$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: 2w/nFi2bX/wwJL1pRiji2CIo5aEYpJvrVunA/vDlDYY= Subject key identifier: 0B:0B:2E:86:0B:85:C0:46:6C:2B:6A:61:AC:E1:35:E4:C2:21:2A:1C Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 140036DD670B6AAF85B0F58D04A19F74AC8150FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 024C Signing time: Thu 04 Sep 2025 01:42:14 +0000 Manifest this update: Thu 04 Sep 2025 01:37:14 +0000 Manifest next update: Sun 07 Sep 2025 11:18:14 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) 2: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) 3: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: S57PE8qr5K0kXCahV/pOkSTyd9QGWmL2kMKXmg3JFfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:00:36:dd:67:0b:6a:af:85:b0:f5:8d:04:a1:9f:74:ac:81:50:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Sep 4 01:37:14 2025 GMT Not After : Sep 7 11:18:14 2025 GMT Subject: CN=0B0B2E860B85C0466C2B6A61ACE135E4C2212A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:09:2c:41:7d:fa:82:33:be:de:59:6c:ae: d2:cc:16:8d:8c:ff:75:b0:1e:ac:60:d7:3b:50:51: 01:a2:8b:03:9b:f0:6a:84:b9:f3:ca:14:c2:a5:38: 22:90:19:22:c2:28:f2:58:1a:d1:79:6d:cc:cd:95: 7c:be:9e:b3:51:63:43:6f:c6:0d:82:54:49:37:67: 07:30:30:97:99:ba:0a:de:96:08:72:3e:4b:1c:cf: 15:82:98:e2:75:fa:88:9e:1c:45:70:f4:d0:0d:4c: ed:88:ce:3c:2d:c2:39:32:8e:fa:62:c0:75:fe:ed: 3f:5b:4f:db:a0:9c:50:ac:b8:07:1e:8a:05:db:db: 38:6c:99:de:ae:9b:a7:d5:a3:02:08:cf:12:28:2d: b0:63:98:ae:9d:b1:5a:1b:af:4d:8f:53:14:7c:2e: 13:c8:a7:23:7f:f6:d6:5e:50:99:fc:cd:b6:2e:94: 5b:05:ac:48:26:7a:b0:8e:03:1e:b0:43:af:79:3b: f7:bd:dd:4e:8e:a5:66:1d:6b:c8:29:31:0c:08:ed: 97:f2:a1:33:18:58:b1:fd:40:fc:33:0c:5d:99:55: 6f:82:22:fc:28:44:cf:13:f7:b5:ed:61:35:f0:4b: df:d2:8c:97:07:72:8d:da:e3:5d:5e:0d:e1:71:15: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0B:2E:86:0B:85:C0:46:6C:2B:6A:61:AC:E1:35:E4:C2:21:2A:1C X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d4:e4:0c:45:31:42:2c:81:4a:ac:8c:85:51:ea:f9:05:99: df:ba:df:6a:57:eb:47:80:76:f7:1e:41:f3:fb:59:b7:df:20: cb:6f:1b:d5:cc:4a:43:82:9b:cf:60:b2:74:4c:39:dc:a0:ff: 78:b9:b0:15:1a:47:55:53:46:1a:4b:8a:69:27:0a:2a:cc:0a: 8e:3d:75:a3:ca:76:69:94:42:2a:3e:04:2f:95:10:4d:a9:ed: 27:0a:8a:11:bc:d3:ac:5e:f6:0e:3a:b1:76:88:19:aa:21:0d: 92:e0:01:64:49:fe:58:d7:26:34:dd:1e:6f:7c:8b:9c:b6:13: 03:d3:0b:5d:dd:20:7b:78:f9:45:de:6f:f5:3b:a2:d8:40:65: 02:9b:38:dc:ba:ee:57:db:8d:85:c9:b6:47:92:0d:3f:10:83: 3b:f9:27:86:60:4d:69:98:9c:91:d1:0e:15:ff:55:3d:43:7b: c2:b7:a0:e0:01:55:fe:f2:f5:c4:ef:50:78:2f:74:0b:5a:a3: 31:8b:66:d9:50:3a:61:15:e0:fa:39:74:a0:ca:f2:a0:37:21: 38:50:bb:6d:76:d2:12:5d:8e:57:65:14:8f:f4:e5:1b:a1:c9: 57:65:ea:a3:bb:f9:08:38:b9:16:04:76:ca:4d:02:d3:5c:f1: 79:3a:39:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAA23WcLaq+FsPWNBKGfdKyBUP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTA5MDQwMTM3MTRaFw0yNTA5MDcxMTE4MTRaMDMxMTAvBgNV BAMTKDBCMEIyRTg2MEI4NUMwNDY2QzJCNkE2MUFDRTEzNUU0QzIyMTJBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwQksQX36gjO+3llsrtLMFo2M /3WwHqxg1ztQUQGiiwOb8GqEufPKFMKlOCKQGSLCKPJYGtF5bczNlXy+nrNRY0Nv xg2CVEk3ZwcwMJeZugrelghyPksczxWCmOJ1+oieHEVw9NANTO2Izjwtwjkyjvpi wHX+7T9bT9ugnFCsuAceigXb2zhsmd6um6fVowIIzxIoLbBjmK6dsVobr02PUxR8 LhPIpyN/9tZeUJn8zbYulFsFrEgmerCOAx6wQ695O/e93U6OpWYda8gpMQwI7Zfy oTMYWLH9QPwzDF2ZVW+CIvwoRM8T97XtYTXwS9/SjJcHco3a411eDeFxFZbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCwsuhguFwEZsK2phrOE15MIhKhwwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTU5AxFMUIsgUqsjIVR6vkFmd+632pX60eA dvceQfP7WbffIMtvG9XMSkOCm89gsnRMOdyg/3i5sBUaR1VTRhpLimknCirMCo49 daPKdmmUQio+BC+VEE2p7ScKihG806xe9g46sXaIGaohDZLgAWRJ/ljXJjTdHm98 i5y2EwPTC13dIHt4+UXeb/U7othAZQKbONy67lfbjYXJtkeSDT8Qgzv5J4ZgTWmY nJHRDhX/VT1De8K3oOABVf7y9cTvUHgvdAtaozGLZtlQOmEV4Po5dKDK8qA3IThQ u2120hJdjldlFI/05RuhyVdl6qO7+Qg4uRYEdspNAtNc8Xk6OcE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:55 2025 by rpki-client