$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: vPIgzHVIlHVj1bSXoy6JQVrGk5tKFHXQDl6w4PyHVE0= Subject key identifier: DF:57:36:39:D9:04:76:88:83:20:39:9D:13:5B:84:55:72:50:EE:54 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 24D41C7FD15A43360C4500BBAE144AFDFD72FEC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 0264 Signing time: Mon 20 Oct 2025 01:40:47 +0000 Manifest this update: Mon 20 Oct 2025 01:35:47 +0000 Manifest next update: Thu 23 Oct 2025 05:32:47 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: 7H/LfWm7pbfZ/hL8HLES4smOmvOcunFLV85tmvGAJzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d4:1c:7f:d1:5a:43:36:0c:45:00:bb:ae:14:4a:fd:fd:72:fe:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Oct 20 01:35:47 2025 GMT Not After : Oct 23 05:32:47 2025 GMT Subject: CN=DF573639D90476888320399D135B84557250EE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:2a:a7:8f:ad:74:a9:3c:cf:51:0b:fd:ca: 83:a4:67:b3:a0:c5:cb:fe:ee:48:e5:cc:de:ef:59: 56:70:63:15:99:24:1e:28:c8:62:5c:32:df:ee:de: 21:60:93:7a:a5:01:88:4f:90:96:09:ed:fc:26:0e: 83:fe:f2:99:b2:1b:2d:8d:e9:ab:39:46:c6:d0:d0: 87:3e:34:df:f3:45:8f:45:36:36:56:4d:a7:bf:75: 14:95:70:54:f5:1c:9d:24:be:2d:f1:1d:54:4b:8c: ce:f3:67:36:bc:4d:cb:d9:0f:25:76:46:e1:e8:70: 7c:35:03:63:65:1f:40:11:f9:f2:dd:b3:5c:2d:b7: aa:0a:fb:d2:fa:c3:e3:68:cf:47:a1:09:d5:0b:e9: c6:e6:3a:3c:23:e8:02:3e:f9:bc:a9:51:6a:83:eb: 01:87:90:e1:7a:8e:6f:99:98:01:4d:a5:2f:41:dc: 10:e7:01:be:46:da:56:b4:b6:4e:f6:a8:63:c3:36: cb:bc:f7:d4:b4:a5:a5:0f:86:f3:b7:00:51:0b:12: 05:02:3e:e5:34:6a:c5:7a:87:94:f2:93:48:27:da: 8b:41:68:a8:36:14:db:65:58:ca:67:0e:1c:b1:27: f1:ef:d0:b8:20:eb:ec:c2:a1:a8:fd:db:6b:4b:62: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:36:39:D9:04:76:88:83:20:39:9D:13:5B:84:55:72:50:EE:54 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:aa:78:eb:a9:0e:a5:0b:b4:d2:34:f4:0b:69:71:97:e1:e8: c5:41:cf:e1:ca:4b:53:c2:cf:52:f7:23:61:5f:0e:78:7f:3c: 8f:ce:b3:b9:5f:36:58:66:5b:dc:16:03:18:1b:a5:7f:f7:01: 60:fa:27:65:8e:3f:d0:bd:31:ac:0d:70:04:a6:ab:32:e9:47: 55:de:93:56:4d:21:d5:2b:83:96:35:f3:c9:6d:be:9d:0f:e6: 31:f0:af:e7:e5:39:8a:d4:6f:84:aa:4c:30:71:ec:e6:cf:fa: da:bf:4e:b4:58:d4:b5:61:0d:cb:6c:a9:c3:84:e9:e4:79:74: 5d:ee:a7:33:81:c5:3d:f0:fe:01:8e:d0:a7:95:8f:23:5d:1c: 3c:02:5c:90:a0:38:32:09:e7:ab:43:63:cd:53:75:13:86:b7: ea:ce:fa:83:f6:fb:6c:96:c8:d2:ec:bb:83:90:64:de:aa:f4: e8:27:46:a4:5b:ee:96:7e:72:81:1e:70:f5:6c:7f:c5:7c:a6: 54:58:71:6d:97:fc:55:70:da:e0:81:f7:b0:f7:61:6a:cb:c6: b0:d4:ae:ad:06:73:c7:19:cb:85:4b:11:0a:9f:13:b6:20:a0: 96:41:2e:7b:91:6d:0d:7a:4f:d0:4b:a0:04:1e:73:c3:62:72: a5:f6:24:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNQcf9FaQzYMRQC7rhRK/f1y/sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTEwMjAwMTM1NDdaFw0yNTEwMjMwNTMyNDdaMDMxMTAvBgNV BAMTKERGNTczNjM5RDkwNDc2ODg4MzIwMzk5RDEzNUI4NDU1NzI1MEVFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zSqnj610qTzPUQv9yoOkZ7Og xcv+7kjlzN7vWVZwYxWZJB4oyGJcMt/u3iFgk3qlAYhPkJYJ7fwmDoP+8pmyGy2N 6as5RsbQ0Ic+NN/zRY9FNjZWTae/dRSVcFT1HJ0kvi3xHVRLjM7zZza8TcvZDyV2 RuHocHw1A2NlH0AR+fLds1wtt6oK+9L6w+Noz0ehCdUL6cbmOjwj6AI++bypUWqD 6wGHkOF6jm+ZmAFNpS9B3BDnAb5G2la0tk72qGPDNsu899S0paUPhvO3AFELEgUC PuU0asV6h5Tyk0gn2otBaKg2FNtlWMpnDhyxJ/Hv0Lgg6+zCoaj922tLYql/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31c2OdkEdoiDIDmdE1uEVXJQ7lQwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiqeOupDqULtNI09AtpcZfh6MVBz+HKS1PC z1L3I2FfDnh/PI/Os7lfNlhmW9wWAxgbpX/3AWD6J2WOP9C9MawNcASmqzLpR1Xe k1ZNIdUrg5Y188ltvp0P5jHwr+flOYrUb4SqTDBx7ObP+tq/TrRY1LVhDctsqcOE 6eR5dF3upzOBxT3w/gGO0KeVjyNdHDwCXJCgODIJ56tDY81TdROGt+rO+oP2+2yW yNLsu4OQZN6q9OgnRqRb7pZ+coEecPVsf8V8plRYcW2X/FVw2uCB97D3YWrLxrDU rq0Gc8cZy4VLEQqfE7YgoJZBLnuRbQ16T9BLoAQec8NicqX2JIc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:38 2025 by rpki-client