$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: XIkaCUfC9U6C5SP3V9JyTKignk2NHTg05JOL7YvjS1g= Subject key identifier: 02:99:7F:D4:40:E4:4D:85:42:41:31:49:73:A6:6B:4A:5C:37:12:32 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 71CD4D962C15BA3F2B5A8ED39D203961ED6EC677 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: A9 Signing time: Thu 05 Jun 2025 15:51:23 +0000 Manifest this update: Thu 05 Jun 2025 15:46:23 +0000 Manifest next update: Sun 08 Jun 2025 19:15:23 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: K9x5P4MHblXgf8jnLu1s0WRrdTjAwwHZQLMfviuqvTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cd:4d:96:2c:15:ba:3f:2b:5a:8e:d3:9d:20:39:61:ed:6e:c6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Jun 5 15:46:23 2025 GMT Not After : Jun 8 19:15:23 2025 GMT Subject: CN=02997FD440E44D854241314973A66B4A5C371232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:e9:fc:ec:47:1a:a1:4c:e2:db:ab:6c:20: 8a:8d:f4:57:91:75:05:2e:cb:14:4c:0b:b6:38:94: 1d:78:2c:fe:aa:59:c8:aa:e2:05:bd:fe:eb:97:23: 9e:8b:48:48:fe:c4:65:4a:60:d4:71:7f:41:40:bc: ff:5a:33:6e:40:af:08:01:3f:a9:55:93:db:3e:c4: ac:59:a7:d6:20:86:f4:9b:79:7b:34:41:32:73:c5: 21:0d:f8:8d:c0:10:7a:d1:04:56:41:7a:88:6b:95: 93:28:67:be:56:d9:87:36:1e:af:ca:a1:41:a8:56: 78:94:db:ab:19:33:c2:48:bc:b4:5f:99:03:93:13: 2d:d8:a4:f2:55:df:f2:7c:99:8a:05:ea:5f:6b:69: 7b:d9:e9:6d:ef:74:dc:63:a5:18:4f:32:3c:6a:da: a0:f6:f9:35:c3:d7:ef:9f:99:ec:b0:eb:ba:1e:34: d6:39:98:08:62:83:21:70:9f:3f:9f:77:25:16:ca: a5:85:b0:b9:6e:3a:98:4d:ed:0a:87:15:25:be:4b: 53:1c:7c:65:d3:76:aa:38:14:4c:f2:f8:0b:77:e6: 62:28:15:23:a4:48:f8:b1:0f:d5:05:51:a9:4d:3d: 78:15:73:a3:bf:a0:ca:01:03:77:c2:93:33:ed:56: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:99:7F:D4:40:E4:4D:85:42:41:31:49:73:A6:6B:4A:5C:37:12:32 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:28:10:65:ec:b5:37:fe:6d:41:23:51:bf:09:96:ec:67: 12:fc:5d:87:ce:c3:6b:fe:2e:88:a1:d0:66:eb:06:c6:68:9e: 29:b5:bd:c5:5f:eb:1e:d7:ce:96:32:f9:6e:5c:b7:6b:20:fb: 2d:dd:84:4e:ac:ce:5a:89:a1:0a:73:ac:e7:0d:e7:9c:12:b5: db:4c:01:33:ab:d7:87:fd:05:16:50:a0:9f:47:6b:60:61:94: 74:83:75:7b:35:f8:64:51:de:a4:08:ea:1d:55:52:62:1e:e3: dc:31:7b:97:22:4d:9f:76:24:fd:c8:59:48:e1:fc:82:50:ec: 5f:66:23:7e:96:4d:63:31:16:0d:ef:85:a9:c6:96:92:8f:3e: e0:0b:4a:5b:6b:0f:4c:e9:13:b9:8d:81:55:dd:2b:a2:5e:dd: ec:f6:c6:af:57:ed:c1:55:2d:56:ea:68:a5:6f:fa:c0:60:77: ad:98:70:85:ec:9e:63:04:64:1e:e4:d6:0c:e0:3b:a3:cf:5a: 52:b3:14:e6:00:e9:88:73:79:09:9b:73:9e:09:d5:b6:07:e4: c4:1d:f5:e7:40:f4:6c:ef:54:3f:1c:64:e2:19:e7:8d:51:8f: bb:25:f1:05:e9:c8:81:2e:08:8e:3d:7b:fb:a8:9d:33:1a:98: e7:cd:43:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcc1NliwVuj8rWo7TnSA5Ye1uxncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTA2MDUxNTQ2MjNaFw0yNTA2MDgxOTE1MjNaMDMxMTAvBgNV BAMTKDAyOTk3RkQ0NDBFNDREODU0MjQxMzE0OTczQTY2QjRBNUMzNzEyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPen87EcaoUzi26tsIIqN9FeR dQUuyxRMC7Y4lB14LP6qWciq4gW9/uuXI56LSEj+xGVKYNRxf0FAvP9aM25ArwgB P6lVk9s+xKxZp9YghvSbeXs0QTJzxSEN+I3AEHrRBFZBeohrlZMoZ75W2Yc2Hq/K oUGoVniU26sZM8JIvLRfmQOTEy3YpPJV3/J8mYoF6l9raXvZ6W3vdNxjpRhPMjxq 2qD2+TXD1++fmeyw67oeNNY5mAhigyFwnz+fdyUWyqWFsLluOphN7QqHFSW+S1Mc fGXTdqo4FEzy+At35mIoFSOkSPixD9UFUalNPXgVc6O/oMoBA3fCkzPtVqM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUApl/1EDkTYVCQTFJc6ZrSlw3EjIwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk+KBBl7LU3/m1BI1G/CZbsZxL8XYfOw2v+ Loih0GbrBsZonim1vcVf6x7XzpYy+W5ct2sg+y3dhE6szlqJoQpzrOcN55wStdtM ATOr14f9BRZQoJ9Ha2BhlHSDdXs1+GRR3qQI6h1VUmIe49wxe5ciTZ92JP3IWUjh /IJQ7F9mI36WTWMxFg3vhanGlpKPPuALSltrD0zpE7mNgVXdK6Je3ez2xq9X7cFV LVbqaKVv+sBgd62YcIXsnmMEZB7k1gzgO6PPWlKzFOYA6YhzeQmbc54J1bYH5MQd 9edA9GzvVD8cZOIZ541Rj7sl8QXpyIEuCI49e/uonTMamOfNQxQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:57 2025 by rpki-client