$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: 4mBcy330WZ/Z0i04OtBfzP7R9pTp8oUkJ1w3VdU6cfs= Subject key identifier: 56:03:70:98:F2:46:F6:C7:C3:DC:B4:7D:52:2E:0E:92:CA:FA:54:8D Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 6D66F75F5DAF94A3AE7C986383C962D674D324B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: 8D Signing time: Tue 22 Jul 2025 03:20:00 +0000 Manifest this update: Tue 22 Jul 2025 03:15:00 +0000 Manifest next update: Fri 25 Jul 2025 11:55:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: 5wrPHcBms85y7ha5qD9cMcz2d85jFPnq2bVuTNayE/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:66:f7:5f:5d:af:94:a3:ae:7c:98:63:83:c9:62:d6:74:d3:24:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Jul 22 03:15:00 2025 GMT Not After : Jul 25 11:55:00 2025 GMT Subject: CN=56037098F246F6C7C3DCB47D522E0E92CAFA548D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:22:e9:da:55:f0:72:21:41:25:18:6e:79: 83:26:ed:cc:ec:e5:f0:09:f7:cf:c5:50:4b:86:67: 8d:52:15:a0:e3:7d:e2:51:d5:0e:6e:13:48:e8:49: 7d:c3:20:f7:e4:09:5e:4f:36:8c:64:89:6c:23:3b: a5:d8:49:92:63:91:e0:ec:51:0e:7f:44:9b:f7:22: 91:a1:26:a1:22:35:bf:84:59:cf:ab:bc:16:2f:48: a8:da:4f:3c:ea:23:2d:f6:0f:68:0d:f0:5f:2f:ab: b4:a1:2c:66:b0:b5:a2:14:b9:da:3a:2e:cc:1b:24: ea:c0:0b:7a:07:e6:0c:b3:f7:6a:11:72:c6:2a:ee: 66:1a:0e:ea:b4:21:c7:c3:ac:05:0c:ba:12:4d:2c: a7:2b:2b:8a:5d:dd:4e:cc:f5:7c:70:f3:7e:4d:bb: 39:2a:03:e9:5d:eb:7f:0a:4b:0b:cd:74:cc:ec:22: 1f:9a:3d:fb:70:7f:c2:15:5d:80:17:81:a2:9a:30: 9c:33:c3:25:0e:68:c1:32:fd:94:a9:c3:ed:7e:ac: 21:a0:62:de:d4:84:4e:5b:dd:12:b7:2a:aa:99:0b: 8f:8c:ea:df:bb:a2:d4:89:f7:d0:64:cf:85:5d:ed: 33:49:e0:6d:af:0a:3f:36:76:dd:92:32:5f:2e:2d: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:03:70:98:F2:46:F6:C7:C3:DC:B4:7D:52:2E:0E:92:CA:FA:54:8D X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f0:95:57:9f:9b:5a:19:da:55:95:0a:48:93:c5:9f:e5:38: 25:b5:7b:6d:ae:84:a5:e1:bb:68:c7:d6:96:48:b0:d3:a1:5a: a3:c3:ce:4e:3c:16:b2:9b:55:ea:d6:0c:2a:ac:2a:45:03:e9: 64:eb:ca:5f:5e:a5:9f:37:f1:52:71:89:38:23:ec:af:43:cf: 57:18:49:c6:a5:56:d4:4f:49:34:e2:c0:69:fd:ac:a1:dc:f0: 5b:8f:1f:72:dd:ab:6d:e2:cc:40:fa:d0:a5:71:42:27:4a:32: f7:a2:2e:6d:ba:c0:5f:60:29:a7:d9:f1:23:fe:e4:76:7b:ab: e6:f3:85:d9:85:28:f4:98:4b:85:37:d4:dd:f4:52:01:ec:74: f9:1c:4b:3e:f7:42:07:b1:9b:38:5d:37:11:73:08:d3:9d:96: 2d:39:bf:20:75:f8:2f:21:28:33:99:37:3e:a5:78:17:d6:ec: f6:1b:5a:9e:6e:41:ee:39:d9:d0:ae:1d:62:1c:11:87:79:57: c6:63:f4:a5:42:6c:d2:d1:de:df:2b:5e:13:ba:56:3f:47:82: 37:13:a9:50:29:7b:ce:2b:e9:d3:27:43:1c:ab:f4:e7:e0:46: fd:d7:8f:be:08:d5:ae:c7:f9:80:02:c7:be:00:4a:09:e8:61: 10:d0:a4:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWb3X12vlKOufJhjg8li1nTTJLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNTA3MjIwMzE1MDBaFw0yNTA3MjUxMTU1MDBaMDMxMTAvBgNV BAMTKDU2MDM3MDk4RjI0NkY2QzdDM0RDQjQ3RDUyMkUwRTkyQ0FGQTU0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgSLp2lXwciFBJRhueYMm7czs 5fAJ98/FUEuGZ41SFaDjfeJR1Q5uE0joSX3DIPfkCV5PNoxkiWwjO6XYSZJjkeDs UQ5/RJv3IpGhJqEiNb+EWc+rvBYvSKjaTzzqIy32D2gN8F8vq7ShLGawtaIUudo6 LswbJOrAC3oH5gyz92oRcsYq7mYaDuq0IcfDrAUMuhJNLKcrK4pd3U7M9Xxw835N uzkqA+ld638KSwvNdMzsIh+aPftwf8IVXYAXgaKaMJwzwyUOaMEy/ZSpw+1+rCGg Yt7UhE5b3RK3KqqZC4+M6t+7otSJ99Bkz4Vd7TNJ4G2vCj82dt2SMl8uLSkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVgNwmPJG9sfD3LR9Ui4Oksr6VI0wHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfwlVefm1oZ2lWVCkiTxZ/lOCW1e22uhKXh u2jH1pZIsNOhWqPDzk48FrKbVerWDCqsKkUD6WTryl9epZ838VJxiTgj7K9Dz1cY ScalVtRPSTTiwGn9rKHc8FuPH3Ldq23izED60KVxQidKMveiLm26wF9gKafZ8SP+ 5HZ7q+bzhdmFKPSYS4U31N30UgHsdPkcSz73QgexmzhdNxFzCNOdli05vyB1+C8h KDOZNz6leBfW7PYbWp5uQe452dCuHWIcEYd5V8Zj9KVCbNLR3t8rXhO6Vj9HgjcT qVApe84r6dMnQxyr9OfgRv3Xj74I1a7H+YACx74ASgnoYRDQpHc= -----END CERTIFICATE-----Generated at Tue Jul 22 19:29:18 2025 by rpki-client