXyqYdNPP8KlnqQdY2TGGNkXJ0Euu8A4CGeQxNY1rg/db mOodRFFWauRSks16DDVEQu62/XhuyTxzT5CrCxtM1ziJpweisBrQ5BvvkwDBGjDP X5nzG5LhaCUNkyaQubXYKvTsjup+CirA09Smo52by/AXBYriz54B8tMTKelpV+JK 5X+zYcx7dr1vXXn8QyLEf4WlvBguZ0WkrF9sLz4Rk6vOyF00+Jg6o47W4tGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7qtqcgEc2Mr2iJqpkqSrXikYUAwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcACnwA5y4l17sKDFQZWcLHDcXIMuWEMazz coLxFXGQ9H4vRWDa3X/1llLDa/VOxyj8WFtto1ll61K2Dfyfd4us3xD4jkCIUB5f RF7k7qkaY4csvA0vkSstfAepDw29HaFmhAapdSeOWAQM2iZ3Dw92oz1HTq6FyrgL 4nkJj1lNrdYVLY991J52s7/osY8uSdEox6yIAbDTw3MxTwjyy22SIxoPKJ0hysIX LyG3eS7lDTRg+5JD67RmRONx56zETWWpXbe0m2BgBFPX9GLpaQVrjzCu1l1a/GjD DJXlH4uAzOC3AxG3i44tyxL01BEvX5di6b8V0xUwsFZZziRn7as= -----END CERTIFICATE-----Generated at Sun Jun 8 06:35:57 2025 by rpki-client