$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: Yb5cTfJ87EETCczi8tv+jftk0qkUu48Qm5lJCGx0uVY= Subject key identifier: E2:41:67:46:24:BF:8E:97:FE:6B:5D:59:96:36:03:79:E5:94:3D:A9 Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 3186A038C34F3BAFD9ABFF18332127DA5FFBDC61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: 93 Signing time: Mon 04 Aug 2025 19:20:00 +0000 Manifest this update: Mon 04 Aug 2025 19:15:00 +0000 Manifest next update: Fri 08 Aug 2025 06:02:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: PVctM4eHw/xzpKrw1sAAhhffoJUbdYPF9Dwjnm8DnHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:86:a0:38:c3:4f:3b:af:d9:ab:ff:18:33:21:27:da:5f:fb:dc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Aug 4 19:15:00 2025 GMT Not After : Aug 8 06:02:00 2025 GMT Subject: CN=E241674624BF8E97FE6B5D5996360379E5943DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:07:2a:a2:d0:e8:7d:51:67:7c:6b:7a:52: 48:25:59:32:dc:49:0e:ba:f6:82:46:19:ae:64:e6: 00:c1:8c:c0:a0:9f:33:3b:8f:63:b4:d2:27:78:a2: 13:d1:e2:ba:ba:88:b6:d9:46:10:00:51:fe:1e:a8: 87:84:10:af:2a:09:23:11:eb:bc:95:b7:42:14:f1: f8:e9:74:6e:9c:dd:46:05:f8:dd:52:e1:68:f3:76: d9:9e:07:8c:f1:b9:12:3e:07:38:a4:1a:05:69:0d: 65:01:bd:66:2e:e4:06:bb:0d:95:c6:9e:81:67:38: 90:54:27:46:09:ed:31:a9:ca:56:04:c2:e1:ec:8b: e9:49:22:f3:aa:06:c2:53:33:28:1f:86:83:57:eb: 07:d6:f8:79:08:0e:65:67:4a:e6:e1:15:00:fa:b8: d8:0a:bc:8e:96:ce:bb:30:7b:cf:a0:dc:aa:0b:03: 57:7e:7a:1f:2d:d1:fd:7e:c7:40:57:f0:07:f5:94: 50:2a:31:e4:38:5d:84:a4:2f:49:42:a9:e2:bd:c6: 81:82:0e:d6:88:46:12:bd:5b:38:d4:a5:7d:cb:e1: 5d:6e:f0:8f:f0:da:b1:2e:b8:92:28:6d:41:5b:c2: 58:0b:9f:c2:d9:01:a0:a9:b8:5e:01:e1:89:21:46: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:41:67:46:24:BF:8E:97:FE:6B:5D:59:96:36:03:79:E5:94:3D:A9 X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:18:7f:bb:2d:20:84:40:87:78:87:54:13:fe:d4:a8:82: 63:c9:dd:60:64:d7:b0:ed:ae:5c:6b:ad:0e:e5:31:36:10:a4: 4c:f7:71:86:08:fb:10:52:c0:f5:5d:c9:e6:37:b6:ef:fa:fe: ef:ed:85:88:ee:b6:fd:95:8a:93:a2:20:2e:de:50:18:54:28: af:a7:22:47:7c:80:ee:a0:ed:f0:5e:8c:68:02:24:f7:e1:fc: 17:aa:a0:f3:0f:dd:c2:e2:ed:3e:04:a6:99:11:a2:27:79:f4: e7:27:8a:6b:10:3f:15:54:37:1b:ff:25:67:e0:54:c0:c3:91: 0d:c8:41:09:b4:5c:a4:20:7f:28:af:1f:82:30:05:ad:46:32: 1e:81:a6:2e:95:38:be:2e:0f:74:66:c2:90:ff:d8:8d:63:2a: b7:60:88:39:d7:09:25:22:50:46:45:8a:a5:a0:25:24:ba:d9: 37:9f:25:5a:c8:a9:56:84:f8:5a:d6:43:9e:54:5f:84:93:96: ce:ed:ad:8c:f4:ad:13:11:31:ba:65:cb:0f:24:6d:f3:5a:4b: 0e:b9:99:69:9f:01:f0:d2:be:e7:72:36:85:c8:42:fa:f4:98: 90:14:06:34:64:47:fc:2c:81:f0:c7:93:c8:2c:de:89:50:e9: 84:10:60:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYagOMNPO6/Zq/8YMyEn2l/73GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNTA4MDQxOTE1MDBaFw0yNTA4MDgwNjAyMDBaMDMxMTAvBgNV BAMTKEUyNDE2NzQ2MjRCRjhFOTdGRTZCNUQ1OTk2MzYwMzc5RTU5NDNEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzQcqotDofVFnfGt6UkglWTLc SQ669oJGGa5k5gDBjMCgnzM7j2O00id4ohPR4rq6iLbZRhAAUf4eqIeEEK8qCSMR 67yVt0IU8fjpdG6c3UYF+N1S4WjzdtmeB4zxuRI+BzikGgVpDWUBvWYu5Aa7DZXG noFnOJBUJ0YJ7TGpylYEwuHsi+lJIvOqBsJTMygfhoNX6wfW+HkIDmVnSubhFQD6 uNgKvI6Wzrswe8+g3KoLA1d+eh8t0f1+x0BX8Af1lFAqMeQ4XYSkL0lCqeK9xoGC DtaIRhK9WzjUpX3L4V1u8I/w2rEuuJIobUFbwlgLn8LZAaCpuF4B4YkhRt43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kFnRiS/jpf+a11ZljYDeeWUPakwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMKGH+7LSCEQId4h1QT/tSogmPJ3WBk17Dt rlxrrQ7lMTYQpEz3cYYI+xBSwPVdyeY3tu/6/u/thYjutv2VipOiIC7eUBhUKK+n Ikd8gO6g7fBejGgCJPfh/BeqoPMP3cLi7T4EppkRoid59OcnimsQPxVUNxv/JWfg VMDDkQ3IQQm0XKQgfyivH4IwBa1GMh6Bpi6VOL4uD3RmwpD/2I1jKrdgiDnXCSUi UEZFiqWgJSS62TefJVrIqVaE+FrWQ55UX4STls7trYz0rRMRMbplyw8kbfNaSw65 mWmfAfDSvudyNoXIQvr0mJAUBjRkR/wsgfDHk8gs3olQ6YQQYIM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:09 2025 by rpki-client