$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: G/5iLDb5zD1vzNMRzlsM5JDen7BjGEhHYLxlo5ClQhE= Subject key identifier: 3A:0B:A7:A9:81:CE:A5:A9:9C:4B:94:85:E5:B2:AD:B3:D0:06:AA:F2 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 0F3E2B77CE388567B17B6EB1DBF5A8051AD18784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 0251 Signing time: Sat 06 Sep 2025 02:40:46 +0000 Manifest this update: Sat 06 Sep 2025 02:35:46 +0000 Manifest next update: Tue 09 Sep 2025 05:37:46 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: n/su3lsMcN2IGFdjBhLqxjiow5KuHghFm58tQTaR8bM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3e:2b:77:ce:38:85:67:b1:7b:6e:b1:db:f5:a8:05:1a:d1:87:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Sep 6 02:35:46 2025 GMT Not After : Sep 9 05:37:46 2025 GMT Subject: CN=3A0BA7A981CEA5A99C4B9485E5B2ADB3D006AAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:91:7d:1b:eb:95:69:81:4b:a5:ef:81:68: 37:cb:d3:bf:01:db:86:47:57:e8:9e:0c:88:47:5b: 7e:50:7c:49:31:71:d1:62:12:c7:29:0f:24:4c:48: 37:b5:74:33:cb:7d:71:67:07:29:86:8c:21:b2:b7: 29:af:0b:be:72:20:eb:6b:8d:e2:b8:f4:d3:66:cf: 87:0f:f0:84:20:9e:3c:18:d3:95:0c:1f:68:f5:8d: c3:51:6d:c6:73:45:81:4a:45:f9:2e:1f:74:65:a5: 98:b8:ad:7a:a5:c4:3c:78:ea:73:ab:ea:3d:35:81: 4f:f0:75:d2:f7:7a:aa:c3:a0:c0:82:51:35:d6:36: f5:17:42:7b:8b:a3:f3:1b:c5:5d:81:4d:36:41:fb: f4:64:46:57:2c:ae:2c:32:da:18:39:07:2a:0c:18: 93:f1:68:47:cc:84:b3:17:85:f4:4d:dd:e8:54:80: 3a:3a:8b:71:f2:40:42:c8:15:fc:94:aa:01:d1:df: e8:61:e2:15:f2:cf:a0:22:c8:7f:ce:b7:eb:89:da: a9:f5:3d:ab:c1:67:2a:f8:9c:98:3b:5c:81:c8:08: 43:c7:db:03:19:29:98:d6:8e:41:64:82:32:8c:2b: fc:f0:e5:e9:c5:70:fd:74:4a:b7:ba:8e:9b:7f:0e: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:A7:A9:81:CE:A5:A9:9C:4B:94:85:E5:B2:AD:B3:D0:06:AA:F2 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:55:72:5b:fb:2a:96:fb:e8:b7:73:02:eb:be:16:ff:63:5e: 9a:cd:43:5a:e8:08:3d:5c:71:48:b5:b7:f8:97:4f:e5:eb:2f: 4a:be:b7:89:31:d3:a0:e2:5b:2f:cc:a7:b2:da:87:49:30:7f: 7b:4b:ce:95:df:c4:b2:a4:79:ae:4b:ed:93:84:24:e8:84:55: 65:a3:ec:1a:59:7e:93:6d:85:5f:e7:10:be:d9:74:06:df:64: c9:cd:86:53:9e:4d:59:a9:fa:8c:9e:4e:e1:5a:f6:61:40:77: 22:d1:22:20:40:b7:44:79:15:33:21:e7:78:93:3a:b7:7d:88: c3:e9:2e:c5:89:8f:2b:b6:5d:0c:94:10:d5:3c:58:cc:0f:f3: 52:bb:3c:13:b2:45:3d:c6:2f:db:ff:97:1b:16:7a:f7:4f:b1: 91:7a:a2:7b:dc:53:e9:a7:f5:f3:62:82:a5:1f:36:51:4b:78: 10:f3:fa:ee:7c:87:03:80:09:af:e8:4f:c1:5d:6c:45:51:08: 0e:d9:df:07:f4:44:b0:fe:36:48:35:47:9b:06:be:1d:c5:cf: e3:10:4d:08:3f:87:14:65:0b:11:58:e8:59:9c:06:44:dc:a1: 51:ce:f4:66:f1:70:23:85:84:5a:96:9e:c3:76:60:f4:6b:0d: 00:c8:23:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDz4rd844hWexe26x2/WoBRrRh4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTA5MDYwMjM1NDZaFw0yNTA5MDkwNTM3NDZaMDMxMTAvBgNV BAMTKDNBMEJBN0E5ODFDRUE1QTk5QzRCOTQ4NUU1QjJBREIzRDAwNkFBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBpF9G+uVaYFLpe+BaDfL078B 24ZHV+ieDIhHW35QfEkxcdFiEscpDyRMSDe1dDPLfXFnBymGjCGytymvC75yIOtr jeK49NNmz4cP8IQgnjwY05UMH2j1jcNRbcZzRYFKRfkuH3RlpZi4rXqlxDx46nOr 6j01gU/wddL3eqrDoMCCUTXWNvUXQnuLo/MbxV2BTTZB+/RkRlcsriwy2hg5ByoM GJPxaEfMhLMXhfRN3ehUgDo6i3HyQELIFfyUqgHR3+hh4hXyz6AiyH/Ot+uJ2qn1 PavBZyr4nJg7XIHICEPH2wMZKZjWjkFkgjKMK/zw5enFcP10Sre6jpt/DiOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOgunqYHOpamcS5SF5bKts9AGqvIwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9Vclv7Kpb76LdzAuu+Fv9jXprNQ1roCD1c cUi1t/iXT+XrL0q+t4kx06DiWy/Mp7Lah0kwf3tLzpXfxLKkea5L7ZOEJOiEVWWj 7BpZfpNthV/nEL7ZdAbfZMnNhlOeTVmp+oyeTuFa9mFAdyLRIiBAt0R5FTMh53iT Ord9iMPpLsWJjyu2XQyUENU8WMwP81K7PBOyRT3GL9v/lxsWevdPsZF6onvcU+mn 9fNigqUfNlFLeBDz+u58hwOACa/oT8FdbEVRCA7Z3wf0RLD+Nkg1R5sGvh3Fz+MQ TQg/hxRlCxFY6FmcBkTcoVHO9GbxcCOFhFqWnsN2YPRrDQDII4I= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:26 2025 by rpki-client