$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: w4PEh3eJXnWHFHsD8Q5dOOzwfo07JpAPq+DtYityTx4= Subject key identifier: 19:1C:BD:53:03:FC:D5:CD:7B:19:66:51:A5:F6:83:C1:D4:07:BE:F3 Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 52A45DDE710EC4B583A9025384EEEFCC94387AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: 8E Signing time: Thu 24 Jul 2025 12:00:00 +0000 Manifest this update: Thu 24 Jul 2025 11:55:00 +0000 Manifest next update: Sun 27 Jul 2025 19:02:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: hO82zXGkjB6WdrCpMXdWPKcjeESXyB7kvyKnrSOswhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:5d:de:71:0e:c4:b5:83:a9:02:53:84:ee:ef:cc:94:38:7a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Jul 24 11:55:00 2025 GMT Not After : Jul 27 19:02:00 2025 GMT Subject: CN=191CBD5303FCD5CD7B196651A5F683C1D407BEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:68:1c:36:bd:4d:ec:16:c5:da:0d:b6:12:38: e7:93:94:15:ec:3b:58:59:dd:86:55:ca:a2:1f:72: 46:c3:07:aa:01:78:6b:d1:97:51:b0:e7:e8:1c:75: 06:5f:7e:7f:36:b9:e2:7d:6c:19:60:2e:ad:50:ff: 36:d6:fb:18:11:4e:aa:7d:24:cd:29:f2:a8:58:a2: ac:b5:57:1e:a6:3b:3d:6b:f2:35:ad:8a:66:65:7e: 4d:25:7f:45:93:92:c0:93:0b:23:19:09:56:d4:b7: 71:30:73:52:30:8b:dd:96:20:0c:81:6b:9f:41:2b: 3e:8e:f5:e7:39:68:94:33:c5:6c:69:b9:f1:7a:5f: e4:ca:9b:22:a0:a0:77:c1:6e:9d:d8:51:7d:7b:a0: 6b:5c:06:3c:76:d2:eb:d3:06:5b:85:ee:11:d5:15: 04:68:f7:5a:01:ae:e2:fe:a0:34:a2:77:01:41:56: 22:43:85:bf:ce:a7:1c:96:8e:1b:c6:d8:43:4f:51: 27:20:eb:e3:0e:f1:8f:a0:84:42:70:0e:bf:4f:7e: 87:0a:48:15:6c:69:00:6a:b6:b0:25:4d:5e:9d:42: ac:62:f5:36:a6:c6:38:93:ec:57:e8:d0:82:22:10: 74:14:53:0b:a1:28:be:67:c4:0f:7f:f7:bb:02:fc: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:BD:53:03:FC:D5:CD:7B:19:66:51:A5:F6:83:C1:D4:07:BE:F3 X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:26:90:02:9b:9d:d6:02:23:75:f5:7c:08:84:24:47:8d:7c: 4c:6d:9c:58:f3:3a:1f:83:a3:10:5a:f7:a8:ce:6f:d9:13:5d: 63:89:80:6b:11:a7:ca:11:e3:92:49:ac:cc:ae:c2:31:52:3b: e5:f1:b8:c9:33:9f:56:fc:70:68:25:6b:0f:e6:da:f5:5f:38: a1:4a:83:f9:85:93:7b:07:9a:da:e3:f0:85:93:a9:16:ed:61: 73:ed:d2:a5:f6:c1:3e:9c:71:cb:1e:3a:34:93:73:51:9d:90: 28:55:5f:d3:10:a4:4c:5f:84:e3:d1:e8:7c:8c:ba:65:23:81: cc:fb:6e:84:c3:7f:93:71:0b:59:08:b6:c2:77:9b:64:92:a9: 69:e8:49:35:7c:8a:d3:7c:d4:2a:0f:a5:c0:a7:35:f1:93:e3: 83:a6:ae:6a:86:0c:43:4d:62:45:5a:43:04:5a:88:1e:cd:04: fa:4b:4c:17:eb:91:45:8f:7f:36:bd:77:1f:4e:d6:af:5d:e8: a7:1f:34:76:64:23:19:0b:5f:6a:af:38:7e:b8:b0:2e:9e:72: aa:4e:0f:40:80:4d:0f:29:b1:95:5c:21:49:c9:ad:40:f0:a5: 03:3b:f8:e8:17:7b:06:77:82:e0:60:a5:2f:f0:24:17:58:c8: 83:f7:66:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqRd3nEOxLWDqQJThO7vzJQ4ergwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNTA3MjQxMTU1MDBaFw0yNTA3MjcxOTAyMDBaMDMxMTAvBgNV BAMTKDE5MUNCRDUzMDNGQ0Q1Q0Q3QjE5NjY1MUE1RjY4M0MxRDQwN0JFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDraBw2vU3sFsXaDbYSOOeTlBXs O1hZ3YZVyqIfckbDB6oBeGvRl1Gw5+gcdQZffn82ueJ9bBlgLq1Q/zbW+xgRTqp9 JM0p8qhYoqy1Vx6mOz1r8jWtimZlfk0lf0WTksCTCyMZCVbUt3Ewc1Iwi92WIAyB a59BKz6O9ec5aJQzxWxpufF6X+TKmyKgoHfBbp3YUX17oGtcBjx20uvTBluF7hHV FQRo91oBruL+oDSidwFBViJDhb/OpxyWjhvG2ENPUScg6+MO8Y+ghEJwDr9PfocK SBVsaQBqtrAlTV6dQqxi9TamxjiT7Ffo0IIiEHQUUwuhKL5nxA9/97sC/CoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGRy9UwP81c17GWZRpfaDwdQHvvMwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUmkAKbndYCI3X1fAiEJEeNfExtnFjzOh+D oxBa96jOb9kTXWOJgGsRp8oR45JJrMyuwjFSO+XxuMkzn1b8cGglaw/m2vVfOKFK g/mFk3sHmtrj8IWTqRbtYXPt0qX2wT6cccseOjSTc1GdkChVX9MQpExfhOPR6HyM umUjgcz7boTDf5NxC1kItsJ3m2SSqWnoSTV8itN81CoPpcCnNfGT44OmrmqGDENN YkVaQwRaiB7NBPpLTBfrkUWPfza9dx9O1q9d6KcfNHZkIxkLX2qvOH64sC6ecqpO D0CATQ8psZVcIUnJrUDwpQM7+OgXewZ3guBgpS/wJBdYyIP3ZjM= -----END CERTIFICATE-----Generated at Sat Jul 26 01:49:16 2025 by rpki-client