$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: vg/+LGvVU38Lpeo6P0Ig1sMzbwOq1JilI/VG5M1HFt0= Subject key identifier: 7B:05:2F:60:00:5F:05:9B:BA:77:B3:9F:1E:BF:E2:32:0E:EA:E9:C1 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 1042AA9A61B4A333C1D45BFC2A3E2632CAF3FAAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: D1 Signing time: Wed 03 Sep 2025 17:21:26 +0000 Manifest this update: Wed 03 Sep 2025 17:16:26 +0000 Manifest next update: Sun 07 Sep 2025 01:02:26 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: cf7vfH/aeq8UwM1buAPKjvfesNds3+gBxMG6mtCM+J0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:42:aa:9a:61:b4:a3:33:c1:d4:5b:fc:2a:3e:26:32:ca:f3:fa:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Sep 3 17:16:26 2025 GMT Not After : Sep 7 01:02:26 2025 GMT Subject: CN=7B052F60005F059BBA77B39F1EBFE2320EEAE9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:40:d6:95:74:3c:bb:33:c3:43:ac:35:65: 49:2d:70:da:26:20:cc:eb:38:d1:3e:4b:d5:53:ee: b8:a0:ce:85:ed:6d:14:c5:ed:73:4a:b9:22:51:cd: 81:b0:00:52:8b:b6:fb:eb:13:f2:00:52:68:2d:ca: 53:78:ad:f4:04:d8:b0:29:5b:1a:d2:cc:31:02:8e: c2:aa:ee:e6:37:cf:31:cb:aa:18:a3:0e:81:2d:5a: 35:95:bc:4a:89:7b:58:02:26:fd:87:67:fc:b8:b9: 52:e2:87:7f:46:3d:e4:a4:d1:20:24:6c:e1:ad:5c: aa:2a:43:62:9b:c3:b9:ba:b9:da:e3:95:63:d9:82: 5e:4c:9e:61:56:e7:07:28:7d:1d:a3:6b:99:c8:ed: e2:78:81:3b:27:9e:7e:a3:e7:c3:d5:92:dc:c0:0c: ee:a7:30:3f:70:80:68:4a:00:2f:7c:64:9a:e9:7b: c8:87:c2:0c:47:4e:4f:68:b2:b3:26:b9:a8:8f:d9: 08:8b:55:4a:71:07:4f:ea:e1:56:53:52:9b:d5:73: 8d:75:75:e4:70:e1:1f:59:4d:58:6c:d4:76:4d:26: 6a:0c:69:8a:a6:eb:6a:43:5e:89:e8:55:88:7c:c3: 62:b1:f2:36:d9:13:03:78:53:e0:32:16:09:fa:83: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:05:2F:60:00:5F:05:9B:BA:77:B3:9F:1E:BF:E2:32:0E:EA:E9:C1 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:83:55:cf:7a:d3:aa:00:01:21:9d:aa:5a:51:51:77:75:e1: d0:a4:39:4a:02:86:c0:90:77:1d:7b:3a:21:9e:99:0f:02:f3: f3:e2:8a:c2:79:3b:13:3e:87:7a:81:06:8a:01:d1:89:48:32: 02:d8:4c:56:d4:24:c9:e1:6e:9f:7f:a3:88:51:2e:29:3d:bb: 03:ba:af:de:fd:bd:46:39:b3:45:73:9e:06:4d:8f:4b:2a:70: 60:a0:54:35:15:60:77:3f:cb:c2:36:48:0e:e1:65:28:49:a5: d1:1f:ca:2d:a9:64:e5:5c:e5:cb:8f:74:e6:af:fd:0a:e4:92: 70:47:4d:9f:21:ad:6b:23:c0:6e:bb:4c:90:5e:78:52:12:b5: 04:08:29:53:35:59:b6:77:1e:de:01:7a:82:ab:88:90:f3:0c: 0f:12:67:da:68:8e:66:6a:00:b9:c7:e1:11:02:8f:6b:5e:da: ac:4e:4f:7f:a3:62:ad:37:14:7e:51:7e:fd:75:4b:d0:de:2f: 97:2f:87:88:24:d6:7b:a2:14:1e:d6:1c:b6:91:35:57:10:85: 5d:1e:77:2a:1c:0b:58:e6:55:07:0b:07:0e:d8:1f:d0:0d:98: ee:8b:01:ea:81:ad:fc:7c:29:f9:c4:ff:0e:14:f3:2e:83:ec: b5:0b:bf:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEKqmmG0ozPB1Fv8Kj4mMsrz+qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA5MDMxNzE2MjZaFw0yNTA5MDcwMTAyMjZaMDMxMTAvBgNV BAMTKDdCMDUyRjYwMDA1RjA1OUJCQTc3QjM5RjFFQkZFMjMyMEVFQUU5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqukDWlXQ8uzPDQ6w1ZUktcNom IMzrONE+S9VT7rigzoXtbRTF7XNKuSJRzYGwAFKLtvvrE/IAUmgtylN4rfQE2LAp WxrSzDECjsKq7uY3zzHLqhijDoEtWjWVvEqJe1gCJv2HZ/y4uVLih39GPeSk0SAk bOGtXKoqQ2Kbw7m6udrjlWPZgl5MnmFW5wcofR2ja5nI7eJ4gTsnnn6j58PVktzA DO6nMD9wgGhKAC98ZJrpe8iHwgxHTk9osrMmuaiP2QiLVUpxB0/q4VZTUpvVc411 deRw4R9ZTVhs1HZNJmoMaYqm62pDXonoVYh8w2Kx8jbZEwN4U+AyFgn6g93dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewUvYABfBZu6d7OfHr/iMg7q6cEwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqDVc9606oAASGdqlpRUXd14dCkOUoChsCQ dx17OiGemQ8C8/PiisJ5OxM+h3qBBooB0YlIMgLYTFbUJMnhbp9/o4hRLik9uwO6 r979vUY5s0VzngZNj0sqcGCgVDUVYHc/y8I2SA7hZShJpdEfyi2pZOVc5cuPdOav /QrkknBHTZ8hrWsjwG67TJBeeFIStQQIKVM1WbZ3Ht4BeoKriJDzDA8SZ9pojmZq ALnH4RECj2te2qxOT3+jYq03FH5Rfv11S9DeL5cvh4gk1nuiFB7WHLaRNVcQhV0e dyocC1jmVQcLBw7YH9ANmO6LAeqBrfx8KfnE/w4U8y6D7LULv10= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:53 2025 by rpki-client