$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: nYS+zyC8RFmU727FvW1dADFkAADpayZrlZn8420eVmw= Subject key identifier: 07:BC:8B:AA:61:A6:EC:53:CD:FB:46:F3:70:ED:F9:3B:1F:20:75:80 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 04FE534E81FA96980501C297E752055899688D1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 0243 Signing time: Tue 05 Aug 2025 08:20:46 +0000 Manifest this update: Tue 05 Aug 2025 08:15:46 +0000 Manifest next update: Fri 08 Aug 2025 11:13:46 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: FC4Kq9zOOzZIfZGFkkCjDwUwMHroGcdHj1IzSJR4gCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fe:53:4e:81:fa:96:98:05:01:c2:97:e7:52:05:58:99:68:8d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Aug 5 08:15:46 2025 GMT Not After : Aug 8 11:13:46 2025 GMT Subject: CN=07BC8BAA61A6EC53CDFB46F370EDF93B1F207580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:a6:68:d9:a3:46:2c:9c:63:74:1e:f7:f8: 0b:8f:73:05:b6:e2:92:69:b4:17:61:fb:e6:e8:cf: 10:c5:9d:03:38:ea:5f:8d:23:8d:64:bc:22:00:6c: 61:77:ab:d7:d6:66:d4:a0:04:8a:82:0c:d1:f7:ee: ea:a8:1d:80:7f:0b:14:59:c3:34:7b:d8:81:ba:c4: dd:33:45:56:ac:5b:d1:a9:ea:ea:ce:a0:48:fb:73: c2:cd:33:31:3b:a2:c4:b3:e5:dc:af:71:88:09:14: 6a:54:77:b0:a6:2a:f3:54:7b:37:cd:50:05:19:78: 80:42:d0:b1:4d:18:45:62:07:a4:36:0c:88:cb:e4: 4e:95:33:8f:a7:0e:32:d5:a5:63:22:51:a4:2d:05: 26:0d:4c:89:db:67:cb:ea:42:45:f1:cf:72:b2:25: c6:70:a9:55:5a:3c:d0:09:62:9d:ba:64:ea:37:34: 20:c7:ea:d7:92:4f:86:4a:88:18:2d:fa:57:0c:41: 22:06:60:68:43:2a:c2:2b:2d:03:05:ba:be:41:83: af:b9:0d:48:11:6e:58:23:cd:2e:d6:76:81:45:05: 53:54:b3:1e:23:2c:d8:52:e1:f8:bc:6f:83:5e:87: b9:a8:c8:cd:db:a8:9d:66:bb:42:cb:8c:26:7f:25: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:8B:AA:61:A6:EC:53:CD:FB:46:F3:70:ED:F9:3B:1F:20:75:80 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2e:a6:88:e8:b2:1f:b1:79:4d:3c:85:2d:3c:cb:fe:90:8b: 22:f8:25:b5:27:b5:fe:12:90:6d:01:2e:0b:56:8b:fa:3e:54: aa:4a:10:56:d3:da:5c:37:68:c7:8d:b8:57:17:3d:69:84:53: 06:7e:67:e3:de:69:89:1b:ad:28:17:4d:4c:52:04:99:9e:53: 78:85:bc:5d:a1:06:4d:e2:38:10:e1:d9:02:57:16:c1:c4:9a: ee:23:03:e9:be:5d:f1:a5:cc:80:66:56:bf:96:47:d6:49:f0: b5:06:26:b9:c0:0f:47:52:5b:c8:11:ec:07:8b:14:bf:06:85: 94:00:44:02:66:fe:13:19:80:8f:06:74:97:4e:cb:03:98:ab: 62:b1:7d:e9:d6:0c:a1:fd:3e:01:fb:f1:90:94:d1:a8:f1:7a: 5c:1c:86:67:d0:f6:57:c7:b4:0f:43:75:b0:3b:5f:e7:e1:36: 35:fd:d9:25:5f:26:0a:fe:2d:1a:37:95:0c:f2:d8:75:9a:03: 0d:46:f1:0d:c3:cc:f9:4a:0f:3f:1d:d2:0b:a7:bf:6e:11:cd: 3e:d6:99:2d:61:49:09:1a:e1:e6:f2:d1:ec:4e:bf:60:14:07: fa:b2:88:70:03:e1:b7:22:59:ed:a8:ef:81:6e:2e:8f:38:6e: de:22:d9:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBP5TToH6lpgFAcKX51IFWJlojR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTA4MDUwODE1NDZaFw0yNTA4MDgxMTEzNDZaMDMxMTAvBgNV BAMTKDA3QkM4QkFBNjFBNkVDNTNDREZCNDZGMzcwRURGOTNCMUYyMDc1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveaZo2aNGLJxjdB73+AuPcwW2 4pJptBdh++bozxDFnQM46l+NI41kvCIAbGF3q9fWZtSgBIqCDNH37uqoHYB/CxRZ wzR72IG6xN0zRVasW9Gp6urOoEj7c8LNMzE7osSz5dyvcYgJFGpUd7CmKvNUezfN UAUZeIBC0LFNGEViB6Q2DIjL5E6VM4+nDjLVpWMiUaQtBSYNTInbZ8vqQkXxz3Ky JcZwqVVaPNAJYp26ZOo3NCDH6teST4ZKiBgt+lcMQSIGYGhDKsIrLQMFur5Bg6+5 DUgRblgjzS7WdoFFBVNUsx4jLNhS4fi8b4Neh7moyM3bqJ1mu0LLjCZ/JRfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7yLqmGm7FPN+0bzcO35Ox8gdYAwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0upojosh+xeU08hS08y/6QiyL4JbUntf4S kG0BLgtWi/o+VKpKEFbT2lw3aMeNuFcXPWmEUwZ+Z+PeaYkbrSgXTUxSBJmeU3iF vF2hBk3iOBDh2QJXFsHEmu4jA+m+XfGlzIBmVr+WR9ZJ8LUGJrnAD0dSW8gR7AeL FL8GhZQARAJm/hMZgI8GdJdOywOYq2KxfenWDKH9PgH78ZCU0ajxelwchmfQ9lfH tA9DdbA7X+fhNjX92SVfJgr+LRo3lQzy2HWaAw1G8Q3DzPlKDz8d0gunv24RzT7W mS1hSQka4eby0exOv2AUB/qyiHAD4bciWe2o74FuLo84bt4i2UQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:56 2025 by rpki-client