$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: UE4vhZEHmi8XHgaG/vFmlSCj52OAaxeLHc9v9USA3LM= Subject key identifier: D2:FE:DD:0A:8D:64:3D:F3:19:65:8C:52:DB:53:D8:FF:37:11:00:1C Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 035DF9AC23DF3232C0033C6DB573B306196F3F25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 01AE Signing time: Sun 29 Jun 2025 22:40:37 +0000 Manifest this update: Sun 29 Jun 2025 22:35:37 +0000 Manifest next update: Thu 03 Jul 2025 00:41:37 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: uHW5cBc+EjI1LKixHw8glaOPSbuzZieO0fFhu5sWKcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5d:f9:ac:23:df:32:32:c0:03:3c:6d:b5:73:b3:06:19:6f:3f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Jun 29 22:35:37 2025 GMT Not After : Jul 3 00:41:37 2025 GMT Subject: CN=D2FEDD0A8D643DF319658C52DB53D8FF3711001C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:bd:17:50:7b:0c:d1:09:48:12:99:58:1f: da:94:a4:0b:46:7b:27:9e:ad:16:62:7b:70:9d:12: f7:b7:db:c4:c2:7d:45:45:0e:15:f4:78:c0:40:73: 26:d2:18:9b:1b:ab:df:7e:d7:fc:b5:9d:3f:58:97: e2:61:19:12:e4:fd:2b:23:f7:65:21:4e:e2:e8:29: 0a:92:8f:0c:39:e6:c7:ef:da:ff:e2:0d:7a:c0:b7: a8:99:77:ad:3c:b8:bb:d8:b4:1b:2f:e2:bf:92:77: 46:de:42:df:6c:5b:48:63:20:9a:63:0a:e8:5b:89: 68:ee:ce:d6:f8:6c:1f:ca:65:ff:b1:55:73:9f:ff: ba:eb:4f:ae:7f:3e:b9:8a:38:25:db:a3:fc:71:2b: d8:a9:6c:ea:ee:bb:ab:1c:4d:bd:91:63:af:aa:fd: dd:86:6b:28:d1:b4:7e:63:d3:4b:2a:94:07:4d:eb: af:47:3c:79:80:58:fc:a2:82:3d:b2:bf:ee:b1:fe: fd:a1:4d:be:b4:de:d3:bd:da:85:5f:1a:86:5a:8d: 93:83:1e:16:62:ac:6a:7f:39:36:da:c5:4f:bc:d2: 07:ec:1b:97:9a:b1:26:1d:3d:47:fa:32:ff:02:83: 43:0d:62:f6:38:b1:52:d5:92:ff:50:4b:86:a8:4a: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FE:DD:0A:8D:64:3D:F3:19:65:8C:52:DB:53:D8:FF:37:11:00:1C X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f2:0a:5c:fd:df:cd:93:f4:5c:3c:0e:d4:85:1c:af:7e:9a: e0:7a:0d:70:8d:75:4a:3f:83:a9:7b:91:19:36:c8:f5:ac:57: 5c:00:ae:43:7c:e4:f7:cf:d2:47:43:e8:85:01:6d:1d:fa:8c: bf:45:9b:f5:3a:f8:06:e3:3b:c4:6b:11:d9:19:ed:fe:d0:14: cf:63:46:a2:e9:1c:26:c9:81:da:d5:0e:2d:01:7c:60:8e:35: 00:98:dc:4a:ca:94:ae:49:d6:cb:91:8f:cc:48:62:88:4f:bd: aa:96:71:ed:0e:bf:6a:b6:e2:58:c6:0b:70:55:63:e1:1e:de: 70:69:74:0f:31:2e:3c:03:fb:80:2c:c3:0b:3e:c9:f3:23:6f: 83:f2:2b:f2:f5:a3:bc:3e:34:31:98:f9:38:97:5f:c6:8b:cc: 98:07:e6:9e:4a:3e:49:03:68:de:60:7c:81:09:6a:9e:80:d7: ca:24:50:8b:8c:93:38:fc:c6:7f:e1:a2:25:f0:ca:ff:d4:3b: 07:a8:e4:48:1a:54:2e:c4:9c:c2:3f:95:09:de:0a:13:00:1f: 7e:36:21:2b:bc:78:09:a0:72:6e:ec:ad:fb:16:ef:ef:df:f9: bf:d5:5b:67:a3:08:ba:b4:ce:b2:37:a2:98:f6:4f:d7:a6:99: 02:f8:07:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA135rCPfMjLAAzxttXOzBhlvPyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTA2MjkyMjM1MzdaFw0yNTA3MDMwMDQxMzdaMDMxMTAvBgNV BAMTKEQyRkVERDBBOEQ2NDNERjMxOTY1OEM1MkRCNTNEOEZGMzcxMTAwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLb0XUHsM0QlIEplYH9qUpAtG eyeerRZie3CdEve328TCfUVFDhX0eMBAcybSGJsbq99+1/y1nT9Yl+JhGRLk/Ssj 92UhTuLoKQqSjww55sfv2v/iDXrAt6iZd608uLvYtBsv4r+Sd0beQt9sW0hjIJpj CuhbiWjuztb4bB/KZf+xVXOf/7rrT65/PrmKOCXbo/xxK9ipbOruu6scTb2RY6+q /d2GayjRtH5j00sqlAdN669HPHmAWPyigj2yv+6x/v2hTb603tO92oVfGoZajZOD HhZirGp/OTbaxU+80gfsG5easSYdPUf6Mv8Cg0MNYvY4sVLVkv9QS4aoSmizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0v7dCo1kPfMZZYxS21PY/zcRABwwHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbyClz9382T9Fw8DtSFHK9+muB6DXCNdUo/ g6l7kRk2yPWsV1wArkN85PfP0kdD6IUBbR36jL9Fm/U6+AbjO8RrEdkZ7f7QFM9j RqLpHCbJgdrVDi0BfGCONQCY3ErKlK5J1suRj8xIYohPvaqWce0Ov2q24ljGC3BV Y+Ee3nBpdA8xLjwD+4Aswws+yfMjb4PyK/L1o7w+NDGY+TiXX8aLzJgH5p5KPkkD aN5gfIEJap6A18okUIuMkzj8xn/hoiXwyv/UOweo5EgaVC7EnMI/lQneChMAH342 ISu8eAmgcm7srfsW7+/f+b/VW2ejCLq0zrI3opj2T9emmQL4B8o= -----END CERTIFICATE-----Generated at Mon Jun 30 23:45:20 2025 by rpki-client