$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: 52EGaDOTBnOxX1u3jO3qtRKAz4bPA+TuSjEj2nuSIHI= Subject key identifier: 7A:A5:F6:72:CA:83:3F:EA:61:D3:5E:38:E0:27:F7:35:AD:79:7F:AC Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 4A9CC3D7A733AC94674D420F72ECBB30C7F4ED1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 01F1 Signing time: Fri 22 Aug 2025 08:50:53 +0000 Manifest this update: Fri 22 Aug 2025 08:45:53 +0000 Manifest next update: Mon 25 Aug 2025 18:49:53 +0000 Files and hashes: 1: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) 2: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: vJ47me7ipjDEnJemdRxPDrBkiHyKA9QS3TLSb6Hd24I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9c:c3:d7:a7:33:ac:94:67:4d:42:0f:72:ec:bb:30:c7:f4:ed:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Aug 22 08:45:53 2025 GMT Not After : Aug 25 18:49:53 2025 GMT Subject: CN=7AA5F672CA833FEA61D35E38E027F735AD797FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:45:5d:85:bf:d0:12:f9:8a:77:56:90:0b: 6e:32:b8:4f:3a:6d:1b:e3:9d:af:88:61:af:7a:58: f0:63:b8:4b:b7:7a:3f:a9:2b:42:71:5e:f8:6b:fc: f7:d1:37:09:93:a5:c1:73:93:fe:72:d8:6a:9f:55: 26:71:70:f7:b6:9b:70:ef:89:5a:ea:8d:e1:fa:81: c5:9c:69:d0:e8:48:38:f7:b8:d3:0b:ec:54:f2:3f: 62:3b:d5:ca:2b:44:24:f8:be:22:1f:41:68:58:29: a6:2f:da:83:13:af:f7:57:b6:f4:00:b0:66:05:70: 73:98:a5:40:d6:8d:60:88:06:36:78:9e:19:a6:1f: e2:56:42:b3:e8:ba:fe:eb:0d:90:e5:48:40:06:77: fa:e5:83:39:9e:1f:b7:7e:37:fb:f8:63:d3:b4:49: 05:20:d0:5d:81:aa:68:1e:45:e1:e6:99:67:51:e7: 2c:e8:dc:6d:74:cd:b4:9f:c7:f9:49:19:5e:5a:9a: cc:13:e0:1b:5a:48:fd:01:74:95:8b:4b:14:f4:77: 5e:06:e6:d5:58:14:e8:38:d7:fe:9d:c3:70:9e:62: 2b:ca:d5:64:c7:f8:90:08:a3:ad:ff:1d:2b:05:94: dc:ab:b1:26:ac:57:8c:27:c6:3d:a6:5a:39:03:4e: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A5:F6:72:CA:83:3F:EA:61:D3:5E:38:E0:27:F7:35:AD:79:7F:AC X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a2:6f:ab:e6:45:e6:f4:23:16:13:19:f7:ac:ce:59:d8:ab: 95:04:9a:b2:2b:b2:50:67:93:9b:6d:2a:af:a4:be:86:0e:88: c3:58:05:91:57:69:b4:df:9b:84:bb:64:e2:37:b9:ae:8f:3a: 89:5e:08:0d:09:44:56:24:92:7c:ae:a7:f9:eb:34:d6:22:ff: 15:9f:34:ea:0f:69:1d:45:6d:c8:e6:22:a5:be:88:98:00:d7: 3c:07:4f:89:8c:68:ef:d0:c5:e7:46:96:16:66:78:05:1c:cf: 4d:da:14:71:4b:9f:ab:e9:9f:a7:ca:47:e4:c1:c3:99:b7:38: a8:ed:94:e4:fa:af:fd:c2:e7:1f:77:84:93:91:ca:3c:a2:1d: fa:8e:6a:d6:06:b5:0c:b6:8f:f6:7e:0b:f3:5c:9e:09:1f:d7: 28:b7:6c:cc:5f:95:90:b6:35:c0:c5:37:21:58:d0:0c:a2:81: 5c:5a:c2:57:50:5f:3e:01:34:4d:e1:d9:68:83:42:a8:47:1f: b9:96:6e:76:d2:b2:35:f7:14:eb:98:c7:c4:db:ba:de:f3:b0: 4f:ad:e3:88:32:4c:29:bc:a1:60:e9:12:0a:c8:ed:01:96:a4: b7:dc:b6:68:99:0f:a9:8a:08:79:46:fe:7c:63:38:28:c9:1b: ea:44:06:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpzD16czrJRnTUIPcuy7MMf07R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTA4MjIwODQ1NTNaFw0yNTA4MjUxODQ5NTNaMDMxMTAvBgNV BAMTKDdBQTVGNjcyQ0E4MzNGRUE2MUQzNUUzOEUwMjdGNzM1QUQ3OTdGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5kVdhb/QEvmKd1aQC24yuE86 bRvjna+IYa96WPBjuEu3ej+pK0JxXvhr/PfRNwmTpcFzk/5y2GqfVSZxcPe2m3Dv iVrqjeH6gcWcadDoSDj3uNML7FTyP2I71corRCT4viIfQWhYKaYv2oMTr/dXtvQA sGYFcHOYpUDWjWCIBjZ4nhmmH+JWQrPouv7rDZDlSEAGd/rlgzmeH7d+N/v4Y9O0 SQUg0F2BqmgeReHmmWdR5yzo3G10zbSfx/lJGV5amswT4BtaSP0BdJWLSxT0d14G 5tVYFOg41/6dw3CeYivK1WTH+JAIo63/HSsFlNyrsSasV4wnxj2mWjkDTkVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqX2csqDP+ph01444Cf3Na15f6wwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOib6vmReb0IxYTGfeszlnYq5UEmrIrslBn k5ttKq+kvoYOiMNYBZFXabTfm4S7ZOI3ua6POoleCA0JRFYkknyup/nrNNYi/xWf NOoPaR1FbcjmIqW+iJgA1zwHT4mMaO/QxedGlhZmeAUcz03aFHFLn6vpn6fKR+TB w5m3OKjtlOT6r/3C5x93hJORyjyiHfqOatYGtQy2j/Z+C/Ncngkf1yi3bMxflZC2 NcDFNyFY0AyigVxawldQXz4BNE3h2WiDQqhHH7mWbnbSsjX3FOuYx8Tbut7zsE+t 44gyTCm8oWDpEgrI7QGWpLfctmiZD6mKCHlG/nxjOCjJG+pEBvE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:12 2025 by rpki-client