$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: VtbKt4Fv9Yx6FCfa9F3mhte7uj+aoh4BLCgvORMoXn4= Subject key identifier: F9:03:4F:F4:46:F9:FB:64:17:C5:BE:C9:EA:7A:15:34:5C:E2:D2:94 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 77BCD8011115B93ECCE75745875C7BA89D21213C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 04D5 Signing time: Fri 05 Sep 2025 12:40:06 +0000 Manifest this update: Fri 05 Sep 2025 12:35:06 +0000 Manifest next update: Mon 08 Sep 2025 21:48:06 +0000 Files and hashes: 1: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: ZgDGXCsSyzDrJGQuDM1q2yAFTUBJsm9YLq4ntv3/5wQ=) 2: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: zWk8nBtzJ5kCwr+alrHNTeusIWxyDqjAXquSFLRhyts=) 3: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=) 4: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=) 5: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: piQqRgpT3Aa3IuYPfF5X8WOiOTNyOKggDdYnDEB1UHA=) 6: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 7: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: MnxsLBxnCm6F40OhhKQb/lu+z75TMPF3C+fnrBq75B0=) 8: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=) 9: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: XGyX1fDJCJeIJhfCIkQQCr6OHIb1I8YyoWexjVgFMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bc:d8:01:11:15:b9:3e:cc:e7:57:45:87:5c:7b:a8:9d:21:21:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Sep 5 12:35:06 2025 GMT Not After : Sep 8 21:48:06 2025 GMT Subject: CN=F9034FF446F9FB6417C5BEC9EA7A15345CE2D294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:6d:99:5e:95:b5:60:ec:7a:73:f1:37:fa: b3:7b:b1:71:54:9f:ea:ca:8d:ad:24:d2:43:0a:91: 1a:e2:c8:e8:ef:d2:ca:6c:ac:8b:de:ac:b4:46:5c: 80:4f:04:c5:e4:04:b6:c0:7a:1e:a8:ad:4f:d7:71: 66:66:0b:1d:20:03:5f:23:a7:6b:90:fd:ab:20:ac: 5e:4e:49:0a:0f:f0:d9:14:c7:70:e6:0d:c4:25:5c: d6:d8:b5:01:34:41:ad:87:68:2c:86:d2:69:1a:84: c0:f8:4b:6f:80:5b:ba:f5:96:a2:b8:fc:54:05:3e: 4d:2c:58:c7:49:fb:10:a0:6b:82:57:de:80:c1:32: 6a:da:0a:20:95:37:84:2f:4b:9e:41:7a:24:fa:5f: 06:ff:42:01:72:76:ee:76:67:52:60:ae:f4:9f:08: 5d:0a:17:01:33:da:fa:6b:ef:c6:b1:e5:31:cf:3f: 90:de:97:7f:5a:8f:9d:71:c0:0f:1d:af:40:53:c0: c3:e0:be:1b:b0:6a:a4:f6:3e:2b:c0:af:8c:22:62: e0:4c:f4:23:1c:20:2f:17:ef:e1:60:f2:76:4e:78: 74:96:33:01:45:80:29:cf:e8:80:35:6c:d2:d0:0b: ce:30:01:d8:7b:c1:e2:03:eb:45:6c:01:fd:c0:e8: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:03:4F:F4:46:F9:FB:64:17:C5:BE:C9:EA:7A:15:34:5C:E2:D2:94 X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ad:14:60:59:ea:52:9f:76:d2:33:a5:0a:25:43:0b:90:1a: 75:79:a3:80:e1:fa:f6:ed:c9:6a:1a:d0:51:68:3e:4c:99:45: 44:14:ca:9e:51:2e:ec:ea:c9:d5:ec:8b:c6:00:c3:07:48:f5: 39:dc:64:29:ff:51:21:7f:f7:0c:3c:51:17:a5:8c:bd:5f:56: 58:b8:48:d0:83:50:73:44:37:90:00:04:f4:1b:49:7e:1a:b7: 19:7d:ab:53:57:9d:af:e3:e6:8b:b6:6e:bf:7b:b4:c0:fd:c7: e8:a7:58:0d:46:94:50:78:4d:50:ac:10:ea:7e:b2:86:a4:65: 3e:7b:51:ea:19:2d:cb:33:83:96:59:21:39:ea:ff:1d:58:68: 63:27:42:09:ab:18:48:da:35:2f:64:e7:5b:f0:61:74:b7:eb: c4:e5:7c:b3:dd:76:8e:6c:b4:76:1e:0d:34:8d:83:3f:50:8d: c5:89:ed:f0:40:49:4d:80:2a:20:fc:5a:2f:36:14:02:d6:80: cf:0d:26:62:e4:ca:e9:b7:87:49:80:f4:ad:e9:2c:aa:ef:1d: 60:ba:8f:33:94:2d:e2:11:e6:9d:c5:9d:e0:f3:df:36:b4:27: 2f:de:fc:45:a7:80:db:63:8d:8c:c6:b0:44:c7:5d:93:98:9c: d8:23:4d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7zYAREVuT7M51dFh1x7qJ0hITwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTA5MDUxMjM1MDZaFw0yNTA5MDgyMTQ4MDZaMDMxMTAvBgNV BAMTKEY5MDM0RkY0NDZGOUZCNjQxN0M1QkVDOUVBN0ExNTM0NUNFMkQyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkW2ZXpW1YOx6c/E3+rN7sXFU n+rKja0k0kMKkRriyOjv0spsrIverLRGXIBPBMXkBLbAeh6orU/XcWZmCx0gA18j p2uQ/asgrF5OSQoP8NkUx3DmDcQlXNbYtQE0Qa2HaCyG0mkahMD4S2+AW7r1lqK4 /FQFPk0sWMdJ+xCga4JX3oDBMmraCiCVN4QvS55BeiT6Xwb/QgFydu52Z1JgrvSf CF0KFwEz2vpr78ax5THPP5Del39aj51xwA8dr0BTwMPgvhuwaqT2PivAr4wiYuBM 9CMcIC8X7+Fg8nZOeHSWMwFFgCnP6IA1bNLQC84wAdh7weID60VsAf3A6Jn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QNP9Eb5+2QXxb7J6noVNFzi0pQwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqtFGBZ6lKfdtIzpQolQwuQGnV5o4Dh+vbt yWoa0FFoPkyZRUQUyp5RLuzqydXsi8YAwwdI9TncZCn/USF/9ww8UReljL1fVli4 SNCDUHNEN5AABPQbSX4atxl9q1NXna/j5ou2br97tMD9x+inWA1GlFB4TVCsEOp+ soakZT57UeoZLcszg5ZZITnq/x1YaGMnQgmrGEjaNS9k51vwYXS368TlfLPddo5s tHYeDTSNgz9QjcWJ7fBASU2AKiD8Wi82FALWgM8NJmLkyum3h0mA9K3pLKrvHWC6 jzOULeIR5p3FneDz3za0Jy/e/EWngNtjjYzGsETHXZOYnNgjTbU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:30 2025 by rpki-client