$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: nZ6uvU9tssIL3O+GSOSgUu8bb3vQ8LNNRDoeVtGV2Ug= Subject key identifier: 70:5C:27:E6:3E:FE:EA:FC:C1:3E:EC:57:23:1D:44:35:46:81:6A:B9 Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 7F43094555F6C1764762161EE2721024BD6FAB5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 046B Signing time: Wed 04 Jun 2025 04:11:16 +0000 Manifest this update: Wed 04 Jun 2025 04:06:16 +0000 Manifest next update: Sat 07 Jun 2025 15:38:16 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: XyH2IkcIEuDvVJJGBcIvIdi7tMCNJuIdQc60W8BGrOU=) 2: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: FejRYWwdsuj+4j3TDWSOjALgozWd2vs6Lc0w2q44EY8=) 3: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: VRQenZnfjHP4Em/2gtG55xZ03dI3cH9WgKsmW906Ccc=) 4: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: Miiyo70b9UEsqSD6s3MKnk488M/yLQdFrFnluWJWC9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:43:09:45:55:f6:c1:76:47:62:16:1e:e2:72:10:24:bd:6f:ab:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Jun 4 04:06:16 2025 GMT Not After : Jun 7 15:38:16 2025 GMT Subject: CN=705C27E63EFEEAFCC13EEC57231D443546816AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:a9:69:3c:b6:40:1f:76:79:b2:05:22:66: 4f:6b:2f:dd:49:f5:3c:6c:81:d1:21:f7:4d:f9:62: 84:52:dc:78:06:c7:35:13:1f:c0:32:32:c6:a1:09: 6d:9d:b8:a6:26:fc:27:48:60:fb:33:0c:c1:9c:7a: aa:a7:1d:e8:25:50:1d:6c:8c:16:54:39:67:29:5e: b9:95:ab:99:a0:44:e5:e8:8b:03:6f:d2:80:99:c1: 7e:69:e9:f2:63:f4:28:39:3b:e6:77:36:86:65:e9: a7:b0:46:4a:73:fe:e9:7b:eb:8e:9a:b2:34:88:3d: 1b:16:ac:00:5e:68:06:87:fb:a4:36:67:d4:e7:0e: b8:4f:a8:fb:f6:92:0d:5c:73:d3:dc:fc:cc:8a:c8: 2f:0a:5d:79:92:4a:9b:85:0c:87:dc:a1:a8:7e:97: ea:dd:14:c5:f9:39:2c:71:67:4d:b7:60:76:d6:9e: 7f:c7:92:00:c6:e2:80:81:df:d6:68:2d:f7:f6:3d: 78:93:7f:1a:b8:4e:a9:43:77:bb:97:24:a6:7f:86: 86:53:d3:8d:6a:fe:46:f6:49:78:f7:04:5b:57:0d: 8d:d9:2d:2f:5c:52:7f:a9:4c:de:26:08:7d:3c:31: 9d:14:5c:f5:fb:22:bf:25:4d:ae:3a:bb:65:f4:78: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:27:E6:3E:FE:EA:FC:C1:3E:EC:57:23:1D:44:35:46:81:6A:B9 X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a9:6c:83:29:eb:bb:18:3c:6a:06:91:62:59:e0:96:4d:e4: 03:19:e8:88:b9:ee:2c:e8:ab:e2:68:7f:b5:db:35:36:38:a4: eb:20:8d:c2:b9:3a:9f:02:6c:cc:39:e0:da:b9:4d:4e:9c:5d: 43:6c:5b:46:8d:95:e2:b2:bb:96:6a:48:58:d6:42:93:d1:df: 40:e6:a4:89:be:eb:6b:a4:e9:1f:7c:c3:11:76:65:b1:47:4b: c4:7c:ff:ca:51:b8:6c:7e:b3:09:2d:a5:ae:d6:28:44:8b:8f: 87:88:66:bf:f4:44:91:4d:64:68:3c:ae:fd:91:1d:8f:64:98: 9a:db:5c:ff:02:6a:c4:6a:eb:78:72:d6:4f:cc:ff:c9:1d:67: e3:54:27:b1:cb:ac:14:26:9e:0a:15:36:f2:aa:ae:fa:aa:8d: ad:79:41:4a:0d:bd:85:99:25:7c:43:45:5e:c5:5f:a5:40:f4: a4:d5:a3:fe:a0:e2:b0:fc:e0:16:d8:bb:d8:5e:91:c7:48:35: 97:77:6b:88:bd:f6:10:73:fe:42:25:ca:09:f9:f7:82:3f:84: 7b:d5:6a:63:24:dd:5b:b2:4e:d8:74:ff:12:36:c6:6a:82:be: 2e:7f:f5:0d:15:be:23:1a:8e:18:8b:43:02:e0:5f:59:c0:15: 24:f3:12:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0MJRVX2wXZHYhYe4nIQJL1vq1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNTA2MDQwNDA2MTZaFw0yNTA2MDcxNTM4MTZaMDMxMTAvBgNV BAMTKDcwNUMyN0U2M0VGRUVBRkNDMTNFRUM1NzIzMUQ0NDM1NDY4MTZBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEL6lpPLZAH3Z5sgUiZk9rL91J 9TxsgdEh9035YoRS3HgGxzUTH8AyMsahCW2duKYm/CdIYPszDMGceqqnHeglUB1s jBZUOWcpXrmVq5mgROXoiwNv0oCZwX5p6fJj9Cg5O+Z3NoZl6aewRkpz/ul7646a sjSIPRsWrABeaAaH+6Q2Z9TnDrhPqPv2kg1cc9Pc/MyKyC8KXXmSSpuFDIfcoah+ l+rdFMX5OSxxZ023YHbWnn/HkgDG4oCB39ZoLff2PXiTfxq4TqlDd7uXJKZ/hoZT 041q/kb2SXj3BFtXDY3ZLS9cUn+pTN4mCH08MZ0UXPX7Ir8lTa46u2X0ePunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFwn5j7+6vzBPuxXIx1ENUaBarkwHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmpbIMp67sYPGoGkWJZ4JZN5AMZ6Ii57izo q+Jof7XbNTY4pOsgjcK5Op8CbMw54Nq5TU6cXUNsW0aNleKyu5ZqSFjWQpPR30Dm pIm+62uk6R98wxF2ZbFHS8R8/8pRuGx+swktpa7WKESLj4eIZr/0RJFNZGg8rv2R HY9kmJrbXP8CasRq63hy1k/M/8kdZ+NUJ7HLrBQmngoVNvKqrvqqja15QUoNvYWZ JXxDRV7FX6VA9KTVo/6g4rD84BbYu9hekcdINZd3a4i99hBz/kIlygn594I/hHvV amMk3VuyTth0/xI2xmqCvi5/9Q0VviMajhiLQwLgX1nAFSTzEnM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:29 2025 by rpki-client