$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: ziisqrj41gB1eL4hTA8oBcSAKeLCzpH+tk85PW2UBoc= Subject key identifier: 40:30:8D:63:ED:0E:8C:6D:93:55:F6:2E:5B:00:3E:B8:AF:77:AB:23 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 682D7966AB61B87DDD5D465B1BE82063CF0FC7AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 023C Signing time: Sat 19 Jul 2025 18:40:45 +0000 Manifest this update: Sat 19 Jul 2025 18:35:45 +0000 Manifest next update: Wed 23 Jul 2025 05:54:45 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: 3m9UsEaOMxLtsB35aIv6md3E808zrUTxiog/GhDsdRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2d:79:66:ab:61:b8:7d:dd:5d:46:5b:1b:e8:20:63:cf:0f:c7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Jul 19 18:35:45 2025 GMT Not After : Jul 23 05:54:45 2025 GMT Subject: CN=40308D63ED0E8C6D9355F62E5B003EB8AF77AB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:f1:93:39:3d:14:89:63:e6:72:e1:46:14: e2:fd:69:50:ef:ee:25:52:cc:f4:35:9a:64:55:17: 8e:9e:81:a1:5e:29:c3:21:f7:74:c6:12:c9:71:78: ae:6f:06:28:63:ad:0d:3e:2e:d2:f5:09:76:18:4a: a7:18:1c:26:00:f3:2e:d5:37:6c:8b:7a:04:bf:b8: 99:53:be:a1:78:c9:9d:f6:79:ce:3a:94:74:30:9c: cd:5e:4a:c1:c9:21:25:2f:9a:eb:64:a3:b4:ee:64: b6:9a:02:9f:0a:d1:94:3e:1d:46:be:d4:86:a3:c1: 86:d4:ac:50:cd:ff:a7:1b:97:d2:01:b6:e8:b4:8b: 8e:cc:f9:49:d5:e5:f2:11:6d:68:39:0e:21:61:aa: 31:a3:a2:5b:a4:c6:5f:55:13:06:cf:da:0f:d5:1f: b7:9b:9c:26:70:c8:06:f5:16:4c:b1:d7:fe:1e:65: ea:d1:29:7f:87:ff:98:3e:3f:1f:0a:00:87:59:1c: 56:16:9e:e5:47:5b:25:ff:ae:08:aa:a3:36:b2:d3: 7b:50:1d:b4:fb:2b:7c:23:4b:97:f7:b1:61:a4:e2: 2e:4a:08:81:6c:57:3f:09:b4:ad:45:34:f5:39:3f: 59:b5:2a:13:4e:93:ea:cb:aa:e3:3f:8c:7b:e1:38: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:8D:63:ED:0E:8C:6D:93:55:F6:2E:5B:00:3E:B8:AF:77:AB:23 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:6d:24:bf:3c:d3:bb:bb:be:70:84:b6:5c:dd:a2:9f:38: 42:7c:7a:8d:21:08:db:fb:85:5d:70:41:3f:f3:6e:03:2c:0f: 7c:b9:38:db:8d:af:f4:a8:7b:c3:1a:58:4e:ff:f9:d3:ef:79: 4f:5c:ca:ec:13:75:da:8e:b9:f3:a3:2d:e8:a9:49:81:ad:73: e8:ac:17:03:82:8b:51:5f:ff:83:e6:e9:ca:31:ce:50:32:b6: 29:f8:11:8d:f5:df:cc:b4:86:f6:4d:a2:0d:aa:59:91:c5:b1: 52:55:96:8b:7c:b7:de:9d:95:46:ae:ee:3b:2a:63:86:d8:54: df:fe:da:ba:9c:2d:c3:96:bc:c7:85:fe:97:f7:db:d4:92:38: c7:81:a8:20:9e:3d:66:ba:3f:a0:c4:62:85:36:49:1c:7c:28: 85:17:bb:0e:6a:09:1f:d7:da:b7:0d:79:cf:0b:76:d5:06:10: d7:b4:ed:ac:18:0f:6f:42:b8:29:a7:16:e2:3e:89:d3:51:09: ab:35:c0:e0:89:67:ee:9b:63:57:94:fb:48:fe:61:db:a5:61: e3:b2:2f:61:d7:86:99:de:ef:34:bd:57:83:23:3d:01:ef:5a: a0:7b:f9:a3:dd:93:83:b0:20:17:11:aa:e5:21:13:32:1e:b2: 83:db:1c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaC15ZqthuH3dXUZbG+ggY88Px60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTA3MTkxODM1NDVaFw0yNTA3MjMwNTU0NDVaMDMxMTAvBgNV BAMTKDQwMzA4RDYzRUQwRThDNkQ5MzU1RjYyRTVCMDAzRUI4QUY3N0FCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZvGTOT0UiWPmcuFGFOL9aVDv 7iVSzPQ1mmRVF46egaFeKcMh93TGEslxeK5vBihjrQ0+LtL1CXYYSqcYHCYA8y7V N2yLegS/uJlTvqF4yZ32ec46lHQwnM1eSsHJISUvmutko7TuZLaaAp8K0ZQ+HUa+ 1IajwYbUrFDN/6cbl9IBtui0i47M+UnV5fIRbWg5DiFhqjGjolukxl9VEwbP2g/V H7ebnCZwyAb1Fkyx1/4eZerRKX+H/5g+Px8KAIdZHFYWnuVHWyX/rgiqozay03tQ HbT7K3wjS5f3sWGk4i5KCIFsVz8JtK1FNPU5P1m1KhNOk+rLquM/jHvhOJ9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDCNY+0OjG2TVfYuWwA+uK93qyMwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkQbSS/PNO7u75whLZc3aKfOEJ8eo0hCNv7 hV1wQT/zbgMsD3y5ONuNr/Soe8MaWE7/+dPveU9cyuwTddqOufOjLeipSYGtc+is FwOCi1Ff/4Pm6coxzlAytin4EY3138y0hvZNog2qWZHFsVJVlot8t96dlUau7jsq Y4bYVN/+2rqcLcOWvMeF/pf329SSOMeBqCCePWa6P6DEYoU2SRx8KIUXuw5qCR/X 2rcNec8LdtUGENe07awYD29CuCmnFuI+idNRCas1wOCJZ+6bY1eU+0j+YdulYeOy L2HXhpne7zS9V4MjPQHvWqB7+aPdk4OwIBcRquUhEzIesoPbHCA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client