$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: FEV84c20Olwx1bD2mv/UbJStNzQU/rVFrQIrJA+V5XI= Subject key identifier: A5:95:79:6E:BD:FB:52:AE:58:28:69:EA:F7:60:20:18:65:63:0C:D8 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 77F317989B2409BB0171AB561396EAECEEAF95C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: CD Signing time: Fri 22 Aug 2025 07:40:40 +0000 Manifest this update: Fri 22 Aug 2025 07:35:40 +0000 Manifest next update: Mon 25 Aug 2025 15:57:40 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 020EA2304929066809CA6F723574798639D77438.crl (hash: cj8x8b41N5lm5sKWDrFgNMcwsIE71fwS1sz0Z6/VNZQ=) 3: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f3:17:98:9b:24:09:bb:01:71:ab:56:13:96:ea:ec:ee:af:95:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Aug 22 07:35:40 2025 GMT Not After : Aug 25 15:57:40 2025 GMT Subject: CN=A595796EBDFB52AE582869EAF760201865630CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:5b:bf:40:64:0a:ea:40:e6:09:83:0b:84: da:01:5c:8b:b3:16:7a:05:13:3e:8d:13:d6:76:cf: bb:f1:3f:22:53:17:6d:99:8a:2b:ec:34:98:bd:b9: 52:59:26:65:ba:06:01:0f:0e:05:55:0d:4c:7d:c7: 66:39:c3:a0:d7:2d:8a:ec:0b:9f:39:2a:f5:8d:36: 97:13:6c:74:6c:e0:88:47:88:cf:df:ca:b4:fc:b6: 0b:96:19:4d:0c:ff:ad:d7:e6:53:40:d5:4c:25:4a: 7a:09:61:da:03:8e:d8:44:a2:53:e4:22:2b:3a:0d: 64:a0:7a:00:42:ff:39:17:da:7f:46:9c:52:51:27: 8d:8b:49:ac:f7:4c:1d:ae:2b:c8:9a:64:ab:ba:c7: e0:55:8f:23:8e:d6:9e:f8:75:a6:dd:43:c1:04:75: 17:ec:0c:e0:02:07:32:09:bf:61:2a:23:d5:ac:1a: eb:12:26:2e:77:62:9a:73:2b:83:8e:fc:79:56:72: 0b:9c:96:c4:17:a5:a2:4f:19:31:7a:da:04:5a:fe: c0:c3:e5:3c:e6:e9:e7:a8:95:18:07:b0:4a:77:09: 9d:7f:f2:25:f7:5a:3a:0f:d7:aa:b2:cb:b2:3f:6a: 6f:fd:76:b0:9e:bb:d6:d4:6a:fa:d1:a6:00:4c:db: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:95:79:6E:BD:FB:52:AE:58:28:69:EA:F7:60:20:18:65:63:0C:D8 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d3:98:ea:70:6b:47:d9:ce:84:8a:4d:8d:16:66:d8:c1:61: 71:34:12:44:8a:03:c0:7f:be:d1:68:19:55:31:f4:96:a4:a0: 58:54:2a:ad:cc:73:81:4e:35:d9:a5:70:ef:80:89:2b:79:39: a2:08:99:47:65:df:39:3d:37:81:1f:c8:83:18:d4:62:13:c5: 1c:a9:48:56:5a:c8:ce:09:fc:14:f5:55:63:04:23:ec:ce:01: 41:f0:a8:94:42:e3:1f:c5:a8:d7:53:39:49:c2:28:ad:0c:46: e7:0a:f7:da:95:95:3f:ea:90:3c:21:95:41:95:de:6a:ad:86: 99:63:ed:2a:db:72:06:c9:a3:f5:5b:49:93:40:f4:0f:ff:f3: 60:b5:2f:36:4f:7f:70:3d:a3:7c:27:de:3d:1c:2b:ce:1b:98: b5:04:e5:c3:bd:26:a0:32:1f:c7:22:aa:9f:b9:1d:dd:0c:3c: 26:ae:be:ed:20:71:af:98:1a:14:2c:f3:78:4f:20:15:71:5a: c0:2a:13:2a:38:06:9c:1f:eb:99:62:93:fe:73:08:78:2e:f2: 5a:ee:95:45:7f:84:98:88:92:d7:9e:d2:d0:4c:ea:b8:c4:78: d2:27:1e:f3:23:55:87:d5:75:b4:77:a3:75:6e:ae:4b:91:e8: 27:35:33:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/MXmJskCbsBcatWE5bq7O6vlckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTA4MjIwNzM1NDBaFw0yNTA4MjUxNTU3NDBaMDMxMTAvBgNV BAMTKEE1OTU3OTZFQkRGQjUyQUU1ODI4NjlFQUY3NjAyMDE4NjU2MzBDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTFu/QGQK6kDmCYMLhNoBXIuz FnoFEz6NE9Z2z7vxPyJTF22ZiivsNJi9uVJZJmW6BgEPDgVVDUx9x2Y5w6DXLYrs C585KvWNNpcTbHRs4IhHiM/fyrT8tguWGU0M/63X5lNA1UwlSnoJYdoDjthEolPk Iis6DWSgegBC/zkX2n9GnFJRJ42LSaz3TB2uK8iaZKu6x+BVjyOO1p74dabdQ8EE dRfsDOACBzIJv2EqI9WsGusSJi53YppzK4OO/HlWcguclsQXpaJPGTF62gRa/sDD 5Tzm6eeolRgHsEp3CZ1/8iX3WjoP16qyy7I/am/9drCeu9bUavrRpgBM29OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZV5br37Uq5YKGnq92AgGGVjDNgwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvTmOpwa0fZzoSKTY0WZtjBYXE0EkSKA8B/ vtFoGVUx9JakoFhUKq3Mc4FONdmlcO+AiSt5OaIImUdl3zk9N4EfyIMY1GITxRyp SFZayM4J/BT1VWMEI+zOAUHwqJRC4x/FqNdTOUnCKK0MRucK99qVlT/qkDwhlUGV 3mqthplj7SrbcgbJo/VbSZNA9A//82C1LzZPf3A9o3wn3j0cK84bmLUE5cO9JqAy H8ciqp+5Hd0MPCauvu0gca+YGhQs83hPIBVxWsAqEyo4Bpwf65lik/5zCHgu8lru lUV/hJiIktee0tBM6rjEeNInHvMjVYfVdbR3o3VurkuR6Cc1MxU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:59 2025 by rpki-client