$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: 7HH1tc739tfcEUg/ci37J4f6Y0yRw0fpA8RpTEKJdMs= Subject key identifier: A2:5A:33:DD:C4:08:F0:E1:B1:00:7D:97:7F:BC:DE:EB:BC:75:61:03 Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 5C9453D6DC7388A4D2CC55C75C4ED4AF9E08A81E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 01CC Signing time: Sat 06 Sep 2025 18:00:37 +0000 Manifest this update: Sat 06 Sep 2025 17:55:37 +0000 Manifest next update: Wed 10 Sep 2025 04:26:37 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 2: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: bAvzT+45N1pLM1KxS3ZeOs1twFx1qpIjlRLsuVrNwyY=) 3: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:94:53:d6:dc:73:88:a4:d2:cc:55:c7:5c:4e:d4:af:9e:08:a8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Sep 6 17:55:37 2025 GMT Not After : Sep 10 04:26:37 2025 GMT Subject: CN=A25A33DDC408F0E1B1007D977FBCDEEBBC756103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:41:3a:66:e9:ac:af:94:6f:38:d8:fa:2f: 92:24:35:27:7f:59:d0:33:fc:e0:5c:7a:21:81:10: cc:55:48:33:51:47:1f:2e:b3:74:8e:a5:b1:f9:75: 6f:99:c8:73:cd:88:61:cd:79:87:fa:c8:2f:6e:a5: 56:7b:c7:10:ea:6f:46:15:40:fa:28:74:2f:aa:bb: e9:c4:0d:02:45:0b:b3:c3:db:f2:bf:a3:39:ad:3c: f0:7e:ca:22:c6:41:c3:aa:ee:4d:2b:cc:1f:5d:45: 71:6a:6e:56:b4:47:f5:da:88:78:c9:3a:9b:de:c7: 77:41:e3:bb:12:17:2d:c1:91:56:be:19:ba:39:c9: f9:fc:19:8c:27:a5:df:a7:4d:1d:22:2a:e9:52:e0: c6:e0:26:ce:18:0e:68:69:99:ec:dd:08:fc:ee:1a: 73:70:20:c8:41:c9:93:b3:eb:1e:84:64:f5:98:ba: 02:6a:33:b2:3d:d5:07:ed:9b:18:02:0c:0c:f2:c5: 4c:06:c4:5f:5e:5f:11:71:02:3c:99:2c:00:32:49: a1:61:6b:b0:e9:04:da:2a:94:bd:9e:00:17:07:c7: ab:15:82:73:6a:d2:5c:3b:40:87:27:13:e2:69:02: ca:d6:6b:0e:de:93:cb:25:39:a5:f8:6d:da:b3:05: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5A:33:DD:C4:08:F0:E1:B1:00:7D:97:7F:BC:DE:EB:BC:75:61:03 X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:57:2c:2c:ad:20:ec:b2:4d:9b:ec:e7:e9:50:04:82:61:b8: e7:c6:c2:57:53:a9:94:2a:df:49:9a:50:44:fb:8e:01:78:15: f0:f0:1f:4c:fa:80:db:cc:8a:d6:8a:b5:11:fe:05:b2:2f:ba: b7:a4:cf:74:be:77:00:03:00:23:99:e0:b9:d3:24:7d:01:9c: b4:c4:e5:52:4b:dc:ab:3f:f7:dd:fe:25:1f:c7:17:46:a6:5b: 6f:72:39:2f:bd:b5:ed:32:55:e1:14:e3:13:38:14:70:30:e8: 4c:a0:17:45:26:bd:48:2b:fa:1e:3c:db:79:25:ad:d9:41:74: 43:35:b5:a0:56:25:0c:86:91:50:76:50:84:55:09:be:c5:d5: 0b:66:64:4a:27:66:bb:30:66:1a:ca:e1:d5:bd:4c:00:53:96: fa:6e:94:09:bc:0a:da:5d:a7:f1:6e:5a:39:d0:40:df:f2:b4: 9c:9e:9c:7b:e3:70:43:8b:3b:5d:b2:81:27:b1:ef:3e:f8:e9: 77:2f:b0:f1:ff:bf:be:ea:ad:ed:4c:ce:c9:95:8d:f7:45:f3: 7e:37:65:27:0d:fb:3d:af:01:88:1f:f5:06:b7:fa:7e:2f:0e: 7b:f4:2f:07:95:f5:53:59:b7:c5:a4:84:bf:40:47:29:7f:ba: 65:71:f0:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJRT1txziKTSzFXHXE7Ur54IqB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTA5MDYxNzU1MzdaFw0yNTA5MTAwNDI2MzdaMDMxMTAvBgNV BAMTKEEyNUEzM0REQzQwOEYwRTFCMTAwN0Q5NzdGQkNERUVCQkM3NTYxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BkE6Zumsr5RvONj6L5IkNSd/ WdAz/OBceiGBEMxVSDNRRx8us3SOpbH5dW+ZyHPNiGHNeYf6yC9upVZ7xxDqb0YV QPoodC+qu+nEDQJFC7PD2/K/ozmtPPB+yiLGQcOq7k0rzB9dRXFqbla0R/XaiHjJ Opvex3dB47sSFy3BkVa+Gbo5yfn8GYwnpd+nTR0iKulS4MbgJs4YDmhpmezdCPzu GnNwIMhByZOz6x6EZPWYugJqM7I91QftmxgCDAzyxUwGxF9eXxFxAjyZLAAySaFh a7DpBNoqlL2eABcHx6sVgnNq0lw7QIcnE+JpAsrWaw7ek8slOaX4bdqzBVUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoloz3cQI8OGxAH2Xf7ze67x1YQMwHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdXLCytIOyyTZvs5+lQBIJhuOfGwldTqZQq 30maUET7jgF4FfDwH0z6gNvMitaKtRH+BbIvurekz3S+dwADACOZ4LnTJH0BnLTE 5VJL3Ks/993+JR/HF0amW29yOS+9te0yVeEU4xM4FHAw6EygF0UmvUgr+h4823kl rdlBdEM1taBWJQyGkVB2UIRVCb7F1QtmZEonZrswZhrK4dW9TABTlvpulAm8Ctpd p/FuWjnQQN/ytJyenHvjcEOLO12ygSex7z746XcvsPH/v77qre1MzsmVjfdF8343 ZScN+z2vAYgf9Qa3+n4vDnv0LweV9VNZt8WkhL9ARyl/umVx8IQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:08 2025 by rpki-client