$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: kA9ULmX3UqF4bepx3MMoyA99xIZKiyBp1AtPr4QuI1s= Subject key identifier: 6C:46:DA:B7:52:CB:0A:58:A6:76:10:07:67:3A:35:2D:7A:82:27:0D Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 0A279059B106665BFAFA6E6616745D9213A4421D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 01C5 Signing time: Thu 21 Aug 2025 17:30:38 +0000 Manifest this update: Thu 21 Aug 2025 17:25:38 +0000 Manifest next update: Sun 24 Aug 2025 21:04:38 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: DDoCh/5I098WR3D1IAZyNO9I6FkPBMHvAY14LFxSLsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:27:90:59:b1:06:66:5b:fa:fa:6e:66:16:74:5d:92:13:a4:42:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Aug 21 17:25:38 2025 GMT Not After : Aug 24 21:04:38 2025 GMT Subject: CN=6C46DAB752CB0A58A6761007673A352D7A82270D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:f1:94:b0:6b:5c:2f:98:8c:e8:c2:73:44: 1b:d8:82:9b:13:f4:a6:fc:0b:27:00:47:d7:c9:8f: 05:ac:2c:fd:37:25:17:a5:13:c6:76:a9:f9:f2:ba: 24:fd:63:66:64:b5:12:57:eb:f6:54:e6:4b:9b:29: ba:3f:ff:85:38:37:b7:8b:0e:40:4b:f7:f2:1b:32: c5:c6:f5:04:a7:98:44:61:7e:8b:1c:43:db:bb:52: d7:40:3f:79:6e:c3:fb:d9:89:0d:db:0d:e6:d2:2c: b0:15:89:0d:67:c9:79:95:d7:59:44:f4:55:59:42: 91:dd:f7:f9:8c:52:41:90:47:2d:5f:90:ce:d4:99: 49:3e:20:8d:4e:98:a4:57:c1:c3:3f:7f:e5:a5:4c: 84:9b:c1:f1:ae:26:a5:5d:d2:d8:92:22:c4:9d:02: d4:3a:f7:26:c1:86:cb:e6:fa:77:5e:62:f7:59:81: 5f:29:fc:d3:8f:bb:02:6a:55:2e:a5:eb:77:6c:7f: 99:d1:42:0a:d9:c5:6e:0d:93:fc:93:31:70:70:bb: 29:93:25:9c:40:40:79:0e:8d:60:61:a0:e5:67:7d: dd:0a:e2:2b:be:3f:8c:26:95:0f:66:ca:6f:c1:af: fd:cd:22:1f:84:ba:30:8f:fa:1a:a6:6b:81:66:0d: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:46:DA:B7:52:CB:0A:58:A6:76:10:07:67:3A:35:2D:7A:82:27:0D X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2c:a1:6f:18:18:80:69:f0:4d:cb:3b:26:5c:0f:7b:68:a6: 9a:99:97:a9:d5:96:86:a7:c5:9c:1f:0e:20:f7:10:7a:8d:e6: ef:e2:a5:be:8f:cb:85:f7:79:34:b0:20:2c:67:df:18:c3:c1: 92:ee:2c:55:11:f7:b6:f6:74:0b:70:44:68:23:a3:6b:00:06: ef:77:dc:0f:84:22:7d:39:7b:6c:a4:40:88:66:0a:6b:c6:fa: 0d:5f:55:af:39:47:1e:78:c1:2e:85:e2:94:b6:3e:2e:bd:01: d4:e0:de:62:42:5b:bd:e3:46:fd:f8:90:6d:05:4a:6c:3c:72: 94:08:a0:c3:bc:e5:63:2f:2a:57:57:34:3d:c1:1e:9f:00:b9: 50:d9:54:19:8c:de:da:d5:4b:50:c3:f0:ba:7b:99:8f:b5:1f: a0:16:44:a0:18:a5:82:73:6c:f2:f6:2d:3f:07:01:6b:86:f4: 90:42:8b:ad:ae:cb:e4:3a:0d:a7:bf:9c:56:b5:2d:20:a1:ed: bf:e1:db:f1:2b:91:b6:b4:93:b2:7d:cd:63:6a:6b:2d:6b:38: d3:a1:04:7a:2d:d7:1c:45:c1:fc:34:02:bc:39:82:b1:8e:cf: a3:63:6e:c0:76:6b:c5:91:bf:ca:5b:e3:e3:82:45:c5:da:f3: ff:b1:e4:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCieQWbEGZlv6+m5mFnRdkhOkQh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTA4MjExNzI1MzhaFw0yNTA4MjQyMTA0MzhaMDMxMTAvBgNV BAMTKDZDNDZEQUI3NTJDQjBBNThBNjc2MTAwNzY3M0EzNTJEN0E4MjI3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82vGUsGtcL5iM6MJzRBvYgpsT 9Kb8CycAR9fJjwWsLP03JRelE8Z2qfnyuiT9Y2ZktRJX6/ZU5kubKbo//4U4N7eL DkBL9/IbMsXG9QSnmERhfoscQ9u7UtdAP3luw/vZiQ3bDebSLLAViQ1nyXmV11lE 9FVZQpHd9/mMUkGQRy1fkM7UmUk+II1OmKRXwcM/f+WlTISbwfGuJqVd0tiSIsSd AtQ69ybBhsvm+ndeYvdZgV8p/NOPuwJqVS6l63dsf5nRQgrZxW4Nk/yTMXBwuymT JZxAQHkOjWBhoOVnfd0K4iu+P4wmlQ9mym/Br/3NIh+EujCP+hqma4FmDVQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbEbat1LLClimdhAHZzo1LXqCJw0wHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJssoW8YGIBp8E3LOyZcD3toppqZl6nVloan xZwfDiD3EHqN5u/ipb6Py4X3eTSwICxn3xjDwZLuLFUR97b2dAtwRGgjo2sABu93 3A+EIn05e2ykQIhmCmvG+g1fVa85Rx54wS6F4pS2Pi69AdTg3mJCW73jRv34kG0F Smw8cpQIoMO85WMvKldXND3BHp8AuVDZVBmM3trVS1DD8Lp7mY+1H6AWRKAYpYJz bPL2LT8HAWuG9JBCi62uy+Q6Dae/nFa1LSCh7b/h2/Erkba0k7J9zWNqay1rONOh BHot1xxFwfw0Arw5grGOz6NjbsB2a8WRv8pb4+OCRcXa8/+x5Ks= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:22 2025 by rpki-client