$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: Q3LYT59YYPL3/jbu/1u3FkZp0wwmi0S0RwkwX8EDzV8= Subject key identifier: A6:9A:FA:B5:3B:C8:7B:EA:C7:33:82:F8:C5:1B:23:77:F5:8F:E0:40 Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 0F3F857648F04D36A7A47DA2C854D2F7900289F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 020A Signing time: Fri 22 Aug 2025 19:52:07 +0000 Manifest this update: Fri 22 Aug 2025 19:47:07 +0000 Manifest next update: Tue 26 Aug 2025 06:46:07 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) 2: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) 3: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: 09/wUK5sP/5BL8ZQLLIMo3UbdaXUrkeqthIztNUnl0A=) 4: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3f:85:76:48:f0:4d:36:a7:a4:7d:a2:c8:54:d2:f7:90:02:89:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Aug 22 19:47:07 2025 GMT Not After : Aug 26 06:46:07 2025 GMT Subject: CN=A69AFAB53BC87BEAC73382F8C51B2377F58FE040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:d5:ed:67:a5:ff:40:15:0a:fd:8a:f5:a3: 1f:a3:1b:99:1f:d2:a5:b4:fd:8d:d8:29:43:ae:98: 08:17:27:46:0e:2a:fa:a0:12:18:0f:ad:e9:4b:e1: 2c:87:5b:38:3c:cb:77:c8:f4:d6:79:7a:4e:5e:12: cd:4f:c0:29:ff:35:1d:db:ca:d1:9c:6d:fd:d9:12: 0d:33:00:99:85:5c:7f:ad:70:cd:ac:cd:81:04:1b: 3a:ee:76:b0:aa:11:07:a7:bd:24:c0:77:c7:03:1f: 3e:94:8f:cc:23:e8:af:bb:65:c5:3b:d9:4f:bc:48: 5a:d6:e6:25:70:76:f8:c9:08:6d:dd:a3:25:91:b2: 1c:9b:96:6f:ea:b3:8e:1c:86:38:85:f2:85:bc:72: 16:25:53:c0:b3:f7:81:69:f6:75:a9:1d:ee:26:b7: 31:79:74:68:3f:f4:14:04:41:90:df:95:0d:8c:e8: 50:f4:73:50:17:0a:ad:f3:09:eb:5e:17:9a:66:98: 9c:8f:30:d7:5b:0e:f8:d6:c6:54:a5:ff:fd:46:14: b3:68:b4:df:4c:2f:5c:91:9a:50:04:d7:f9:d0:23: 1e:83:cc:03:03:41:1d:50:53:cb:cd:ae:c2:b6:e0: ac:1a:b2:7f:fd:72:1a:2d:51:2c:37:92:e7:3e:79: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9A:FA:B5:3B:C8:7B:EA:C7:33:82:F8:C5:1B:23:77:F5:8F:E0:40 X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:04:66:21:b2:b4:d9:65:7f:f2:0c:97:6c:67:68:08:02:52: 05:3b:bd:21:53:fc:98:be:a1:53:7d:89:fd:b8:64:56:35:dc: f0:6c:38:be:5b:20:1d:fb:e0:16:5a:9c:75:57:3b:85:fc:2e: 75:fe:15:f9:36:b2:3b:5f:d3:ee:2d:7c:09:96:38:85:63:6a: 1b:9a:7c:09:1c:8e:55:5a:51:a5:ad:b5:36:7c:f3:4e:94:82: 35:dd:23:08:be:2a:9f:06:b0:41:45:54:ad:2a:4d:ed:26:d0: 9f:0c:ac:d6:bf:16:27:31:c2:ba:c3:8e:b0:d4:c2:03:bd:5a: 32:da:d5:be:42:3c:a0:25:61:09:c6:f2:61:73:d1:3f:62:7f: 7f:a5:0f:72:22:f5:e4:85:ee:84:8b:ba:ef:56:0d:2c:e8:2a: 60:33:08:ee:0f:88:cb:6b:78:6c:1a:18:18:61:0d:83:58:da: b8:a1:55:11:24:b9:ea:82:24:23:e4:4e:88:c1:70:67:46:91: df:01:b9:77:b2:39:c9:cb:99:d4:c5:10:ac:49:8c:92:c7:ba: eb:ff:17:83:66:5a:9e:f6:bb:ff:a8:8b:f1:2f:62:a8:6a:f7: b4:23:5d:1b:d1:a9:05:e4:e2:43:9a:4c:94:e9:ed:69:dc:89: c2:e5:cb:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDz+FdkjwTTanpH2iyFTS95ACifEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTA4MjIxOTQ3MDdaFw0yNTA4MjYwNjQ2MDdaMDMxMTAvBgNV BAMTKEE2OUFGQUI1M0JDODdCRUFDNzMzODJGOEM1MUIyMzc3RjU4RkUwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2dXtZ6X/QBUK/Yr1ox+jG5kf 0qW0/Y3YKUOumAgXJ0YOKvqgEhgPrelL4SyHWzg8y3fI9NZ5ek5eEs1PwCn/NR3b ytGcbf3ZEg0zAJmFXH+tcM2szYEEGzrudrCqEQenvSTAd8cDHz6Uj8wj6K+7ZcU7 2U+8SFrW5iVwdvjJCG3doyWRshyblm/qs44chjiF8oW8chYlU8Cz94Fp9nWpHe4m tzF5dGg/9BQEQZDflQ2M6FD0c1AXCq3zCeteF5pmmJyPMNdbDvjWxlSl//1GFLNo tN9ML1yRmlAE1/nQIx6DzAMDQR1QU8vNrsK24Kwasn/9chotUSw3kuc+eZO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUppr6tTvIe+rHM4L4xRsjd/WP4EAwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcEZiGytNllf/IMl2xnaAgCUgU7vSFT/Ji+ oVN9if24ZFY13PBsOL5bIB374BZanHVXO4X8LnX+Ffk2sjtf0+4tfAmWOIVjahua fAkcjlVaUaWttTZ8806UgjXdIwi+Kp8GsEFFVK0qTe0m0J8MrNa/FicxwrrDjrDU wgO9WjLa1b5CPKAlYQnG8mFz0T9if3+lD3Ii9eSF7oSLuu9WDSzoKmAzCO4PiMtr eGwaGBhhDYNY2rihVREkueqCJCPkTojBcGdGkd8BuXeyOcnLmdTFEKxJjJLHuuv/ F4NmWp72u/+oi/EvYqhq97QjXRvRqQXk4kOaTJTp7WncicLlyyc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:44 2025 by rpki-client