$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: cArPt7+RNOU4VfXNZUSpIwJs9/MF5gWNnmy3Zz1i4bU= Subject key identifier: 8B:C7:FA:47:BD:31:FB:DD:6C:93:61:82:09:CC:B3:8E:CC:C5:93:5A Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 17E19E359791D6292301E2504AE79F9F316E43F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 02A9 Signing time: Wed 25 Mar 2026 13:20:53 +0000 Manifest this update: Wed 25 Mar 2026 13:15:53 +0000 Manifest next update: Sat 28 Mar 2026 16:50:53 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: VfXEkcDUHahR3SqpWkDg5b+44Dz+E7VrEDM12/O66wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e1:9e:35:97:91:d6:29:23:01:e2:50:4a:e7:9f:9f:31:6e:43:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Mar 25 13:15:53 2026 GMT Not After : Mar 28 16:50:53 2026 GMT Subject: CN=8BC7FA47BD31FBDD6C93618209CCB38ECCC5935A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:ba:60:64:07:35:4c:22:d6:db:55:27:48: 1b:9f:ce:4a:dd:2c:c5:cf:2c:5b:13:d1:fd:6a:90: 8d:fa:26:de:c4:1f:24:58:98:75:83:ac:fd:67:c1: a9:8f:13:05:e3:e8:78:73:6e:2c:45:6e:fc:23:65: 35:2b:57:3f:dc:81:31:5a:77:40:4b:02:d8:38:6d: 8d:30:b5:5c:ec:a0:7a:12:62:af:d8:6d:6d:2b:37: 9b:91:98:6c:03:1e:19:15:95:c2:27:25:fe:5f:60: bc:34:73:0d:39:a1:1e:7f:51:14:53:e1:02:22:97: cd:2b:35:0f:ad:94:e3:23:ed:16:fb:78:6f:f9:ea: dd:5f:7a:63:16:00:bf:21:8b:4e:03:10:f4:81:b4: 1b:7f:3e:de:ff:b5:8c:4b:e6:63:1f:be:f0:5b:82: 3c:97:23:ad:85:c2:7c:88:12:06:99:df:d1:0f:95: e6:69:5e:a5:b8:2c:0c:d7:cd:87:49:20:62:3a:91: f4:a9:0a:ca:03:9e:73:1c:e4:de:3a:52:b2:1c:2f: 49:2a:d5:1b:ab:bb:34:a6:fe:8f:75:ef:c1:1f:84: 80:2b:9b:37:21:ff:a5:16:a5:dd:53:1e:7e:85:83: 31:45:15:9b:95:66:18:4f:90:fa:d4:e7:8c:0b:42: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C7:FA:47:BD:31:FB:DD:6C:93:61:82:09:CC:B3:8E:CC:C5:93:5A X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:87:55:1f:c7:46:f1:45:65:bd:18:50:19:7d:df:9c:ab:67: 6e:6b:57:bf:2b:12:54:03:94:5f:10:e2:d4:b4:93:0e:69:5b: e2:f0:82:30:b2:7c:dc:30:32:55:a4:81:47:04:b7:fb:32:e5: 16:94:c4:3e:56:13:ca:dc:96:48:49:78:5c:69:8d:80:3e:7f: 58:eb:51:1d:2a:ed:f4:3f:dd:e9:f7:44:59:dd:1b:cb:0f:32: ba:57:1e:d2:44:a4:1c:c9:4c:18:ee:6a:c6:39:21:86:45:1a: ef:ab:88:db:45:e3:38:54:ae:23:95:ec:6c:06:dc:00:e7:d9: 30:33:85:d1:67:ec:ab:5b:80:35:79:19:3c:ba:ff:3e:09:aa: d3:57:66:b1:03:0d:4d:b1:be:ea:7d:6e:03:8c:2d:c0:9c:3a: 3d:27:f9:c6:2a:be:b8:b3:05:0a:25:93:29:74:bf:ef:cd:39: 88:87:b7:22:2e:0d:da:fc:e0:cb:3f:48:d5:30:32:68:b8:5e: 6f:dc:00:22:a1:79:03:10:93:38:73:6a:5f:55:5a:5e:22:90: c7:82:e1:d2:12:25:25:16:41:6e:88:76:e9:8a:8c:a6:7d:72: 91:cd:ee:5a:ab:d7:19:48:aa:78:87:1f:de:d0:91:ae:27:f0: da:de:da:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+GeNZeR1ikjAeJQSuefnzFuQ/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNjAzMjUxMzE1NTNaFw0yNjAzMjgxNjUwNTNaMDMxMTAvBgNV BAMTKDhCQzdGQTQ3QkQzMUZCREQ2QzkzNjE4MjA5Q0NCMzhFQ0NDNTkzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqibpgZAc1TCLW21UnSBufzkrd LMXPLFsT0f1qkI36Jt7EHyRYmHWDrP1nwamPEwXj6HhzbixFbvwjZTUrVz/cgTFa d0BLAtg4bY0wtVzsoHoSYq/YbW0rN5uRmGwDHhkVlcInJf5fYLw0cw05oR5/URRT 4QIil80rNQ+tlOMj7Rb7eG/56t1femMWAL8hi04DEPSBtBt/Pt7/tYxL5mMfvvBb gjyXI62FwnyIEgaZ39EPleZpXqW4LAzXzYdJIGI6kfSpCsoDnnMc5N46UrIcL0kq 1RuruzSm/o9178EfhIArmzch/6UWpd1THn6FgzFFFZuVZhhPkPrU54wLQhN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8f6R70x+91sk2GCCcyzjszFk1owHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyHVR/HRvFFZb0YUBl935yrZ25rV78rElQD lF8Q4tS0kw5pW+LwgjCyfNwwMlWkgUcEt/sy5RaUxD5WE8rclkhJeFxpjYA+f1jr UR0q7fQ/3en3RFndG8sPMrpXHtJEpBzJTBjuasY5IYZFGu+riNtF4zhUriOV7GwG 3ADn2TAzhdFn7KtbgDV5GTy6/z4JqtNXZrEDDU2xvup9bgOMLcCcOj0n+cYqvriz BQolkyl0v+/NOYiHtyIuDdr84Ms/SNUwMmi4Xm/cACKheQMQkzhzal9VWl4ikMeC 4dISJSUWQW6IdumKjKZ9cpHN7lqr1xlIqniHH97Qka4n8Nre2rk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:10 2026 by rpki-client