$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: C5TYUV/4C/axJHUHSdX0oUY8//SFhQOzxXXIGm/8f5M= Subject key identifier: 4F:D7:DD:5C:1E:14:74:6A:6E:1F:80:86:E0:F8:9B:41:01:27:4F:1D Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 54307F160CBA5CC027BB17BF381C64A1C9CB2847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 01D9 Signing time: Sun 04 May 2025 18:02:04 +0000 Manifest this update: Sun 04 May 2025 17:57:04 +0000 Manifest next update: Thu 08 May 2025 02:12:04 +0000 Files and hashes: 1: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: lsNYH0S5A207OTT29CqIuALTTi4QfLik4YDYgvElrXA=) 2: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: vH/AHPKtlG2C1g0YKzqe62eHzdCNjomBrQRdxjjmNr0=) 3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: CYRCxIMfYw8kr5hwucdBgVETX9ccYUsB+pGv5wRWbVU=) 4: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: y0IC1wewy1NTZC1WvVqvRnWg597FE/H/DcwR9g+OaRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:30:7f:16:0c:ba:5c:c0:27:bb:17:bf:38:1c:64:a1:c9:cb:28:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: May 4 17:57:04 2025 GMT Not After : May 8 02:12:04 2025 GMT Subject: CN=4FD7DD5C1E14746A6E1F8086E0F89B4101274F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:30:7c:58:7c:f3:53:fb:2a:d4:2d:6d:69: 87:93:08:a2:62:1f:71:c6:78:ba:46:e9:1a:4f:4a: 64:ff:74:f7:de:17:38:1f:83:ee:f2:4b:9e:35:f2: 63:a5:22:04:89:80:da:81:4d:c2:bf:45:0b:5e:53: d0:2f:a7:87:4e:cc:63:49:a3:9a:98:ae:97:16:11: fb:76:38:45:91:e7:7c:2c:d2:f9:79:77:0a:7d:96: c2:b3:77:4d:0a:d8:18:05:c9:b2:50:d5:56:f5:9e: 00:06:e0:f2:c9:9e:db:d1:a9:db:a9:d3:d0:83:22: 9e:90:73:21:b5:f8:4c:14:70:f6:bf:f8:a2:dd:80: 56:96:1e:8f:09:0a:00:c4:80:77:62:3f:4e:f3:e5: 7e:43:9a:71:6e:91:80:59:49:06:e2:d1:13:f5:d0: 96:44:12:71:78:4b:1f:d1:eb:3d:5e:80:80:e8:60: 66:f0:b3:84:93:97:9d:42:b2:57:80:36:79:c5:6b: aa:16:7f:08:52:46:92:6c:15:90:12:00:f0:43:08: cb:da:4e:55:5e:f8:a3:ef:2a:f7:56:e3:1b:dd:a6: ba:91:54:89:8f:1e:78:85:45:d0:b0:14:08:89:b4: 0f:00:ec:1c:1a:98:4c:b7:c1:0a:7b:66:bb:08:8b: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D7:DD:5C:1E:14:74:6A:6E:1F:80:86:E0:F8:9B:41:01:27:4F:1D X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8a:83:42:20:32:90:1b:e6:fc:06:82:7b:5c:25:c5:f1:0b: 05:ba:35:f1:0e:9a:ad:85:c5:75:91:6e:a2:93:f6:42:0c:81: c2:5f:09:a3:ab:ac:a6:cd:81:26:7e:90:21:52:88:50:de:37: 8c:ff:33:5c:bd:ae:c0:fc:1f:e3:c0:70:94:d1:83:37:1f:5f: 07:31:dd:3f:db:7c:6d:ed:09:82:7d:3d:f5:c1:e3:a8:f9:06: c1:ae:34:08:21:02:93:6e:c6:61:0c:86:0f:1a:14:10:46:9f: c1:fd:63:92:69:5e:62:0c:df:07:49:4f:1d:22:fa:8f:03:b6: 7a:aa:87:cf:21:d9:1e:38:85:03:8f:b8:53:90:09:92:24:56: 42:d0:39:1e:4f:11:0b:c7:ff:1e:30:e8:90:eb:73:1d:7a:fb: 1a:f3:a8:64:d9:43:ac:a0:02:be:9a:0b:0d:e5:15:a4:2c:8d: 83:f3:7a:8c:07:ca:26:67:3b:68:3c:32:f7:24:9e:e7:d2:52: af:59:45:12:db:c5:2b:ee:de:d5:4b:7e:44:6a:3c:d4:72:6c: 60:f2:a4:18:8c:8a:22:36:39:56:40:3c:96:53:0d:13:cb:10: 74:8d:68:d9:e6:49:88:dc:7a:47:94:7b:2e:2f:15:2a:5f:2c: 4c:6d:c2:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDB/Fgy6XMAnuxe/OBxkocnLKEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTA1MDQxNzU3MDRaFw0yNTA1MDgwMjEyMDRaMDMxMTAvBgNV BAMTKDRGRDdERDVDMUUxNDc0NkE2RTFGODA4NkUwRjg5QjQxMDEyNzRGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpjjB8WHzzU/sq1C1taYeTCKJi H3HGeLpG6RpPSmT/dPfeFzgfg+7yS5418mOlIgSJgNqBTcK/RQteU9Avp4dOzGNJ o5qYrpcWEft2OEWR53ws0vl5dwp9lsKzd00K2BgFybJQ1Vb1ngAG4PLJntvRqdup 09CDIp6QcyG1+EwUcPa/+KLdgFaWHo8JCgDEgHdiP07z5X5DmnFukYBZSQbi0RP1 0JZEEnF4Sx/R6z1egIDoYGbws4STl51CsleANnnFa6oWfwhSRpJsFZASAPBDCMva TlVe+KPvKvdW4xvdprqRVImPHniFRdCwFAiJtA8A7BwamEy3wQp7ZrsIi+BXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9fdXB4UdGpuH4CG4PibQQEnTx0wHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeKg0IgMpAb5vwGgntcJcXxCwW6NfEOmq2F xXWRbqKT9kIMgcJfCaOrrKbNgSZ+kCFSiFDeN4z/M1y9rsD8H+PAcJTRgzcfXwcx 3T/bfG3tCYJ9PfXB46j5BsGuNAghApNuxmEMhg8aFBBGn8H9Y5JpXmIM3wdJTx0i +o8Dtnqqh88h2R44hQOPuFOQCZIkVkLQOR5PEQvH/x4w6JDrcx16+xrzqGTZQ6yg Ar6aCw3lFaQsjYPzeowHyiZnO2g8MvcknufSUq9ZRRLbxSvu3tVLfkRqPNRybGDy pBiMiiI2OVZAPJZTDRPLEHSNaNnmSYjcekeUey4vFSpfLExtwuI= -----END CERTIFICATE-----Generated at Wed May 7 10:36:57 2025 by rpki-client