$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: vTx7E226yNKgLYW9mUy0gNkKY9zebkzTRl72LGvHVSA= Subject key identifier: 1A:5D:01:26:C7:43:7A:DF:72:0B:BE:32:A5:3B:BE:92:93:2E:DD:24 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 22C8B1182B65A54F6AFCF8DDED0DE5DD5291A578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 026A Signing time: Sun 02 Nov 2025 20:40:47 +0000 Manifest this update: Sun 02 Nov 2025 20:35:47 +0000 Manifest next update: Thu 06 Nov 2025 07:33:47 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: TVWgSAr8m7yigDLD971gvkh9xQkHcY67WwtY17BOwwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c8:b1:18:2b:65:a5:4f:6a:fc:f8:dd:ed:0d:e5:dd:52:91:a5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Nov 2 20:35:47 2025 GMT Not After : Nov 6 07:33:47 2025 GMT Subject: CN=1A5D0126C7437ADF720BBE32A53BBE92932EDD24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:e6:f8:f7:d9:0f:16:6f:48:3c:b4:60:e1: 50:a4:5b:4a:fb:94:59:0f:02:16:71:4a:06:7e:c4: 5f:8e:74:90:ce:85:9c:9f:43:0f:87:9e:90:8c:1b: 0e:50:1c:0a:c6:08:05:a4:3c:bb:0f:01:70:a6:0d: 81:a0:d3:e8:8a:4e:07:98:9a:9b:56:29:53:13:1f: 7b:05:6c:72:d7:ce:bf:97:4b:a2:4d:2d:e3:60:e6: 59:ba:c1:ba:9f:ac:c5:56:c0:f6:a8:b6:f7:5e:b4: 46:2e:3c:70:f7:38:8f:98:9f:8d:0f:1f:3b:e0:cc: 4c:de:c0:a1:60:43:0e:4f:5d:73:a5:e2:c4:22:fb: de:6a:28:9e:ac:96:c7:a4:b1:0a:db:24:9d:47:c0: c6:bc:54:2e:88:aa:4d:c8:24:b6:b1:33:6d:28:6d: 82:e5:90:9c:94:97:ba:9b:0b:c7:63:59:9b:b8:12: ed:7e:07:ca:ca:37:c5:51:c8:25:eb:ab:62:a8:e2: 95:b2:74:0e:3c:81:ff:e2:80:93:6d:a0:8b:78:bf: 8b:e5:69:9a:ee:52:19:81:69:4c:1a:6c:1d:1a:03: 26:64:e0:55:47:32:ab:3a:28:f4:a7:78:46:54:5c: 3f:50:eb:55:fa:79:73:71:65:07:6e:c9:d0:5f:33: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5D:01:26:C7:43:7A:DF:72:0B:BE:32:A5:3B:BE:92:93:2E:DD:24 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:47:c2:ac:13:f0:15:0e:11:03:01:c3:10:13:ed:cc:f4: 86:79:5d:e1:d4:74:53:6f:68:cb:8a:59:6f:f7:0a:bf:e3:3a: b4:b5:cb:86:c5:eb:59:75:b6:ae:4e:81:7f:0c:85:db:86:df: 31:62:eb:82:d5:2a:8f:3b:81:8a:10:71:2f:2c:2e:ca:07:a6: 37:cc:4f:08:b5:08:77:de:43:92:42:39:eb:4b:22:4d:56:2d: 3e:1c:3f:94:e2:ad:38:61:1d:a1:cd:4b:17:0e:57:65:79:b1: 71:06:d0:ae:e6:37:45:c8:8f:79:7d:f2:e0:80:4d:59:4f:ed: 9d:ba:d6:91:c2:8a:56:1f:1f:1e:63:c3:8c:48:38:9d:03:3e: b5:96:25:f6:7e:7e:4b:ab:c4:84:67:a4:4a:28:97:58:d5:34: 62:aa:b1:11:9e:93:96:02:69:97:5a:6c:3c:c5:07:45:dc:db: c9:6a:a7:cc:58:7c:e2:21:cf:af:96:c1:b7:db:f4:9e:33:a6: eb:e4:8d:27:34:70:6b:36:ed:b7:b1:c6:9f:c2:a3:c3:28:d3: 3e:a0:95:ab:4c:1a:0c:96:ee:e5:35:f5:3b:a0:45:bd:7b:4e: 1d:39:03:75:08:ed:9c:e6:66:2a:5c:3d:6e:d6:64:5e:f0:34: 28:9a:62:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsixGCtlpU9q/Pjd7Q3l3VKRpXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTExMDIyMDM1NDdaFw0yNTExMDYwNzMzNDdaMDMxMTAvBgNV BAMTKDFBNUQwMTI2Qzc0MzdBREY3MjBCQkUzMkE1M0JCRTkyOTMyRUREMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/S+b499kPFm9IPLRg4VCkW0r7 lFkPAhZxSgZ+xF+OdJDOhZyfQw+HnpCMGw5QHArGCAWkPLsPAXCmDYGg0+iKTgeY mptWKVMTH3sFbHLXzr+XS6JNLeNg5lm6wbqfrMVWwPaotvdetEYuPHD3OI+Yn40P HzvgzEzewKFgQw5PXXOl4sQi+95qKJ6slseksQrbJJ1HwMa8VC6Iqk3IJLaxM20o bYLlkJyUl7qbC8djWZu4Eu1+B8rKN8VRyCXrq2Ko4pWydA48gf/igJNtoIt4v4vl aZruUhmBaUwabB0aAyZk4FVHMqs6KPSneEZUXD9Q61X6eXNxZQduydBfM2r9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGl0BJsdDet9yC74ypTu+kpMu3SQwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWER8KsE/AVDhEDAcMQE+3M9IZ5XeHUdFNv aMuKWW/3Cr/jOrS1y4bF61l1tq5OgX8MhduG3zFi64LVKo87gYoQcS8sLsoHpjfM Twi1CHfeQ5JCOetLIk1WLT4cP5TirThhHaHNSxcOV2V5sXEG0K7mN0XIj3l98uCA TVlP7Z261pHCilYfHx5jw4xIOJ0DPrWWJfZ+fkurxIRnpEool1jVNGKqsRGek5YC aZdabDzFB0Xc28lqp8xYfOIhz6+Wwbfb9J4zpuvkjSc0cGs27bexxp/Co8Mo0z6g latMGgyW7uU19TugRb17Th05A3UI7ZzmZipcPW7WZF7wNCiaYtc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:41 2025 by rpki-client