$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: 1K6js9nZE17mBftASBYZYkmlqB1TqcINuvyCFzSEbzA= Subject key identifier: 8E:A0:08:93:D6:CB:BD:09:8F:B2:8F:BB:EA:D2:F1:E1:24:6E:56:2A Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 285D055E8E6CF33CE16955DC2A80D7BBC916803B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 01DF Signing time: Sun 19 Oct 2025 06:10:38 +0000 Manifest this update: Sun 19 Oct 2025 06:05:38 +0000 Manifest next update: Wed 22 Oct 2025 07:59:38 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: qGuxAK18bjbBw5yya/8OAwFVPfDDCs79ZVPsdItlKOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5d:05:5e:8e:6c:f3:3c:e1:69:55:dc:2a:80:d7:bb:c9:16:80:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Oct 19 06:05:38 2025 GMT Not After : Oct 22 07:59:38 2025 GMT Subject: CN=8EA00893D6CBBD098FB28FBBEAD2F1E1246E562A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:0f:b6:98:40:48:f5:a5:5f:5d:fc:80:a7: 8b:af:fc:c6:5c:82:39:8f:d4:4a:5b:9c:56:05:b5: 68:60:6c:b9:55:08:f1:55:64:26:88:1e:e7:3a:14: e8:92:ad:71:bc:1f:6c:10:70:2e:bb:b2:54:7e:1a: b4:19:3b:2f:a4:5a:8f:06:3a:1f:cc:db:8c:a5:cd: 87:9d:0a:84:78:66:07:f3:50:10:89:4f:67:d4:f3: ea:b2:ab:d2:df:6f:a9:b4:3c:c7:9c:3d:c3:cf:59: fc:7e:82:7d:42:3b:8d:ee:9d:ff:3b:dc:f6:47:40: a7:81:88:eb:12:f1:04:b8:e8:7d:01:a0:ef:e3:75: a6:f3:5e:89:9f:e3:6e:22:a8:66:90:bc:30:ff:b0: 22:f0:5e:ef:49:8e:32:10:ff:71:b7:ac:8f:1e:60: f0:9a:a3:c8:94:c2:14:a5:63:3e:83:a9:b4:a5:f0: 75:66:db:b6:03:a5:24:f2:21:dc:93:3d:c9:5b:9d: 8a:67:97:91:08:66:13:56:7c:d8:31:50:62:80:8f: 22:69:4e:59:6e:49:dc:3d:54:f6:cb:b4:5b:b0:16: b1:ec:bb:e3:d3:f2:b5:66:02:9f:f7:d9:00:3e:14: aa:a9:50:5e:a8:3e:02:7f:2e:85:41:ae:bf:08:33: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:08:93:D6:CB:BD:09:8F:B2:8F:BB:EA:D2:F1:E1:24:6E:56:2A X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d2:4a:7e:91:0d:32:c2:13:75:77:0d:6e:74:22:ce:7e:2c: 96:47:0e:b9:79:ac:a2:01:0e:26:e7:6b:f8:41:dc:da:aa:f6: 07:28:6c:23:e4:42:4d:bc:2f:3b:2e:a3:e5:55:33:07:8f:4b: 36:b7:25:f7:8c:7d:0a:a1:90:52:25:2d:2d:51:0b:41:90:e8: 54:0d:16:ac:98:c3:f8:aa:70:6f:28:7a:c4:d3:49:06:70:2c: e8:f8:19:cd:eb:a8:72:61:27:7a:5a:69:24:1d:35:55:63:44: e8:a1:2b:af:3f:63:39:42:6e:d1:c7:86:84:ba:83:16:1d:af: 38:9d:c0:b6:06:4e:68:ad:89:c1:90:72:31:e8:8f:84:5f:31: e5:1e:c1:14:e3:1a:3d:97:fd:b9:9c:bf:f1:04:db:24:b0:bf: 94:17:b2:5a:e2:58:b8:c2:4c:f7:47:81:36:a6:f5:90:84:e4: 1a:af:e1:88:c3:10:3c:6c:bb:7a:62:a9:b3:aa:b3:62:7d:42: 60:4b:a1:f2:3a:cb:cb:d3:39:cb:eb:df:15:db:85:21:83:03: 99:ec:03:89:d5:88:7c:1e:18:45:3b:6b:b9:f3:c9:48:30:68: 9a:e4:92:fb:df:88:91:83:73:37:a5:b8:0d:6f:97:7b:8c:40: 76:56:93:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKF0FXo5s8zzhaVXcKoDXu8kWgDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTEwMTkwNjA1MzhaFw0yNTEwMjIwNzU5MzhaMDMxMTAvBgNV BAMTKDhFQTAwODkzRDZDQkJEMDk4RkIyOEZCQkVBRDJGMUUxMjQ2RTU2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkg+2mEBI9aVfXfyAp4uv/MZc gjmP1EpbnFYFtWhgbLlVCPFVZCaIHuc6FOiSrXG8H2wQcC67slR+GrQZOy+kWo8G Oh/M24ylzYedCoR4ZgfzUBCJT2fU8+qyq9Lfb6m0PMecPcPPWfx+gn1CO43unf87 3PZHQKeBiOsS8QS46H0BoO/jdabzXomf424iqGaQvDD/sCLwXu9JjjIQ/3G3rI8e YPCao8iUwhSlYz6DqbSl8HVm27YDpSTyIdyTPclbnYpnl5EIZhNWfNgxUGKAjyJp TlluSdw9VPbLtFuwFrHsu+PT8rVmAp/32QA+FKqpUF6oPgJ/LoVBrr8IM5NfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjqAIk9bLvQmPso+76tLx4SRuViowHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDSSn6RDTLCE3V3DW50Is5+LJZHDrl5rKIB Dibna/hB3Nqq9gcobCPkQk28Lzsuo+VVMwePSza3JfeMfQqhkFIlLS1RC0GQ6FQN FqyYw/iqcG8oesTTSQZwLOj4Gc3rqHJhJ3paaSQdNVVjROihK68/YzlCbtHHhoS6 gxYdrzidwLYGTmiticGQcjHoj4RfMeUewRTjGj2X/bmcv/EE2ySwv5QXslriWLjC TPdHgTam9ZCE5Bqv4YjDEDxsu3piqbOqs2J9QmBLofI6y8vTOcvr3xXbhSGDA5ns A4nViHweGEU7a7nzyUgwaJrkkvvfiJGDczeluA1vl3uMQHZWkwk= -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:29 2025 by rpki-client