$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: rP+oHCBtssdpC4DWNGfD0ZTscom7hhACiL1ORzDik/8= Subject key identifier: 23:53:24:ED:1D:92:93:72:3D:F5:67:C3:BA:30:B1:87:9E:6E:E8:60 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 1704E2BFDE888B9B3E0C86FD0B93ED18B6C318CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0319 Signing time: Mon 21 Jul 2025 00:21:03 +0000 Manifest this update: Mon 21 Jul 2025 00:16:03 +0000 Manifest next update: Thu 24 Jul 2025 07:55:03 +0000 Files and hashes: 1: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: jUbwrIPtUvEpr3LGdVRj4B2VdBBam5qA4OYDwfmQ59g=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:04:e2:bf:de:88:8b:9b:3e:0c:86:fd:0b:93:ed:18:b6:c3:18:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Jul 21 00:16:03 2025 GMT Not After : Jul 24 07:55:03 2025 GMT Subject: CN=235324ED1D9293723DF567C3BA30B1879E6EE860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:9f:83:f6:37:53:e1:f4:8d:c5:73:60:cb: 25:91:74:00:e2:01:78:d3:dc:17:0c:6e:1a:45:bc: 04:24:10:7b:70:32:26:7a:67:58:b2:d4:b3:51:7e: 2c:f1:d8:7d:3b:94:c6:ac:ae:09:ea:d7:12:bd:36: e8:f4:f8:cc:8f:49:5d:5d:ab:0b:af:04:d1:b6:ea: 17:79:e9:93:87:73:da:4f:7c:df:d7:a1:48:41:80: bd:ba:7f:ef:db:85:8d:9b:78:7f:88:9c:a2:ed:23: 5c:70:f5:8f:10:34:6b:17:06:2b:3c:83:89:e1:32: 99:f0:5c:6e:47:2e:b1:96:04:f5:97:d5:49:ee:e7: cf:f6:95:d5:17:2a:c2:62:24:be:9a:52:20:43:93: 82:a8:48:16:1d:70:b3:aa:39:db:f3:a1:8c:c2:43: c2:42:4b:c5:fb:5f:0d:2d:2b:56:bb:03:08:25:ad: 03:ed:a1:b7:4a:cd:0e:69:78:c0:72:95:71:eb:5e: c4:e5:27:fe:34:ed:30:25:9f:2f:e8:5d:7b:2c:f5: 3a:78:aa:55:ab:06:31:a0:ef:f6:52:27:5b:a3:56: ae:ce:05:89:b2:4a:40:3e:e1:d3:bd:84:45:d5:36: 6f:77:ad:67:5d:8c:6b:7d:e3:e9:13:20:91:06:05: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:24:ED:1D:92:93:72:3D:F5:67:C3:BA:30:B1:87:9E:6E:E8:60 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a3:96:04:7f:73:f0:f1:64:ca:eb:22:50:bd:63:d6:1d:94: dd:e8:98:a9:82:bb:ef:ab:11:0f:7d:57:30:54:f1:0c:a2:3b: 24:5a:93:1b:68:81:b2:e5:4a:7b:dd:d7:2b:0f:05:de:e7:98: 6b:c3:b3:a5:bc:97:00:3a:eb:1c:2d:a1:b0:1b:b3:65:67:5e: a6:d4:97:d5:8c:d5:b8:cd:8a:33:ec:e4:92:a0:ad:62:54:ac: 7f:ec:90:92:cd:55:66:e1:20:d1:12:ab:54:17:61:e9:a8:37: d8:4e:98:c9:10:20:e3:dc:8b:6b:f4:88:61:23:ff:dd:68:cb: 3e:a9:8a:00:65:2e:62:2c:cd:66:2d:a6:f5:71:f3:7a:9a:1f: e2:69:b2:2a:91:f7:ff:42:6f:3b:2d:cd:4b:04:a7:ff:e0:1e: 97:7c:64:62:dd:c2:da:3a:d7:73:e6:5b:00:33:7e:1f:6b:f6: d9:02:30:7a:43:58:41:ae:59:62:94:12:b6:bf:30:78:7a:11: 8a:68:4a:0e:b3:c2:a2:74:fa:91:d6:0f:4b:0a:6f:24:27:82: de:de:b1:27:b5:79:c9:34:cc:07:c8:88:9d:4a:43:fc:11:2e: 9d:00:ab:76:aa:8b:77:9b:5c:8c:ed:c5:3b:2f:8f:64:71:4b: 84:35:e2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwTiv96Ii5s+DIb9C5PtGLbDGMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTA3MjEwMDE2MDNaFw0yNTA3MjQwNzU1MDNaMDMxMTAvBgNV BAMTKDIzNTMyNEVEMUQ5MjkzNzIzREY1NjdDM0JBMzBCMTg3OUU2RUU4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Cp+D9jdT4fSNxXNgyyWRdADi AXjT3BcMbhpFvAQkEHtwMiZ6Z1iy1LNRfizx2H07lMasrgnq1xK9Nuj0+MyPSV1d qwuvBNG26hd56ZOHc9pPfN/XoUhBgL26f+/bhY2beH+InKLtI1xw9Y8QNGsXBis8 g4nhMpnwXG5HLrGWBPWX1Unu58/2ldUXKsJiJL6aUiBDk4KoSBYdcLOqOdvzoYzC Q8JCS8X7Xw0tK1a7AwglrQPtobdKzQ5peMBylXHrXsTlJ/407TAlny/oXXss9Tp4 qlWrBjGg7/ZSJ1ujVq7OBYmySkA+4dO9hEXVNm93rWddjGt94+kTIJEGBSmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI1Mk7R2Sk3I99WfDujCxh55u6GAwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyjlgR/c/DxZMrrIlC9Y9YdlN3omKmCu++r EQ99VzBU8QyiOyRakxtogbLlSnvd1ysPBd7nmGvDs6W8lwA66xwtobAbs2VnXqbU l9WM1bjNijPs5JKgrWJUrH/skJLNVWbhINESq1QXYemoN9hOmMkQIOPci2v0iGEj /91oyz6pigBlLmIszWYtpvVx83qaH+JpsiqR9/9CbzstzUsEp//gHpd8ZGLdwto6 13PmWwAzfh9r9tkCMHpDWEGuWWKUEra/MHh6EYpoSg6zwqJ0+pHWD0sKbyQngt7e sSe1eck0zAfIiJ1KQ/wRLp0Aq3aqi3ebXIztxTsvj2RxS4Q14nk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:58 2025 by rpki-client