$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: NqdrpIUMFCaPBHhMtLA1OzcGKywxFCPw8kmPOYN5Zok= Subject key identifier: C1:15:92:D4:22:AF:10:94:AB:98:3B:94:97:F0:F0:AD:59:51:6F:DB Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 5ADDA0FA4FDAE19F9170CC78A4374398B4FDA288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 01E3 Signing time: Mon 21 Jul 2025 09:50:45 +0000 Manifest this update: Mon 21 Jul 2025 09:45:45 +0000 Manifest next update: Thu 24 Jul 2025 13:58:45 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: /HBoRMMkJ5mcXI0y+0ycLMrdz7sCQcIvjHVY9YlGxGk=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dd:a0:fa:4f:da:e1:9f:91:70:cc:78:a4:37:43:98:b4:fd:a2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Jul 21 09:45:45 2025 GMT Not After : Jul 24 13:58:45 2025 GMT Subject: CN=C11592D422AF1094AB983B9497F0F0AD59516FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9f:99:ec:77:6e:8e:8d:d6:4c:d0:20:d9:58: 4f:0c:27:16:69:a2:97:aa:6f:49:7d:c7:97:cf:b9: 0a:f8:9a:e3:1b:7c:11:32:e1:ca:84:2a:10:32:ad: 34:85:e4:23:84:39:3b:28:c7:d9:7b:76:56:02:ce: 9c:71:a8:00:ad:c6:1f:61:6d:2f:88:24:30:e7:8f: 82:1c:e5:ac:cd:d9:1d:43:c5:9a:c0:5f:de:db:a0: 36:a9:f3:05:e5:a8:14:89:0c:df:a9:53:08:00:7b: c3:7f:5e:da:2e:c5:6c:fb:12:3c:88:48:e8:22:e7: 19:48:d2:ec:10:3c:e3:2e:00:2d:20:e9:56:6a:29: 9f:24:ad:83:ef:38:bc:46:6e:82:68:b4:2a:f4:8f: ca:b2:4b:58:be:bc:a1:e3:64:2d:42:9e:df:da:c9: 6d:a0:1e:43:e7:9d:cd:f3:22:3c:dc:d3:c1:0b:5e: 17:73:de:b9:db:9c:41:ad:31:5a:4a:8c:09:ff:1f: 0f:bc:3d:77:97:98:c9:aa:37:f4:62:75:9e:01:4f: 3c:fb:22:0e:1d:85:8f:f4:f4:b0:d2:c0:07:62:df: 3b:83:f1:21:d5:5a:17:ed:23:bd:6a:71:e6:7d:d7: 84:38:f7:6f:6a:8c:e0:a2:9f:3d:cd:e5:8c:48:ff: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:15:92:D4:22:AF:10:94:AB:98:3B:94:97:F0:F0:AD:59:51:6F:DB X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:88:25:e8:00:7b:24:65:09:35:f0:c2:78:d8:04:b8:8a:28: 74:89:e6:7c:e4:7e:d4:5e:88:09:a3:61:34:76:56:08:d8:2a: 39:27:a3:f9:50:fc:5c:68:e3:ba:eb:47:ea:68:d5:6d:02:5a: 5b:86:48:29:b9:92:aa:b7:3a:d5:e2:0a:d9:7d:d8:1e:3d:a9: d7:60:75:6b:a5:8b:e8:7b:78:d1:1b:fb:45:0e:75:88:01:f0: 8a:e6:3c:06:17:c5:16:76:d3:70:c1:a8:91:c2:ac:ea:84:82: 2c:76:88:ac:6a:a8:62:ef:4f:99:d1:b9:9c:d4:ff:a5:8c:d6: 7e:83:a9:56:26:48:21:cb:55:84:6a:49:a2:ab:44:4f:38:3d: 3f:c6:3c:a8:41:a6:69:86:ba:f9:67:c2:d2:95:a3:eb:a8:39: 57:3f:59:c0:0e:b8:71:b5:a3:80:65:ef:9f:82:3f:5d:0a:73: 9c:a4:89:76:4b:b3:64:28:16:df:34:24:7f:5b:d2:97:3c:04: f3:86:2d:34:f5:0c:67:cc:33:35:ee:82:9f:66:e9:2c:2c:40: 17:24:23:9d:c2:58:80:e2:5d:ac:80:2f:69:54:27:4a:22:d6: a2:46:f6:f8:f3:fc:ce:95:81:04:fa:c5:8b:92:e7:81:fc:e0: 25:4c:02:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWt2g+k/a4Z+RcMx4pDdDmLT9oogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTA3MjEwOTQ1NDVaFw0yNTA3MjQxMzU4NDVaMDMxMTAvBgNV BAMTKEMxMTU5MkQ0MjJBRjEwOTRBQjk4M0I5NDk3RjBGMEFENTk1MTZGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1n5nsd26OjdZM0CDZWE8MJxZp opeqb0l9x5fPuQr4muMbfBEy4cqEKhAyrTSF5COEOTsox9l7dlYCzpxxqACtxh9h bS+IJDDnj4Ic5azN2R1DxZrAX97boDap8wXlqBSJDN+pUwgAe8N/XtouxWz7EjyI SOgi5xlI0uwQPOMuAC0g6VZqKZ8krYPvOLxGboJotCr0j8qyS1i+vKHjZC1Cnt/a yW2gHkPnnc3zIjzc08ELXhdz3rnbnEGtMVpKjAn/Hw+8PXeXmMmqN/RidZ4BTzz7 Ig4dhY/09LDSwAdi3zuD8SHVWhftI71qceZ914Q4929qjOCinz3N5YxI//UrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRWS1CKvEJSrmDuUl/DwrVlRb9swHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmIJegAeyRlCTXwwnjYBLiKKHSJ5nzkftRe iAmjYTR2VgjYKjkno/lQ/Fxo47rrR+po1W0CWluGSCm5kqq3OtXiCtl92B49qddg dWuli+h7eNEb+0UOdYgB8IrmPAYXxRZ203DBqJHCrOqEgix2iKxqqGLvT5nRuZzU /6WM1n6DqVYmSCHLVYRqSaKrRE84PT/GPKhBpmmGuvlnwtKVo+uoOVc/WcAOuHG1 o4Bl75+CP10Kc5ykiXZLs2QoFt80JH9b0pc8BPOGLTT1DGfMMzXugp9m6SwsQBck I53CWIDiXayAL2lUJ0oi1qJG9vjz/M6VgQT6xYuS54H84CVMAqc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:23 2025 by rpki-client