$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: OYe8qxEXpsFT+V/gOqEwWKphEvukc5M1Ko84iLI4/E0= Subject key identifier: 16:C0:1C:BB:27:56:38:DE:07:9A:05:58:7B:7A:01:6B:87:3F:47:7B Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 1241CFC36A8BD3A4F843438F1953FEC5134AC6D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 025D Signing time: Fri 05 Sep 2025 09:02:11 +0000 Manifest this update: Fri 05 Sep 2025 08:57:11 +0000 Manifest next update: Mon 08 Sep 2025 14:13:11 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 2: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: K3nzamO/yGuO0jHV39y/3djD8ZWu+p3XBAMrDjtO9/8=) 4: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: bxMqQdmLP5iAIyO7Ji4m+VKUe6lx9ze2fk4so2/7lgk=) 5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 6: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 7: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 8: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:41:cf:c3:6a:8b:d3:a4:f8:43:43:8f:19:53:fe:c5:13:4a:c6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Sep 5 08:57:11 2025 GMT Not After : Sep 8 14:13:11 2025 GMT Subject: CN=16C01CBB275638DE079A05587B7A016B873F477B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:4b:a5:61:48:fa:a8:f1:d9:0d:18:e7:bf: 5c:db:93:00:ee:f9:b3:31:c2:27:58:45:6f:43:27: e9:62:f9:43:21:bc:13:3b:26:b4:87:f0:b1:1b:2e: 9c:35:03:b6:5d:0c:28:e8:77:3f:61:df:12:1f:b3: 73:5a:7f:c1:2c:a8:21:cf:90:d8:7e:72:e2:25:a7: f6:0f:f3:ec:05:96:17:68:a0:dd:9d:0c:5b:55:07: 6c:f0:ba:6f:41:6a:88:b1:18:a0:7d:aa:05:35:da: e0:f4:6b:34:d7:3e:89:38:95:da:95:50:ed:ef:f9: 15:99:bf:c8:52:d6:01:d9:ca:d6:9f:b2:62:27:9e: a1:62:79:b9:09:c9:a9:74:97:a4:c9:89:66:e7:f7: de:74:31:11:77:87:75:67:af:b6:da:08:42:0b:98: eb:f9:70:67:35:0e:4b:18:24:b9:df:38:c6:f5:17: 57:b7:b7:67:a6:9e:d3:e6:08:f6:7f:e9:20:25:a6: 55:74:1b:c1:89:70:c4:7d:e4:e8:4d:69:d4:09:6f: 4b:28:c0:68:ca:ad:47:41:13:23:13:3d:00:71:90: c2:96:35:fe:97:20:cc:44:b5:ad:26:4d:e6:8b:38: 62:36:63:b7:bb:7b:bc:5b:d0:8f:f4:c2:2c:00:ce: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:1C:BB:27:56:38:DE:07:9A:05:58:7B:7A:01:6B:87:3F:47:7B X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:5b:5a:fa:04:0e:f9:1d:ab:79:3a:b2:95:15:d3:10:6c: 37:24:2b:84:4a:41:cf:52:f8:77:ef:84:11:39:9e:6b:94:53: ce:a4:8f:ce:04:07:ec:c9:10:b4:6a:a3:29:1b:84:72:cb:b4: 17:a5:3c:12:82:30:2e:62:a7:56:85:d1:88:98:eb:d5:66:fa: 70:ae:f0:0d:26:16:f1:38:90:0d:19:07:42:34:9a:78:56:2d: 20:bf:a7:b7:4d:e0:a1:d6:9a:c0:fb:f9:bd:8a:70:1f:6f:05: 6e:33:df:8b:5e:ec:81:f9:1b:79:e4:51:c1:41:ac:19:30:05: 70:e6:27:02:64:e0:b2:67:b2:99:67:22:f2:4b:d9:9d:54:78: 82:01:3f:2c:2f:ae:ca:6c:f5:ee:9d:ae:81:97:f0:79:87:c0: 3b:c3:31:e2:da:eb:ab:75:30:e7:f6:fc:21:7b:8c:0a:e6:b6: 8d:f6:31:1c:ed:f1:34:4b:ee:70:14:a1:46:6a:7a:56:9a:63: 86:4f:e5:9a:05:61:59:a1:6b:c9:6c:39:c5:b9:ce:5c:e8:ab: 1b:98:1a:e1:eb:45:2d:d6:08:a0:3c:38:a9:5f:3c:1d:7d:4f: d6:07:44:80:1e:61:e5:19:3b:24:d1:f0:da:56:d0:ad:14:de: 93:4b:2e:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkHPw2qL06T4Q0OPGVP+xRNKxtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA5MDUwODU3MTFaFw0yNTA5MDgxNDEzMTFaMDMxMTAvBgNV BAMTKDE2QzAxQ0JCMjc1NjM4REUwNzlBMDU1ODdCN0EwMTZCODczRjQ3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSEulYUj6qPHZDRjnv1zbkwDu +bMxwidYRW9DJ+li+UMhvBM7JrSH8LEbLpw1A7ZdDCjodz9h3xIfs3Naf8EsqCHP kNh+cuIlp/YP8+wFlhdooN2dDFtVB2zwum9BaoixGKB9qgU12uD0azTXPok4ldqV UO3v+RWZv8hS1gHZytafsmInnqFiebkJyal0l6TJiWbn9950MRF3h3Vnr7baCEIL mOv5cGc1DksYJLnfOMb1F1e3t2emntPmCPZ/6SAlplV0G8GJcMR95OhNadQJb0so wGjKrUdBEyMTPQBxkMKWNf6XIMxEta0mTeaLOGI2Y7e7e7xb0I/0wiwAziWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsAcuydWON4HmgVYe3oBa4c/R3swHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGT0W1r6BA75Hat5OrKVFdMQbDckK4RKQc9S +HfvhBE5nmuUU86kj84EB+zJELRqoykbhHLLtBelPBKCMC5ip1aF0YiY69Vm+nCu 8A0mFvE4kA0ZB0I0mnhWLSC/p7dN4KHWmsD7+b2KcB9vBW4z34te7IH5G3nkUcFB rBkwBXDmJwJk4LJnsplnIvJL2Z1UeIIBPywvrsps9e6droGX8HmHwDvDMeLa66t1 MOf2/CF7jArmto32MRzt8TRL7nAUoUZqelaaY4ZP5ZoFYVmha8lsOcW5zlzoqxuY GuHrRS3WCKA8OKlfPB19T9YHRIAeYeUZOyTR8NpW0K0U3pNLLtI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:18 2025 by rpki-client