$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: zIFmHaLOOWOBUZVzj+P14S5ateujGEUqF+0m1/JY6yM= Subject key identifier: 0E:45:BE:48:66:96:BA:EE:A0:46:9B:16:46:3B:CE:7B:06:E1:B6:60 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 3DE7B97C9F7C3E4F2FBB440BFD98C1C56FAF6DC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 0223 Signing time: Tue 03 Jun 2025 07:33:37 +0000 Manifest this update: Tue 03 Jun 2025 07:28:37 +0000 Manifest next update: Fri 06 Jun 2025 09:17:37 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) 2: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: RIw+9fyKvB4CtuTAMvo217shAOHNXMgBCmxFH+BvBcY=) 3: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 09:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e7:b9:7c:9f:7c:3e:4f:2f:bb:44:0b:fd:98:c1:c5:6f:af:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Jun 3 07:28:37 2025 GMT Not After : Jun 6 09:17:37 2025 GMT Subject: CN=0E45BE486696BAEEA0469B16463BCE7B06E1B660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:e7:2c:ae:1f:48:bb:c7:c8:d4:c0:97:23: fc:b3:a0:ff:31:de:d0:7f:4b:af:5f:9f:f0:96:18: 06:cf:ad:30:02:cc:14:7d:b2:4e:a4:a4:d1:f1:76: a9:29:32:87:cf:6c:e6:f5:e1:58:70:c9:71:18:d4: e5:41:ab:e9:1a:02:56:a4:ab:8a:da:5e:15:19:52: 00:47:d1:e9:fc:a7:72:3f:ab:8d:83:93:9b:8f:13: a3:1c:bc:d1:ac:60:76:ec:fb:bf:75:47:94:32:72: e8:68:ce:93:2f:7b:06:30:05:90:f3:97:66:66:07: 39:23:d7:b1:11:39:20:e1:fc:e3:34:5d:9a:86:43: e3:2f:44:6b:8f:0a:db:fd:28:92:3c:71:9c:d4:a9: 1e:26:ad:60:13:c4:f8:ac:22:d0:86:8b:23:27:c4: 39:c4:f8:f9:a7:8d:0f:48:8a:28:fe:4c:21:a5:b7: 18:5b:20:70:69:2d:fe:e9:b0:04:99:29:9c:c7:c9: ad:be:b7:22:c8:42:2d:8f:84:24:47:0f:0f:78:37: c9:0f:c4:7f:27:d2:34:57:c2:e5:d3:a0:d6:27:54: a6:d6:47:4f:ab:f9:32:01:98:6d:56:fc:66:6f:58: b2:f1:c5:c7:6a:40:ea:91:62:0e:5d:e9:41:b1:c5: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:45:BE:48:66:96:BA:EE:A0:46:9B:16:46:3B:CE:7B:06:E1:B6:60 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:09:da:a9:5c:5f:fc:90:6c:9c:9b:95:ae:91:55:32:fc:81: e8:7b:2f:ec:f9:0a:dd:45:94:97:06:4c:e0:46:86:5d:f9:6c: ad:75:7a:ac:64:73:3d:37:f4:1f:1c:00:7a:3b:6b:c7:70:8c: fe:58:5e:e2:c6:da:4b:64:54:fb:21:05:5d:e4:c9:4b:b6:b6: 9a:59:33:a2:cf:23:4f:93:c7:b4:f0:3c:a6:3f:c7:7c:55:78: 3b:50:51:c1:ce:50:f3:23:30:33:71:f5:31:98:c6:a5:a6:44: bd:a7:e7:c2:ac:70:b2:65:84:b6:b9:88:1f:35:a7:c5:4a:af: ad:c8:a7:71:5d:e4:5f:d6:05:44:0b:9c:d3:9c:9e:ed:6b:02: e1:b4:3b:68:30:18:51:0c:52:4c:7e:24:5a:9a:1c:7f:82:2d: 5a:1b:b9:aa:58:0f:23:36:14:1f:63:75:f5:dd:3b:31:3b:64: 07:5d:da:06:37:80:65:9c:6c:56:c0:25:85:de:19:cb:b7:6b: b1:a4:09:f7:2a:e1:52:98:2d:8d:d0:06:9a:ec:69:60:65:5d: 75:15:a6:97:4a:fd:0f:46:89:32:61:78:63:03:b9:fc:f0:91: ea:7b:84:97:b5:16:9e:e5:00:e6:b7:b7:0f:c1:e1:b6:0d:3b: a0:34:b9:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPee5fJ98Pk8vu0QL/ZjBxW+vbcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTA2MDMwNzI4MzdaFw0yNTA2MDYwOTE3MzdaMDMxMTAvBgNV BAMTKDBFNDVCRTQ4NjY5NkJBRUVBMDQ2OUIxNjQ2M0JDRTdCMDZFMUI2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXecsrh9Iu8fI1MCXI/yzoP8x 3tB/S69fn/CWGAbPrTACzBR9sk6kpNHxdqkpMofPbOb14VhwyXEY1OVBq+kaAlak q4raXhUZUgBH0en8p3I/q42Dk5uPE6McvNGsYHbs+791R5QycuhozpMvewYwBZDz l2ZmBzkj17EROSDh/OM0XZqGQ+MvRGuPCtv9KJI8cZzUqR4mrWATxPisItCGiyMn xDnE+PmnjQ9Iiij+TCGltxhbIHBpLf7psASZKZzHya2+tyLIQi2PhCRHDw94N8kP xH8n0jRXwuXToNYnVKbWR0+r+TIBmG1W/GZvWLLxxcdqQOqRYg5d6UGxxWN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkW+SGaWuu6gRpsWRjvOewbhtmAwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIJ2qlcX/yQbJybla6RVTL8geh7L+z5Ct1F lJcGTOBGhl35bK11eqxkcz039B8cAHo7a8dwjP5YXuLG2ktkVPshBV3kyUu2tppZ M6LPI0+Tx7TwPKY/x3xVeDtQUcHOUPMjMDNx9TGYxqWmRL2n58KscLJlhLa5iB81 p8VKr63Ip3Fd5F/WBUQLnNOcnu1rAuG0O2gwGFEMUkx+JFqaHH+CLVobuapYDyM2 FB9jdfXdOzE7ZAdd2gY3gGWcbFbAJYXeGcu3a7GkCfcq4VKYLY3QBprsaWBlXXUV ppdK/Q9GiTJheGMDufzwkep7hJe1Fp7lAOa3tw/B4bYNO6A0uXg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:23 2025 by rpki-client