$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: /rEUfLEG0sokrd+UiSy4pycf1telE6paqv0psoOW1sI= Subject key identifier: A1:45:AC:61:74:D9:79:23:D8:3F:5B:6B:F6:B1:AC:CA:F2:D4:48:0A Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 5A36502EF88279D0D9E5092A3088FB7C1A9D0310 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 0227 Signing time: Mon 02 Jun 2025 04:20:45 +0000 Manifest this update: Mon 02 Jun 2025 04:15:45 +0000 Manifest next update: Thu 05 Jun 2025 10:39:45 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: 1izcGSGkr6cPNh+bwONji7z6ix4aFDk7ixhVOTHqGiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 10:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:36:50:2e:f8:82:79:d0:d9:e5:09:2a:30:88:fb:7c:1a:9d:03:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Jun 2 04:15:45 2025 GMT Not After : Jun 5 10:39:45 2025 GMT Subject: CN=A145AC6174D97923D83F5B6BF6B1ACCAF2D4480A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:87:2e:11:4e:3f:61:e4:6a:df:eb:c3:e1: 24:60:ab:b6:4d:d1:bd:31:55:b0:af:b7:5a:af:6e: a6:7a:02:d7:07:cf:ff:c3:cb:58:81:ba:ec:a2:e0: 1a:0e:a3:68:51:24:4e:5a:0b:fe:8b:a5:ca:ff:b1: 46:e9:8c:bc:79:d2:23:62:d6:2e:b5:97:04:ac:bf: d1:eb:0f:0d:3a:c8:a4:43:5d:10:10:65:97:64:6d: ea:54:ba:18:4a:5d:2c:4e:59:4e:62:49:16:62:cd: 2c:d9:92:88:d2:96:1f:ad:68:7f:b4:23:64:6b:a9: ea:f0:da:2e:a3:71:9f:7b:f7:f5:8f:9b:bd:13:38: 36:77:37:d3:a1:8e:a2:89:e1:f9:3f:e5:8d:2c:09: 7a:a3:73:20:2a:a6:2e:5e:9e:27:06:67:43:06:bd: 06:e1:9e:3e:6a:bc:e3:77:a9:2e:9b:35:4a:4e:db: a1:46:8b:06:de:a5:71:1d:01:3f:cc:01:c1:b1:81: 0b:54:0a:f2:c9:92:11:c1:67:da:d7:a8:7e:91:b6: f4:10:e8:1c:ac:80:62:03:76:d1:15:5b:a1:07:d5: 66:25:c3:88:aa:5c:65:b2:39:5a:6b:b7:30:29:c9: 15:18:e0:86:8e:cb:01:44:58:8a:3e:81:ed:ce:5c: e8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:AC:61:74:D9:79:23:D8:3F:5B:6B:F6:B1:AC:CA:F2:D4:48:0A X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:22:3b:32:37:76:d2:4a:50:73:46:de:e3:ff:5e:8f:74:b3: 5e:74:b4:c2:ff:40:c7:fb:80:21:07:d5:30:25:c3:97:a9:89: 8c:0f:bc:de:1b:aa:67:dc:56:47:78:ae:a8:4f:cc:c4:84:75: 97:e2:8f:e2:c8:3b:59:ab:c0:a3:37:2b:ae:d4:de:57:d5:44: ee:23:9e:af:fd:2b:d6:76:fa:b0:c1:eb:2c:1f:fa:8b:64:47: ba:9f:b9:89:4e:a3:55:8a:fd:7e:61:e9:d2:cb:37:bd:19:a3: 3a:27:e3:28:1a:9c:6a:b6:cd:ab:67:d3:70:49:70:ac:8a:7d: e1:d7:4f:e4:0c:13:5c:e6:e7:df:78:f4:0e:e3:d8:ac:fc:d8: 33:5f:be:b9:d8:72:fa:d2:8d:6e:c1:fd:17:f0:cf:2b:7c:9b: 99:9f:85:bd:1c:dc:97:53:6e:98:81:01:67:90:05:e5:b6:0a: ca:cc:da:43:61:99:7a:e4:44:94:32:6e:b8:a2:08:c1:a2:1d: 3c:e3:eb:68:88:af:fe:14:28:06:15:fe:ad:14:ef:c3:47:fb: 89:eb:1b:a5:3f:00:5f:8e:a0:c8:b0:27:5f:03:53:95:14:0c: 16:b0:0b:b2:4f:d3:43:47:2a:6f:f5:97:8b:d4:a7:46:a7:74: 0d:0d:7f:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjZQLviCedDZ5QkqMIj7fBqdAxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTA2MDIwNDE1NDVaFw0yNTA2MDUxMDM5NDVaMDMxMTAvBgNV BAMTKEExNDVBQzYxNzREOTc5MjNEODNGNUI2QkY2QjFBQ0NBRjJENDQ4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYocuEU4/YeRq3+vD4SRgq7ZN 0b0xVbCvt1qvbqZ6AtcHz//Dy1iBuuyi4BoOo2hRJE5aC/6Lpcr/sUbpjLx50iNi 1i61lwSsv9HrDw06yKRDXRAQZZdkbepUuhhKXSxOWU5iSRZizSzZkojSlh+taH+0 I2Rrqerw2i6jcZ979/WPm70TODZ3N9OhjqKJ4fk/5Y0sCXqjcyAqpi5enicGZ0MG vQbhnj5qvON3qS6bNUpO26FGiwbepXEdAT/MAcGxgQtUCvLJkhHBZ9rXqH6RtvQQ 6BysgGIDdtEVW6EH1WYlw4iqXGWyOVprtzApyRUY4IaOywFEWIo+ge3OXOgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoUWsYXTZeSPYP1tr9rGsyvLUSAowHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIiOzI3dtJKUHNG3uP/Xo90s150tML/QMf7 gCEH1TAlw5epiYwPvN4bqmfcVkd4rqhPzMSEdZfij+LIO1mrwKM3K67U3lfVRO4j nq/9K9Z2+rDB6ywf+otkR7qfuYlOo1WK/X5h6dLLN70Zozon4yganGq2zatn03BJ cKyKfeHXT+QME1zm59949A7j2Kz82DNfvrnYcvrSjW7B/Rfwzyt8m5mfhb0c3JdT bpiBAWeQBeW2CsrM2kNhmXrkRJQybriiCMGiHTzj62iIr/4UKAYV/q0U78NH+4nr G6U/AF+OoMiwJ18DU5UUDBawC7JP00NHKm/1l4vUp0andA0Nf6U= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:39 2025 by rpki-client