$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: aZASpbD77Y/LGshPRofFj6DK6WNpbFsW1tkJtXtBMTo= Subject key identifier: E3:01:AF:88:D7:0C:1B:9F:30:67:44:CF:00:4A:24:5C:B8:BD:F4:43 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 122AC472AC80A16614D787A7610A7F41D321CAA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 0341 Signing time: Tue 05 Aug 2025 07:41:55 +0000 Manifest this update: Tue 05 Aug 2025 07:36:55 +0000 Manifest next update: Fri 08 Aug 2025 17:51:55 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: N58UqlFMp748Khi3FbSfGS0G+XtsfGGuqPSO+3bYMNA=) 2: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: JhZr2NXkGwWGA0sSrfoJaIKai+h78eEey+QGhlYktZc=) 3: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: WHyXZiHm1tFrwAXrz4brauNseb8V8ZMQneoiM0eZr/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2a:c4:72:ac:80:a1:66:14:d7:87:a7:61:0a:7f:41:d3:21:ca:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Aug 5 07:36:55 2025 GMT Not After : Aug 8 17:51:55 2025 GMT Subject: CN=E301AF88D70C1B9F306744CF004A245CB8BDF443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:27:90:02:bc:8b:cf:e6:89:62:23:77:ba: 07:10:fc:d1:cd:1c:2f:08:4f:4e:23:4f:14:3c:5f: 54:cb:36:9b:54:5b:e2:0a:10:92:d1:36:62:04:52: 34:b1:c4:20:71:9c:de:96:ab:e4:6e:ec:26:83:0f: 90:af:e9:45:86:75:8f:f3:cb:a2:8d:14:80:71:4d: 83:66:d5:4e:09:e0:ea:d2:62:ed:4a:c1:10:a5:6b: 84:eb:62:04:f4:d7:13:b4:1a:96:92:f3:af:63:86: 61:46:c7:39:57:68:57:e9:a6:f4:43:c2:8e:97:8c: 61:12:97:6b:ad:9d:44:2d:3f:2f:ac:a9:45:d9:64: 03:aa:1d:e3:6d:12:9e:92:f6:db:5a:c0:1c:fe:c4: 65:45:16:a4:ce:88:1a:ff:bc:ba:d7:47:22:ea:a2: 82:52:12:d1:7d:66:3c:11:f4:f8:7c:86:60:94:bc: 4c:78:09:91:56:d2:ac:4c:6b:2c:7a:02:7c:4d:ba: 41:1a:80:57:0f:3c:47:76:37:93:2e:96:56:1d:74: 5c:d7:fe:22:d8:5f:a3:0f:50:ed:ff:b4:7e:13:46: be:40:41:ba:0f:33:11:75:d1:b0:12:c1:fd:ac:81: 4c:8c:48:c5:26:a9:57:a2:8c:22:6e:33:95:87:a3: d3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:01:AF:88:D7:0C:1B:9F:30:67:44:CF:00:4A:24:5C:B8:BD:F4:43 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:21:90:04:13:04:3b:2f:92:cd:d7:7c:d3:08:55:6d:f1:90: 7a:90:2a:45:c8:42:1f:60:51:21:66:63:69:db:b5:ba:7f:10: 91:80:80:ac:68:c2:9d:3d:d2:a5:4b:fc:f1:d1:5b:fc:61:4c: 59:d4:8f:84:51:a2:33:d8:ca:8b:e8:a2:f9:7c:33:81:ee:c2: cd:0a:f4:c4:5a:f9:b0:9f:18:f3:c4:96:1c:dc:d0:fb:68:4a: f9:02:d5:f5:17:d7:77:76:9a:6e:26:d9:04:aa:25:a1:d4:27: c2:0e:94:77:43:5e:78:bc:fd:6b:12:28:53:d9:40:9b:62:bf: 67:6a:e4:a0:04:15:89:9e:d8:0c:56:67:b3:a9:8d:4e:c0:ec: 8a:ab:b9:7d:1a:66:d3:ea:a2:9b:d9:1c:15:14:89:6d:68:6a: 34:3e:ae:73:69:74:6d:4d:5e:3e:dd:79:9e:48:ca:5f:a5:4d: 95:3b:ab:88:af:da:ae:7c:ab:6a:c6:af:be:27:5a:38:23:35: 7c:4e:d1:53:70:64:ce:36:e8:76:79:6b:d6:b2:eb:b0:3f:4b: 80:64:54:33:83:6b:69:6a:85:6f:aa:c3:d1:77:30:7a:6d:d7: 64:d1:2f:4e:6b:af:67:f5:19:46:46:17:8f:d9:71:c3:d9:98: 92:03:ad:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEirEcqyAoWYU14enYQp/QdMhyqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTA4MDUwNzM2NTVaFw0yNTA4MDgxNzUxNTVaMDMxMTAvBgNV BAMTKEUzMDFBRjg4RDcwQzFCOUYzMDY3NDRDRjAwNEEyNDVDQjhCREY0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqieQAryLz+aJYiN3ugcQ/NHN HC8IT04jTxQ8X1TLNptUW+IKEJLRNmIEUjSxxCBxnN6Wq+Ru7CaDD5Cv6UWGdY/z y6KNFIBxTYNm1U4J4OrSYu1KwRCla4TrYgT01xO0GpaS869jhmFGxzlXaFfppvRD wo6XjGESl2utnUQtPy+sqUXZZAOqHeNtEp6S9ttawBz+xGVFFqTOiBr/vLrXRyLq ooJSEtF9ZjwR9Ph8hmCUvEx4CZFW0qxMayx6AnxNukEagFcPPEd2N5MullYddFzX /iLYX6MPUO3/tH4TRr5AQboPMxF10bASwf2sgUyMSMUmqVeijCJuM5WHo9MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4wGviNcMG58wZ0TPAEokXLi99EMwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAohkAQTBDsvks3XfNMIVW3xkHqQKkXIQh9g USFmY2nbtbp/EJGAgKxowp090qVL/PHRW/xhTFnUj4RRojPYyovoovl8M4Huws0K 9MRa+bCfGPPElhzc0PtoSvkC1fUX13d2mm4m2QSqJaHUJ8IOlHdDXni8/WsSKFPZ QJtiv2dq5KAEFYme2AxWZ7OpjU7A7IqruX0aZtPqopvZHBUUiW1oajQ+rnNpdG1N Xj7deZ5Iyl+lTZU7q4iv2q58q2rGr74nWjgjNXxO0VNwZM426HZ5a9ay67A/S4Bk VDODa2lqhW+qw9F3MHpt12TRL05rr2f1GUZGF4/ZccPZmJIDrYs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:05 2025 by rpki-client