$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: 1mxS32GBf39HE5W4WxruvTbJJUlnKXC0Po4hdScSFtw= Subject key identifier: A1:F6:69:62:56:1A:12:DE:44:A3:70:31:1C:F0:9B:9C:62:0D:2E:D9 Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 2C05F50F36CA644C8416F01B24FF6092B2C5B1BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 0197 Signing time: Thu 08 May 2025 19:30:37 +0000 Manifest this update: Thu 08 May 2025 19:25:37 +0000 Manifest next update: Mon 12 May 2025 06:13:37 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: tXIK2uKcLN8njKuQGzkA21bxMeT1zlnUlrgkajoE3CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:05:f5:0f:36:ca:64:4c:84:16:f0:1b:24:ff:60:92:b2:c5:b1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: May 8 19:25:37 2025 GMT Not After : May 12 06:13:37 2025 GMT Subject: CN=A1F66962561A12DE44A370311CF09B9C620D2ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a9:0f:01:9a:26:e4:dc:ab:2f:3a:ae:0e:33: 26:32:6e:51:bb:de:02:d4:6e:77:5d:22:bb:37:38: 14:d7:05:1f:9c:ce:34:e9:cb:6f:93:c4:94:82:32: 73:af:e8:17:43:99:cb:fc:17:96:dd:2e:49:47:af: 5e:7c:aa:aa:6c:8c:70:51:ba:cf:b9:db:36:64:37: 4e:d5:50:20:0f:ec:21:96:49:14:cb:f3:55:23:42: 76:ea:a4:cf:96:6e:a3:7e:72:ce:bd:38:57:c7:83: fb:67:2c:07:8b:5a:b5:ac:7d:a3:60:a1:81:44:a4: 51:66:14:cc:5a:c0:a7:f7:28:55:ec:ca:f2:4b:23: 26:e3:1c:5a:8d:33:12:1a:55:bb:84:d5:5f:d5:23: 1d:b4:25:01:ca:29:02:a9:a2:7a:33:6f:c6:ad:4c: da:9d:57:7c:ba:8b:39:07:ea:77:04:4e:1c:8b:9a: c8:b8:36:f7:06:f5:19:58:78:45:89:41:36:12:ab: b8:2f:10:71:4a:40:87:c3:a3:54:ad:51:c8:60:21: 93:b4:0a:4f:4b:9c:8f:75:18:e2:b9:ba:44:71:18: 27:ca:36:d1:e4:06:66:bb:25:e4:e0:f7:d5:77:27: c9:76:38:71:34:e8:58:1d:54:a5:bc:6a:e9:0d:65: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F6:69:62:56:1A:12:DE:44:A3:70:31:1C:F0:9B:9C:62:0D:2E:D9 X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c2:75:12:1b:54:d1:eb:a2:f4:bf:23:31:18:4d:3c:d9:d7: c4:f5:20:d4:e6:1a:99:f5:a4:35:9d:73:bb:50:22:90:3b:35: c7:11:75:a6:aa:97:0c:f7:38:c6:df:be:da:6c:89:9e:b7:42: 44:04:b2:ea:9a:11:a6:41:cc:4a:60:fb:62:75:a5:d7:f7:d9: a2:4b:7d:d9:59:27:ac:5b:fa:a1:2e:d2:ec:21:31:e5:eb:d1: f7:c3:db:37:7e:20:0a:c8:be:e1:08:b5:63:ff:3b:85:5a:76: cb:68:82:49:7f:29:fb:98:db:9a:b5:c8:87:68:0e:a4:41:c9: 00:a6:97:d8:14:47:7d:8f:de:67:80:c9:20:87:87:83:7a:6f: 70:7f:46:fc:74:6a:9f:6d:b5:f8:1d:3d:da:a7:da:58:8b:0e: 93:8c:bc:82:81:ed:c0:28:78:c1:65:66:7e:03:dd:fd:2c:84: 7e:ed:9f:98:1a:06:01:10:d0:5b:6b:d0:9b:1f:fa:16:92:af: 2a:81:c5:1d:ee:b0:3e:5a:c2:15:0b:c2:c3:fd:bc:08:71:98: f1:22:89:7d:ea:3e:96:29:0e:4a:6a:30:73:c7:92:f9:11:bc: ed:88:22:f4:11:69:58:7e:37:3a:3b:56:71:94:8f:87:f3:e4: b8:84:45:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAX1DzbKZEyEFvAbJP9gkrLFsb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTA1MDgxOTI1MzdaFw0yNTA1MTIwNjEzMzdaMDMxMTAvBgNV BAMTKEExRjY2OTYyNTYxQTEyREU0NEEzNzAzMTFDRjA5QjlDNjIwRDJFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzqQ8Bmibk3KsvOq4OMyYyblG7 3gLUbnddIrs3OBTXBR+czjTpy2+TxJSCMnOv6BdDmcv8F5bdLklHr158qqpsjHBR us+52zZkN07VUCAP7CGWSRTL81UjQnbqpM+WbqN+cs69OFfHg/tnLAeLWrWsfaNg oYFEpFFmFMxawKf3KFXsyvJLIybjHFqNMxIaVbuE1V/VIx20JQHKKQKponozb8at TNqdV3y6izkH6ncEThyLmsi4NvcG9RlYeEWJQTYSq7gvEHFKQIfDo1StUchgIZO0 Ck9LnI91GOK5ukRxGCfKNtHkBma7JeTg99V3J8l2OHE06FgdVKW8aukNZcN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofZpYlYaEt5Eo3AxHPCbnGINLtkwHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzCdRIbVNHrovS/IzEYTTzZ18T1INTmGpn1 pDWdc7tQIpA7NccRdaaqlwz3OMbfvtpsiZ63QkQEsuqaEaZBzEpg+2J1pdf32aJL fdlZJ6xb+qEu0uwhMeXr0ffD2zd+IArIvuEItWP/O4Vadstogkl/KfuY25q1yIdo DqRByQCml9gUR32P3meAySCHh4N6b3B/Rvx0ap9ttfgdPdqn2liLDpOMvIKB7cAo eMFlZn4D3f0shH7tn5gaBgEQ0Ftr0Jsf+haSryqBxR3usD5awhULwsP9vAhxmPEi iX3qPpYpDkpqMHPHkvkRvO2IIvQRaVh+Nzo7VnGUj4fz5LiERSE= -----END CERTIFICATE-----Generated at Sat May 10 22:23:44 2025 by rpki-client