$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: vAikyNL1gBHssW9wx2CEoYtmxhS0f9jIHROgF2x/TXo= Subject key identifier: 09:56:9D:3E:F8:07:D6:94:A2:F3:17:5E:A7:67:07:E5:67:1B:EF:1C Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 437085072EA0334433E4AF314A58BAA2823F7AB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 01CD Signing time: Mon 02 Jun 2025 15:01:59 +0000 Manifest this update: Mon 02 Jun 2025 14:56:59 +0000 Manifest next update: Thu 05 Jun 2025 21:51:59 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: qvItZEHAe/vb/U9koGlTF9AFheZIt3XjJg3NJ3xg6Xo=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:70:85:07:2e:a0:33:44:33:e4:af:31:4a:58:ba:a2:82:3f:7a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Jun 2 14:56:59 2025 GMT Not After : Jun 5 21:51:59 2025 GMT Subject: CN=09569D3EF807D694A2F3175EA76707E5671BEF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:fa:3b:b1:98:7e:37:ea:e2:ad:f4:58:38: 18:19:b4:ac:01:9e:2b:14:44:33:e2:26:2f:fd:fb: 9c:8c:a5:b6:49:39:1a:11:f3:db:00:bf:a5:9e:c8: db:1e:02:26:24:3a:38:38:db:cc:37:a0:d4:f7:58: bb:e5:f2:f5:ac:61:80:eb:69:8b:c7:49:30:80:fd: f7:a8:b1:bf:6f:5b:cc:95:33:d6:32:c7:df:1e:d3: 2f:8f:ba:62:fc:2e:57:c2:29:b9:95:52:e4:cb:ca: 60:9c:3f:ce:23:ba:8a:0d:e1:7f:bc:1c:0a:7b:c4: 9e:a4:e6:56:5b:b0:db:2b:6a:9a:69:1a:4f:e6:90: df:36:f8:67:9d:a5:00:51:2e:e4:df:66:b7:68:8d: c6:26:f2:b2:02:2b:e5:5d:ba:5c:c0:8e:e8:26:b9: 1d:20:59:0a:33:dd:47:6d:96:51:07:7a:03:84:d1: 34:ce:aa:5a:da:f5:a0:2f:35:7b:4e:2a:ee:03:2c: e7:f3:60:c6:ca:cc:49:11:30:96:68:a8:41:dd:90: 84:a5:b8:ec:23:b6:59:88:40:bd:2e:79:0a:2f:9b: c6:cf:02:73:70:c3:9c:b1:0f:38:b6:2e:54:84:9c: f1:b3:0e:d8:d1:83:c9:79:01:12:d2:6a:cd:71:7a: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:9D:3E:F8:07:D6:94:A2:F3:17:5E:A7:67:07:E5:67:1B:EF:1C X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:25:88:4e:49:7f:17:be:48:cb:bb:26:25:14:a3:c5:32:5d: d3:20:d5:5a:f7:e5:5f:60:7d:94:8b:0d:53:d6:7f:29:cf:22: 10:ca:72:18:f8:75:99:6d:70:64:42:ef:cd:62:33:88:60:e0: 2f:67:de:33:46:d4:6b:75:56:e1:c2:1f:e2:14:93:68:b5:e4: 03:4a:f9:b6:90:33:54:38:8b:8f:2a:a7:c3:37:0e:63:7b:e1: e3:21:e7:0c:ea:3d:c0:a2:65:05:23:07:ad:0b:be:25:04:49: a1:15:5a:1e:8c:7a:22:78:b0:a2:50:f4:24:3c:3e:17:ff:a3: 08:e7:36:e1:55:67:80:0e:fd:29:45:42:40:7e:85:29:2f:16: be:8f:5c:a3:d6:ef:65:03:07:70:ae:dc:a3:69:1b:07:98:a1: fe:bb:8a:d0:7d:56:41:93:b1:84:c7:b3:41:df:3c:97:80:3b: 62:bd:09:b7:0a:49:cf:7e:da:f5:e0:7d:22:aa:19:f5:4c:41: 26:9c:cd:d2:bb:21:15:0c:1c:e5:9b:c4:22:78:63:5b:63:f5: 88:95:35:4f:be:da:26:75:b0:d4:a9:df:d7:26:c1:8b:f3:cf: 6f:42:61:a8:93:9d:9b:97:b5:61:de:0e:be:73:3c:a8:ef:08: 44:2f:85:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3CFBy6gM0Qz5K8xSli6ooI/erAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTA2MDIxNDU2NTlaFw0yNTA2MDUyMTUxNTlaMDMxMTAvBgNV BAMTKDA5NTY5RDNFRjgwN0Q2OTRBMkYzMTc1RUE3NjcwN0U1NjcxQkVGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70/o7sZh+N+rirfRYOBgZtKwB nisURDPiJi/9+5yMpbZJORoR89sAv6WeyNseAiYkOjg428w3oNT3WLvl8vWsYYDr aYvHSTCA/feosb9vW8yVM9Yyx98e0y+PumL8LlfCKbmVUuTLymCcP84juooN4X+8 HAp7xJ6k5lZbsNsrapppGk/mkN82+GedpQBRLuTfZrdojcYm8rICK+VdulzAjugm uR0gWQoz3UdtllEHegOE0TTOqlra9aAvNXtOKu4DLOfzYMbKzEkRMJZoqEHdkISl uOwjtlmIQL0ueQovm8bPAnNww5yxDzi2LlSEnPGzDtjRg8l5ARLSas1xeoCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVadPvgH1pSi8xdep2cH5Wcb7xwwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIliE5Jfxe+SMu7JiUUo8UyXdMg1Vr35V9g fZSLDVPWfynPIhDKchj4dZltcGRC781iM4hg4C9n3jNG1Gt1VuHCH+IUk2i15ANK +baQM1Q4i48qp8M3DmN74eMh5wzqPcCiZQUjB60LviUESaEVWh6MeiJ4sKJQ9CQ8 Phf/owjnNuFVZ4AO/SlFQkB+hSkvFr6PXKPW72UDB3Cu3KNpGweYof67itB9VkGT sYTHs0HfPJeAO2K9CbcKSc9+2vXgfSKqGfVMQSaczdK7IRUMHOWbxCJ4Y1tj9YiV NU++2iZ1sNSp39cmwYvzz29CYaiTnZuXtWHeDr5zPKjvCEQvhco= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:40 2025 by rpki-client