$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: 0dfMduGbOqxG2r1mTB4J9BrQqHoKdbKu2EZdNLEqSKk= Subject key identifier: 54:8D:B0:C9:CC:F7:A2:D0:97:07:FB:2E:5E:D7:78:07:97:F8:15:37 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 7C481C27E06A9CA7F5928B86249A4086C6FF73C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 0473 Signing time: Sat 19 Jul 2025 03:10:47 +0000 Manifest this update: Sat 19 Jul 2025 03:05:47 +0000 Manifest next update: Tue 22 Jul 2025 05:39:47 +0000 Files and hashes: 1: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: pjB3g0TIWy0UYGv6eBVQdtCpH0PNoM+43zMlWwNFvmk=) 2: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: fzXYj+/Wlk2+pHJ1gJZrQ6X0Tnu8HMMmPoocnHTOJ8E=) 3: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: 3OXjddu9GYm+pnGIRRvw8uTtgTnaQOQocX2ZWf81HfA=) 4: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: WZEcRoBw5pAR5VSb916+kaVDUlS4wq/ib5rS3X/sotw=) 5: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: UmfhnL8RZYJSndBdwe7iI677EbidAY8O+tflsfoU+/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 05:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:48:1c:27:e0:6a:9c:a7:f5:92:8b:86:24:9a:40:86:c6:ff:73:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Jul 19 03:05:47 2025 GMT Not After : Jul 22 05:39:47 2025 GMT Subject: CN=548DB0C9CCF7A2D09707FB2E5ED7780797F81537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:5b:82:9c:d1:94:5a:4c:8d:2a:e2:f4:b3: 2b:b4:9a:fc:69:31:2f:2a:c2:eb:53:ca:66:dc:39: ed:e6:78:e1:2d:8f:2d:75:e0:e3:a3:12:e6:53:a3: 23:27:69:87:f7:f5:f8:5b:18:e0:69:2e:21:91:ce: ff:9a:9c:45:47:3a:fb:20:f4:de:62:45:48:87:53: e9:72:6d:c4:be:00:e1:99:00:f5:af:9a:08:fc:92: 16:9d:7b:6a:e0:3e:b0:6e:c0:e7:20:c0:d0:17:8c: 4f:b8:38:cc:f5:79:70:53:7d:c1:5e:9c:ce:d7:c2: 58:ae:a6:ea:80:e9:63:ee:07:38:87:6c:84:b2:ce: e7:6e:c4:b8:af:8b:bc:75:02:1b:03:56:6e:5c:df: 3f:dd:5b:7a:35:de:24:28:51:ff:45:12:6a:fc:06: bf:c5:00:e0:85:ac:31:c2:1d:9b:3c:99:28:69:c0: 4f:61:b6:63:a5:f6:ea:a3:74:36:8b:e0:4b:37:c2: 8a:b4:0c:23:30:8f:4c:bc:8d:96:8c:3a:04:6e:8b: 46:07:d9:11:a6:d7:c6:16:57:0f:1a:d5:dd:2c:f3: 62:db:2f:3b:0d:83:d0:33:68:c3:c0:36:21:6d:a2: c2:62:66:07:fc:53:b6:4d:0d:f8:46:eb:91:5c:ad: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8D:B0:C9:CC:F7:A2:D0:97:07:FB:2E:5E:D7:78:07:97:F8:15:37 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:18:9a:da:ce:b9:5d:aa:75:a3:17:4f:fc:7e:02:3f:7b:d2: f9:bd:bb:32:18:0e:1c:d2:5a:6e:9e:dd:06:3a:a9:6e:14:2a: c9:20:10:dd:b4:5b:54:e0:bc:b6:be:8f:04:81:1b:3d:33:d2: d5:e1:27:34:da:bf:35:de:46:28:ae:28:ab:2b:49:5f:e1:06: 31:b1:d8:52:97:2f:fb:71:40:97:c1:d9:07:b7:37:2c:cb:bf: be:11:df:9a:7a:db:c2:3b:41:fd:02:82:47:7b:ef:31:65:ac: 00:48:a6:51:c9:ed:73:0a:01:c4:ff:b8:21:9a:08:f7:5e:79: d5:23:61:bd:17:fb:84:7c:38:df:b6:be:47:4f:8d:53:59:80: 2f:63:6e:7d:06:12:27:c3:f7:3d:4d:40:24:a5:4a:6d:4e:dc: 20:8e:e9:a7:95:23:be:31:56:2b:f8:e4:9d:9d:aa:3d:59:fa: d2:34:a0:44:5c:76:e5:3a:e4:1d:51:79:ef:0f:72:a8:fb:d0: 1b:96:93:ab:8e:6e:bc:f3:3a:dd:9e:4b:35:cd:72:0e:6d:17: 55:1c:9b:bf:8f:87:8e:5b:75:60:01:ec:ac:b5:77:24:df:7b: 94:e6:d1:30:02:bb:11:5b:bc:6a:09:79:42:b9:cb:09:ec:13: 9c:ab:25:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEgcJ+BqnKf1kouGJJpAhsb/c8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNTA3MTkwMzA1NDdaFw0yNTA3MjIwNTM5NDdaMDMxMTAvBgNV BAMTKDU0OERCMEM5Q0NGN0EyRDA5NzA3RkIyRTVFRDc3ODA3OTdGODE1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodFuCnNGUWkyNKuL0syu0mvxp MS8qwutTymbcOe3meOEtjy114OOjEuZToyMnaYf39fhbGOBpLiGRzv+anEVHOvsg 9N5iRUiHU+lybcS+AOGZAPWvmgj8khade2rgPrBuwOcgwNAXjE+4OMz1eXBTfcFe nM7XwliupuqA6WPuBziHbISyzuduxLivi7x1AhsDVm5c3z/dW3o13iQoUf9FEmr8 Br/FAOCFrDHCHZs8mShpwE9htmOl9uqjdDaL4Es3woq0DCMwj0y8jZaMOgRui0YH 2RGm18YWVw8a1d0s82LbLzsNg9AzaMPANiFtosJiZgf8U7ZNDfhG65FcrbgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVI2wycz3otCXB/suXtd4B5f4FTcwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEYmtrOuV2qdaMXT/x+Aj970vm9uzIYDhzS Wm6e3QY6qW4UKskgEN20W1TgvLa+jwSBGz0z0tXhJzTavzXeRiiuKKsrSV/hBjGx 2FKXL/txQJfB2Qe3NyzLv74R35p628I7Qf0Cgkd77zFlrABIplHJ7XMKAcT/uCGa CPdeedUjYb0X+4R8ON+2vkdPjVNZgC9jbn0GEifD9z1NQCSlSm1O3CCO6aeVI74x Viv45J2dqj1Z+tI0oERcduU65B1Ree8Pcqj70BuWk6uObrzzOt2eSzXNcg5tF1Uc m7+Ph45bdWAB7Ky1dyTfe5Tm0TACuxFbvGoJeUK5ywnsE5yrJQU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:26 2025 by rpki-client