$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: CuP2i0pVqnQ0wNjjLKJdo004WOvs/LLmOfrzMcsiWWQ= Subject key identifier: 72:87:05:B9:9E:87:78:54:E4:54:4D:C5:07:BE:19:A6:A8:35:CD:CA Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 5EC8D0348194B76DAF9BD2BA4A098CC315C09954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 0223 Signing time: Sat 18 Oct 2025 18:21:55 +0000 Manifest this update: Sat 18 Oct 2025 18:16:55 +0000 Manifest next update: Tue 21 Oct 2025 19:14:55 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) 2: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) 3: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: KYJggt2/6HPcqaz8p+bX7JLr4IXELLUls6HnVdaHVTk=) 4: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c8:d0:34:81:94:b7:6d:af:9b:d2:ba:4a:09:8c:c3:15:c0:99:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Oct 18 18:16:55 2025 GMT Not After : Oct 21 19:14:55 2025 GMT Subject: CN=728705B99E877854E4544DC507BE19A6A835CDCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:1e:c5:5f:4a:15:f0:1c:d0:00:4e:62:47: 97:8c:ef:4e:06:39:62:ab:40:07:7a:65:17:4c:65: 2c:f6:ca:68:d8:a5:b4:0e:4d:95:b9:c0:31:85:ff: bd:37:01:4e:fd:79:85:bc:a7:af:1f:9f:b7:a2:58: af:dc:54:4c:99:97:fc:5b:e0:87:01:80:99:07:ac: de:e3:5a:0f:5b:bc:16:8e:62:a7:65:a9:80:12:3b: 6e:a0:1c:f7:cb:c3:bd:4b:fd:1a:85:31:99:a5:eb: 76:6f:05:f3:49:15:ce:f3:6e:d7:44:2a:ed:8a:59: 75:db:a7:ba:48:a8:40:f6:cd:3a:64:39:f1:1a:e7: 0e:5a:88:94:d3:35:84:64:e2:c7:c2:c6:ea:61:db: cb:57:05:23:87:09:0f:07:f8:2f:aa:32:5f:1a:be: 00:0e:38:a1:1a:b9:cc:79:e5:39:2c:81:18:49:91: 5c:c4:48:f1:ed:52:96:11:60:21:5e:f6:37:e0:9a: 31:94:9d:e3:25:a6:42:5b:3a:76:21:42:65:53:9f: 7b:2e:d5:4d:88:b6:d9:cc:c1:ec:44:78:ea:02:e4: 1f:50:39:be:df:6e:2b:4d:4a:e1:dc:71:91:e2:a8: e0:c1:9e:0f:61:45:0f:51:9a:b6:7d:6f:d1:f2:bf: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:87:05:B9:9E:87:78:54:E4:54:4D:C5:07:BE:19:A6:A8:35:CD:CA X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:71:a8:ac:36:f6:eb:92:74:0f:70:4b:ea:e8:8a:dd:40:bf: 47:85:2d:42:81:3f:40:59:db:57:6a:43:0d:e8:19:d7:16:f3: ec:b9:32:e5:85:14:cf:d6:5a:3a:d5:92:0b:f0:87:c3:23:44: ce:60:f5:b5:1d:a0:6a:29:fb:d5:f6:91:95:43:6a:85:4f:11: 55:b4:9f:d0:82:03:8b:75:0c:e2:dd:10:0c:5c:64:5e:74:e2: 71:50:59:45:c0:fa:8e:12:41:da:87:6d:b7:a9:81:f1:06:fb: 3b:42:68:b7:13:7a:e7:c9:ee:c9:62:84:33:d9:78:3e:11:0a: e1:75:e6:a9:07:5b:b4:44:c9:c8:77:97:a8:1f:37:23:3f:0c: 13:78:eb:cd:b2:64:13:77:5b:a5:49:76:0f:ed:0f:bd:ac:2c: 3a:3b:88:85:e5:2e:e8:67:d3:a0:6c:5d:b5:ba:e4:72:0a:01: 21:11:89:5a:0b:9d:cd:83:98:f1:9d:9c:77:7c:28:51:ba:97: 8c:11:3e:f4:82:10:1e:fb:95:6c:c9:24:bc:5d:5a:3a:1f:79: 1b:bc:56:3f:79:82:4b:47:42:0e:ac:79:9f:31:ad:f0:58:b6: 3d:40:c4:12:dc:6d:ad:55:34:8e:ff:46:e9:4f:14:f4:e3:5b: 98:c1:45:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsjQNIGUt22vm9K6SgmMwxXAmVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTEwMTgxODE2NTVaFw0yNTEwMjExOTE0NTVaMDMxMTAvBgNV BAMTKDcyODcwNUI5OUU4Nzc4NTRFNDU0NERDNTA3QkUxOUE2QTgzNUNEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJx7FX0oV8BzQAE5iR5eM704G OWKrQAd6ZRdMZSz2ymjYpbQOTZW5wDGF/703AU79eYW8p68fn7eiWK/cVEyZl/xb 4IcBgJkHrN7jWg9bvBaOYqdlqYASO26gHPfLw71L/RqFMZml63ZvBfNJFc7zbtdE Ku2KWXXbp7pIqED2zTpkOfEa5w5aiJTTNYRk4sfCxuph28tXBSOHCQ8H+C+qMl8a vgAOOKEaucx55TksgRhJkVzESPHtUpYRYCFe9jfgmjGUneMlpkJbOnYhQmVTn3su 1U2IttnMwexEeOoC5B9QOb7fbitNSuHccZHiqODBng9hRQ9RmrZ9b9Hyvy6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcocFuZ6HeFTkVE3FB74Zpqg1zcowHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxxqKw29uuSdA9wS+roit1Av0eFLUKBP0BZ 21dqQw3oGdcW8+y5MuWFFM/WWjrVkgvwh8MjRM5g9bUdoGop+9X2kZVDaoVPEVW0 n9CCA4t1DOLdEAxcZF504nFQWUXA+o4SQdqHbbepgfEG+ztCaLcTeufJ7slihDPZ eD4RCuF15qkHW7REych3l6gfNyM/DBN4682yZBN3W6VJdg/tD72sLDo7iIXlLuhn 06BsXbW65HIKASERiVoLnc2DmPGdnHd8KFG6l4wRPvSCEB77lWzJJLxdWjofeRu8 Vj95gktHQg6seZ8xrfBYtj1AxBLcba1VNI7/RulPFPTjW5jBRTw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:50 2025 by rpki-client