$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: oTQ5G/CaqzE6R0WXPjSY0JgG9I+W1cP85EXicUMNoJ4= Subject key identifier: 96:F0:15:70:CE:51:73:E2:FC:33:F4:F9:CF:CC:A7:82:61:24:D2:81 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 02DE6DD5B5313A2F3B39F3D688BAEE2EE070C10F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 01AA Signing time: Mon 21 Jul 2025 11:11:01 +0000 Manifest this update: Mon 21 Jul 2025 11:06:01 +0000 Manifest next update: Thu 24 Jul 2025 14:02:01 +0000 Files and hashes: 1: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: tPpzvqx/Xr2dFdHfIfDNu64RbAiWZu7mBrGQt5ImT9Q=) 2: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=) 3: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=) 4: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=) 5: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=) 6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:de:6d:d5:b5:31:3a:2f:3b:39:f3:d6:88:ba:ee:2e:e0:70:c1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Jul 21 11:06:01 2025 GMT Not After : Jul 24 14:02:01 2025 GMT Subject: CN=96F01570CE5173E2FC33F4F9CFCCA7826124D281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:34:95:49:05:ab:f0:8c:4e:43:2c:31:fa: bc:bb:f9:65:32:3c:36:5e:8a:71:20:7a:89:35:72: 59:19:94:55:98:1e:8f:1f:31:20:2b:d1:d3:86:dc: db:28:df:3f:a1:85:20:f0:1d:a2:62:d8:0c:28:b7: d2:c6:aa:04:7a:93:f0:4e:ce:da:c8:56:2c:f5:9f: 33:25:47:f0:9d:05:4b:89:8d:a7:59:c7:e4:24:7c: 97:f2:1a:7b:29:ab:0e:2f:dd:57:6f:2b:6d:cb:b5: d2:38:78:56:8d:3b:39:65:4c:a1:b5:c0:41:6c:52: 65:8c:4a:67:5d:f8:9a:38:22:e1:21:8a:ca:24:a6: 4e:a4:ff:5d:10:5f:06:a7:6a:fb:b2:c4:34:31:0d: 12:f8:c6:7b:0e:4c:e9:a5:1c:a2:11:2f:17:35:cf: 6a:7f:d7:08:b2:68:53:e5:76:7f:1b:8f:a7:5f:35: 5e:42:4b:3b:0b:75:50:3c:0a:6c:d3:66:ca:b0:d6: 36:2f:c8:cc:c8:25:bf:85:95:10:64:94:d2:95:36: ac:eb:fb:85:b0:b1:4d:b3:a9:ed:cf:81:98:6a:ef: 3c:e4:14:e9:14:2e:8b:29:9a:70:9b:db:30:1e:85: a0:c4:90:dc:59:e4:de:0f:38:00:08:3e:54:0e:cd: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F0:15:70:CE:51:73:E2:FC:33:F4:F9:CF:CC:A7:82:61:24:D2:81 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:31:46:b8:14:fb:04:89:23:f6:16:9e:f6:47:15:da:02: 45:35:e6:dd:1a:d1:1a:12:42:57:3e:e1:71:ee:ec:8b:41:ca: c2:e9:f1:b8:ea:99:d0:09:63:bf:20:4c:25:a2:31:ad:0f:9f: 0f:8c:29:ff:5b:59:43:b2:29:8e:3a:30:1f:2e:dd:76:2b:3f: 64:59:53:33:d2:5f:59:53:41:ae:db:bd:5e:59:a7:81:17:59: 06:29:43:0f:e6:13:fa:92:a0:c5:22:ac:aa:ae:60:f3:6a:e4: b8:4b:f8:bf:98:78:b4:a9:85:c6:db:e0:48:aa:4b:c7:65:55: a2:25:cb:25:fc:db:e9:8f:a2:fc:9f:fb:b2:8c:fa:af:38:a3: 9a:13:a3:f3:ac:83:a2:17:a9:f5:02:01:33:e7:b8:ea:a7:38: 80:00:52:d9:13:a1:83:a3:d6:6c:49:ca:22:1f:24:e7:57:a7: 32:29:e0:ce:e2:40:5e:9e:b3:2b:47:4e:15:01:59:77:48:98: 14:e5:85:b4:30:57:49:73:30:2e:71:19:11:cd:1a:be:dc:42: 72:48:78:92:ed:b3:e1:28:7a:f9:e9:e8:96:f6:b8:a0:88:0c: 36:24:bd:fe:68:00:84:37:99:92:d0:fb:42:2b:80:65:05:4e: fa:c1:70:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAt5t1bUxOi87OfPWiLruLuBwwQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTA3MjExMTA2MDFaFw0yNTA3MjQxNDAyMDFaMDMxMTAvBgNV BAMTKDk2RjAxNTcwQ0U1MTczRTJGQzMzRjRGOUNGQ0NBNzgyNjEyNEQyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGjSVSQWr8IxOQywx+ry7+WUy PDZeinEgeok1clkZlFWYHo8fMSAr0dOG3Nso3z+hhSDwHaJi2Awot9LGqgR6k/BO ztrIViz1nzMlR/CdBUuJjadZx+QkfJfyGnspqw4v3VdvK23LtdI4eFaNOzllTKG1 wEFsUmWMSmdd+Jo4IuEhisokpk6k/10QXwanavuyxDQxDRL4xnsOTOmlHKIRLxc1 z2p/1wiyaFPldn8bj6dfNV5CSzsLdVA8CmzTZsqw1jYvyMzIJb+FlRBklNKVNqzr +4WwsU2zqe3PgZhq7zzkFOkULospmnCb2zAehaDEkNxZ5N4POAAIPlQOzUQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvAVcM5Rc+L8M/T5z8yngmEk0oEwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuIMUa4FPsEiSP2Fp72RxXaAkU15t0a0RoS Qlc+4XHu7ItBysLp8bjqmdAJY78gTCWiMa0Pnw+MKf9bWUOyKY46MB8u3XYrP2RZ UzPSX1lTQa7bvV5Zp4EXWQYpQw/mE/qSoMUirKquYPNq5LhL+L+YeLSphcbb4Eiq S8dlVaIlyyX82+mPovyf+7KM+q84o5oTo/Osg6IXqfUCATPnuOqnOIAAUtkToYOj 1mxJyiIfJOdXpzIp4M7iQF6esytHThUBWXdImBTlhbQwV0lzMC5xGRHNGr7cQnJI eJLts+Eoevnp6Jb2uKCIDDYkvf5oAIQ3mZLQ+0IrgGUFTvrBcBE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:24:49 2025 by rpki-client