$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: XgFYOkqNucovfcFoI36AUe2de3KKoBIp3oNZdHlcJZY= Subject key identifier: 5C:8D:81:D2:B8:6C:EA:B1:D1:4E:6A:40:7F:23:DA:36:71:A2:5E:4F Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 281B7D97BFDBE131FD5443F4916FF29545CD2746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 01A1 Signing time: Mon 30 Jun 2025 21:21:01 +0000 Manifest this update: Mon 30 Jun 2025 21:16:01 +0000 Manifest next update: Fri 04 Jul 2025 00:21:01 +0000 Files and hashes: 1: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=) 2: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=) 3: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: gO+S4bGsRy/EM7RH/pRGP5305KeSiit+jlJapIuJ4BA=) 4: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=) 5: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=) 6: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1b:7d:97:bf:db:e1:31:fd:54:43:f4:91:6f:f2:95:45:cd:27:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Jun 30 21:16:01 2025 GMT Not After : Jul 4 00:21:01 2025 GMT Subject: CN=5C8D81D2B86CEAB1D14E6A407F23DA3671A25E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:10:3f:0a:88:82:02:a6:8f:e8:cc:e4:a7: f0:ad:da:11:b5:a0:4c:2b:00:5a:56:02:8b:d2:4e: a3:50:3f:18:7f:d7:1a:1c:9f:a9:8c:64:b7:e4:5d: 4a:ce:b3:7e:e8:ff:48:f3:8b:6d:a5:e1:55:10:2f: a4:37:90:2a:68:f2:71:f8:bf:e9:cb:75:29:b0:6f: 18:97:ac:6f:17:46:ce:6f:64:08:56:34:19:c6:bf: a0:15:71:c9:bb:85:5f:c1:52:28:bd:b3:ce:e7:f4: 1d:c3:a1:f5:98:40:a7:98:ab:00:c5:ab:87:12:14: 5a:12:d2:97:91:e5:51:d9:6f:a8:30:13:76:da:fa: 4f:d3:83:4f:93:36:84:d2:5e:7b:e5:f3:03:fc:93: 96:62:d2:d4:35:ea:c3:d9:66:68:10:91:71:67:f8: 7a:e0:aa:af:08:82:a5:77:eb:c8:ad:6f:b9:db:12: ef:bf:2d:3a:6d:2e:8e:01:fd:24:81:1a:3f:75:da: a7:f0:e2:c7:8a:50:32:f0:08:96:6b:ae:35:9c:a2: 82:1b:8e:59:41:18:2a:db:fe:47:e8:61:f1:56:1c: 25:7a:8f:19:14:0f:c0:16:96:f7:e4:e6:ba:7f:28: 28:1e:31:61:45:a0:ec:96:97:db:a9:02:c8:17:46: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8D:81:D2:B8:6C:EA:B1:D1:4E:6A:40:7F:23:DA:36:71:A2:5E:4F X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:8c:c9:43:e7:52:30:fa:40:67:bc:c4:7d:da:9f:40:9d: 32:d5:18:9a:5b:72:ee:b1:63:6f:b4:fd:bc:fc:59:1a:ca:b1: 1a:04:b0:84:19:5b:60:80:e8:4f:75:de:4a:00:54:fa:fd:47: c5:92:50:e9:f1:e0:2b:8b:40:51:5c:81:29:b4:da:2f:cc:2b: 95:79:71:f7:15:a9:3e:5f:39:13:32:53:d3:25:ab:77:a4:78: 83:d5:5d:5b:20:17:81:be:83:24:e9:a9:89:8d:f0:fc:aa:f7: e7:0f:fb:d3:e0:58:a0:cc:cc:c7:9d:83:a9:37:a3:32:e3:88: 02:d8:bf:c9:1f:81:05:f7:dd:87:84:6a:41:1a:bf:9e:e9:04: 3a:39:54:78:77:de:a1:bf:6b:62:65:1b:05:b8:f1:15:3e:0a: 2c:67:6e:41:6f:e1:ce:02:84:ea:9b:2c:f2:7f:21:ea:8f:f3: 96:d3:0f:b8:7d:b1:2a:b7:58:33:77:0a:05:f7:3b:c2:09:bd: a2:49:53:46:00:40:ec:f6:5f:e4:ac:e1:12:17:c4:25:f0:93: 57:03:82:82:f8:fd:10:f6:fd:e2:ac:ef:0c:cb:ef:45:2a:e9: e7:05:ed:46:41:42:a8:ee:5d:57:c4:8c:b3:fc:91:c3:cf:42: 89:82:85:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBt9l7/b4TH9VEP0kW/ylUXNJ0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTA2MzAyMTE2MDFaFw0yNTA3MDQwMDIxMDFaMDMxMTAvBgNV BAMTKDVDOEQ4MUQyQjg2Q0VBQjFEMTRFNkE0MDdGMjNEQTM2NzFBMjVFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoBA/CoiCAqaP6Mzkp/Ct2hG1 oEwrAFpWAovSTqNQPxh/1xocn6mMZLfkXUrOs37o/0jzi22l4VUQL6Q3kCpo8nH4 v+nLdSmwbxiXrG8XRs5vZAhWNBnGv6AVccm7hV/BUii9s87n9B3DofWYQKeYqwDF q4cSFFoS0peR5VHZb6gwE3ba+k/Tg0+TNoTSXnvl8wP8k5Zi0tQ16sPZZmgQkXFn +Hrgqq8IgqV368itb7nbEu+/LTptLo4B/SSBGj912qfw4seKUDLwCJZrrjWcooIb jllBGCrb/kfoYfFWHCV6jxkUD8AWlvfk5rp/KCgeMWFFoOyWl9upAsgXRsenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXI2B0rhs6rHRTmpAfyPaNnGiXk8wHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINTjMlD51Iw+kBnvMR92p9AnTLVGJpbcu6x Y2+0/bz8WRrKsRoEsIQZW2CA6E913koAVPr9R8WSUOnx4CuLQFFcgSm02i/MK5V5 cfcVqT5fORMyU9Mlq3ekeIPVXVsgF4G+gyTpqYmN8Pyq9+cP+9PgWKDMzMedg6k3 ozLjiALYv8kfgQX33YeEakEav57pBDo5VHh33qG/a2JlGwW48RU+CixnbkFv4c4C hOqbLPJ/IeqP85bTD7h9sSq3WDN3CgX3O8IJvaJJU0YAQOz2X+Ss4RIXxCXwk1cD goL4/RD2/eKs7wzL70Uq6ecF7UZBQqjuXVfEjLP8kcPPQomChVQ= -----END CERTIFICATE-----Generated at Tue Jul 1 06:51:28 2025 by rpki-client