$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft File: 802B50E70791398C3EA43DDCECAA739EA01A638B.mft (raw, json) Hash identifier: G+RyxQNyzhSJ4VVZ3b+u/m0SBfdNTMW8zhHMlaOHPfQ= Subject key identifier: 11:C3:A2:06:5A:18:ED:EE:19:13:20:F0:60:D9:0E:4E:50:25:CA:A3 Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B Certificate serial: 452B90D0589EAA0C61ECCAD4306343FDE8317B3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft Manifest number: 32 Signing time: Sun 19 Oct 2025 12:41:43 +0000 Manifest this update: Sun 19 Oct 2025 12:36:43 +0000 Manifest next update: Wed 22 Oct 2025 22:39:43 +0000 Files and hashes: 1: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ=) 2: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=) 3: 802B50E70791398C3EA43DDCECAA739EA01A638B.crl (hash: TSASfrEPTLWHauGHzv1CXvi92bLU9im3dD2/nZfV9Gg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2b:90:d0:58:9e:aa:0c:61:ec:ca:d4:30:63:43:fd:e8:31:7b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B Validity Not Before: Oct 19 12:36:43 2025 GMT Not After : Oct 22 22:39:43 2025 GMT Subject: CN=11C3A2065A18EDEE191320F060D90E4E5025CAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:86:70:d3:4f:4d:9e:36:55:2b:70:f6:3a: 72:bd:bb:f7:2b:64:3a:be:10:d0:0f:e3:f3:a0:ef: 94:3d:52:2e:47:92:20:6b:bb:9f:bb:2f:48:7d:32: 54:c3:56:d4:89:42:55:89:3e:8a:cc:1c:2d:a4:c9: fd:e3:fc:bd:ac:3f:5a:39:37:3e:23:1b:d5:bf:95: fd:80:df:1a:f7:00:ab:52:a0:67:3c:2b:51:34:dd: d9:4f:28:e5:3c:c5:4f:a9:34:52:0e:a3:27:af:5b: 78:15:5b:2b:e5:66:58:76:1a:45:bc:39:74:c7:73: 72:ff:9f:69:69:d6:9d:c9:3d:87:9a:cc:db:41:ba: 84:1e:37:65:7f:41:d3:55:99:8c:10:e9:43:67:b1: 9d:ec:6f:24:8d:5a:d9:d4:74:a4:b9:80:e3:cf:91: 76:88:a6:92:fe:aa:01:18:90:f3:4a:45:58:71:63: 5d:90:a6:a4:f5:e9:73:15:ab:71:73:d6:21:d8:93: 66:e1:bc:33:63:e5:35:df:d9:54:f2:58:3d:2b:21: 7c:29:6c:35:82:9e:1b:6c:fd:ea:d5:91:3a:fe:83: d8:08:df:ab:17:3d:58:66:84:c6:5d:68:eb:ca:dd: ca:45:bc:08:1f:c7:b9:4c:de:e6:da:a7:ba:e9:96: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C3:A2:06:5A:18:ED:EE:19:13:20:F0:60:D9:0E:4E:50:25:CA:A3 X509v3 Authority Key Identifier: keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:25:7b:c4:65:e4:db:61:40:78:26:80:5a:dc:28:c1:e9:71: 04:47:1c:d8:03:95:94:15:29:d5:01:34:62:e1:e5:5d:9b:22: 93:29:34:4b:af:f0:6d:0e:55:33:78:fe:93:24:34:4e:fa:26: 0e:6c:43:95:7c:c7:df:84:f1:2d:55:33:37:71:ac:de:66:b3: a9:0a:66:0d:7e:06:19:eb:f6:31:5f:42:cc:d4:b2:ac:67:25: eb:7d:99:94:84:49:6d:11:a6:c2:b9:13:1b:9e:56:b0:37:d6: 45:47:92:26:fa:83:28:41:e3:1c:3e:84:31:8d:81:2b:82:ad: dd:1d:f1:c7:02:dd:ca:ee:5a:ac:89:b1:fe:1f:28:22:f3:39: f0:22:89:70:7d:64:69:4b:88:ea:fb:05:ad:60:52:d6:09:10: cb:57:dd:3b:b6:79:af:57:f1:22:03:3b:53:77:e5:35:a2:1b: 18:63:c5:c7:ea:ad:33:b4:cd:7e:53:03:95:21:f9:29:41:60: 93:a6:47:5e:84:05:d1:21:c3:fb:2f:6a:85:2c:c4:42:40:f7: 24:f8:f6:38:81:46:73:bb:78:4f:76:83:a6:38:e7:fe:06:82: 11:c4:2f:5c:35:7d:9c:72:b0:f0:29:eb:65:7c:4f:32:31:28: 14:97:e8:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSuQ0Fieqgxh7MrUMGND/egxez4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVB MDFBNjM4QjAeFw0yNTEwMTkxMjM2NDNaFw0yNTEwMjIyMjM5NDNaMDMxMTAvBgNV BAMTKDExQzNBMjA2NUExOEVERUUxOTEzMjBGMDYwRDkwRTRFNTAyNUNBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtIZw009NnjZVK3D2OnK9u/cr ZDq+ENAP4/Og75Q9Ui5HkiBru5+7L0h9MlTDVtSJQlWJPorMHC2kyf3j/L2sP1o5 Nz4jG9W/lf2A3xr3AKtSoGc8K1E03dlPKOU8xU+pNFIOoyevW3gVWyvlZlh2GkW8 OXTHc3L/n2lp1p3JPYeazNtBuoQeN2V/QdNVmYwQ6UNnsZ3sbySNWtnUdKS5gOPP kXaIppL+qgEYkPNKRVhxY12QpqT16XMVq3Fz1iHYk2bhvDNj5TXf2VTyWD0rIXwp bDWCnhts/erVkTr+g9gI36sXPVhmhMZdaOvK3cpFvAgfx7lM3ubap7rplpXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEcOiBloY7e4ZEyDwYNkOTlAlyqMwHwYDVR0j BBgwFoAUgCtQ5weROYw+pD3c7KpznqAaY4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTExZTZkNy01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC84MDJCNTBFNzA3 OTEzOThDM0VBNDNERENFQ0FBNzM5RUEwMUE2MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVBMDFB NjM4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWExMWU2ZDctNTdhMS00OTM2LWI3 YTctZGUwOTM1MjVjYjI3LzAvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTcz OUVBMDFBNjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4le8Rl5NthQHgmgFrcKMHpcQRHHNgDlZQV KdUBNGLh5V2bIpMpNEuv8G0OVTN4/pMkNE76Jg5sQ5V8x9+E8S1VMzdxrN5ms6kK Zg1+Bhnr9jFfQszUsqxnJet9mZSESW0RpsK5ExueVrA31kVHkib6gyhB4xw+hDGN gSuCrd0d8ccC3cruWqyJsf4fKCLzOfAiiXB9ZGlLiOr7Ba1gUtYJEMtX3Tu2ea9X 8SIDO1N35TWiGxhjxcfqrTO0zX5TA5Uh+SlBYJOmR16EBdEhw/svaoUsxEJA9yT4 9jiBRnO7eE92g6Y45/4GghHEL1w1fZxysPAp62V8TzIxKBSX6MA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:46 2025 by rpki-client