$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: IbMkUfEmsvnDPfAGxpYNNHmmhIuGruFAdjathl2oORE= Subject key identifier: DA:91:2B:C0:99:19:5C:22:D6:C8:0D:6C:2A:46:6B:23:A9:87:AB:D8 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 50E8CC5371BAEE527882E3D96F38110A44037B7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 04B0 Signing time: Mon 16 Jun 2025 20:00:06 +0000 Manifest this update: Mon 16 Jun 2025 19:55:06 +0000 Manifest next update: Fri 20 Jun 2025 06:33:06 +0000 Files and hashes: 1: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=) 2: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: XGyX1fDJCJeIJhfCIkQQCr6OHIb1I8YyoWexjVgFMdA=) 3: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: icap7yTl2LrETPV3mKGxiidvb/X+pRUoU8HgtYvHXtA=) 4: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: ZgDGXCsSyzDrJGQuDM1q2yAFTUBJsm9YLq4ntv3/5wQ=) 5: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: dK7eIqeYPbIOw6nXsyQPzgXcTaUh+WVDmTdqwqkNOyk=) 6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: GGTZ8ZWEqHxChvcJE8MjjNJMuF3dWYhHR2I8858Cz0U=) 7: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=) 8: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 9: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e8:cc:53:71:ba:ee:52:78:82:e3:d9:6f:38:11:0a:44:03:7b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Jun 16 19:55:06 2025 GMT Not After : Jun 20 06:33:06 2025 GMT Subject: CN=DA912BC099195C22D6C80D6C2A466B23A987ABD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:2f:57:b2:db:46:11:4d:0a:82:08:b6:4a: 06:b2:cf:d7:0d:fb:23:fd:22:f5:4a:c7:bd:66:70: e9:9c:a7:aa:63:b1:4c:ae:5f:20:39:8f:4f:7e:9c: 31:19:ab:6a:02:79:46:f6:f4:b8:7c:29:84:ca:62: 79:30:4f:5a:7e:03:6d:b1:89:21:39:7d:16:c7:aa: a2:4c:99:27:c8:5c:9e:b2:5f:e5:b6:95:cd:d4:89: 71:ed:b9:c6:78:bf:32:52:fd:c9:55:81:5e:5e:e3: 32:79:a3:7f:ba:dc:00:29:4f:0f:ec:a5:cf:fb:4a: b5:81:b3:d8:5a:e2:49:56:3c:27:59:64:69:ea:81: e9:2b:73:26:76:da:60:fe:d3:01:43:4c:8b:4e:53: f9:8e:d4:a4:06:8d:3d:81:ee:94:4f:3e:82:f6:a7: ce:9e:a8:28:dd:1c:13:71:98:9e:78:b8:6b:17:52: bf:cd:34:64:07:54:ad:07:41:ea:1c:db:d7:51:72: d3:44:39:97:a8:7b:43:39:e3:e5:7c:54:b9:91:3e: e4:c4:3e:b0:6e:23:9b:56:6d:46:41:d8:ce:97:46: 0d:4e:75:f6:bd:39:31:32:c6:71:10:30:6a:f3:fe: 14:91:35:9a:fe:cb:ee:c8:a8:3d:be:27:6d:c1:9f: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:2B:C0:99:19:5C:22:D6:C8:0D:6C:2A:46:6B:23:A9:87:AB:D8 X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:16:72:8d:ad:15:ed:75:47:60:33:e0:b5:0a:c9:4c:be:5f: 4d:1e:42:51:ed:26:9c:67:a2:47:fc:c3:0e:2a:1a:72:1d:23: 57:8a:ee:92:80:68:bb:18:0f:2f:d1:5b:2d:03:8e:5b:59:ed: 70:f9:a1:89:19:28:8d:0c:16:93:4d:99:bf:1a:ee:2f:39:82: b2:16:5b:7f:64:92:69:50:e5:5d:28:60:1d:76:3e:7b:3a:5d: f3:bb:66:9f:37:ec:61:63:4d:8f:1a:23:c9:2c:55:5d:74:7b: f2:aa:b1:a2:58:a6:46:f1:67:26:8f:f2:4e:db:bb:b9:d6:d7: 45:cd:e8:cb:12:31:eb:63:c5:c7:c2:cc:90:6d:8d:50:6e:59: b4:7e:6b:73:cc:21:0c:f9:42:51:b2:78:1c:07:e5:c6:39:28: 80:1c:23:eb:ed:08:24:e4:db:78:c7:84:80:5f:20:f8:3c:c9: fb:bc:7a:30:6b:d1:de:a5:67:84:a8:3c:c3:15:60:29:76:94: 32:93:5b:04:ce:ca:31:6d:81:1b:92:d5:a8:97:06:55:59:ab: c2:7b:16:cc:e9:16:c1:92:3b:59:33:37:26:f1:45:54:0e:bb: 86:28:82:c9:14:26:f8:09:66:39:0f:a8:4f:60:a9:a0:30:e5: 42:45:01:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOjMU3G67lJ4guPZbzgRCkQDe3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTA2MTYxOTU1MDZaFw0yNTA2MjAwNjMzMDZaMDMxMTAvBgNV BAMTKERBOTEyQkMwOTkxOTVDMjJENkM4MEQ2QzJBNDY2QjIzQTk4N0FCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLi9XsttGEU0Kggi2Sgayz9cN +yP9IvVKx71mcOmcp6pjsUyuXyA5j09+nDEZq2oCeUb29Lh8KYTKYnkwT1p+A22x iSE5fRbHqqJMmSfIXJ6yX+W2lc3UiXHtucZ4vzJS/clVgV5e4zJ5o3+63AApTw/s pc/7SrWBs9ha4klWPCdZZGnqgekrcyZ22mD+0wFDTItOU/mO1KQGjT2B7pRPPoL2 p86eqCjdHBNxmJ54uGsXUr/NNGQHVK0HQeoc29dRctNEOZeoe0M54+V8VLmRPuTE PrBuI5tWbUZB2M6XRg1Odfa9OTEyxnEQMGrz/hSRNZr+y+7IqD2+J23Bn73PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pErwJkZXCLWyA1sKkZrI6mHq9gwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgWco2tFe11R2Az4LUKyUy+X00eQlHtJpxn okf8ww4qGnIdI1eK7pKAaLsYDy/RWy0DjltZ7XD5oYkZKI0MFpNNmb8a7i85grIW W39kkmlQ5V0oYB12Pns6XfO7Zp837GFjTY8aI8ksVV10e/KqsaJYpkbxZyaP8k7b u7nW10XN6MsSMetjxcfCzJBtjVBuWbR+a3PMIQz5QlGyeBwH5cY5KIAcI+vtCCTk 23jHhIBfIPg8yfu8ejBr0d6lZ4SoPMMVYCl2lDKTWwTOyjFtgRuS1aiXBlVZq8J7 FszpFsGSO1kzNybxRVQOu4YogskUJvgJZjkPqE9gqaAw5UJFAcE= -----END CERTIFICATE-----Generated at Tue Jun 17 01:37:48 2025 by rpki-client