$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: SooxrJKhjkPX3nzOrzvY3pcMIF3ZHn6jT8Ep6zo2Ck8= Subject key identifier: E6:D2:F8:DF:69:98:E1:E0:84:87:A7:0C:85:A0:71:DF:3D:FD:79:C4 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 03272E890F82C355A353238052D1D1AC31A37D84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 018A Signing time: Fri 09 May 2025 12:31:02 +0000 Manifest this update: Fri 09 May 2025 12:26:02 +0000 Manifest next update: Mon 12 May 2025 15:05:02 +0000 Files and hashes: 1: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: SDDT76sB5fD/qwKD2c7jZ56T2/zb4XIJfGohnMvEips=) 2: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: FKopsjmhu2ZpwkHZKTS2a2cSATg1lZ109SObjsmNTcI=) 3: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: UlSl1DB/mepLcftsjw3DYV/h+ib4DZ8xcfuwxNYqW54=) 4: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: C3Y5TVjlMMx3bj7loYa7CuUDY/TXp19dghaSZKbxk0g=) 5: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: LQahwQ72kro/LJH779tBFmRDGBJ/aQ/cw7AFn3KwUxg=) 6: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: vRq65LfzwGz4j+oEbqBPQ82wtT1KDumkC2L75cgO4WQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:27:2e:89:0f:82:c3:55:a3:53:23:80:52:d1:d1:ac:31:a3:7d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: May 9 12:26:02 2025 GMT Not After : May 12 15:05:02 2025 GMT Subject: CN=E6D2F8DF6998E1E08487A70C85A071DF3DFD79C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:2f:7c:2d:cf:65:58:93:5b:51:3b:7a:09: 14:97:bd:36:b2:9b:0d:59:12:f2:c1:48:1f:1b:c7: d4:31:30:cd:fa:a1:4b:af:4e:e2:b1:f1:38:2e:c3: 5e:46:39:b8:86:77:a6:92:cf:25:f0:b4:46:47:08: 49:9a:06:12:d0:2e:5c:fb:af:27:71:d7:36:9f:ae: 5e:7b:00:cf:36:63:8f:d1:44:a3:5e:a2:a8:37:84: 78:87:39:a9:f2:84:8e:00:b4:b5:ee:85:f0:6a:3a: bd:2d:1a:9e:02:93:fd:8e:3e:5e:3b:79:ed:68:1b: 14:71:a6:2e:d1:db:7f:6d:4b:52:bc:70:17:96:cd: 65:a3:dc:a8:c9:03:ab:eb:e2:58:0e:0b:d4:66:c2: f9:cd:27:cc:a1:d9:1d:be:50:eb:27:cc:02:43:13: c2:db:a3:4a:23:7f:5f:1a:7a:47:a0:44:b4:00:f1: 42:b6:f3:f5:6a:e0:25:7c:90:2d:13:ad:fe:e9:e4: d1:36:bc:a8:fa:34:7c:f3:e8:f3:84:0a:ad:10:77: 5f:f5:de:e5:f1:16:43:6c:5e:b7:54:cb:2e:98:4c: b9:20:da:1c:cd:92:dc:c7:8b:8d:f1:03:8e:fc:75: 38:72:89:0d:ec:b5:16:0a:16:a8:ae:f0:83:6b:d5: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D2:F8:DF:69:98:E1:E0:84:87:A7:0C:85:A0:71:DF:3D:FD:79:C4 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a2:bb:d3:1e:4c:5b:db:fa:f3:43:cf:95:ac:ae:aa:69:e1: 3d:fa:08:75:34:9e:c4:75:03:f1:41:56:bd:f0:b1:05:69:80: ee:94:6b:c1:47:c5:d2:f2:df:fc:e4:8a:91:9b:04:7d:93:f2: e1:f3:a0:fc:3c:c8:22:34:7f:f6:51:a4:8a:c5:f4:fa:f9:6c: 03:f8:04:a5:f0:29:45:02:38:d6:ce:ae:56:d0:89:a2:83:f1: d9:b9:22:b1:db:52:d3:28:cc:8a:8c:99:da:99:3c:7d:b0:ab: c3:cd:2a:ce:16:4e:a3:45:2b:83:2a:74:b3:6f:73:11:e9:0f: 57:a0:4e:63:cc:b6:df:11:17:07:6c:2e:28:dc:68:11:ed:c2: 61:85:f7:2d:9e:db:ec:98:dd:69:1b:77:b4:ef:0f:03:7f:97: 06:17:26:87:85:f3:4a:05:aa:2b:a8:87:84:45:57:a9:39:1c: e4:e2:64:9f:ed:fe:2b:16:3b:53:d8:da:83:52:ac:0f:4e:b4: 5f:23:45:be:80:34:07:6b:0c:33:b3:1c:f2:63:34:91:4c:a1: 48:3d:ed:6d:d3:89:2c:3f:39:70:81:bb:c3:00:49:84:46:bf: aa:86:ad:8f:1b:87:69:a3:0e:98:57:12:e1:2a:35:80:e8:5a: 0d:99:da:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAycuiQ+Cw1WjUyOAUtHRrDGjfYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTA1MDkxMjI2MDJaFw0yNTA1MTIxNTA1MDJaMDMxMTAvBgNV BAMTKEU2RDJGOERGNjk5OEUxRTA4NDg3QTcwQzg1QTA3MURGM0RGRDc5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreC98Lc9lWJNbUTt6CRSXvTay mw1ZEvLBSB8bx9QxMM36oUuvTuKx8Tguw15GObiGd6aSzyXwtEZHCEmaBhLQLlz7 rydx1zafrl57AM82Y4/RRKNeoqg3hHiHOanyhI4AtLXuhfBqOr0tGp4Ck/2OPl47 ee1oGxRxpi7R239tS1K8cBeWzWWj3KjJA6vr4lgOC9RmwvnNJ8yh2R2+UOsnzAJD E8Lbo0ojf18aekegRLQA8UK28/Vq4CV8kC0Trf7p5NE2vKj6NHzz6POECq0Qd1/1 3uXxFkNsXrdUyy6YTLkg2hzNktzHi43xA478dThyiQ3stRYKFqiu8INr1UiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5tL432mY4eCEh6cMhaBx3z39ecQwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqiu9MeTFvb+vNDz5Wsrqpp4T36CHU0nsR1 A/FBVr3wsQVpgO6Ua8FHxdLy3/zkipGbBH2T8uHzoPw8yCI0f/ZRpIrF9Pr5bAP4 BKXwKUUCONbOrlbQiaKD8dm5IrHbUtMozIqMmdqZPH2wq8PNKs4WTqNFK4MqdLNv cxHpD1egTmPMtt8RFwdsLijcaBHtwmGF9y2e2+yY3Wkbd7TvDwN/lwYXJoeF80oF qiuoh4RFV6k5HOTiZJ/t/isWO1PY2oNSrA9OtF8jRb6ANAdrDDOzHPJjNJFMoUg9 7W3TiSw/OXCBu8MASYRGv6qGrY8bh2mjDphXEuEqNYDoWg2Z2qE= -----END CERTIFICATE-----Generated at Sun May 11 02:11:18 2025 by rpki-client