$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: I6tALTM+p4MdJh5mOG16ygQa2yeB38j2K5MXKoJ7fUU= Subject key identifier: FA:D7:94:62:70:1F:2D:48:B8:1C:05:8A:0F:DF:B6:0E:8B:A0:2A:E5 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 18C74FCF1DA6C8FA8DA9CA2A1D8E7FD495BCA59F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 0331 Signing time: Sun 29 Jun 2025 04:21:50 +0000 Manifest this update: Sun 29 Jun 2025 04:16:50 +0000 Manifest next update: Wed 02 Jul 2025 09:12:50 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: N58UqlFMp748Khi3FbSfGS0G+XtsfGGuqPSO+3bYMNA=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: WHyXZiHm1tFrwAXrz4brauNseb8V8ZMQneoiM0eZr/g=) 3: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: 2q1cfd3Mo2/EkrD4kNOZtlIaFcgejomLhYLHUUjuTE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c7:4f:cf:1d:a6:c8:fa:8d:a9:ca:2a:1d:8e:7f:d4:95:bc:a5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Jun 29 04:16:50 2025 GMT Not After : Jul 2 09:12:50 2025 GMT Subject: CN=FAD79462701F2D48B81C058A0FDFB60E8BA02AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:5c:01:70:84:c3:37:56:ef:29:df:55:33: 19:98:d6:3c:71:09:88:85:10:3b:7e:63:4e:dc:6a: a7:5f:29:97:fa:be:53:3c:18:c4:b9:76:94:cd:e8: bf:2c:87:22:9c:ba:84:65:4b:ff:94:d9:ed:a5:ea: 15:44:70:53:80:d0:80:cf:99:96:96:d3:25:4c:57: 7c:ba:f9:d2:44:cb:a1:86:3c:4c:8e:c0:16:ed:bb: 1f:68:7b:f9:ea:0a:2e:eb:56:bb:61:98:e6:a3:26: ac:4e:13:79:78:c8:0d:4d:1f:03:a0:8f:ff:37:fa: 63:12:78:8b:d6:fd:e7:f2:72:76:06:36:9d:e0:a9: 6c:0a:24:72:6e:99:d4:73:d3:b1:19:d9:ab:57:d8: 05:2e:7e:6a:52:ba:41:62:23:37:d1:ea:d8:8c:5c: 1e:f0:5e:8c:e8:ad:d6:07:15:4f:68:e5:d6:ad:f4: a1:fc:2b:80:20:39:e2:e7:38:ff:89:e5:e8:e4:bc: 40:61:82:cf:9b:cd:33:51:34:e3:c8:0d:44:18:1b: 80:7b:32:ad:f9:e1:6c:94:e6:25:16:c4:9d:b8:f2: b8:17:7e:39:3d:0c:89:6b:1d:ed:98:67:35:c1:88: 71:9f:d9:c2:82:1c:67:4b:46:56:e8:f5:6c:d2:b9: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D7:94:62:70:1F:2D:48:B8:1C:05:8A:0F:DF:B6:0E:8B:A0:2A:E5 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:39:71:9c:cb:e1:58:15:99:3d:85:28:47:6c:e6:3d:9f: c1:37:eb:99:8d:6d:aa:91:29:5c:04:90:8c:8b:bd:5e:60:29: 63:af:ff:53:92:33:89:34:c6:27:11:f5:4f:7a:7c:79:ea:1c: 24:58:20:c8:18:29:ef:95:63:5b:16:c5:fa:e9:dc:c1:c4:5f: 6f:28:f7:e4:53:8d:ea:64:c2:db:ed:bf:a8:1e:7d:db:0f:c1: 00:18:ae:68:04:e6:8a:4a:ac:29:f6:82:b8:53:aa:6a:b9:35: 94:e8:02:c5:08:98:88:71:cf:69:73:04:d2:a4:ba:98:e2:ed: 7a:cc:79:34:9d:23:ef:c6:cd:29:af:40:05:3c:1b:de:69:e4: cf:61:2d:ea:95:26:9e:fb:99:94:a2:7a:cb:86:3b:c1:cc:d5: 91:93:a5:89:fd:17:54:d7:70:6e:a8:a5:9e:1c:50:50:2e:af: f3:d9:6d:86:50:17:55:97:02:1b:2d:43:f6:89:03:48:52:74: 28:66:89:d5:35:71:33:ed:09:8a:b4:c7:c0:ee:47:ea:6a:4c: 7f:c9:55:05:89:9d:e7:9c:83:12:d7:fa:41:f8:8d:80:df:0c: ae:d3:47:98:94:3f:cf:fe:08:99:6e:6a:e7:39:84:93:92:96: 01:e9:af:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMdPzx2myPqNqcoqHY5/1JW8pZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTA2MjkwNDE2NTBaFw0yNTA3MDIwOTEyNTBaMDMxMTAvBgNV BAMTKEZBRDc5NDYyNzAxRjJENDhCODFDMDU4QTBGREZCNjBFOEJBMDJBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoVwBcITDN1bvKd9VMxmY1jxx CYiFEDt+Y07caqdfKZf6vlM8GMS5dpTN6L8shyKcuoRlS/+U2e2l6hVEcFOA0IDP mZaW0yVMV3y6+dJEy6GGPEyOwBbtux9oe/nqCi7rVrthmOajJqxOE3l4yA1NHwOg j/83+mMSeIvW/efycnYGNp3gqWwKJHJumdRz07EZ2atX2AUufmpSukFiIzfR6tiM XB7wXozordYHFU9o5dat9KH8K4AgOeLnOP+J5ejkvEBhgs+bzTNRNOPIDUQYG4B7 Mq354WyU5iUWxJ248rgXfjk9DIlrHe2YZzXBiHGf2cKCHGdLRlbo9WzSuZidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+teUYnAfLUi4HAWKD9+2DougKuUwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHcOXGcy+FYFZk9hShHbOY9n8E365mNbaqR KVwEkIyLvV5gKWOv/1OSM4k0xicR9U96fHnqHCRYIMgYKe+VY1sWxfrp3MHEX28o 9+RTjepkwtvtv6gefdsPwQAYrmgE5opKrCn2grhTqmq5NZToAsUImIhxz2lzBNKk upji7XrMeTSdI+/GzSmvQAU8G95p5M9hLeqVJp77mZSiesuGO8HM1ZGTpYn9F1TX cG6opZ4cUFAur/PZbYZQF1WXAhstQ/aJA0hSdChmidU1cTPtCYq0x8DuR+pqTH/J VQWJneecgxLX+kH4jYDfDK7TR5iUP8/+CJluauc5hJOSlgHpr7M= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:27 2025 by rpki-client