$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: hwseaS6Dt4AGQuYhhvUjl4FIKy7F0Zc55oeflmNTLDs= Subject key identifier: A9:CC:DA:F6:0D:50:9A:07:AE:5B:9C:30:C6:E1:C2:57:B1:62:6C:9D Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 13F68447E5C76D7E96F97DCD398A7115527946ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 01B7 Signing time: Sun 20 Jul 2025 12:50:36 +0000 Manifest this update: Sun 20 Jul 2025 12:45:36 +0000 Manifest next update: Wed 23 Jul 2025 23:17:36 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 2: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: ZwXWIKJmu+dN8MLt5i+kTDhfQEetN9S8z6vUjIzIPB0=) 3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f6:84:47:e5:c7:6d:7e:96:f9:7d:cd:39:8a:71:15:52:79:46:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Jul 20 12:45:36 2025 GMT Not After : Jul 23 23:17:36 2025 GMT Subject: CN=A9CCDAF60D509A07AE5B9C30C6E1C257B1626C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:b9:04:0c:51:e2:8b:d6:5d:3b:b2:df:24: 48:89:d2:32:ee:56:c0:aa:45:da:dd:3c:6a:aa:ac: 2b:a0:75:35:cf:17:78:1e:e2:20:13:b4:e8:ed:c9: dc:ba:ee:2d:4c:2a:f5:2c:3f:38:b8:64:40:12:37: 62:5b:f0:5e:ff:b0:12:c5:d8:9c:a2:f9:b9:be:c9: e7:2f:47:11:0d:20:89:07:db:b6:47:0d:66:24:07: 55:6b:70:cc:98:a8:ca:f1:37:78:a8:ae:13:48:d8: f2:7f:e1:04:02:9a:11:1c:f2:c8:e8:f0:28:98:99: 11:b4:15:e3:84:fd:b4:fe:72:ef:e9:7c:e5:eb:f9: 09:0c:4b:fe:2a:1e:fb:74:f8:34:02:ad:7b:4f:43: d8:11:b3:4c:4a:0d:b0:d4:04:57:c0:6e:eb:e6:7f: b9:d2:5b:b1:b5:58:47:f3:03:75:56:49:da:79:17: f0:aa:f3:bf:04:58:39:74:d7:6c:3c:f0:5a:02:20: f2:bf:e8:6a:74:8a:c6:43:e6:29:67:3a:b2:9c:75: 7b:44:1b:ad:b8:20:0a:32:59:db:83:4f:d1:c5:51: b7:6a:3c:be:37:81:b7:fc:cc:d7:73:51:72:85:84: dd:4d:2d:6f:aa:aa:be:b6:f8:87:73:40:af:9c:f5: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CC:DA:F6:0D:50:9A:07:AE:5B:9C:30:C6:E1:C2:57:B1:62:6C:9D X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:52:b6:95:0a:b9:80:db:82:05:e9:a7:b8:ad:1e:b3:5f:66: 0d:e9:86:3a:b6:ed:6d:c9:f2:17:59:c2:54:6b:70:a9:3b:15: 8e:ee:82:a6:4c:92:5b:9b:c8:c6:3a:9b:59:55:17:68:ce:19: 6c:40:dd:16:9d:ca:ff:51:11:15:d0:78:e2:6e:48:1c:24:ac: 5c:15:a8:55:b4:df:40:8d:e7:30:d2:70:7f:10:f5:ee:ae:94: 51:c1:06:ae:15:e8:ba:01:ef:37:06:09:19:a3:cb:14:fa:d5: 45:9b:db:ec:9f:0e:2b:a6:23:33:74:75:49:9c:db:69:c8:22: 51:61:05:0b:bc:2b:2c:b3:ca:37:d1:85:04:9b:ac:75:b7:51: 56:b2:0a:ba:46:df:9e:74:2f:ec:06:e1:d5:28:ec:87:62:c3: 34:68:a6:33:f9:80:25:3d:64:76:42:a5:50:fa:3f:72:0f:ac: 4e:34:f0:27:de:92:99:43:a6:0c:b5:67:83:9c:a5:7a:65:18: c8:85:2d:d5:9a:12:5d:6e:e0:51:a1:dd:ad:88:67:b2:fe:46: 03:95:b4:fb:6c:50:9b:9a:c0:97:30:e1:28:f9:35:c8:68:97: b3:f9:fc:22:c8:2f:0f:32:be:91:df:d2:ba:95:25:f4:2d:38: 54:b9:10:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/aER+XHbX6W+X3NOYpxFVJ5Ru0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTA3MjAxMjQ1MzZaFw0yNTA3MjMyMzE3MzZaMDMxMTAvBgNV BAMTKEE5Q0NEQUY2MEQ1MDlBMDdBRTVCOUMzMEM2RTFDMjU3QjE2MjZDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GLkEDFHii9ZdO7LfJEiJ0jLu VsCqRdrdPGqqrCugdTXPF3ge4iATtOjtydy67i1MKvUsPzi4ZEASN2Jb8F7/sBLF 2Jyi+bm+yecvRxENIIkH27ZHDWYkB1VrcMyYqMrxN3iorhNI2PJ/4QQCmhEc8sjo 8CiYmRG0FeOE/bT+cu/pfOXr+QkMS/4qHvt0+DQCrXtPQ9gRs0xKDbDUBFfAbuvm f7nSW7G1WEfzA3VWSdp5F/Cq878EWDl012w88FoCIPK/6Gp0isZD5ilnOrKcdXtE G624IAoyWduDT9HFUbdqPL43gbf8zNdzUXKFhN1NLW+qqr62+IdzQK+c9VWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqcza9g1QmgeuW5wwxuHCV7FibJ0wHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdStpUKuYDbggXpp7itHrNfZg3phjq27W3J 8hdZwlRrcKk7FY7ugqZMklubyMY6m1lVF2jOGWxA3Radyv9RERXQeOJuSBwkrFwV qFW030CN5zDScH8Q9e6ulFHBBq4V6LoB7zcGCRmjyxT61UWb2+yfDiumIzN0dUmc 22nIIlFhBQu8KyyzyjfRhQSbrHW3UVayCrpG3550L+wG4dUo7IdiwzRopjP5gCU9 ZHZCpVD6P3IPrE408CfekplDpgy1Z4OcpXplGMiFLdWaEl1u4FGh3a2IZ7L+RgOV tPtsUJuawJcw4Sj5Nchol7P5/CLILw8yvpHf0rqVJfQtOFS5EOU= -----END CERTIFICATE-----Generated at Mon Jul 21 12:25:16 2025 by rpki-client