$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: Cxuvc3FV3SHq1UK5h2MgHwisSW8hhA/HKsVWpJXH4mQ= Subject key identifier: 46:AF:CC:71:72:D5:36:B8:B4:E6:40:9C:9F:26:1F:A2:3E:14:D5:1A Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 0ABB6FAC8E1F5D0347D6CD55B06B0604FADA23EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 01AB Signing time: Wed 23 Jul 2025 14:11:02 +0000 Manifest this update: Wed 23 Jul 2025 14:06:02 +0000 Manifest next update: Sat 26 Jul 2025 15:14:02 +0000 Files and hashes: 1: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=) 2: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: nrAaPwVVkByWsG6+ZI7KUV7NKyUs23OpqgW0QaEeS3s=) 3: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=) 4: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=) 5: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=) 6: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 15:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bb:6f:ac:8e:1f:5d:03:47:d6:cd:55:b0:6b:06:04:fa:da:23:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Jul 23 14:06:02 2025 GMT Not After : Jul 26 15:14:02 2025 GMT Subject: CN=46AFCC7172D536B8B4E6409C9F261FA23E14D51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:c3:d6:33:5f:59:1e:ca:9d:70:07:4b:e0: 20:6e:2f:fe:5b:8f:4b:02:32:b2:6e:2f:73:23:f9: 75:9e:ce:79:6b:ae:cf:a3:30:4c:cb:14:3d:e2:07: 66:ef:e5:e8:23:d8:33:b5:d9:1f:42:47:a1:47:f3: 35:6c:0c:c0:5a:7d:8a:64:ad:18:82:a8:ad:6c:b3: 5d:8c:d6:e3:99:40:f9:8a:84:b4:0a:67:b9:4c:a0: 1f:c9:0d:83:cf:0a:89:cf:b4:6d:22:ae:1f:5b:fa: ae:6b:ca:6b:82:43:6a:88:7e:a2:e9:35:37:7e:bf: 55:f9:4a:b3:61:75:14:07:9c:23:02:d8:11:0f:af: 44:f0:90:a9:d8:d1:60:64:c1:ef:db:8f:db:ed:51: 19:73:4b:47:13:96:1b:8c:92:9f:dd:ea:92:10:10: b6:f0:77:7c:00:aa:30:3e:7a:6e:e9:a2:87:a5:20: bb:38:d3:26:b2:87:ef:a6:42:e0:ab:46:60:58:9c: 21:73:0b:ff:4e:03:23:e6:30:3a:6f:a7:d6:42:c9: e5:e0:03:d5:99:e5:ae:e7:a3:5a:9e:5b:55:8f:c9: ee:f5:02:2b:08:b8:37:38:f3:a0:90:92:05:26:96: dd:6e:e3:d3:4d:73:d6:bb:8f:a5:fe:fa:36:83:81: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AF:CC:71:72:D5:36:B8:B4:E6:40:9C:9F:26:1F:A2:3E:14:D5:1A X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:93:d4:7b:52:3c:61:7d:7f:ad:bd:d1:cf:23:d6:52:15:bf: 47:e2:55:68:61:00:1e:94:76:17:95:4d:98:80:7a:f5:a1:38: 3d:08:8d:98:2f:18:09:2c:04:83:1e:e0:da:12:48:d5:68:1f: 0f:a4:b0:28:fa:6a:3b:ed:ca:84:a8:80:f7:05:3e:5b:86:26: f2:bf:b7:dd:d6:97:e2:48:ad:41:eb:72:d3:e9:19:3c:46:53: 3e:a3:7d:e0:e5:6e:e7:9d:8a:31:a5:60:c5:e5:6c:94:89:0a: 14:94:e1:74:7c:6a:a0:10:0b:1d:6b:08:2a:45:4a:db:9c:ce: da:48:fb:d2:7f:a1:05:a8:6f:d2:90:6b:66:86:41:2f:16:23: ec:de:45:e4:5b:f1:4b:ea:cf:dc:05:69:e7:b8:49:dc:05:4b: 02:c9:f4:3e:50:6e:ff:dd:12:a3:a4:ec:79:96:7f:46:70:c5: e5:fe:5e:99:fb:6a:68:a4:07:08:15:b0:39:af:f8:87:0b:59: f9:31:76:2b:62:aa:62:88:6f:04:ee:ec:f8:d1:3f:72:5b:3d: 1e:2c:a0:94:2b:9a:7d:ef:cd:62:27:62:1e:e2:cc:77:2e:5f: 57:d4:c1:3a:e3:16:f0:be:40:65:d8:49:94:ca:78:60:c7:03: 68:8c:92:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrtvrI4fXQNH1s1VsGsGBPraI+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTA3MjMxNDA2MDJaFw0yNTA3MjYxNTE0MDJaMDMxMTAvBgNV BAMTKDQ2QUZDQzcxNzJENTM2QjhCNEU2NDA5QzlGMjYxRkEyM0UxNEQ1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGucPWM19ZHsqdcAdL4CBuL/5b j0sCMrJuL3Mj+XWeznlrrs+jMEzLFD3iB2bv5egj2DO12R9CR6FH8zVsDMBafYpk rRiCqK1ss12M1uOZQPmKhLQKZ7lMoB/JDYPPConPtG0irh9b+q5rymuCQ2qIfqLp NTd+v1X5SrNhdRQHnCMC2BEPr0TwkKnY0WBkwe/bj9vtURlzS0cTlhuMkp/d6pIQ ELbwd3wAqjA+em7pooelILs40yayh++mQuCrRmBYnCFzC/9OAyPmMDpvp9ZCyeXg A9WZ5a7no1qeW1WPye71AisIuDc486CQkgUmlt1u49NNc9a7j6X++jaDgYWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURq/McXLVNri05kCcnyYfoj4U1RowHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqT1HtSPGF9f6290c8j1lIVv0fiVWhhAB6U dheVTZiAevWhOD0IjZgvGAksBIMe4NoSSNVoHw+ksCj6ajvtyoSogPcFPluGJvK/ t93Wl+JIrUHrctPpGTxGUz6jfeDlbuedijGlYMXlbJSJChSU4XR8aqAQCx1rCCpF StucztpI+9J/oQWob9KQa2aGQS8WI+zeReRb8Uvqz9wFaee4SdwFSwLJ9D5Qbv/d EqOk7HmWf0ZwxeX+Xpn7amikBwgVsDmv+IcLWfkxditiqmKIbwTu7PjRP3JbPR4s oJQrmn3vzWInYh7izHcuX1fUwTrjFvC+QGXYSZTKeGDHA2iMktw= -----END CERTIFICATE-----Generated at Fri Jul 25 06:23:20 2025 by rpki-client