$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft File: 802B50E70791398C3EA43DDCECAA739EA01A638B.mft (raw, json) Hash identifier: o46smGwhNe9Wowob0pdvghvy3MoicdYoGUuhJjI+9MU= Subject key identifier: CB:88:70:69:D1:B6:32:CB:08:34:71:DF:A5:0E:EB:D4:79:A7:7D:78 Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B Certificate serial: 6B1734B5C780C46BAF5E4D7283B94B7C3D900847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft Manifest number: 39 Signing time: Tue 04 Nov 2025 04:31:44 +0000 Manifest this update: Tue 04 Nov 2025 04:26:44 +0000 Manifest next update: Fri 07 Nov 2025 11:44:44 +0000 Files and hashes: 1: 802B50E70791398C3EA43DDCECAA739EA01A638B.crl (hash: V4KC944T/y7vmlfBjZXif7GWvv80rfZPksbELJSASeU=) 2: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=) 3: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:17:34:b5:c7:80:c4:6b:af:5e:4d:72:83:b9:4b:7c:3d:90:08:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B Validity Not Before: Nov 4 04:26:44 2025 GMT Not After : Nov 7 11:44:44 2025 GMT Subject: CN=CB887069D1B632CB083471DFA50EEBD479A77D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:72:f6:69:be:d2:7b:58:3f:30:86:67:cc: 12:32:86:01:77:5a:fc:0b:96:d7:6e:86:d8:8a:6e: e6:65:4b:ec:40:6f:a2:04:a7:62:7c:47:f6:f7:0e: 34:83:6e:09:51:6f:6f:84:d5:83:f3:74:5c:b9:da: b7:28:8b:f5:c9:30:5d:ea:00:57:ca:d3:51:cc:41: ad:a5:2f:a6:3d:75:1d:fe:f2:fa:8b:7d:64:58:3d: 1e:24:86:e0:66:8a:b7:2a:bc:66:81:21:d9:cd:7f: d1:0f:75:5f:56:33:fe:cf:55:c2:a9:1a:51:63:67: 2d:9b:ff:ac:c2:4c:02:3a:0c:f9:88:37:92:8a:3a: 56:43:9d:b3:5a:5a:9e:c8:9e:e5:1b:02:f9:9f:ad: 33:6e:f7:3a:7f:9c:60:0b:d6:1b:c6:c3:3d:54:8c: 4a:f6:bd:62:bf:48:89:2f:d4:ee:69:98:65:f2:e8: 34:fb:46:40:72:cb:b2:bf:da:26:b9:86:56:be:99: ce:03:fb:5f:e0:f9:a9:6e:f9:41:12:e2:b1:43:6a: 5b:66:8e:20:df:ea:99:51:a9:07:a9:bc:5e:6d:15: 3e:4f:23:c4:4b:be:21:c6:c7:53:c9:04:76:46:00: fe:5e:6a:8d:ea:82:50:bf:06:81:be:bc:12:19:4b: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:70:69:D1:B6:32:CB:08:34:71:DF:A5:0E:EB:D4:79:A7:7D:78 X509v3 Authority Key Identifier: keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:55:03:27:11:19:3d:6f:40:7d:b4:0c:13:2c:c4:52:1c:fc: af:41:57:b6:36:7b:e7:cc:a0:e9:68:00:b0:06:6e:1f:09:93: d4:32:2a:73:c3:0b:a0:07:ed:f8:84:aa:37:de:93:35:e2:e5: 0e:74:45:76:6a:71:46:95:96:c7:c7:71:09:7b:9b:78:ad:a3: 19:78:15:11:7d:0a:bb:73:4b:6f:29:2b:bc:77:b2:93:b5:20: dd:dd:76:06:28:fe:bb:71:bd:c0:fe:d1:ce:97:9e:8e:19:4a: 0f:b3:da:21:77:b6:ed:51:f0:4f:c6:9f:41:be:25:11:73:6f: 9a:a8:9f:96:40:61:04:e6:34:22:ca:94:ac:b1:f7:4e:9a:f6: 26:9a:aa:08:46:c1:09:f8:fd:ea:e2:13:b1:13:d8:de:c6:a9: 7a:77:76:15:1c:1c:f0:21:25:b1:df:d1:f3:47:1d:d4:b3:f1: bf:2a:51:88:11:aa:a3:51:50:09:43:10:69:ee:a8:08:38:5f: 24:cf:3c:1b:32:b6:c8:02:ad:12:53:7c:25:0f:42:85:18:7e: 72:5b:51:e8:24:fc:15:f0:7c:e3:a1:11:67:a3:b4:a6:75:99: 3c:8b:72:18:59:f4:cd:76:69:13:89:65:90:f9:0b:da:2b:ab: 60:9f:e9:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxc0tceAxGuvXk1yg7lLfD2QCEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVB MDFBNjM4QjAeFw0yNTExMDQwNDI2NDRaFw0yNTExMDcxMTQ0NDRaMDMxMTAvBgNV BAMTKENCODg3MDY5RDFCNjMyQ0IwODM0NzFERkE1MEVFQkQ0NzlBNzdENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF3L2ab7Se1g/MIZnzBIyhgF3 WvwLltduhtiKbuZlS+xAb6IEp2J8R/b3DjSDbglRb2+E1YPzdFy52rcoi/XJMF3q AFfK01HMQa2lL6Y9dR3+8vqLfWRYPR4khuBmircqvGaBIdnNf9EPdV9WM/7PVcKp GlFjZy2b/6zCTAI6DPmIN5KKOlZDnbNaWp7InuUbAvmfrTNu9zp/nGAL1hvGwz1U jEr2vWK/SIkv1O5pmGXy6DT7RkByy7K/2ia5hla+mc4D+1/g+alu+UES4rFDaltm jiDf6plRqQepvF5tFT5PI8RLviHGx1PJBHZGAP5eao3qglC/BoG+vBIZS9g9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy4hwadG2MssINHHfpQ7r1HmnfXgwHwYDVR0j BBgwFoAUgCtQ5weROYw+pD3c7KpznqAaY4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTExZTZkNy01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC84MDJCNTBFNzA3 OTEzOThDM0VBNDNERENFQ0FBNzM5RUEwMUE2MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVBMDFB NjM4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWExMWU2ZDctNTdhMS00OTM2LWI3 YTctZGUwOTM1MjVjYjI3LzAvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTcz OUVBMDFBNjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1VAycRGT1vQH20DBMsxFIc/K9BV7Y2e+fM oOloALAGbh8Jk9QyKnPDC6AH7fiEqjfekzXi5Q50RXZqcUaVlsfHcQl7m3itoxl4 FRF9CrtzS28pK7x3spO1IN3ddgYo/rtxvcD+0c6Xno4ZSg+z2iF3tu1R8E/Gn0G+ JRFzb5qon5ZAYQTmNCLKlKyx906a9iaaqghGwQn4/eriE7ET2N7GqXp3dhUcHPAh JbHf0fNHHdSz8b8qUYgRqqNRUAlDEGnuqAg4XyTPPBsytsgCrRJTfCUPQoUYfnJb Uegk/BXwfOOhEWejtKZ1mTyLchhZ9M12aROJZZD5C9orq2Cf6RI= -----END CERTIFICATE-----Generated at Tue Nov 4 18:49:28 2025 by rpki-client