$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft File: 1D80B161A8871962133619E73EBB98762953ABF1.mft (raw, json) Hash identifier: 7m34m/tV685L3b2P9Pj0nb3bu+aZ37xcv5S9dOMBoG0= Subject key identifier: A3:5B:E3:4D:8A:25:4F:B0:A5:EF:E5:CB:32:1C:C7:02:04:DB:1C:E9 Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 Certificate issuer: /CN=1D80B161A8871962133619E73EBB98762953ABF1 Certificate serial: 38373FD231A88F42BF73AF0238CF6996EE70336C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft Manifest number: 01BE Signing time: Mon 20 Oct 2025 04:32:10 +0000 Manifest this update: Mon 20 Oct 2025 04:27:10 +0000 Manifest next update: Thu 23 Oct 2025 10:04:10 +0000 Files and hashes: 1: 1D80B161A8871962133619E73EBB98762953ABF1.crl (hash: 4Qc55y5/cv/Vco3s6Z9XMmELuDH0E5cLpX2rQKpgnNk=) 2: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: ovrs8jnUkNf+XIsuUoS9OXOAOBVBgJNl9ABSwFMQZq0=) 3: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 2ij1jqIgyRl9fMj7GA6iQ4RysnWHFWKfEhR4n6OxCCo=) 4: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: JHaaXWcIh7S1M0eqUwvmLXMc38/THWMZ+gJon7aPrNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:37:3f:d2:31:a8:8f:42:bf:73:af:02:38:cf:69:96:ee:70:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1 Validity Not Before: Oct 20 04:27:10 2025 GMT Not After : Oct 23 10:04:10 2025 GMT Subject: CN=A35BE34D8A254FB0A5EFE5CB321CC70204DB1CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:23:f7:1d:90:5d:89:1b:5f:00:12:c0:ea: a0:0f:81:f9:90:87:a9:24:fb:d4:98:76:3d:bb:34: ac:9b:c6:90:6e:eb:0d:ff:e5:a2:5e:f6:2e:eb:9a: 3a:22:2c:af:a3:93:1c:d3:3a:1a:48:01:ad:34:a3: 54:80:4a:1f:54:75:eb:b5:75:f0:6b:0a:58:d5:c8: 62:eb:19:a2:bf:ac:55:e4:f6:6e:61:db:06:d0:fe: fb:f1:ed:d8:0c:40:e3:42:3d:82:cb:80:e2:11:e6: 80:01:80:38:5f:f9:12:d6:b2:d1:4f:ee:88:99:1a: ad:8e:8f:db:ca:c5:29:f3:67:fa:94:35:fb:bc:4d: 6b:b8:f3:47:d1:54:89:ad:4b:98:0a:3a:4c:ec:b4: e1:39:82:a7:83:04:be:da:c6:12:26:6d:a1:c2:80: a8:fb:fe:18:af:1b:f7:e1:65:41:47:0a:1c:2b:d3: 38:d3:08:94:ff:44:a4:c3:ff:35:8e:1c:e2:66:6a: fb:0e:68:fb:ff:3c:40:95:50:7d:bc:10:ec:86:ed: 64:95:07:f3:cd:dc:e3:1b:be:70:35:51:e6:9e:70: 8e:e6:d9:c1:17:fd:6e:93:84:f3:a4:8b:36:53:5a: ff:bd:6d:c9:56:1e:35:59:5c:21:af:00:76:fe:ed: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5B:E3:4D:8A:25:4F:B0:A5:EF:E5:CB:32:1C:C7:02:04:DB:1C:E9 X509v3 Authority Key Identifier: keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:25:6d:18:bf:f9:1e:ac:86:a9:d3:b0:e4:1b:07:63:ce:7c: 76:73:81:8b:52:5e:30:99:c4:e6:bb:1a:d1:ba:d8:17:a4:51: 93:dd:31:87:16:d1:c1:78:b8:80:26:ab:4a:b3:67:cf:58:fa: 8f:e6:2f:ad:40:d8:82:12:1b:09:ee:82:1a:7a:15:4e:35:0b: fb:fd:b7:c9:3a:93:93:69:1b:9d:ea:b7:bf:3a:b0:c5:a1:9f: e4:89:a0:6e:20:09:38:d8:ff:95:dd:75:da:43:87:19:30:72: 44:bf:ca:9c:99:9d:ca:b7:0b:66:1a:5f:0d:29:3f:11:27:ce: ee:8e:e0:a3:bb:64:74:9e:9d:5a:57:0f:ba:cb:4a:e4:7b:80: aa:91:19:3d:42:cd:99:26:46:dd:d9:0a:8b:ae:cb:8d:c5:74: 29:28:76:f7:a7:4e:92:2e:25:d6:93:ae:b0:02:fc:d1:ed:32: 75:db:ed:84:ba:99:6e:12:37:69:62:ca:5f:cc:db:89:52:54: be:ef:da:c8:38:b7:b0:2e:fe:52:5d:65:fa:b0:41:f0:ba:e5: e2:d9:ac:4e:a9:05:ff:3f:ee:ce:f0:27:20:45:0d:7d:48:f7: 33:e1:ba:4c:71:a5:d5:32:de:d2:84:12:65:fc:92:06:07:be: 4c:31:21:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODc/0jGoj0K/c68COM9plu5wM2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYy OTUzQUJGMTAeFw0yNTEwMjAwNDI3MTBaFw0yNTEwMjMxMDA0MTBaMDMxMTAvBgNV BAMTKEEzNUJFMzREOEEyNTRGQjBBNUVGRTVDQjMyMUNDNzAyMDREQjFDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ayP3HZBdiRtfABLA6qAPgfmQ h6kk+9SYdj27NKybxpBu6w3/5aJe9i7rmjoiLK+jkxzTOhpIAa00o1SASh9Udeu1 dfBrCljVyGLrGaK/rFXk9m5h2wbQ/vvx7dgMQONCPYLLgOIR5oABgDhf+RLWstFP 7oiZGq2Oj9vKxSnzZ/qUNfu8TWu480fRVImtS5gKOkzstOE5gqeDBL7axhImbaHC gKj7/hivG/fhZUFHChwr0zjTCJT/RKTD/zWOHOJmavsOaPv/PECVUH28EOyG7WSV B/PN3OMbvnA1UeaecI7m2cEX/W6ThPOkizZTWv+9bclWHjVZXCGvAHb+7QjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1vjTYolT7Cl7+XLMhzHAgTbHOkwHwYDVR0j BBgwFoAUHYCxYaiHGWITNhnnPruYdilTq/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTUyMTA5OS0zYmExLTRmOTEtYjViYi03MTJjM2JiYTYzMzcvMC8xRDgwQjE2MUE4 ODcxOTYyMTMzNjE5RTczRUJCOTg3NjI5NTNBQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4NzYyOTUz QUJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU1MjEwOTktM2JhMS00ZjkxLWI1 YmItNzEyYzNiYmE2MzM3LzAvMUQ4MEIxNjFBODg3MTk2MjEzMzYxOUU3M0VCQjk4 NzYyOTUzQUJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMlbRi/+R6shqnTsOQbB2POfHZzgYtSXjCZ xOa7GtG62BekUZPdMYcW0cF4uIAmq0qzZ89Y+o/mL61A2IISGwnughp6FU41C/v9 t8k6k5NpG53qt786sMWhn+SJoG4gCTjY/5XdddpDhxkwckS/ypyZncq3C2YaXw0p PxEnzu6O4KO7ZHSenVpXD7rLSuR7gKqRGT1CzZkmRt3ZCouuy43FdCkodvenTpIu JdaTrrAC/NHtMnXb7YS6mW4SN2liyl/M24lSVL7v2sg4t7Au/lJdZfqwQfC65eLZ rE6pBf8/7s7wJyBFDX1I9zPhukxxpdUy3tKEEmX8kgYHvkwxIeo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:23 2025 by rpki-client