$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: s4W/E87vgmA5t+f2Wyj77dvPNJdZOiqTruMC9c+nYe4= Subject key identifier: 81:06:A4:A6:1B:A7:3D:7A:63:23:2E:79:8D:29:CB:0D:39:5E:46:CD Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 534552EBB18909E5C5941DD48258B0838E8B59EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 04EA Signing time: Sun 19 Oct 2025 21:10:06 +0000 Manifest this update: Sun 19 Oct 2025 21:05:06 +0000 Manifest next update: Wed 22 Oct 2025 22:30:06 +0000 Files and hashes: 1: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: MnxsLBxnCm6F40OhhKQb/lu+z75TMPF3C+fnrBq75B0=) 2: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 3: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: zWk8nBtzJ5kCwr+alrHNTeusIWxyDqjAXquSFLRhyts=) 4: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: vNEfgy+saZI/OBHKt+vUR0EthDehkqqWe/xLLH5psPY=) 5: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: WH82srfa1fHbTvQkryRY+/IYgX3wHeBdFBK97LFsmt8=) 6: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: 6qWlUeCLsff2Ezhc+I97fHgwx8eIfQT4fRqy3JTRAWk=) 7: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: oe71RDdtF+9+hBS9awBl7/UQgojTF+hgJs1azOC1AoI=) 8: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=) 9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: jr0zhMaOjFRbvUw0rAJarRm1el624E3tGIRY/QTijIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:45:52:eb:b1:89:09:e5:c5:94:1d:d4:82:58:b0:83:8e:8b:59:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Oct 19 21:05:06 2025 GMT Not After : Oct 22 22:30:06 2025 GMT Subject: CN=8106A4A61BA73D7A63232E798D29CB0D395E46CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:1e:e4:b1:58:b2:c0:a6:ee:51:db:fe:04: aa:db:be:9b:7f:ab:4a:20:d6:5c:ea:ec:5e:91:ee: e6:3d:54:d6:6d:a8:18:cb:5f:ee:84:c7:7f:76:2a: b6:04:a6:7c:17:25:17:00:c9:52:8f:0e:b2:3c:cb: 22:9c:75:cc:5b:4c:9d:ce:60:70:97:5c:f2:e2:34: 68:4f:4e:a9:57:65:7e:e0:5c:c2:0f:3c:5e:47:be: be:0c:ea:e9:df:32:e1:bc:d3:12:75:25:e7:85:53: 5d:f8:36:84:dd:ef:c8:35:b2:c1:47:b3:bb:52:77: ba:41:41:b8:22:79:f1:26:7f:b5:2c:20:99:4a:d2: 12:31:6c:2b:81:b5:d1:76:c3:11:1d:9f:c6:04:49: 19:25:8e:dd:34:5d:be:3d:f2:fa:2b:fe:d3:56:61: a2:9c:62:ef:62:d8:23:06:52:4c:8f:06:66:65:9b: e2:49:ca:69:c2:8f:9a:40:fd:77:b7:08:a0:de:11: b4:68:63:52:25:4f:77:af:83:e0:9a:f9:b4:df:1d: cc:62:9f:32:0d:13:70:39:71:f5:5d:21:6b:4a:46: 5e:32:70:4e:f3:d6:66:37:12:51:09:13:b9:96:52: 15:71:0c:68:e2:59:45:a5:37:75:fe:38:54:f7:31: 81:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:A4:A6:1B:A7:3D:7A:63:23:2E:79:8D:29:CB:0D:39:5E:46:CD X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4b:a8:f5:0d:84:86:6d:9a:a2:23:05:51:e3:8f:61:58:33: 58:f4:b9:e9:8d:56:03:aa:f3:ba:ba:ff:c0:62:f8:e2:4d:f4: 5a:5f:66:07:3c:ac:a5:0a:fa:ae:80:67:7e:fc:02:f8:ba:a3: 82:82:6a:9f:cb:41:c3:b0:f7:5e:30:ab:13:d6:10:e4:15:6b: 50:a4:8b:8b:cf:c6:e3:b6:d6:3c:22:b9:b7:02:40:1c:38:6e: bc:29:c3:64:88:a8:23:2d:73:8d:d8:46:d1:60:3b:a2:cd:bb: c3:54:88:72:7e:29:d9:17:31:0f:54:24:53:31:2d:6d:6a:76: 5f:fd:20:34:bf:a0:e8:4f:78:14:f4:9b:39:ab:cf:9b:d2:7c: be:28:39:93:b4:a0:c7:b0:db:0b:c1:c2:fb:02:ac:b7:f5:77: c4:fe:33:e3:2d:ec:c7:cc:fb:60:17:6d:71:74:87:69:46:56: cf:6c:1f:16:ac:43:c4:a2:0d:8c:59:07:ba:ae:e7:ed:2f:b6: bd:8f:64:b5:29:d7:f5:8a:41:ee:eb:0a:ec:6d:25:b2:99:d0: 21:c2:43:cf:5f:13:35:70:ca:7d:0d:5c:c7:9f:7d:3b:fc:c7: 7b:36:93:bf:cf:dd:47:97:18:31:d9:cc:b5:bc:56:f6:dc:10: 95:6a:f0:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0VS67GJCeXFlB3Ugliwg46LWewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTEwMTkyMTA1MDZaFw0yNTEwMjIyMjMwMDZaMDMxMTAvBgNV BAMTKDgxMDZBNEE2MUJBNzNEN0E2MzIzMkU3OThEMjlDQjBEMzk1RTQ2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZB7ksViywKbuUdv+BKrbvpt/ q0og1lzq7F6R7uY9VNZtqBjLX+6Ex392KrYEpnwXJRcAyVKPDrI8yyKcdcxbTJ3O YHCXXPLiNGhPTqlXZX7gXMIPPF5Hvr4M6unfMuG80xJ1JeeFU134NoTd78g1ssFH s7tSd7pBQbgiefEmf7UsIJlK0hIxbCuBtdF2wxEdn8YESRkljt00Xb498vor/tNW YaKcYu9i2CMGUkyPBmZlm+JJymnCj5pA/Xe3CKDeEbRoY1IlT3evg+Ca+bTfHcxi nzINE3A5cfVdIWtKRl4ycE7z1mY3ElEJE7mWUhVxDGjiWUWlN3X+OFT3MYGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQakphunPXpjIy55jSnLDTleRs0wHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtLqPUNhIZtmqIjBVHjj2FYM1j0uemNVgOq 87q6/8Bi+OJN9FpfZgc8rKUK+q6AZ378Avi6o4KCap/LQcOw914wqxPWEOQVa1Ck i4vPxuO21jwiubcCQBw4brwpw2SIqCMtc43YRtFgO6LNu8NUiHJ+KdkXMQ9UJFMx LW1qdl/9IDS/oOhPeBT0mzmrz5vSfL4oOZO0oMew2wvBwvsCrLf1d8T+M+Mt7MfM +2AXbXF0h2lGVs9sHxasQ8SiDYxZB7qu5+0vtr2PZLUp1/WKQe7rCuxtJbKZ0CHC Q89fEzVwyn0NXMeffTv8x3s2k7/P3UeXGDHZzLW8VvbcEJVq8AM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:27:37 2025 by rpki-client