$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: cxQnj5KvAggU9D0XoenAIAP7JmiYGKFsW4fgiPUOcR4= Subject key identifier: 64:62:A2:B1:41:F8:43:62:25:FF:34:60:E8:6D:3F:81:06:32:5F:18 Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 07FE071710D5F2B7581A0B8EDF408E21538E478E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 01F7 Signing time: Thu 04 Sep 2025 22:10:46 +0000 Manifest this update: Thu 04 Sep 2025 22:05:46 +0000 Manifest next update: Mon 08 Sep 2025 03:16:46 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: W0Wkp5In3X4X6XWLKSknsryZZhVkDn2C7HBbXFiwaXY=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fe:07:17:10:d5:f2:b7:58:1a:0b:8e:df:40:8e:21:53:8e:47:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Sep 4 22:05:46 2025 GMT Not After : Sep 8 03:16:46 2025 GMT Subject: CN=6462A2B141F8436225FF3460E86D3F8106325F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:03:7e:65:6b:f9:d5:60:82:a6:39:39:62: ed:14:9a:84:f2:ee:22:af:1c:e0:4e:0c:75:7e:99: 41:33:f3:e0:54:7a:ff:1a:79:3e:0b:2e:cb:2f:a2: 67:83:4f:7f:f9:c4:12:63:a7:a1:6a:1a:41:eb:b0: 83:10:2c:8d:21:be:94:7a:5e:e0:48:5b:c7:fa:30: 63:75:1e:c7:a3:e0:d5:2c:17:38:d5:20:4e:e5:a7: 36:f4:8c:6c:79:e0:67:86:35:3b:53:17:cf:a5:4a: e0:c6:9c:d6:6f:41:5f:ac:98:90:7d:1c:af:a8:a1: 79:af:bb:4c:e2:50:5c:69:57:06:df:51:ee:22:b7: 27:ba:47:8f:cb:ca:7a:21:e6:f8:6a:3d:93:e7:0e: ad:e3:34:58:ad:a7:7c:dc:72:e1:d1:cf:2f:41:ab: d1:02:e6:04:06:29:06:81:58:83:e9:c7:0c:72:61: ed:4d:d7:30:41:ae:66:cb:63:0f:ad:08:60:03:31: 8d:c9:3f:eb:d7:cf:f1:c4:ba:b6:da:7d:78:82:a4: 2e:eb:19:ca:4d:d2:3d:ad:c1:22:90:22:97:d4:65: 16:51:26:23:ee:13:b2:06:d9:58:0d:c5:29:5c:4b: b0:4c:37:6f:e7:73:a1:19:8c:44:2b:75:89:29:2c: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:A2:B1:41:F8:43:62:25:FF:34:60:E8:6D:3F:81:06:32:5F:18 X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bb:ac:89:d7:8a:75:9b:76:17:70:90:a5:78:bf:e4:25:f4: 86:71:63:fb:9a:c4:61:bb:ca:18:ac:60:ac:fb:6c:1b:bb:fb: a1:5a:f8:00:6b:d2:b1:12:37:c1:5c:5b:51:57:a2:bb:f4:e9: 3b:d1:fd:4f:76:e9:a7:89:8a:a0:9d:ee:ff:2e:a5:e7:77:d2: 5d:52:2d:66:de:d8:c4:2f:ae:d7:90:33:a1:50:95:d7:b6:b8: 2d:bd:f7:a1:54:35:01:29:93:ff:ea:cb:e3:ac:25:d3:50:35: 59:7f:c2:f5:cd:58:96:bc:0c:9b:69:32:a4:8e:79:d0:12:d6: 0b:e9:03:4c:be:64:97:2e:58:81:fa:4f:ce:57:2c:6e:e3:47: e9:6e:71:11:55:b8:1a:a6:1a:64:a1:ce:c3:41:d4:b1:be:4b: d1:06:8f:83:a9:49:4a:e4:2d:38:45:d5:b5:19:b5:3d:e7:85: cd:d3:47:13:ab:38:97:26:58:73:94:23:07:52:ed:06:35:63: 28:7b:5c:20:79:9d:20:b4:45:71:2e:9a:42:92:02:a3:e5:91: 22:6d:8e:34:2f:f9:4c:73:75:da:95:5a:04:3b:67:58:a2:59: 42:a9:a7:88:8a:8c:c1:cf:80:30:b8:9e:ea:20:3a:70:86:67: 62:36:7c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/4HFxDV8rdYGguO30COIVOOR44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTA5MDQyMjA1NDZaFw0yNTA5MDgwMzE2NDZaMDMxMTAvBgNV BAMTKDY0NjJBMkIxNDFGODQzNjIyNUZGMzQ2MEU4NkQzRjgxMDYzMjVGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUAN+ZWv51WCCpjk5Yu0UmoTy 7iKvHOBODHV+mUEz8+BUev8aeT4LLssvomeDT3/5xBJjp6FqGkHrsIMQLI0hvpR6 XuBIW8f6MGN1Hsej4NUsFzjVIE7lpzb0jGx54GeGNTtTF8+lSuDGnNZvQV+smJB9 HK+ooXmvu0ziUFxpVwbfUe4itye6R4/Lynoh5vhqPZPnDq3jNFitp3zccuHRzy9B q9EC5gQGKQaBWIPpxwxyYe1N1zBBrmbLYw+tCGADMY3JP+vXz/HEurbafXiCpC7r GcpN0j2twSKQIpfUZRZRJiPuE7IG2VgNxSlcS7BMN2/nc6EZjEQrdYkpLNT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGKisUH4Q2Il/zRg6G0/gQYyXxgwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+7rInXinWbdhdwkKV4v+Ql9IZxY/uaxGG7 yhisYKz7bBu7+6Fa+ABr0rESN8FcW1FXorv06TvR/U926aeJiqCd7v8uped30l1S LWbe2MQvrteQM6FQlde2uC2996FUNQEpk//qy+OsJdNQNVl/wvXNWJa8DJtpMqSO edAS1gvpA0y+ZJcuWIH6T85XLG7jR+lucRFVuBqmGmShzsNB1LG+S9EGj4OpSUrk LThF1bUZtT3nhc3TRxOrOJcmWHOUIwdS7QY1Yyh7XCB5nSC0RXEumkKSAqPlkSJt jjQv+UxzddqVWgQ7Z1iiWUKpp4iKjMHPgDC4nuogOnCGZ2I2fO4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:54 2025 by rpki-client