$ rpki-client -vvf repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft File: 20566897603B029812606C25ABC972BAC5BF4AFB.mft (raw, json) Hash identifier: X8b4g8QLr58apd+IO2ohgQ0jbsbXqdXWvQ7UjaMHAS8= Subject key identifier: D3:CD:39:83:B2:28:23:0C:63:D4:9C:0A:32:3B:E7:AF:A1:FC:A4:D1 Authority key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Certificate issuer: /CN=20566897603B029812606C25ABC972BAC5BF4AFB Certificate serial: 3A0399EF76C7404D9F47D1785CA890908D7320F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft Manifest number: 0228 Signing time: Sat 14 Jun 2025 14:42:15 +0000 Manifest this update: Sat 14 Jun 2025 14:37:15 +0000 Manifest next update: Tue 17 Jun 2025 20:41:15 +0000 Files and hashes: 1: 20566897603B029812606C25ABC972BAC5BF4AFB.crl (hash: yTmPU6nVJ3vJdbrrS10pn92XfEQSyBpRT36D8ncpU4Q=) 2: 323430363a316230303a3a2f33322d3438203d3e203435333137.roa (hash: TjP7GmHfPb+wwoosrfBI6nsarX9S8cjrwBDpRp71p84=) 3: 3230332e3139302e34302e302f32312d3234203d3e203435333137.roa (hash: 5MoEibiXvb7uNHyN+SG4htpl+K7LW+4UjrfmIpwFKTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:03:99:ef:76:c7:40:4d:9f:47:d1:78:5c:a8:90:90:8d:73:20:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20566897603B029812606C25ABC972BAC5BF4AFB Validity Not Before: Jun 14 14:37:15 2025 GMT Not After : Jun 17 20:41:15 2025 GMT Subject: CN=D3CD3983B228230C63D49C0A323BE7AFA1FCA4D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:86:a5:98:e3:8d:98:b0:43:21:88:16:d9: c6:60:f8:78:96:5b:46:e9:9a:07:5c:f3:ec:78:14: e3:2b:78:52:2d:a7:25:54:35:b5:02:ea:23:83:a4: ea:7a:7a:d8:c5:3c:6a:cb:1f:ac:48:da:22:0b:96: 05:6f:d0:e2:dd:a9:79:0a:1b:03:3a:1f:60:54:f1: 07:24:ba:3d:c8:ff:6a:9f:09:63:2f:aa:25:37:9f: ad:8d:61:14:b4:8e:33:c1:4c:bd:5c:e4:f5:bf:4c: 78:bf:46:52:30:db:3f:49:44:11:81:62:92:0f:4b: a9:d3:16:68:99:55:e0:b2:a5:27:68:41:0c:81:0e: 29:0f:eb:98:3d:41:b0:5d:4c:fd:aa:18:3d:a8:1a: a8:61:7b:f8:41:3e:fe:0a:e4:5e:7a:19:e7:de:9b: 73:a0:17:e7:36:e5:a6:5c:27:d1:87:0e:08:2e:74: b5:33:cd:79:46:8b:3f:f4:de:ad:08:f0:52:36:78: 4d:d6:67:50:6d:bb:18:d7:51:e9:85:bd:09:4a:31: 16:4b:d1:ca:30:ad:1b:f4:c1:d1:f0:cb:8d:77:10: 5e:08:8a:d2:e7:a9:6c:01:5e:7f:bf:dc:ea:ae:02: cc:12:88:45:fa:5a:02:ec:5d:65:0e:12:d1:ab:51: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:39:83:B2:28:23:0C:63:D4:9C:0A:32:3B:E7:AF:A1:FC:A4:D1 X509v3 Authority Key Identifier: