$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: ayTuUgDmQ1eCVIu3TVN8ooRkU4OZfDdfGPKTutGD1wg= Subject key identifier: 90:2B:B5:2D:29:D0:D7:46:A3:9D:D5:FA:46:62:8C:DA:21:71:AB:C2 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 36411E0C688AE90A340554155FA37CE7A27013EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 0240 Signing time: Thu 07 Aug 2025 19:12:29 +0000 Manifest this update: Thu 07 Aug 2025 19:07:29 +0000 Manifest next update: Mon 11 Aug 2025 01:30:29 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) 2: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: P4N91zAHcwBzQ3DjcHrjU1mNITqyIAIAOqxxzbWQtOQ=) 3: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:41:1e:0c:68:8a:e9:0a:34:05:54:15:5f:a3:7c:e7:a2:70:13:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Aug 7 19:07:29 2025 GMT Not After : Aug 11 01:30:29 2025 GMT Subject: CN=902BB52D29D0D746A39DD5FA46628CDA2171ABC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:bb:68:cb:09:5d:c9:c9:37:42:01:dd:10: 0d:ad:31:b0:01:01:19:6e:23:16:9b:a6:3f:0a:4f: 0f:0d:71:6d:d7:62:ca:4a:52:6b:0b:17:c8:c2:c6: c6:02:96:f1:c2:d6:f7:3a:37:c3:5c:ff:b6:10:bf: 8b:f0:5f:40:da:13:af:60:3c:d7:fd:bc:a8:32:1a: 66:29:c7:c6:b9:12:0c:60:04:e8:44:c0:96:6e:fd: 6c:b0:22:f4:4c:61:a2:f7:b3:05:7e:87:65:0e:43: d8:fd:65:d3:16:cf:9d:b8:da:ec:ef:d0:21:97:00: 7b:0f:8f:65:bb:17:86:85:58:2b:35:90:66:58:81: 68:59:a2:75:12:db:01:0c:3b:bd:f7:b5:f3:b5:29: 8c:e8:42:46:bd:9b:5d:a3:9c:28:c3:eb:d3:10:95: c2:b5:a5:bb:34:16:ad:51:b2:ee:14:f4:c9:67:b8: ae:57:a7:36:54:9c:fc:29:34:8f:96:2f:3b:8c:cd: f0:9c:75:44:4e:a3:65:10:28:90:60:fa:a7:5a:50: 85:74:99:8a:95:96:e0:32:b1:e4:45:70:d5:50:83: 69:ff:7c:a3:e3:3e:9e:8f:34:1d:75:64:e1:01:bf: a0:70:d8:08:61:4d:a0:24:a1:5c:33:5d:4d:e9:86: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2B:B5:2D:29:D0:D7:46:A3:9D:D5:FA:46:62:8C:DA:21:71:AB:C2 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:44:87:c7:07:d5:d6:6c:bc:ab:11:a5:a2:37:c3:92:7c:1a: d9:8e:fd:9c:d8:50:dd:17:ff:47:c4:46:e6:4c:e6:70:f5:1d: 3f:14:3f:1a:9d:0c:37:cf:60:31:f5:93:6a:59:9e:70:d5:15: c5:f9:05:6a:ae:fc:b3:f1:61:48:ab:69:4e:82:44:51:db:e8: 0b:ba:db:52:b4:b5:d0:87:29:06:94:45:ba:00:5b:d8:7f:50: f8:aa:b0:7d:ae:04:cf:06:d8:f2:d9:82:10:aa:44:d1:fa:b5: 45:9b:92:c2:4b:51:14:8b:80:f5:49:c1:64:71:7c:25:99:62: ec:81:bf:b0:db:94:2c:dc:6e:6f:2c:43:35:e1:3d:4f:9d:23: 49:4c:d3:0d:aa:1c:57:52:7e:fa:63:92:f2:dd:36:ba:15:95: f4:40:42:73:d2:55:31:36:2d:8a:7f:99:73:6d:0a:19:c3:7f: 53:f9:96:8c:7f:6b:a8:08:7a:de:86:c4:96:18:a1:42:3e:cf: d9:4f:8e:55:c3:7e:ce:38:08:9c:71:e4:ed:07:a5:f0:e7:1b: 74:06:b4:da:19:ec:aa:87:68:ba:eb:a4:c4:80:1c:a0:2f:5f: a2:eb:30:f7:1b:57:b3:34:b0:f7:f8:95:05:99:4d:9b:e6:0c: 5b:f5:39:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkEeDGiK6Qo0BVQVX6N856JwE+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTA4MDcxOTA3MjlaFw0yNTA4MTEwMTMwMjlaMDMxMTAvBgNV BAMTKDkwMkJCNTJEMjlEMEQ3NDZBMzlERDVGQTQ2NjI4Q0RBMjE3MUFCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/btoywldyck3QgHdEA2tMbAB ARluIxabpj8KTw8NcW3XYspKUmsLF8jCxsYClvHC1vc6N8Nc/7YQv4vwX0DaE69g PNf9vKgyGmYpx8a5EgxgBOhEwJZu/WywIvRMYaL3swV+h2UOQ9j9ZdMWz5242uzv 0CGXAHsPj2W7F4aFWCs1kGZYgWhZonUS2wEMO733tfO1KYzoQka9m12jnCjD69MQ lcK1pbs0Fq1Rsu4U9MlnuK5XpzZUnPwpNI+WLzuMzfCcdUROo2UQKJBg+qdaUIV0 mYqVluAyseRFcNVQg2n/fKPjPp6PNB11ZOEBv6Bw2AhhTaAkoVwzXU3phj97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCu1LSnQ10ajndX6RmKM2iFxq8IwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJEh8cH1dZsvKsRpaI3w5J8GtmO/ZzYUN0X /0fERuZM5nD1HT8UPxqdDDfPYDH1k2pZnnDVFcX5BWqu/LPxYUiraU6CRFHb6Au6 21K0tdCHKQaURboAW9h/UPiqsH2uBM8G2PLZghCqRNH6tUWbksJLURSLgPVJwWRx fCWZYuyBv7DblCzcbm8sQzXhPU+dI0lM0w2qHFdSfvpjkvLdNroVlfRAQnPSVTE2 LYp/mXNtChnDf1P5lox/a6gIet6GxJYYoUI+z9lPjlXDfs44CJxx5O0HpfDnG3QG tNoZ7KqHaLrrpMSAHKAvX6LrMPcbV7M0sPf4lQWZTZvmDFv1ObA= -----END CERTIFICATE-----Generated at Fri Aug 8 10:15:44 2025 by rpki-client