$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: gEKM1wTPQiQAA3mPs58NHKgc/mUOO/XMFxsN/kNvqVs= Subject key identifier: F2:74:EE:C0:5F:04:3C:6B:ED:BA:8E:9D:C3:81:49:43:81:C3:D2:6F Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 6E67053DD6696800042384795D527E65249F3681 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 0268 Signing time: Mon 03 Nov 2025 16:22:17 +0000 Manifest this update: Mon 03 Nov 2025 16:17:17 +0000 Manifest next update: Thu 06 Nov 2025 19:17:17 +0000 Files and hashes: 1: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: HofDLGmwqIsnj587taUbViIIFJnwZV6L29IBKkzVuIE=) 2: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) 3: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: +SRDyEtQJW8LLJkyGdxKBr5Qewv5isEfUibMOI9C5ZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:67:05:3d:d6:69:68:00:04:23:84:79:5d:52:7e:65:24:9f:36:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Nov 3 16:17:17 2025 GMT Not After : Nov 6 19:17:17 2025 GMT Subject: CN=F274EEC05F043C6BEDBA8E9DC381494381C3D26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bb:7c:9c:f0:5f:ff:f6:fd:82:46:6e:9a:ab: 82:ae:cd:d3:4d:c0:6c:db:bb:f6:48:58:da:38:7a: 0f:24:3c:0f:41:8f:36:a0:92:f3:cb:c6:b4:e3:b2: 78:4e:32:db:4c:fb:7b:6b:29:65:73:1d:8e:1d:39: 24:ff:4e:70:10:5f:72:85:91:f3:9b:bc:1a:15:5c: 68:db:1b:60:ba:22:7b:40:88:51:14:8a:83:34:d4: da:d4:09:00:9a:db:56:7a:48:53:cc:cd:a0:ca:95: b3:8f:be:59:2c:16:c3:d5:3c:5b:43:a7:fc:1f:76: 31:df:13:a7:ff:38:35:5a:fb:bb:8b:ee:7b:28:64: 81:18:08:8f:06:2c:3f:07:a0:be:fd:36:37:d9:08: b1:90:2b:3d:f1:25:e6:2c:83:e5:dd:db:44:6d:b6: 5f:eb:bf:85:87:ee:63:ce:b7:31:8b:9e:0b:db:aa: 2c:e1:04:33:77:ef:b1:29:46:17:66:bf:73:3a:63: ef:75:a7:cd:35:b0:ac:5b:94:0e:b3:83:b2:8a:f5: 67:75:c5:41:29:b9:21:01:79:44:1b:14:26:d4:a5: 5b:bf:8d:9e:a1:62:28:15:d2:72:2e:d6:f2:06:f3: 5e:a5:2b:d8:e1:ce:24:f6:ae:aa:41:a6:a2:02:88: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:EE:C0:5F:04:3C:6B:ED:BA:8E:9D:C3:81:49:43:81:C3:D2:6F X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ec:f7:b6:99:f2:d9:98:e9:59:ca:20:42:6a:fb:e8:37:e5: fe:df:3f:9d:e8:37:a3:41:67:6a:70:a4:a5:f8:6f:7d:1d:a1: 31:17:ea:f1:c9:ea:6f:83:6b:e2:68:81:83:a8:72:27:1b:99: 61:2f:5d:60:c3:26:88:ba:87:ff:fa:fd:2a:c8:23:7b:51:46: 98:4a:bf:68:17:a6:fb:ae:1e:d0:88:68:05:93:ae:d5:b3:6b: 85:83:41:f2:69:8f:db:b0:2d:ff:7f:38:47:87:e6:d2:cf:9f: 3b:ba:92:7b:ac:ce:a5:21:98:78:da:25:11:c9:ff:6d:59:53: 95:22:11:d9:19:49:1d:bc:0a:34:78:2e:63:db:ec:45:09:4e: 0d:6a:94:5e:f8:55:7c:5c:03:fa:7b:09:a8:de:46:c3:1e:a5: ee:50:e5:34:40:86:ce:c4:fa:75:68:75:0d:90:f1:12:9c:48: f7:a7:9a:40:fa:46:44:62:c7:1e:b7:0f:5a:35:a8:17:9f:d9: 81:33:fb:0c:51:d2:ba:b2:ad:50:6f:2b:15:d6:2c:a1:54:e5: 30:26:e3:a7:83:39:ee:e1:80:13:3d:0c:86:f6:ee:ab:1d:65: 87:22:2a:74:07:7a:af:53:14:64:59:9b:9e:bc:c1:ac:36:b8: ea:39:19:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmcFPdZpaAAEI4R5XVJ+ZSSfNoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTExMDMxNjE3MTdaFw0yNTExMDYxOTE3MTdaMDMxMTAvBgNV BAMTKEYyNzRFRUMwNUYwNDNDNkJFREJBOEU5REMzODE0OTQzODFDM0QyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2u3yc8F//9v2CRm6aq4KuzdNN wGzbu/ZIWNo4eg8kPA9BjzagkvPLxrTjsnhOMttM+3trKWVzHY4dOST/TnAQX3KF kfObvBoVXGjbG2C6IntAiFEUioM01NrUCQCa21Z6SFPMzaDKlbOPvlksFsPVPFtD p/wfdjHfE6f/ODVa+7uL7nsoZIEYCI8GLD8HoL79NjfZCLGQKz3xJeYsg+Xd20Rt tl/rv4WH7mPOtzGLngvbqizhBDN377EpRhdmv3M6Y+91p801sKxblA6zg7KK9Wd1 xUEpuSEBeUQbFCbUpVu/jZ6hYigV0nIu1vIG816lK9jhziT2rqpBpqICiAQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nTuwF8EPGvtuo6dw4FJQ4HD0m8wHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTs97aZ8tmY6VnKIEJq++g35f7fP53oN6NB Z2pwpKX4b30doTEX6vHJ6m+Da+JogYOocicbmWEvXWDDJoi6h//6/SrII3tRRphK v2gXpvuuHtCIaAWTrtWza4WDQfJpj9uwLf9/OEeH5tLPnzu6knuszqUhmHjaJRHJ /21ZU5UiEdkZSR28CjR4LmPb7EUJTg1qlF74VXxcA/p7CajeRsMepe5Q5TRAhs7E +nVodQ2Q8RKcSPenmkD6RkRixx63D1o1qBef2YEz+wxR0rqyrVBvKxXWLKFU5TAm 46eDOe7hgBM9DIb27qsdZYciKnQHeq9TFGRZm568waw2uOo5GQI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:52 2025 by rpki-client