keyid:20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:42:24:57:1b:75:69:97:c0:c7:be:8b:bf:26:bb:d4:fd:07: e2:60:be:59:1f:66:7c:72:2b:aa:c6:31:a1:9e:65:b1:3b:ec: 21:87:ae:8e:91:50:42:eb:a5:66:b6:d8:fc:fb:8b:b6:e3:ed: 50:f2:db:ed:a4:b9:14:48:31:7e:a4:c0:5a:cd:bb:ab:e2:cd: 91:e5:a3:24:7e:e9:1c:99:6d:f4:35:2d:2e:12:20:bb:bf:30: 85:c3:36:9b:ff:d5:ab:20:ee:b2:5e:2c:a2:d6:a1:b5:41:aa: ed:53:26:82:71:da:2c:e9:fe:10:ca:c7:5a:7b:f1:6c:0b:59: 52:7f:09:ec:e8:5c:73:43:35:b0:27:d1:b1:b2:72:54:21:c0: f1:51:8e:8b:e4:42:70:a8:46:10:92:e7:54:1c:59:68:e6:99: a1:33:b1:cd:91:9d:be:72:44:46:19:00:71:26:b0:3a:45:71: 1f:8a:56:0e:8e:fa:ea:13:21:0d:d9:58:a8:af:22:c0:8d:47: 83:36:3c:61:21:a1:d5:4e:76:68:23:0d:00:75:49:1c:f8:fc: fa:4a:32:98:09:2e:00:44:ac:d6:72:a2:0c:0e:75:f6:d1:43: dc:c3:76:d5:2b:76:d7:54:b3:9c:be:8a:26:fd:7e:d8:a2:59: ad:c9:77:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgOZ73bHQE2fR9F4XKiQkI1zIPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFD NUJGNEFGQjAeFw0yNTA2MTQxNDM3MTVaFw0yNTA2MTcyMDQxMTVaMDMxMTAvBgNV BAMTKEQzQ0QzOTgzQjIyODIzMEM2M0Q0OUMwQTMyM0JFN0FGQTFGQ0E0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QYalmOONmLBDIYgW2cZg+HiW W0bpmgdc8+x4FOMreFItpyVUNbUC6iODpOp6etjFPGrLH6xI2iILlgVv0OLdqXkK GwM6H2BU8Qckuj3I/2qfCWMvqiU3n62NYRS0jjPBTL1c5PW/THi/RlIw2z9JRBGB YpIPS6nTFmiZVeCypSdoQQyBDikP65g9QbBdTP2qGD2oGqhhe/hBPv4K5F56Gefe m3OgF+c25aZcJ9GHDggudLUzzXlGiz/03q0I8FI2eE3WZ1BtuxjXUemFvQlKMRZL 0cowrRv0wdHwy413EF4IitLnqWwBXn+/3OquAswSiEX6WgLsXWUOEtGrUTAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0805g7IoIwxj1JwKMjvnr6H8pNEwHwYDVR0j BBgwFoAUIFZol2A7ApgSYGwlq8lyusW/SvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC8yMDU2Njg5NzYw M0IwMjk4MTI2MDZDMjVBQkM5NzJCQUM1QkY0QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcyQkFDNUJG NEFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRhY2MzNjUtZTE5NC00YWMwLTk1 M2EtNGRmM2E1OTAwYjE0LzAvMjA1NjY4OTc2MDNCMDI5ODEyNjA2QzI1QUJDOTcy QkFDNUJGNEFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhCJFcbdWmXwMe+i78mu9T9B+JgvlkfZnxy K6rGMaGeZbE77CGHro6RUELrpWa22Pz7i7bj7VDy2+2kuRRIMX6kwFrNu6vizZHl oyR+6RyZbfQ1LS4SILu/MIXDNpv/1asg7rJeLKLWobVBqu1TJoJx2izp/hDKx1p7 8WwLWVJ/CezoXHNDNbAn0bGyclQhwPFRjovkQnCoRhCS51QcWWjmmaEzsc2Rnb5y REYZAHEmsDpFcR+KVg6O+uoTIQ3ZWKivIsCNR4M2PGEhodVOdmgjDQB1SRz4/PpK MpgJLgBErNZyogwOdfbRQ9zDdtUrdtdUs5y+iib9ftiiWa3Jd2E= -----END CERTIFICATE-----Generated at Mon Jun 16 09:30:05 2025 by rpki-client