$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: Hy/i7B/8z4GAExtO5izkv2s9l5UQyaFdAwcdfkHfNzs= Subject key identifier: D4:A8:5C:C7:04:4B:C7:40:FE:BF:FB:E9:C7:1A:18:35:AD:91:D2:58 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 26EE24BB2C0733C0E3D61EE5D2A17E8A0D68A334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 01B8 Signing time: Fri 22 Aug 2025 10:01:02 +0000 Manifest this update: Fri 22 Aug 2025 09:56:02 +0000 Manifest next update: Mon 25 Aug 2025 17:29:02 +0000 Files and hashes: 1: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: yGysQ7MkCcflbPW1dt0eXvIMWcfwU/MLpEtXBo+GYLs=) 2: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=) 3: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=) 4: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=) 5: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=) 6: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ee:24:bb:2c:07:33:c0:e3:d6:1e:e5:d2:a1:7e:8a:0d:68:a3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Aug 22 09:56:02 2025 GMT Not After : Aug 25 17:29:02 2025 GMT Subject: CN=D4A85CC7044BC740FEBFFBE9C71A1835AD91D258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:b0:54:73:2e:4c:21:b3:d0:72:af:69:d2: 2f:38:61:15:61:32:29:0b:e7:cc:f8:26:af:39:64: ad:97:3e:53:fe:3d:00:1e:b6:c4:f5:66:21:90:80: 8f:df:88:66:de:02:c7:aa:99:c8:8a:ff:7d:7a:e6: 83:28:6e:67:c0:33:df:85:f7:c2:c6:56:d3:61:2a: d8:b1:aa:6c:8e:72:f9:36:f9:8a:91:dc:c4:60:ac: 1b:b8:14:d7:30:5a:50:61:f1:22:c4:62:75:6b:7a: 4f:c2:1a:31:cb:c3:90:cc:98:31:84:02:ef:bc:f3: 52:a3:a2:8e:18:b1:09:dd:e9:37:5e:72:8a:8e:85: ff:4c:be:91:2f:ee:29:43:da:bb:43:3c:b8:78:75: 7a:34:06:a9:55:87:56:b7:92:24:0b:27:ae:11:da: 43:c9:a7:9e:d3:45:bd:4e:11:eb:0e:65:92:63:68: 71:29:0f:4a:94:8f:b8:46:39:6c:28:af:4f:6d:b1: ac:bf:17:73:0a:e1:34:9e:ed:dd:a9:ac:55:e1:3a: 3d:6c:3b:5b:7b:d1:25:d7:bd:34:0a:5b:6b:fe:59: 2f:68:31:3b:04:df:c2:26:f4:73:f7:ed:07:80:b8: 19:43:8d:c4:83:ad:a9:f7:00:3e:20:02:cc:3e:f1: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A8:5C:C7:04:4B:C7:40:FE:BF:FB:E9:C7:1A:18:35:AD:91:D2:58 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e3:65:cc:0b:14:c4:5a:db:56:ed:c3:41:36:c1:10:d6:3c: 90:2d:6a:7b:e6:be:63:34:bd:d9:ea:36:76:27:13:8a:aa:3e: 10:97:af:8d:38:04:16:ec:5f:d7:9b:2c:34:c3:3a:af:79:2c: 7a:8a:ef:c6:81:61:6c:46:17:65:13:f4:e1:c6:51:4e:12:ee: 33:68:6a:1a:dd:6f:50:ee:ae:0f:fa:8b:f3:57:1e:76:24:29: 1d:d3:b1:08:45:76:a2:b5:4d:df:d7:f5:6b:9c:66:9e:d2:8d: 36:1e:1c:79:1e:8e:77:96:49:4b:c6:84:46:e7:0f:f1:aa:fe: e6:6f:97:09:e2:c7:fe:1d:83:4b:ba:76:df:7f:47:f5:7f:25: 88:8e:36:c2:00:ad:f5:48:f1:0a:eb:85:54:29:33:ca:ac:35: 86:d0:5d:0e:c7:24:11:92:c3:ad:0d:c6:a4:96:26:3e:01:d6: 32:b6:61:43:2f:fe:6e:63:0e:a7:eb:2b:03:35:6b:9c:17:48: ef:f4:fb:19:c4:4a:b4:31:2d:0a:84:84:e0:b2:fb:da:6e:29: 6b:3f:4c:cd:c3:6e:3c:71:95:39:c8:ee:80:9b:bc:fd:28:aa: a7:7d:aa:70:d1:b8:25:67:bb:19:df:ac:79:35:9f:d3:28:16: ab:87:4b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJu4kuywHM8Dj1h7l0qF+ig1oozQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTA4MjIwOTU2MDJaFw0yNTA4MjUxNzI5MDJaMDMxMTAvBgNV BAMTKEQ0QTg1Q0M3MDQ0QkM3NDBGRUJGRkJFOUM3MUExODM1QUQ5MUQyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWLBUcy5MIbPQcq9p0i84YRVh MikL58z4Jq85ZK2XPlP+PQAetsT1ZiGQgI/fiGbeAseqmciK/3165oMobmfAM9+F 98LGVtNhKtixqmyOcvk2+YqR3MRgrBu4FNcwWlBh8SLEYnVrek/CGjHLw5DMmDGE Au+881Kjoo4YsQnd6TdecoqOhf9MvpEv7ilD2rtDPLh4dXo0BqlVh1a3kiQLJ64R 2kPJp57TRb1OEesOZZJjaHEpD0qUj7hGOWwor09tsay/F3MK4TSe7d2prFXhOj1s O1t70SXXvTQKW2v+WS9oMTsE38Im9HP37QeAuBlDjcSDran3AD4gAsw+8dKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1KhcxwRLx0D+v/vpxxoYNa2R0lgwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfjZcwLFMRa21btw0E2wRDWPJAtanvmvmM0 vdnqNnYnE4qqPhCXr404BBbsX9ebLDTDOq95LHqK78aBYWxGF2UT9OHGUU4S7jNo ahrdb1Durg/6i/NXHnYkKR3TsQhFdqK1Td/X9WucZp7SjTYeHHkejneWSUvGhEbn D/Gq/uZvlwnix/4dg0u6dt9/R/V/JYiONsIArfVI8QrrhVQpM8qsNYbQXQ7HJBGS w60NxqSWJj4B1jK2YUMv/m5jDqfrKwM1a5wXSO/0+xnESrQxLQqEhOCy+9puKWs/ TM3DbjxxlTnI7oCbvP0oqqd9qnDRuCVnuxnfrHk1n9MoFquHSyE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:06 2025 by rpki-client