$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: ViPI8ztvMcpZc+VWYcnsbqv0vkVW6vS8xFIN40mhGdU= Subject key identifier: 45:CE:BB:74:F3:DC:AC:DC:20:8C:F6:7F:A7:8F:5C:25:52:1A:FB:3A Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 201E4D83A470D59901E887F30E701CA88C1479A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 04CF Signing time: Sat 23 Aug 2025 03:20:06 +0000 Manifest this update: Sat 23 Aug 2025 03:15:06 +0000 Manifest next update: Tue 26 Aug 2025 04:04:06 +0000 Files and hashes: 1: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 2: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: XGyX1fDJCJeIJhfCIkQQCr6OHIb1I8YyoWexjVgFMdA=) 3: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: hmYtlW1dO+zjS77laMNgMcIrY9HGAXH0uln36Tc2uFc=) 4: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: ZgDGXCsSyzDrJGQuDM1q2yAFTUBJsm9YLq4ntv3/5wQ=) 5: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: zWk8nBtzJ5kCwr+alrHNTeusIWxyDqjAXquSFLRhyts=) 6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: MnxsLBxnCm6F40OhhKQb/lu+z75TMPF3C+fnrBq75B0=) 7: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=) 8: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=) 9: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:4d:83:a4:70:d5:99:01:e8:87:f3:0e:70:1c:a8:8c:14:79:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Aug 23 03:15:06 2025 GMT Not After : Aug 26 04:04:06 2025 GMT Subject: CN=45CEBB74F3DCACDC208CF67FA78F5C25521AFB3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:15:fa:ae:a9:27:4e:1e:fd:9c:87:77:63: e1:1f:35:a2:5a:c5:dc:c9:1a:b0:d6:48:03:a0:b5: e5:20:f2:9a:fa:ef:09:49:68:fd:79:de:6b:0b:38: fd:c9:15:4e:88:c9:94:14:64:c4:a5:05:1c:69:bb: b1:8f:32:8b:54:32:d4:24:80:51:e5:49:2c:00:9c: 1b:1a:94:2a:65:d2:bc:12:5e:79:77:50:22:17:0b: e9:2b:02:8b:cc:8d:38:28:d5:cc:37:18:0d:48:66: 63:4c:eb:bd:43:23:ae:cc:d1:ea:53:a2:83:b9:d2: 37:f8:30:fe:3c:bf:9e:08:f6:20:51:15:75:71:1b: 71:ff:24:8a:a8:7b:52:1d:60:87:44:5e:ba:f3:53: bc:f4:fa:6a:13:5f:2c:a9:3a:2f:3b:69:19:9c:e5: e2:7e:c0:62:f1:e2:e7:93:0b:23:4c:18:5b:b2:0c: 59:ef:0c:c9:5d:e1:94:bc:3d:2b:71:1c:79:bb:a6: 29:c2:e0:31:02:20:0b:b4:5a:53:35:05:1b:77:e0: fc:90:1e:05:5e:95:09:8c:6d:ed:bd:5f:7d:f6:0b: 11:a0:65:4a:fe:72:01:5a:11:68:10:d5:df:a0:9f: c7:a2:6a:ef:80:20:30:9b:ee:f9:75:62:0c:9b:3e: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CE:BB:74:F3:DC:AC:DC:20:8C:F6:7F:A7:8F:5C:25:52:1A:FB:3A X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5f:32:88:a0:9c:bb:6d:4d:36:34:1d:51:c2:07:3b:d5:2e: c8:a4:7a:ce:1b:d2:64:d8:fa:3c:d0:fe:26:f4:a1:9e:15:46: 8a:1d:6a:ba:94:68:bd:41:6a:44:92:84:01:03:e2:bd:8d:bd: 40:f0:4c:0a:08:f1:88:3a:98:ac:f1:f6:0d:04:cc:f9:27:b3: 57:51:b0:e1:30:4b:7c:9b:c7:91:5b:53:50:8d:16:36:6c:bb: 9b:95:2e:0f:2d:1b:7b:e3:66:b2:c5:b2:39:99:a3:ab:85:c9: 60:99:be:03:8e:83:c6:f1:d7:c0:65:bc:b3:3f:ee:89:13:6c: b4:a1:2d:9e:8e:5f:31:cc:ff:02:a7:3f:b2:15:77:31:62:69: 4b:8b:b8:c8:65:ee:ed:c3:9d:14:7d:91:1a:5e:c7:07:57:31: 31:3f:67:98:0f:be:39:7f:94:ed:66:2a:7c:cc:1d:d4:14:fb: 4c:0d:13:73:bc:ba:5d:7a:82:c4:0f:bb:0f:c8:dd:c3:83:1f: 73:10:f8:f7:7f:3f:8d:6a:f1:07:0e:39:0e:1f:4f:85:00:41: 36:a5:56:33:55:4a:50:96:b6:73:a9:b5:87:15:0e:f5:6a:3c: 28:97:e6:e4:d7:da:a2:19:eb:fd:ff:17:bf:fb:73:6f:71:bf: c0:fb:df:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIB5Ng6Rw1ZkB6IfzDnAcqIwUeaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTA4MjMwMzE1MDZaFw0yNTA4MjYwNDA0MDZaMDMxMTAvBgNV BAMTKDQ1Q0VCQjc0RjNEQ0FDREMyMDhDRjY3RkE3OEY1QzI1NTIxQUZCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZRX6rqknTh79nId3Y+EfNaJa xdzJGrDWSAOgteUg8pr67wlJaP153msLOP3JFU6IyZQUZMSlBRxpu7GPMotUMtQk gFHlSSwAnBsalCpl0rwSXnl3UCIXC+krAovMjTgo1cw3GA1IZmNM671DI67M0epT ooO50jf4MP48v54I9iBRFXVxG3H/JIqoe1IdYIdEXrrzU7z0+moTXyypOi87aRmc 5eJ+wGLx4ueTCyNMGFuyDFnvDMld4ZS8PStxHHm7pinC4DECIAu0WlM1BRt34PyQ HgVelQmMbe29X332CxGgZUr+cgFaEWgQ1d+gn8eiau+AIDCb7vl1YgybPqoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURc67dPPcrNwgjPZ/p49cJVIa+zowHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5fMoignLttTTY0HVHCBzvVLsikes4b0mTY +jzQ/ib0oZ4VRoodarqUaL1BakSShAED4r2NvUDwTAoI8Yg6mKzx9g0EzPkns1dR sOEwS3ybx5FbU1CNFjZsu5uVLg8tG3vjZrLFsjmZo6uFyWCZvgOOg8bx18BlvLM/ 7okTbLShLZ6OXzHM/wKnP7IVdzFiaUuLuMhl7u3DnRR9kRpexwdXMTE/Z5gPvjl/ lO1mKnzMHdQU+0wNE3O8ul16gsQPuw/I3cODH3MQ+Pd/P41q8QcOOQ4fT4UAQTal VjNVSlCWtnOptYcVDvVqPCiX5uTX2qIZ6/3/F7/7c29xv8D73x4= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:11 2025 by rpki-client