$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: KtjBrAr0GTpB1v9b0affcYPRNo8AnLCegcR8hfJK7Z8= Subject key identifier: E4:3C:82:74:99:31:66:11:86:0F:8C:03:9D:FF:62:12:FC:E5:F3:A3 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 527624DFE911A2022C5DA9C58CAAADDBC1236A95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0327 Signing time: Thu 21 Aug 2025 14:11:05 +0000 Manifest this update: Thu 21 Aug 2025 14:06:05 +0000 Manifest next update: Mon 25 Aug 2025 01:59:05 +0000 Files and hashes: 1: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: GPGtYYzikE3DrNR8Fc6AngPvCikVkQpqD4o6XM2rZIY=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:76:24:df:e9:11:a2:02:2c:5d:a9:c5:8c:aa:ad:db:c1:23:6a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Aug 21 14:06:05 2025 GMT Not After : Aug 25 01:59:05 2025 GMT Subject: CN=E43C827499316611860F8C039DFF6212FCE5F3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:fa:5a:05:e4:0b:fb:61:77:48:3f:a4:e0: 8f:4c:43:f4:90:66:8f:7b:2d:95:51:d2:6a:33:2e: e8:d9:e3:e9:13:91:1f:c9:de:20:7b:17:e0:dc:09: 86:50:80:11:64:1a:e1:a2:b5:73:65:b7:f7:88:80: ca:fc:50:93:88:5f:59:0c:1c:f2:9a:73:82:f8:26: fc:02:34:47:e8:c8:c6:99:be:5b:c3:a4:76:b9:f8: fc:05:01:48:b4:e2:0e:85:c7:8d:b6:02:0a:f6:ce: d0:0f:d2:5b:91:89:30:69:c7:3e:fc:b5:15:bb:32: c4:a7:a3:2d:20:fc:f6:a6:d8:d1:53:83:b5:6c:d2: ec:57:22:ca:fe:84:c4:1c:62:58:8f:8a:b0:eb:ec: b4:68:8b:9b:92:da:42:92:23:b6:0d:8e:fa:2a:94: 2e:62:24:eb:58:cd:be:fd:8c:6d:97:19:14:b1:a5: 0e:b9:ee:03:a7:64:e5:a5:ca:78:e8:ab:04:9d:d7: 0e:e0:29:58:f5:7f:5c:5a:6a:a8:97:bd:9b:f6:c7: fe:7a:cf:ce:d2:47:04:91:3b:2e:23:57:22:e6:f9: e2:75:1e:a4:8f:18:a6:47:fd:2d:26:0d:bc:41:e7: 83:72:63:4b:27:2b:bb:f4:4b:da:77:62:32:af:e9: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3C:82:74:99:31:66:11:86:0F:8C:03:9D:FF:62:12:FC:E5:F3:A3 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:cf:db:ec:bb:ca:43:f5:af:fd:2d:24:e6:8e:0b:c3:c4:10: 4e:78:74:7a:a6:ba:0a:ac:ee:7d:10:c0:ba:17:cc:2d:5d:4b: b1:84:f2:d7:7c:54:2f:66:25:e1:9b:09:7d:73:4e:36:84:69: 3c:77:9e:32:03:28:3a:f7:26:44:6a:29:cc:20:69:7a:9c:ea: 3a:88:04:27:9a:0d:58:0f:0a:cb:52:89:8a:5f:6b:6f:bb:16: 76:ca:a7:8d:34:14:bd:e4:0d:58:a5:de:15:92:90:b0:37:02: c4:07:68:26:31:e2:2c:a9:ad:d5:b8:22:46:9e:89:9f:eb:1a: 2d:2e:51:de:80:20:71:d4:0e:3e:19:cf:ad:94:1b:fe:89:7b: 60:ba:46:69:1c:9b:9d:a7:47:4a:c5:17:2d:b5:4a:e7:f4:49: f6:73:1b:cd:4e:e8:15:a7:63:f5:5b:31:e3:ce:38:86:ac:34: 12:b7:96:27:39:7b:1b:6a:69:ce:2c:53:4e:5b:24:ce:94:a5: b7:e4:67:24:f3:4d:e6:17:3e:ae:ae:23:e3:5a:ba:68:1a:24: 77:5d:38:30:9f:7c:ef:a7:ff:f2:99:18:ca:93:30:af:19:8f: d1:75:cb:ce:37:12:10:0b:e2:a7:96:74:35:d4:79:e7:d9:e2: 2a:bf:6e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnYk3+kRogIsXanFjKqt28EjapUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTA4MjExNDA2MDVaFw0yNTA4MjUwMTU5MDVaMDMxMTAvBgNV BAMTKEU0M0M4Mjc0OTkzMTY2MTE4NjBGOEMwMzlERkY2MjEyRkNFNUYzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCvpaBeQL+2F3SD+k4I9MQ/SQ Zo97LZVR0mozLujZ4+kTkR/J3iB7F+DcCYZQgBFkGuGitXNlt/eIgMr8UJOIX1kM HPKac4L4JvwCNEfoyMaZvlvDpHa5+PwFAUi04g6Fx422Agr2ztAP0luRiTBpxz78 tRW7MsSnoy0g/Pam2NFTg7Vs0uxXIsr+hMQcYliPirDr7LRoi5uS2kKSI7YNjvoq lC5iJOtYzb79jG2XGRSxpQ657gOnZOWlynjoqwSd1w7gKVj1f1xaaqiXvZv2x/56 z87SRwSROy4jVyLm+eJ1HqSPGKZH/S0mDbxB54NyY0snK7v0S9p3YjKv6YjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5DyCdJkxZhGGD4wDnf9iEvzl86MwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTP2+y7ykP1r/0tJOaOC8PEEE54dHqmugqs 7n0QwLoXzC1dS7GE8td8VC9mJeGbCX1zTjaEaTx3njIDKDr3JkRqKcwgaXqc6jqI BCeaDVgPCstSiYpfa2+7FnbKp400FL3kDVil3hWSkLA3AsQHaCYx4iyprdW4Ikae iZ/rGi0uUd6AIHHUDj4Zz62UG/6Je2C6Rmkcm52nR0rFFy21Suf0SfZzG81O6BWn Y/VbMePOOIasNBK3lic5extqac4sU05bJM6UpbfkZyTzTeYXPq6uI+NaumgaJHdd ODCffO+n//KZGMqTMK8Zj9F1y843EhAL4qeWdDXUeefZ4iq/bm0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:40 2025 by rpki-client