$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: tOkrrosjk5TyMFj3g+fKIrRBvh9j5zex8J17aKjRSZc= Subject key identifier: DF:DD:81:44:A6:E9:F5:B1:6A:DA:92:B8:8F:3B:17:11:E7:4A:F4:A6 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 7BA0724130727EE46CF5A42E6F60BF14DD77C8E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 0238 Signing time: Sun 20 Jul 2025 20:02:30 +0000 Manifest this update: Sun 20 Jul 2025 19:57:30 +0000 Manifest next update: Wed 23 Jul 2025 22:56:30 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) 2: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) 3: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: 9k3HwzPLMnJRbeinpo0ygUSeSHj1VRm7CX4USNRRPzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a0:72:41:30:72:7e:e4:6c:f5:a4:2e:6f:60:bf:14:dd:77:c8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Jul 20 19:57:30 2025 GMT Not After : Jul 23 22:56:30 2025 GMT Subject: CN=DFDD8144A6E9F5B16ADA92B88F3B1711E74AF4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:e2:d3:3c:d1:9b:86:25:98:3d:b3:36:1f: 3a:c4:9f:3a:7f:a6:e4:fe:62:b6:6f:84:7e:4a:07: ca:3f:ab:cc:14:43:f2:a4:11:da:dd:b5:f5:c5:65: fd:b1:1b:01:98:11:8a:1d:94:c4:77:7c:53:19:42: e2:b9:68:59:17:eb:e2:10:b2:09:09:40:79:70:18: d1:de:57:6d:0a:36:7a:87:8f:64:d0:1d:08:e4:f7: 22:2e:0d:fd:5a:89:34:96:62:29:f8:82:bf:19:de: 63:06:1c:ca:3f:04:19:b5:30:57:42:c0:fc:50:e6: bb:f2:ff:d7:a4:5b:1a:c7:0a:92:71:6b:76:11:ef: d0:61:d2:fe:dd:65:e3:95:07:81:29:cf:6c:04:b5: f7:8b:98:1a:60:e2:94:0f:29:df:2a:36:c9:d0:00: d9:e2:79:94:f7:08:03:b0:de:e4:8a:3b:c1:74:73: b2:19:93:d1:e7:cc:2f:2a:35:16:0b:f4:38:10:a4: 2e:c9:b1:c1:c8:7b:d5:aa:f7:32:56:e1:3b:a9:8a: 13:7a:c1:0f:c3:be:da:65:88:1f:20:39:bc:f9:e9: d5:6b:44:91:a3:dc:fe:bc:12:5a:83:2d:f7:fe:c5: 04:2b:f4:a3:69:8e:78:d7:c3:91:bd:64:aa:04:35: 18:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:81:44:A6:E9:F5:B1:6A:DA:92:B8:8F:3B:17:11:E7:4A:F4:A6 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:71:17:a8:e1:36:da:28:c7:56:79:71:8a:10:32:c9:23:42: 91:96:70:c4:32:ed:82:05:75:13:a2:e7:3c:12:e7:fc:51:41: f9:d0:4c:80:2f:b6:db:18:dd:3e:da:5c:bd:2d:45:56:53:30: 14:2f:f8:8f:3a:c0:32:42:92:77:19:5e:69:39:1d:d2:62:ea: ae:9a:a0:f3:6c:b1:83:7b:92:b4:e6:25:06:79:1e:96:cd:d8: 31:fd:1d:d5:d7:27:87:7c:6b:1f:32:b1:30:b6:38:04:50:f5: dc:5f:97:18:6e:cf:7e:e3:4f:9b:fc:7f:da:86:62:22:c1:58: 36:f3:6c:3c:e5:f7:0d:3b:58:5a:c2:d0:76:8c:91:b0:44:9d: 79:cd:2a:99:23:c5:9a:d6:99:0f:dd:71:7b:5b:43:92:14:33: 90:28:78:77:f2:3d:d5:d5:bd:52:cb:22:b8:dd:63:37:3a:21: 3a:a9:be:41:5b:a4:7f:2b:d8:07:12:d5:e8:d0:b5:79:d5:c7: ba:81:67:e6:2a:ad:42:60:a0:a0:e7:cf:e0:f4:09:ea:a0:c6: 18:5a:13:a7:50:54:39:19:30:06:d8:f6:a2:87:bb:5f:c6:72: e7:e1:3d:20:2e:8b:0b:5f:4c:49:85:c8:ca:09:b3:12:88:da: 2c:db:2e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6ByQTByfuRs9aQub2C/FN13yOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTA3MjAxOTU3MzBaFw0yNTA3MjMyMjU2MzBaMDMxMTAvBgNV BAMTKERGREQ4MTQ0QTZFOUY1QjE2QURBOTJCODhGM0IxNzExRTc0QUY0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/eLTPNGbhiWYPbM2HzrEnzp/ puT+YrZvhH5KB8o/q8wUQ/KkEdrdtfXFZf2xGwGYEYodlMR3fFMZQuK5aFkX6+IQ sgkJQHlwGNHeV20KNnqHj2TQHQjk9yIuDf1aiTSWYin4gr8Z3mMGHMo/BBm1MFdC wPxQ5rvy/9ekWxrHCpJxa3YR79Bh0v7dZeOVB4Epz2wEtfeLmBpg4pQPKd8qNsnQ ANnieZT3CAOw3uSKO8F0c7IZk9HnzC8qNRYL9DgQpC7JscHIe9Wq9zJW4TupihN6 wQ/DvtpliB8gObz56dVrRJGj3P68ElqDLff+xQQr9KNpjnjXw5G9ZKoENRi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU392BRKbp9bFq2pK4jzsXEedK9KYwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1xF6jhNtoox1Z5cYoQMskjQpGWcMQy7YIF dROi5zwS5/xRQfnQTIAvttsY3T7aXL0tRVZTMBQv+I86wDJCkncZXmk5HdJi6q6a oPNssYN7krTmJQZ5HpbN2DH9HdXXJ4d8ax8ysTC2OARQ9dxflxhuz37jT5v8f9qG YiLBWDbzbDzl9w07WFrC0HaMkbBEnXnNKpkjxZrWmQ/dcXtbQ5IUM5AoeHfyPdXV vVLLIrjdYzc6ITqpvkFbpH8r2AcS1ejQtXnVx7qBZ+YqrUJgoKDnz+D0Ceqgxhha E6dQVDkZMAbY9qKHu1/GcufhPSAuiwtfTEmFyMoJsxKI2izbLpw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:40:03 2025 by rpki-client