$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft File: 802B50E70791398C3EA43DDCECAA739EA01A638B.mft (raw, json) Hash identifier: HGiOTt1DYuq5m+a4SIa1Jh4r26FGJnNq/x5dpyAkI9w= Subject key identifier: 7D:21:1F:0F:D1:AE:27:85:AB:BB:C5:E3:39:90:15:75:FA:DD:A0:CF Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B Certificate serial: 06A79CEE4EA24CC6D2730D2360FDA0055CB46FFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft Manifest number: 33 Signing time: Tue 21 Oct 2025 22:41:43 +0000 Manifest this update: Tue 21 Oct 2025 22:36:43 +0000 Manifest next update: Sat 25 Oct 2025 02:02:43 +0000 Files and hashes: 1: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ=) 2: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=) 3: 802B50E70791398C3EA43DDCECAA739EA01A638B.crl (hash: 7ER4A0x9R7EFFKztnOOBBUywnQr9x09ubSy+E87xEvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 22:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a7:9c:ee:4e:a2:4c:c6:d2:73:0d:23:60:fd:a0:05:5c:b4:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B Validity Not Before: Oct 21 22:36:43 2025 GMT Not After : Oct 25 02:02:43 2025 GMT Subject: CN=7D211F0FD1AE2785ABBBC5E339901575FADDA0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:5d:9f:65:ed:02:17:2c:58:73:a1:34:d2: df:85:57:f6:4d:d8:bd:fb:56:67:b9:de:e6:1b:77: f6:12:9e:9c:78:5a:b4:0d:9c:09:53:a5:b0:e9:23: ad:8f:a9:4e:76:b5:d8:a0:27:5e:a4:87:93:b7:cd: 27:30:a8:15:b7:45:a2:09:16:d7:46:e2:f7:f2:b9: c5:87:ac:d1:ce:a9:7b:9a:92:23:91:96:64:c3:3a: e3:d8:e7:9d:10:97:91:a8:3a:c5:1e:6d:d0:3f:d7: cd:d4:4a:2e:ed:ae:7c:5a:a5:ea:03:ab:e4:24:7a: 49:0f:de:17:61:7e:04:94:0f:4f:7d:c6:b6:68:7a: 16:86:27:22:80:21:11:95:30:c4:ee:c0:b8:3a:ec: 7b:b2:fb:6c:73:d3:87:ad:7c:43:41:aa:cc:6c:fc: 49:58:05:a9:2e:40:a5:66:7e:ef:d1:c0:a4:d8:02: 5b:1b:d0:11:64:93:c6:ae:86:e2:46:e5:a8:83:6e: 1d:e6:32:01:16:2c:9e:f8:5f:83:26:8e:b4:86:22: 8b:07:90:24:d4:98:48:20:ba:e0:a5:6f:0f:e8:62: 25:94:3b:61:09:70:3a:cf:83:af:cf:77:ea:d8:59: b5:74:f1:38:b3:3b:01:2a:58:9a:9d:74:58:90:2c: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:1F:0F:D1:AE:27:85:AB:BB:C5:E3:39:90:15:75:FA:DD:A0:CF X509v3 Authority Key Identifier: keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1b:0e:ea:d5:e4:d8:ed:76:31:a1:92:73:e2:d5:c2:7f:e5: 2b:81:3e:18:b5:52:9f:0e:e6:68:60:14:f4:04:d3:74:f9:1f: 2b:ac:95:06:ff:1c:23:7c:a6:74:de:2c:d9:ba:61:1a:d7:a0: d4:d6:91:40:fd:fc:45:2f:32:6c:47:ae:e6:13:5b:69:27:12: 83:6b:b0:3d:ba:7c:a3:61:0c:2e:d3:ba:87:43:46:09:ea:c6: 10:6f:2c:80:7c:b5:5f:f2:a1:a1:0e:d3:b6:21:46:9e:43:69: e0:c2:98:a2:cd:08:71:75:8f:f8:ec:c0:db:dd:a6:c4:f1:40: cd:5f:59:26:fa:26:62:8c:15:12:c9:09:56:93:eb:f2:aa:69: fc:d9:38:bb:60:54:e7:2c:21:ef:89:39:90:55:72:e2:f1:0a: e3:5b:e7:ec:34:1b:48:fe:87:7a:35:74:0f:f9:c1:04:7c:0f: 67:b4:92:8e:a0:77:c1:2b:8d:f5:e3:5b:0f:36:ed:fd:43:fb: 7b:b5:c3:95:85:3f:78:6d:ba:bc:81:8f:1c:fb:eb:1f:23:e9: e3:70:d5:3a:c1:8e:5b:2c:06:a3:8e:18:f3:19:a7:d7:bd:c1: be:dd:f3:9a:c9:c1:be:df:ec:06:91:db:56:79:f4:18:7d:6d: 89:73:2c:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqec7k6iTMbScw0jYP2gBVy0b/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVB MDFBNjM4QjAeFw0yNTEwMjEyMjM2NDNaFw0yNTEwMjUwMjAyNDNaMDMxMTAvBgNV BAMTKDdEMjExRjBGRDFBRTI3ODVBQkJCQzVFMzM5OTAxNTc1RkFEREEwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7F2fZe0CFyxYc6E00t+FV/ZN 2L37Vme53uYbd/YSnpx4WrQNnAlTpbDpI62PqU52tdigJ16kh5O3zScwqBW3RaIJ FtdG4vfyucWHrNHOqXuakiORlmTDOuPY550Ql5GoOsUebdA/183USi7trnxapeoD q+QkekkP3hdhfgSUD099xrZoehaGJyKAIRGVMMTuwLg67Huy+2xz04etfENBqsxs /ElYBakuQKVmfu/RwKTYAlsb0BFkk8auhuJG5aiDbh3mMgEWLJ74X4MmjrSGIosH kCTUmEgguuClbw/oYiWUO2EJcDrPg6/Pd+rYWbV08TizOwEqWJqddFiQLIERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfSEfD9GuJ4Wru8XjOZAVdfrdoM8wHwYDVR0j BBgwFoAUgCtQ5weROYw+pD3c7KpznqAaY4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTExZTZkNy01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC84MDJCNTBFNzA3 OTEzOThDM0VBNDNERENFQ0FBNzM5RUEwMUE2MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVBMDFB NjM4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWExMWU2ZDctNTdhMS00OTM2LWI3 YTctZGUwOTM1MjVjYjI3LzAvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTcz OUVBMDFBNjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0bDurV5NjtdjGhknPi1cJ/5SuBPhi1Up8O 5mhgFPQE03T5HyuslQb/HCN8pnTeLNm6YRrXoNTWkUD9/EUvMmxHruYTW2knEoNr sD26fKNhDC7TuodDRgnqxhBvLIB8tV/yoaEO07YhRp5DaeDCmKLNCHF1j/jswNvd psTxQM1fWSb6JmKMFRLJCVaT6/KqafzZOLtgVOcsIe+JOZBVcuLxCuNb5+w0G0j+ h3o1dA/5wQR8D2e0ko6gd8ErjfXjWw827f1D+3u1w5WFP3hturyBjxz76x8j6eNw 1TrBjlssBqOOGPMZp9e9wb7d85rJwb7f7AaR21Z59Bh9bYlzLNk= -----END CERTIFICATE-----Generated at Wed Oct 22 00:57:21 2025 by rpki-client