$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: mf09+5xSkNHG22aOjWIlTzLZSsLudNOXJzxwm0cgIv4= Subject key identifier: 62:EF:8D:F5:63:A0:AF:06:37:A4:B0:8F:4F:77:6E:FA:48:FE:75:CE Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 79710DA505E968462D9ECB35579245EBDC6413FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 0364 Signing time: Sat 18 Oct 2025 15:02:25 +0000 Manifest this update: Sat 18 Oct 2025 14:57:25 +0000 Manifest next update: Tue 21 Oct 2025 21:51:25 +0000 Files and hashes: 1: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: SFs5R15pbzeEnb6Hi0xIE03W3ySX74sIHEOIPb2N4g4=) 2: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) 3: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) 4: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:71:0d:a5:05:e9:68:46:2d:9e:cb:35:57:92:45:eb:dc:64:13:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Oct 18 14:57:25 2025 GMT Not After : Oct 21 21:51:25 2025 GMT Subject: CN=62EF8DF563A0AF0637A4B08F4F776EFA48FE75CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:37:81:c3:de:60:02:79:30:bd:ee:bc:e6: 34:f8:97:e4:2e:5f:50:37:6f:6c:c3:91:ec:4b:4c: b1:42:52:50:cf:43:93:c9:b1:91:ab:b5:3f:aa:d6: fa:85:b8:c2:83:db:21:95:2e:08:8d:33:a3:04:8f: f9:58:ad:78:9c:24:3b:47:89:9e:92:19:13:a7:a5: d8:62:cb:a0:44:cd:3e:ac:9e:60:cb:75:0b:4d:2a: ca:56:17:7a:a8:2b:a8:01:4a:9c:65:80:d5:98:e3: 25:0d:11:f0:a8:76:06:c4:18:c7:5d:ea:10:3e:71: 2d:1b:0d:03:7f:7e:96:ad:1e:95:44:ab:e4:2a:2b: fe:dc:9f:0b:6a:e9:01:94:12:d8:34:2f:53:87:d9: 6b:fa:72:aa:9a:d4:50:14:82:77:e2:e3:6d:d0:b7: 7a:38:40:3b:3e:67:cd:ee:fc:0a:9e:53:7e:3a:74: 42:71:08:36:32:aa:81:13:8c:00:79:bd:ac:7c:be: 8e:f9:e7:2d:8b:b7:21:90:ad:ec:dc:1a:a1:16:6b: 88:0c:f6:77:11:7a:9e:0d:27:1b:76:25:d2:90:75: bd:aa:ef:aa:8f:24:f1:d3:cd:ab:f6:3a:da:83:6f: ea:c9:7d:b4:d0:ff:ef:2c:1c:9a:ad:f4:c6:04:84: d5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EF:8D:F5:63:A0:AF:06:37:A4:B0:8F:4F:77:6E:FA:48:FE:75:CE X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:60:aa:90:73:37:cb:83:73:8b:73:80:fa:4f:e7:80:e0:ed: 9f:c0:d2:8e:6a:2b:3c:f8:99:c3:07:53:15:c8:de:6a:05:6a: 5e:40:82:9c:2b:a5:c1:d9:14:51:2b:63:a2:ed:e4:bf:48:b7: 9b:94:39:ed:d0:b0:71:7e:2e:c9:06:f8:81:82:8e:f5:5b:e4: 7a:b4:bd:94:67:41:12:ff:33:6f:12:44:44:2c:53:4a:d3:19: 3e:a6:de:c5:29:80:8b:62:19:2f:fb:68:ae:25:f9:2b:21:d3: 2b:0f:16:ea:a7:28:75:92:90:2f:89:7f:d0:14:1b:72:23:db: 88:9f:43:7b:48:cd:6a:4e:a7:a6:d7:f4:42:1e:db:db:fa:b0: 9f:d7:fe:01:70:91:07:a6:02:75:6c:67:fc:9a:ad:ab:d9:e4: 52:2b:5a:15:e1:28:e4:d0:d7:85:a9:0d:a2:ed:16:87:79:20: b2:a7:37:59:17:b2:84:93:16:a1:9c:f4:f1:b1:15:db:ec:77: ed:a6:6c:c3:ed:91:22:3a:12:77:cf:78:60:fa:51:43:c7:21: 96:91:68:61:34:94:4d:70:de:bb:1c:1b:42:b3:3e:8b:1d:f0: 5f:b2:b2:a8:c2:4b:09:6b:2e:78:27:ff:f1:d4:63:a4:55:e7: e0:f1:fb:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXENpQXpaEYtnss1V5JF69xkE/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTEwMTgxNDU3MjVaFw0yNTEwMjEyMTUxMjVaMDMxMTAvBgNV BAMTKDYyRUY4REY1NjNBMEFGMDYzN0E0QjA4RjRGNzc2RUZBNDhGRTc1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDDeBw95gAnkwve685jT4l+Qu X1A3b2zDkexLTLFCUlDPQ5PJsZGrtT+q1vqFuMKD2yGVLgiNM6MEj/lYrXicJDtH iZ6SGROnpdhiy6BEzT6snmDLdQtNKspWF3qoK6gBSpxlgNWY4yUNEfCodgbEGMdd 6hA+cS0bDQN/fpatHpVEq+QqK/7cnwtq6QGUEtg0L1OH2Wv6cqqa1FAUgnfi423Q t3o4QDs+Z83u/AqeU346dEJxCDYyqoETjAB5vax8vo755y2LtyGQrezcGqEWa4gM 9ncRep4NJxt2JdKQdb2q76qPJPHTzav2OtqDb+rJfbTQ/+8sHJqt9MYEhNXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYu+N9WOgrwY3pLCPT3du+kj+dc4wHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpgqpBzN8uDc4tzgPpP54Dg7Z/A0o5qKzz4 mcMHUxXI3moFal5AgpwrpcHZFFErY6Lt5L9It5uUOe3QsHF+LskG+IGCjvVb5Hq0 vZRnQRL/M28SREQsU0rTGT6m3sUpgItiGS/7aK4l+Ssh0ysPFuqnKHWSkC+Jf9AU G3Ij24ifQ3tIzWpOp6bX9EIe29v6sJ/X/gFwkQemAnVsZ/yaravZ5FIrWhXhKOTQ 14WpDaLtFod5ILKnN1kXsoSTFqGc9PGxFdvsd+2mbMPtkSI6EnfPeGD6UUPHIZaR aGE0lE1w3rscG0KzPosd8F+ysqjCSwlrLngn//HUY6RV5+Dx++U= -----END CERTIFICATE-----Generated at Mon Oct 20 14:43:05 2025 by rpki-client