$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: iV6O5GgRGG0xlgqwSg8ZX4LDALuLXZ6lJWi6OIabYHk= Subject key identifier: C5:77:B8:97:D6:51:8B:29:81:45:5E:1B:51:C9:0E:A2:13:BB:B0:7E Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 27556578A12B943BFB1D6355236EFFDC747FE777 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 02F7 Signing time: Mon 05 May 2025 07:51:02 +0000 Manifest this update: Mon 05 May 2025 07:46:02 +0000 Manifest next update: Thu 08 May 2025 17:19:02 +0000 Files and hashes: 1: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: cntIG+7sgeKdzqPYuWzfbJ/QZYdLRWwnK9JY+YdxF0M=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: mRD91QZsrLEBuwuw/FKPBl2YPUHf9UdaIYkn8ERBU8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:55:65:78:a1:2b:94:3b:fb:1d:63:55:23:6e:ff:dc:74:7f:e7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: May 5 07:46:02 2025 GMT Not After : May 8 17:19:02 2025 GMT Subject: CN=C577B897D6518B2981455E1B51C90EA213BBB07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:b5:a6:2a:c2:4e:29:9c:2f:67:1c:d6:a1: c4:95:04:f7:2f:a3:3f:71:21:34:dd:05:5d:30:ea: ec:1c:a7:3c:e0:07:8b:e7:ab:b6:04:7e:5c:21:1b: 57:12:27:10:c4:fc:ba:b9:6a:47:2c:d7:58:57:36: 91:5c:04:09:3a:31:19:00:64:e9:8c:f8:1f:dd:c4: df:9d:fe:92:9a:f4:4c:8e:88:25:5d:30:09:2d:6a: 88:90:2e:9a:b5:da:9b:97:fd:a7:bd:b1:99:3a:d5: 0f:01:8d:77:86:24:ac:5a:fe:c7:1c:fa:6b:c5:69: 78:f2:d3:99:b4:e9:fa:89:6d:7f:51:64:d1:b5:1c: 18:8e:ca:e6:65:c8:e0:e7:37:d2:20:21:f5:af:d7: 56:46:26:24:f8:38:cc:23:cc:dc:8e:8e:59:36:eb: 7c:7b:47:6d:34:58:5f:91:96:76:c7:b3:67:48:2a: 60:a5:59:9b:bd:43:1b:81:5f:a9:1c:b3:56:e2:67: f7:eb:8f:58:28:d8:c3:e6:f7:36:a1:a4:8c:74:bf: ef:c8:2a:7e:80:b6:e2:ea:0b:45:aa:d4:9a:42:3f: 79:42:2c:24:f4:fb:4f:e6:8a:11:e1:39:99:ca:c3: ae:10:e8:ae:88:1e:6f:b7:24:61:97:df:18:e3:8a: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:77:B8:97:D6:51:8B:29:81:45:5E:1B:51:C9:0E:A2:13:BB:B0:7E X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:28:39:b1:a7:17:0e:8b:07:9f:f2:8d:c2:b8:96:19:a2:05: 93:b8:b8:e7:de:d5:4f:15:ed:74:ee:0a:f9:5e:2d:c7:9b:98: bd:45:09:38:1a:f5:70:7d:6b:44:fb:a5:91:90:ad:55:10:5b: 83:78:16:8c:6c:b4:6d:dd:10:92:a9:bd:1f:59:2d:62:7d:e7: 5a:7e:a1:20:29:3b:ef:a5:c5:ea:75:61:b2:4e:85:8b:ae:eb: 01:cb:a1:0f:80:10:00:70:a7:69:ee:f1:07:dd:5f:3a:1b:44: 58:78:91:92:28:dc:0f:8b:70:0e:fb:21:ae:15:ed:db:ac:7f: 62:55:13:ff:41:1b:7a:61:e4:47:bb:36:7a:40:0d:b8:af:19: 9c:ea:f8:ad:55:7b:91:2b:ec:1e:b4:77:8c:30:0d:66:33:54: 5a:5e:22:0b:25:74:17:96:ea:26:3a:69:7a:23:47:90:00:52: c0:75:a2:81:70:36:40:50:89:5b:39:c6:ae:05:28:02:9d:ab: 5d:1a:c9:00:a1:30:90:5f:10:59:d4:45:a6:d4:98:75:09:d5: 2b:cf:8f:0e:60:40:1f:9f:83:50:df:0b:df:f6:82:b3:48:ae: f0:a3:15:ac:76:79:a0:d9:c5:0a:39:93:a8:c5:01:32:13:0d: 53:72:9c:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1VleKErlDv7HWNVI27/3HR/53cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTA1MDUwNzQ2MDJaFw0yNTA1MDgxNzE5MDJaMDMxMTAvBgNV BAMTKEM1NzdCODk3RDY1MThCMjk4MTQ1NUUxQjUxQzkwRUEyMTNCQkIwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftbWmKsJOKZwvZxzWocSVBPcv oz9xITTdBV0w6uwcpzzgB4vnq7YEflwhG1cSJxDE/Lq5akcs11hXNpFcBAk6MRkA ZOmM+B/dxN+d/pKa9EyOiCVdMAktaoiQLpq12puX/ae9sZk61Q8BjXeGJKxa/scc +mvFaXjy05m06fqJbX9RZNG1HBiOyuZlyODnN9IgIfWv11ZGJiT4OMwjzNyOjlk2 63x7R200WF+RlnbHs2dIKmClWZu9QxuBX6kcs1biZ/frj1go2MPm9zahpIx0v+/I Kn6AtuLqC0Wq1JpCP3lCLCT0+0/mihHhOZnKw64Q6K6IHm+3JGGX3xjjiqTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXe4l9ZRiymBRV4bUckOohO7sH4wHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUoObGnFw6LB5/yjcK4lhmiBZO4uOfe1U8V 7XTuCvleLcebmL1FCTga9XB9a0T7pZGQrVUQW4N4FoxstG3dEJKpvR9ZLWJ951p+ oSApO++lxep1YbJOhYuu6wHLoQ+AEABwp2nu8QfdXzobRFh4kZIo3A+LcA77Ia4V 7dusf2JVE/9BG3ph5Ee7NnpADbivGZzq+K1Ve5Er7B60d4wwDWYzVFpeIgsldBeW 6iY6aXojR5AAUsB1ooFwNkBQiVs5xq4FKAKdq10ayQChMJBfEFnURabUmHUJ1SvP jw5gQB+fg1DfC9/2grNIrvCjFax2eaDZxQo5k6jFATITDVNynH4= -----END CERTIFICATE-----Generated at Wed May 7 13:33:20 2025 by rpki-client