$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: NzaMhG4JBOVVBGLL6IflEca5Cg/Y5e5MIuyFrruisjY= Subject key identifier: EF:D6:86:21:1B:5C:38:27:C5:E0:F5:61:5C:FF:1D:E5:B0:E6:DD:E7 Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 48850DAA02C284DFDB43A17875664C3182D37284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 020A Signing time: Sat 18 Oct 2025 10:30:48 +0000 Manifest this update: Sat 18 Oct 2025 10:25:48 +0000 Manifest next update: Tue 21 Oct 2025 12:58:48 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: M9M9nbqhnVjERSoEF/mm+yiEAwYRBbFcSLVJ9E7WZHY=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:85:0d:aa:02:c2:84:df:db:43:a1:78:75:66:4c:31:82:d3:72:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Oct 18 10:25:48 2025 GMT Not After : Oct 21 12:58:48 2025 GMT Subject: CN=EFD686211B5C3827C5E0F5615CFF1DE5B0E6DDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:16:e3:ee:ba:9e:19:9f:70:c2:be:dc:f1: 62:e0:17:0f:db:39:31:f1:37:80:c8:fc:b9:3c:2b: 7c:a9:d6:c1:fb:20:69:a0:4c:fb:74:dd:1c:b2:41: a2:b1:37:1a:ee:3c:8b:19:7f:9a:65:f5:f4:fe:51: 79:76:91:e4:50:4f:86:52:9a:88:e0:7a:c7:4b:73: d9:75:9a:ff:a0:e9:4d:f6:32:a1:f1:75:1c:cc:37: 3c:f1:c4:a3:38:35:c6:8f:7e:94:2b:46:7e:a4:6b: 49:18:0a:b8:9e:8e:9b:a6:b3:c5:b7:12:d1:71:13: b3:46:1b:eb:dc:8a:33:5e:a3:57:07:62:30:4b:98: 84:90:b2:fa:71:7e:9b:20:f7:52:00:a1:44:bf:d6: 4b:f9:6c:92:e7:af:0d:5e:70:9b:2a:7b:3e:0c:2f: 7e:53:dd:5e:b8:14:78:89:0e:35:ba:4e:57:c4:b8: 1b:12:3f:28:9f:02:ff:c1:e9:b2:d1:41:88:e8:52: bc:b3:b3:c0:36:55:52:13:e6:55:fb:8a:f6:ba:b6: 41:99:cd:5b:90:27:6d:01:0c:57:1f:16:56:b8:02: ca:7f:19:b1:2c:c4:83:0e:c5:df:a3:87:6b:11:5c: 1c:fd:4b:89:e2:2f:e4:78:2d:a8:04:a8:77:b7:e7: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:86:21:1B:5C:38:27:C5:E0:F5:61:5C:FF:1D:E5:B0:E6:DD:E7 X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2c:b8:25:bc:45:9d:40:25:2c:6a:08:cb:31:51:49:ae:a0: 33:81:18:01:1e:5e:5c:c2:39:cc:b0:a6:45:45:5f:2a:0d:d8: d8:a8:54:60:f7:37:01:28:f9:7d:96:c9:4c:ca:dc:e1:fb:bd: 09:09:1c:9c:e6:92:89:8e:92:cd:ca:30:24:5d:ea:8a:f7:4f: 5e:c4:b2:79:65:8d:40:92:40:df:1e:ad:95:e8:35:85:7c:0b: 39:d6:d5:7e:8d:eb:7a:74:fe:f9:a7:c9:47:c6:bf:ef:db:33: 0a:54:95:7e:26:f0:cd:61:b2:88:4b:79:22:48:5c:99:b5:e9: a9:f9:78:2c:4a:88:b5:0d:91:82:a7:e6:94:c0:0b:d5:65:a7: 77:8c:3b:9c:dd:6e:54:89:a2:c7:60:7f:9e:9f:eb:f9:02:fd: 70:07:f2:3a:9c:d9:d0:dc:0e:d0:28:9e:f4:e8:64:b4:19:05: e5:15:bc:02:e5:4d:b3:3c:6b:e4:1b:8a:7d:09:7a:02:bc:76: e6:38:c2:fb:33:3f:df:fc:9b:3b:84:8b:29:ce:71:3f:68:a4: 45:36:29:b3:2f:37:22:da:77:05:a6:23:48:47:00:94:33:ae: bc:a0:71:dd:bf:bd:bc:3f:b1:3d:e9:0c:3d:a1:21:f0:31:30: c3:8a:a2:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIUNqgLChN/bQ6F4dWZMMYLTcoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTEwMTgxMDI1NDhaFw0yNTEwMjExMjU4NDhaMDMxMTAvBgNV BAMTKEVGRDY4NjIxMUI1QzM4MjdDNUUwRjU2MTVDRkYxREU1QjBFNkRERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY6Bbj7rqeGZ9wwr7c8WLgFw/b OTHxN4DI/Lk8K3yp1sH7IGmgTPt03RyyQaKxNxruPIsZf5pl9fT+UXl2keRQT4ZS mojgesdLc9l1mv+g6U32MqHxdRzMNzzxxKM4NcaPfpQrRn6ka0kYCriejpums8W3 EtFxE7NGG+vcijNeo1cHYjBLmISQsvpxfpsg91IAoUS/1kv5bJLnrw1ecJsqez4M L35T3V64FHiJDjW6TlfEuBsSPyifAv/B6bLRQYjoUryzs8A2VVIT5lX7iva6tkGZ zVuQJ20BDFcfFla4Asp/GbEsxIMOxd+jh2sRXBz9S4niL+R4LagEqHe358/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79aGIRtcOCfF4PVhXP8d5bDm3ecwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHosuCW8RZ1AJSxqCMsxUUmuoDOBGAEeXlzC OcywpkVFXyoN2NioVGD3NwEo+X2WyUzK3OH7vQkJHJzmkomOks3KMCRd6or3T17E snlljUCSQN8erZXoNYV8CznW1X6N63p0/vmnyUfGv+/bMwpUlX4m8M1hsohLeSJI XJm16an5eCxKiLUNkYKn5pTAC9Vlp3eMO5zdblSJosdgf56f6/kC/XAH8jqc2dDc DtAonvToZLQZBeUVvALlTbM8a+Qbin0JegK8duY4wvszP9/8mzuEiynOcT9opEU2 KbMvNyLadwWmI0hHAJQzrrygcd2/vbw/sT3pDD2hIfAxMMOKok0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:44 2025 by rpki-client