$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: GYkCHDu2mdC2F1fP0sVZjddm4sBXoVxyftP8AitAcF0= Subject key identifier: CB:43:63:BE:42:BA:23:E1:2A:11:F1:27:F1:2B:A3:DE:89:ED:1C:5E Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 16F73A16D93C8D21C02AC82BC8C41D065CB2C5CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 0498 Signing time: Sun 07 Sep 2025 05:51:17 +0000 Manifest this update: Sun 07 Sep 2025 05:46:17 +0000 Manifest next update: Wed 10 Sep 2025 06:21:17 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=) 2: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: ASxw6nL7pKGwZooRgxCSodARAY2EAU+zkZVIH5lamM8=) 3: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=) 4: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f7:3a:16:d9:3c:8d:21:c0:2a:c8:2b:c8:c4:1d:06:5c:b2:c5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Sep 7 05:46:17 2025 GMT Not After : Sep 10 06:21:17 2025 GMT Subject: CN=CB4363BE42BA23E12A11F127F12BA3DE89ED1C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:db:93:ad:1b:c6:16:5b:a5:5e:ad:17:90:c5: 66:ce:e0:ad:a8:6e:ed:45:51:b0:38:59:39:c8:3d: c0:d6:b8:05:e9:aa:a8:04:b2:70:98:f5:a7:21:f7: c7:a7:b5:1c:f6:00:0b:36:6e:9c:a1:e1:89:c4:d8: 5e:98:e0:8c:29:8b:97:f8:9f:a4:e3:64:dc:b0:f4: ee:3b:0d:67:cd:48:e2:58:1a:6c:5c:79:0a:5f:a6: 02:ee:a2:b1:f7:49:2e:2f:fc:7d:4a:82:d6:9b:72: 32:5b:31:eb:a4:5c:06:1e:d5:20:6c:62:b8:6c:93: a3:48:cb:66:3f:1d:77:90:36:c1:79:d3:f8:ef:87: 49:11:20:25:e2:99:ac:a5:80:64:2e:23:1a:f5:93: 19:88:b4:0a:4b:ac:8b:d6:89:f9:15:75:ca:1d:7f: c0:c4:f9:a9:c4:18:80:80:d9:35:af:eb:94:f6:ef: f0:7b:0f:06:b1:a2:9b:4a:a0:4b:87:d8:39:d5:7c: 70:15:0a:c7:89:64:b0:9a:18:6e:e9:a2:bf:7f:c9: 1c:2c:e7:49:2d:42:c2:58:2e:c4:5e:f6:53:74:82: 12:cc:df:56:1b:42:5b:30:52:a8:01:41:fe:b8:62: 18:68:ba:43:6b:a4:30:c2:c6:88:f7:9a:1c:29:c2: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:43:63:BE:42:BA:23:E1:2A:11:F1:27:F1:2B:A3:DE:89:ED:1C:5E X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:6f:ce:a5:53:a5:63:de:dd:98:79:30:c2:c2:46:c2:35:eb: 06:46:d2:88:4c:a6:d9:8b:74:54:9d:51:cf:76:00:36:42:54: d0:9d:46:8e:c3:0e:fe:e8:c2:9f:7f:4e:be:13:fa:e3:ef:95: 65:46:f8:80:5e:db:45:92:dd:6a:a7:01:5e:76:e1:ba:9b:31: 24:04:83:9e:ed:05:05:c2:58:bb:7a:ac:1d:3a:6f:2b:54:d8: ca:8f:37:7f:47:fb:df:3d:2b:fe:89:33:17:96:b9:c1:89:07: 10:13:27:38:ff:bb:f7:b0:f9:36:54:bf:06:16:e0:aa:c4:75: 76:32:2d:a1:d8:79:4f:95:69:47:45:49:96:e7:e1:8f:80:92: 6f:07:ea:d7:7e:31:e5:a5:d3:41:9d:15:01:31:15:43:1a:35: d5:44:e9:70:17:00:a9:70:cb:3c:d9:65:9a:84:b1:08:be:20: 83:2f:02:8e:f1:f3:4d:56:e9:e0:02:cd:9e:b3:3d:7a:f2:36: 95:d1:7a:d5:cd:fb:81:32:ca:1b:63:45:56:00:d9:46:c6:0d: 53:65:b0:c8:00:76:df:2b:ce:61:74:5a:33:37:e3:7b:e3:3f: 73:17:e6:3f:c6:db:70:94:d4:e0:8a:8e:48:cb:4a:ad:b3:0e: 2e:01:a5:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvc6Ftk8jSHAKsgryMQdBlyyxc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNTA5MDcwNTQ2MTdaFw0yNTA5MTAwNjIxMTdaMDMxMTAvBgNV BAMTKENCNDM2M0JFNDJCQTIzRTEyQTExRjEyN0YxMkJBM0RFODlFRDFDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD425OtG8YWW6VerReQxWbO4K2o bu1FUbA4WTnIPcDWuAXpqqgEsnCY9ach98entRz2AAs2bpyh4YnE2F6Y4Iwpi5f4 n6TjZNyw9O47DWfNSOJYGmxceQpfpgLuorH3SS4v/H1KgtabcjJbMeukXAYe1SBs Yrhsk6NIy2Y/HXeQNsF50/jvh0kRICXimaylgGQuIxr1kxmItApLrIvWifkVdcod f8DE+anEGICA2TWv65T27/B7DwaxoptKoEuH2DnVfHAVCseJZLCaGG7por9/yRws 50ktQsJYLsRe9lN0ghLM31YbQlswUqgBQf64YhhoukNrpDDCxoj3mhwpwtzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy0NjvkK6I+EqEfEn8Suj3ontHF4wHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVvzqVTpWPe3Zh5MMLCRsI16wZG0ohMptmL dFSdUc92ADZCVNCdRo7DDv7owp9/Tr4T+uPvlWVG+IBe20WS3WqnAV524bqbMSQE g57tBQXCWLt6rB06bytU2MqPN39H+989K/6JMxeWucGJBxATJzj/u/ew+TZUvwYW 4KrEdXYyLaHYeU+VaUdFSZbn4Y+Akm8H6td+MeWl00GdFQExFUMaNdVE6XAXAKlw yzzZZZqEsQi+IIMvAo7x801W6eACzZ6zPXryNpXRetXN+4EyyhtjRVYA2UbGDVNl sMgAdt8rzmF0WjM343vjP3MX5j/G23CU1OCKjkjLSq2zDi4BpUM= -----END CERTIFICATE-----Generated at Sun Sep 7 13:53:48 2025 by rpki-client