$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: wM18nKRbJ2NA2l2KTGpYcawnFRQt6Ked2vkar+M3YsU= Subject key identifier: 43:73:68:54:B6:51:6C:82:D5:33:98:D5:41:08:E5:62:86:CD:4A:E8 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 10107F69847770A506569661F5476362BF84CC8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0348 Signing time: Sat 01 Nov 2025 22:51:05 +0000 Manifest this update: Sat 01 Nov 2025 22:46:05 +0000 Manifest next update: Wed 05 Nov 2025 08:16:05 +0000 Files and hashes: 1: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) 2: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: +8QHzFSfFKYNgImKXa9CVH3aNeEv4Sw+hoitiulrL1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 08:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:10:7f:69:84:77:70:a5:06:56:96:61:f5:47:63:62:bf:84:cc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Nov 1 22:46:05 2025 GMT Not After : Nov 5 08:16:05 2025 GMT Subject: CN=43736854B6516C82D53398D54108E56286CD4AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:aa:85:d3:75:15:e4:22:0b:4b:51:f9:44: 66:ec:79:60:31:be:3a:3b:90:cc:b4:55:35:1f:e2: 61:fe:e7:4f:97:c3:fd:10:0d:8a:7d:3a:25:40:07: 80:1c:d9:b4:d5:9a:2f:a8:2c:1b:d0:24:2b:8d:a5: ed:6f:e6:b4:67:9f:bd:93:38:1d:94:da:63:43:d4: cc:20:05:75:cf:18:a7:3b:ac:e4:b4:03:50:78:4c: 9c:d8:59:6c:d9:00:30:c7:d4:93:89:b3:d6:5d:f5: 65:fb:aa:74:2b:03:51:a6:3c:e5:77:9d:40:bc:46: 9e:68:1b:9d:de:de:b1:c1:e3:88:84:c3:6a:ff:f9: b3:15:c7:68:57:42:11:32:2a:fd:1f:b7:f7:42:04: 9f:06:f1:82:f6:e5:6a:00:22:b1:69:2d:c9:08:33: f7:1c:5a:07:3a:68:eb:1c:df:c9:4b:3b:9a:de:9f: 17:db:b7:f3:40:f2:42:48:a8:d1:9c:4b:8c:99:08: 6e:11:82:86:dc:87:9c:50:a8:f9:ff:f4:2f:ca:fb: d3:6a:c9:ce:9a:ce:c8:78:7e:dc:f3:8c:0e:2d:93: 2e:1e:3d:e2:92:71:5f:44:08:b2:01:6b:10:70:a0: c5:dd:b0:35:21:5a:51:fe:5b:2a:b9:33:89:21:c6: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:73:68:54:B6:51:6C:82:D5:33:98:D5:41:08:E5:62:86:CD:4A:E8 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:86:b5:a4:c6:7c:00:2c:87:60:48:de:56:73:56:44:d0:a7: b3:5b:bd:46:f0:57:12:0e:1f:1d:0b:8b:88:37:13:fc:c9:21: e3:48:21:fb:b7:a3:6d:14:e3:f6:da:6f:8c:5d:98:b9:90:2c: 32:d1:2d:b2:00:31:9a:56:8e:5f:ae:d0:62:71:26:ed:28:bb: cd:a0:6c:86:9e:79:86:44:51:a2:ee:4a:3b:22:c7:06:58:38: b6:52:11:b7:5d:90:20:5a:bb:1b:08:99:1a:be:d0:68:0d:d1: af:fd:72:48:c6:67:31:28:2e:ca:9c:69:19:6e:5d:94:9c:12: cc:a7:96:ab:3c:a5:0e:2a:3b:62:a9:06:31:23:21:58:33:b9: e7:62:73:fd:a1:93:33:26:93:ae:05:bf:78:0c:d4:d7:af:59: a8:92:bf:1f:c0:3d:95:d2:45:0d:2d:67:ca:55:00:61:72:99: c3:95:7b:a6:80:30:b0:2b:9a:65:50:09:43:9a:69:5d:47:b2: 7c:d9:fb:31:3e:98:b2:60:87:4d:b8:2b:ee:c8:fe:82:f3:25: df:f1:e0:b6:ae:60:3e:06:74:54:7b:f2:8a:e2:4b:2e:31:da: 4f:52:5a:0a:b2:6b:11:c7:5d:6f:5f:41:91:55:95:b9:ea:52: 5c:56:79:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBB/aYR3cKUGVpZh9UdjYr+EzIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTExMDEyMjQ2MDVaFw0yNTExMDUwODE2MDVaMDMxMTAvBgNV BAMTKDQzNzM2ODU0QjY1MTZDODJENTMzOThENTQxMDhFNTYyODZDRDRBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3aqF03UV5CILS1H5RGbseWAx vjo7kMy0VTUf4mH+50+Xw/0QDYp9OiVAB4Ac2bTVmi+oLBvQJCuNpe1v5rRnn72T OB2U2mND1MwgBXXPGKc7rOS0A1B4TJzYWWzZADDH1JOJs9Zd9WX7qnQrA1GmPOV3 nUC8Rp5oG53e3rHB44iEw2r/+bMVx2hXQhEyKv0ft/dCBJ8G8YL25WoAIrFpLckI M/ccWgc6aOsc38lLO5renxfbt/NA8kJIqNGcS4yZCG4Rgobch5xQqPn/9C/K+9Nq yc6azsh4ftzzjA4tky4ePeKScV9ECLIBaxBwoMXdsDUhWlH+Wyq5M4khxthLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3NoVLZRbILVM5jVQQjlYobNSugwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKGtaTGfAAsh2BI3lZzVkTQp7NbvUbwVxIO Hx0Li4g3E/zJIeNIIfu3o20U4/bab4xdmLmQLDLRLbIAMZpWjl+u0GJxJu0ou82g bIaeeYZEUaLuSjsixwZYOLZSEbddkCBauxsImRq+0GgN0a/9ckjGZzEoLsqcaRlu XZScEsynlqs8pQ4qO2KpBjEjIVgzuedic/2hkzMmk64Fv3gM1NevWaiSvx/APZXS RQ0tZ8pVAGFymcOVe6aAMLArmmVQCUOaaV1HsnzZ+zE+mLJgh024K+7I/oLzJd/x 4LauYD4GdFR78oriSy4x2k9SWgqyaxHHXW9fQZFVlbnqUlxWeWM= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:33 2025 by rpki-client