$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft File: 1D80B161A8871962133619E73EBB98762953ABF1.mft (raw, json) Hash identifier: wpewP32yu+COAcydv0kIivm1LzfKGrHEfmtOoWd9hCo= Subject key identifier: 5A:32:CD:F2:8B:E5:C1:18:A4:F2:E4:D9:58:5C:F9:C7:E5:1C:84:15 Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 Certificate issuer: /CN=1D80B161A8871962133619E73EBB98762953ABF1 Certificate serial: 0E1E26677BE9AF620584DCECA7F71343AAAE1104 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft Manifest number: 01AA Signing time: Fri 05 Sep 2025 03:02:08 +0000 Manifest this update: Fri 05 Sep 2025 02:57:08 +0000 Manifest next update: Mon 08 Sep 2025 09:14:08 +0000 Files and hashes: 1: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: ovrs8jnUkNf+XIsuUoS9OXOAOBVBgJNl9ABSwFMQZq0=) 2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: JHaaXWcIh7S1M0eqUwvmLXMc38/THWMZ+gJon7aPrNg=) 3: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 2ij1jqIgyRl9fMj7GA6iQ4RysnWHFWKfEhR4n6OxCCo=) 4: 1D80B161A8871962133619E73EBB98762953ABF1.crl (hash: iso7PauhnvledOv1w6fGHCjoRYiUoJ6uzChj96CWuoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1e:26:67:7b:e9:af:62:05:84:dc:ec:a7:f7:13:43:aa:ae:11:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1 Validity Not Before: Sep 5 02:57:08 2025 GMT Not After : Sep 8 09:14:08 2025 GMT Subject: CN=5A32CDF28BE5C118A4F2E4D9585CF9C7E51C8415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:87:4a:c7:eb:a2:23:4d:be:b2:c0:3f:fb: ff:6d:58:2c:46:a0:a3:48:91:d3:e0:fb:e6:76:f1: 27:c3:d4:98:a0:fa:ec:58:7b:9c:28:92:55:3b:9d: 01:14:b8:6c:d6:9e:da:88:32:98:4a:18:de:1e:c1: c3:52:f4:b2:02:b1:8b:be:02:b0:2e:59:02:e1:1a: 9d:14:17:3d:5c:5e:11:50:51:64:2a:25:97:3a:3b: 02:07:c0:2f:47:e4:38:ff:3d:6f:8d:f7:0e:f2:04: df:89:98:02:1f:91:e8:6c:02:0c:3e:62:e1:03:0b: ef:e8:f6:9a:11:11:3c:0f:e4:09:92:ac:0c:8f:93: 26:81:1d:e2:38:c4:f8:f8:5c:9a:77:36:1f:43:02: 46:89:39:6c:d7:7f:41:e0:ab:d9:6e:da:4b:2a:06: 42:3f:05:ff:af:a1:82:85:53:49:d1:79:fa:b6:37: bd:e3:8c:17:ca:80:4e:1b:97:31:ac:55:b1:d6:59: aa:b2:df:8f:91:6a:12:92:5c:78:1d:ad:e0:ec:9f: 9e:31:6b:b9:bf:aa:10:82:ec:2f:ac:e6:a2:a2:ab: af:56:64:f4:7f:01:b7:d2:de:b1:55:87:04:7f:54: ee:e4:d2:86:62:3c:a3:62:bf:0e:8e:2f:67:bd:a2: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:CD:F2:8B:E5:C1:18:A4:F2:E4:D9:58:5C:F9:C7:E5:1C:84:15 X509v3 Authority Key Identifier: keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:fb:29:b7:e6:11:8c:d8:be:e6:a3:88:86:83:e2:eb:6a:e2: 38:18:e4:6a:a7:6d:90:6e:96:ec:d8:a5:53:5c:69:94:b8:57: ae:da:6c:c0:c5:81:6e:63:af:60:77:54:91:a5:29:b5:e9:24: 7d:be:8c:cb:54:35:05:d0:93:5c:8a:c9:90:1f:61:be:cd:d8: c2:ff:f4:38:f4:5c:c3:a4:85:4a:e1:cf:ce:cf:06:97:15:12: 57:f3:70:54:8c:90:a8:71:de:9e:09:32:f5:4c:d6:37:28:e1: ee:98:ab:39:96:35:cd:17:63:c4:59:ce:9f:88:31:db:2d:b8: 31:56:17:4f:d6:ef:d3:ba:fe:cc:c2:c0:bf:f9:ed:77:5c:87: d4:09:b2:9e:3c:4b:8c:0c:62:eb:46:19:6a:02:4e:e4:ab:77: 60:13:24:fb:e3:13:b7:0d:4c:01:fd:c6:4c:ed:ed:7f:07:f9: 5e:a4:da:c3:a9:2e:07:70:e5:79:f0:61:01:b2:a2:27:e0:c4: fe:45:08:d7:4a:d2:f8:b2:7e:ae:2e:41:98:e5:ed:12:8a:3f: e9:dc:85:01:bf:96:f8:cd:9a:d4:6a:c2:e4:f5:ba:cc:dc:c6: cf:c4:aa:c8:ce:5c:8d:7f:7c:20:de:15:a6:9e:5f:5c:35:d9: cd:c0:94:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDh4mZ3vpr2IFhNzsp/cTQ6quEQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYy OTUzQUJGMTAeFw0yNTA5MDUwMjU3MDhaFw0yNTA5MDgwOTE0MDhaMDMxMTAvBgNV BAMTKDVBMzJDREYyOEJFNUMxMThBNEYyRTREOTU4NUNGOUM3RTUxQzg0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPodKx+uiI02+ssA/+/9tWCxG oKNIkdPg++Z28SfD1Jig+uxYe5woklU7nQEUuGzWntqIMphKGN4ewcNS9LICsYu+ ArAuWQLhGp0UFz1cXhFQUWQqJZc6OwIHwC9H5Dj/PW+N9w7yBN+JmAIfkehsAgw+ YuEDC+/o9poRETwP5AmSrAyPkyaBHeI4xPj4XJp3Nh9DAkaJOWzXf0Hgq9lu2ksq BkI/Bf+voYKFU0nRefq2N73jjBfKgE4blzGsVbHWWaqy34+RahKSXHgdreDsn54x a7m/qhCC7C+s5qKiq69WZPR/AbfS3rFVhwR/VO7k0oZiPKNivw6OL2e9on/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjLN8ovlwRik8uTZWFz5x+UchBUwHwYDVR0j BBgwFoAUHYCxYaiHGWITNhnnPruYdilTq/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTUyMTA5OS0zYmExLTRmOTEtYjViYi03MTJjM2JiYTYzMzcvMC8xRDgwQjE2MUE4 ODcxOTYyMTMzNjE5RTczRUJCOTg3NjI5NTNBQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYyOTUz QUJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4 NzYyOTUzQUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEf7KbfmEYzYvuajiIaD4utq4jgY5GqnbZBu luzYpVNcaZS4V67abMDFgW5jr2B3VJGlKbXpJH2+jMtUNQXQk1yKyZAfYb7N2ML/ 9Dj0XMOkhUrhz87PBpcVElfzcFSMkKhx3p4JMvVM1jco4e6YqzmWNc0XY8RZzp+I MdstuDFWF0/W79O6/szCwL/57Xdch9QJsp48S4wMYutGGWoCTuSrd2ATJPvjE7cN TAH9xkzt7X8H+V6k2sOpLgdw5XnwYQGyoifgxP5FCNdK0viyfq4uQZjl7RKKP+nc hQG/lvjNmtRqwuT1uszcxs/EqsjOXI1/fCDeFaaeX1w12c3AlO0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:40 2025 by rpki-client