$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft File: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft (raw, json) Hash identifier: Y+Cs2s4Js+IlMMLxTBEB9rnk4qnTRnL5kaYOqn/a9XI= Subject key identifier: F6:F8:90:69:FC:96:E7:5F:A7:E6:75:73:E1:0F:1E:13:DE:85:DD:7C Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 2CE2A6F0962CFFB45F64A992B2EE9025C94434A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft Manifest number: 04C6 Signing time: Mon 04 Aug 2025 21:50:06 +0000 Manifest this update: Mon 04 Aug 2025 21:45:06 +0000 Manifest next update: Fri 08 Aug 2025 00:08:06 +0000 Files and hashes: 1: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY=) 2: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=) 3: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: D+6vTrccYMAaEtpPFmF4eGIXkEsVbJklCAIq8OIMyf0=) 4: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: XGyX1fDJCJeIJhfCIkQQCr6OHIb1I8YyoWexjVgFMdA=) 5: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: dK7eIqeYPbIOw6nXsyQPzgXcTaUh+WVDmTdqwqkNOyk=) 6: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: MnxsLBxnCm6F40OhhKQb/lu+z75TMPF3C+fnrBq75B0=) 7: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: YsPCY6UCv05oHfHFXQer5wdXjWe1w4PGTDeh2YhnWn4=) 8: 80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl (hash: I6AEoBeno1rA6/3vRlsi3YVNde/8mGCksGNCsN31ujg=) 9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: ZgDGXCsSyzDrJGQuDM1q2yAFTUBJsm9YLq4ntv3/5wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e2:a6:f0:96:2c:ff:b4:5f:64:a9:92:b2:ee:90:25:c9:44:34:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Aug 4 21:45:06 2025 GMT Not After : Aug 8 00:08:06 2025 GMT Subject: CN=F6F89069FC96E75FA7E67573E10F1E13DE85DD7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:70:0a:12:d0:52:04:8b:d8:b4:cb:5b:8d: 2e:ab:8a:b7:20:91:25:31:a4:01:a4:ba:ad:f3:93: f4:0a:9d:e5:97:00:3c:2c:c1:1d:23:74:d1:15:66: df:c8:8f:8f:54:3c:fa:41:63:f7:9c:70:48:90:26: 80:ce:eb:1c:94:7e:f2:b1:ed:01:0d:b2:a2:82:6d: 9e:85:d0:0e:b8:bd:a9:59:2c:6e:4d:38:7a:dc:58: 63:d5:fc:45:ef:5e:a4:61:53:bf:8d:6f:46:a1:95: 02:63:4f:40:2d:9e:1c:6c:ef:8d:03:23:f1:5f:21: 78:82:fb:0b:b1:58:75:fd:1a:6f:2d:53:0e:05:66: 74:55:e0:d8:1a:56:aa:d2:54:b4:c0:10:08:06:cd: 72:5d:cc:73:cd:c2:44:39:4b:22:fb:d5:34:da:c9: 1c:aa:98:66:d7:ac:ba:3b:cb:6e:9b:a1:9a:96:49: d2:b3:da:e7:01:15:1e:a6:3a:74:9a:c6:5f:25:78: 3c:6f:7e:bd:86:8e:23:5d:5f:67:f7:f7:b3:3e:4e: ca:ca:83:7f:a6:ef:41:30:82:34:03:d5:79:c1:7e: af:c0:bf:12:c9:fa:06:db:5d:e6:f6:49:22:b2:50: 30:51:31:62:61:b5:1e:0a:7c:a0:33:30:7c:6a:d5: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F8:90:69:FC:96:E7:5F:A7:E6:75:73:E1:0F:1E:13:DE:85:DD:7C X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:91:71:42:2b:ed:77:59:85:30:7d:5b:a5:8e:f8:30:e0:f6: e1:d3:59:df:14:66:86:97:51:d3:4b:f8:69:ba:dd:a9:12:fd: 3b:6b:a8:65:1e:f9:9d:4c:c9:f2:96:3e:bb:ae:99:87:1e:b5: 16:cc:90:f3:ba:e5:54:5c:5c:d1:e3:2d:d4:38:33:5c:62:aa: 54:0d:bf:d7:24:cb:7c:52:26:da:4b:9c:67:1a:57:f1:18:7d: e1:93:16:3d:98:22:f9:36:89:a3:47:98:6d:4b:db:47:c8:09: 28:07:4e:a5:86:c5:24:c6:e4:f7:38:a9:7b:31:f4:56:23:2d: 07:26:4c:35:54:3a:6a:9e:7f:1f:a4:d3:f0:32:45:dc:e9:8f: 27:d1:a1:c4:68:27:6d:24:28:c9:c8:fb:c3:15:b1:c3:67:1f: 8c:24:c4:c0:bd:4d:14:10:82:ef:d3:01:c0:0d:36:70:76:6b: cc:d4:92:58:11:51:b5:49:33:a1:94:c1:b6:39:da:24:4e:26: 6d:0d:7b:28:04:6d:8d:d2:95:32:a9:c9:85:5d:34:7d:81:47: 87:0b:40:d3:13:4d:c9:b4:71:5e:be:bf:eb:64:7f:57:bb:e6: 32:00:39:ce:91:75:3f:f7:13:83:38:b5:19:b5:a7:98:fc:e2: 40:3c:f2:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOKm8JYs/7RfZKmSsu6QJclENKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTA4MDQyMTQ1MDZaFw0yNTA4MDgwMDA4MDZaMDMxMTAvBgNV BAMTKEY2Rjg5MDY5RkM5NkU3NUZBN0U2NzU3M0UxMEYxRTEzREU4NUREN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+3AKEtBSBIvYtMtbjS6rircg kSUxpAGkuq3zk/QKneWXADwswR0jdNEVZt/Ij49UPPpBY/eccEiQJoDO6xyUfvKx 7QENsqKCbZ6F0A64valZLG5NOHrcWGPV/EXvXqRhU7+Nb0ahlQJjT0Atnhxs740D I/FfIXiC+wuxWHX9Gm8tUw4FZnRV4NgaVqrSVLTAEAgGzXJdzHPNwkQ5SyL71TTa yRyqmGbXrLo7y26boZqWSdKz2ucBFR6mOnSaxl8leDxvfr2GjiNdX2f397M+TsrK g3+m70EwgjQD1XnBfq/AvxLJ+gbbXeb2SSKyUDBRMWJhtR4KfKAzMHxq1aBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9viQafyW51+n5nVz4Q8eE96F3XwwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE ODI5Qjk0MTBFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6RcUIr7XdZhTB9W6WO+DDg9uHTWd8UZoaX UdNL+Gm63akS/TtrqGUe+Z1MyfKWPruumYcetRbMkPO65VRcXNHjLdQ4M1xiqlQN v9cky3xSJtpLnGcaV/EYfeGTFj2YIvk2iaNHmG1L20fICSgHTqWGxSTG5Pc4qXsx 9FYjLQcmTDVUOmqefx+k0/AyRdzpjyfRocRoJ20kKMnI+8MVscNnH4wkxMC9TRQQ gu/TAcANNnB2a8zUklgRUbVJM6GUwbY52iROJm0NeygEbY3SlTKpyYVdNH2BR4cL QNMTTcm0cV6+v+tkf1e75jIAOc6RdT/3E4M4tRm1p5j84kA88vI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:10 2025 by rpki-client