$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: Oq9TkBIJ0S50XvjiapTxax3nvoA4D/2UxEL+R+BLSjI= Subject key identifier: A8:CD:44:34:1B:22:9A:D6:0D:27:9D:C7:F4:A4:79:54:65:2D:61:34 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 645926A607DF8DB32809BB4A39CA8692F91D5DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 022D Signing time: Sun 15 Jun 2025 15:40:45 +0000 Manifest this update: Sun 15 Jun 2025 15:35:45 +0000 Manifest next update: Thu 19 Jun 2025 01:50:45 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: oTZL6OtdzwNPVkPi5PzDacZp2RozdPMKNriumdGKENY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:59:26:a6:07:df:8d:b3:28:09:bb:4a:39:ca:86:92:f9:1d:5d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Jun 15 15:35:45 2025 GMT Not After : Jun 19 01:50:45 2025 GMT Subject: CN=A8CD44341B229AD60D279DC7F4A47954652D6134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:15:b6:20:be:88:8e:6a:eb:c7:b6:4a:0b: ae:4d:a9:f1:b4:d5:c2:da:4b:33:d2:fa:9d:e0:6c: 30:e8:69:5e:25:a1:b7:55:09:ab:f6:5c:1f:47:a2: 61:61:fe:16:5c:e6:0d:09:49:48:f3:e5:a1:0c:40: 4f:b8:bc:76:b9:08:44:f6:4e:cd:99:a9:83:da:6f: 7b:95:ce:e8:f2:62:35:91:c7:94:a5:22:8b:c2:33: 33:33:d2:ee:04:1d:e9:1f:1a:f8:fb:83:8c:24:55: 00:6c:5c:c5:3b:b2:7e:93:fd:7d:bc:6e:b1:b2:9c: 33:10:23:db:7f:6a:be:fa:7e:68:2d:39:69:79:0c: 18:d4:51:fd:85:d7:9e:b9:05:0d:6d:30:c9:8b:82: 73:fb:90:8a:71:8e:a2:bc:4f:ba:77:15:6c:26:7c: d7:94:1c:33:eb:2d:de:fa:73:ce:d4:ba:3f:67:04: 0d:8d:f3:b7:2c:bb:65:2b:23:8a:f0:70:86:b2:7a: 3e:9c:a9:ae:f4:3e:5a:d1:7b:e1:62:dc:9e:fd:55: 8e:6d:95:d1:a8:f4:1b:f1:e0:20:f5:11:01:5f:8b: 45:8a:ea:7d:5e:21:ae:50:4a:3f:e5:59:6a:a1:ad: 14:69:07:62:b8:ce:9c:b9:f2:8a:01:f7:0a:a4:31: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CD:44:34:1B:22:9A:D6:0D:27:9D:C7:F4:A4:79:54:65:2D:61:34 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:03:50:a6:9b:47:f7:67:68:52:69:9b:0a:65:7c:7c:2d:63: 56:2d:81:fe:3b:74:80:41:9b:bd:a5:f3:d6:73:75:cc:83:e0: 0e:44:fe:e7:03:82:11:e4:a1:4a:44:1f:07:98:f1:2b:6f:db: 85:24:76:9e:a8:f4:9c:6c:e9:6f:f2:a1:a0:a9:57:a3:36:7a: d4:57:db:80:81:a1:b4:26:38:b8:2c:7a:16:71:99:79:e4:e3: f0:cc:38:39:c7:83:b4:65:e1:ce:54:df:54:e2:c8:99:82:dd: 31:df:d2:04:eb:06:da:1a:8f:82:e9:da:76:d4:41:16:2e:7f: 23:69:28:ba:1f:f0:6f:5b:8e:57:13:a4:a6:d5:ac:66:8b:e4: ad:fb:c6:1d:d6:b5:28:19:35:7d:93:60:e5:f6:e6:f8:d5:5b: a7:de:f2:4d:db:89:2c:a6:77:2a:d3:23:b9:74:a1:52:30:36: 34:27:7c:af:14:cc:d5:1e:52:59:d0:b0:07:c6:4f:0d:4b:68: cc:92:ee:5d:4e:c2:86:a0:25:7c:7c:4e:aa:c3:b6:1c:ab:bd: 08:90:cb:e7:6e:81:f0:c6:b7:a3:56:35:ea:9a:02:af:9e:7b: 2e:b4:f1:99:13:dc:bd:c2:81:94:f8:86:fa:78:7e:82:f0:0a: bf:be:64:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFkmpgffjbMoCbtKOcqGkvkdXd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTA2MTUxNTM1NDVaFw0yNTA2MTkwMTUwNDVaMDMxMTAvBgNV BAMTKEE4Q0Q0NDM0MUIyMjlBRDYwRDI3OURDN0Y0QTQ3OTU0NjUyRDYxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1xW2IL6Ijmrrx7ZKC65NqfG0 1cLaSzPS+p3gbDDoaV4lobdVCav2XB9HomFh/hZc5g0JSUjz5aEMQE+4vHa5CET2 Ts2ZqYPab3uVzujyYjWRx5SlIovCMzMz0u4EHekfGvj7g4wkVQBsXMU7sn6T/X28 brGynDMQI9t/ar76fmgtOWl5DBjUUf2F1565BQ1tMMmLgnP7kIpxjqK8T7p3FWwm fNeUHDPrLd76c87Uuj9nBA2N87csu2UrI4rwcIayej6cqa70PlrRe+Fi3J79VY5t ldGo9Bvx4CD1EQFfi0WK6n1eIa5QSj/lWWqhrRRpB2K4zpy58ooB9wqkMVTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqM1ENBsimtYNJ53H9KR5VGUtYTQwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIDUKabR/dnaFJpmwplfHwtY1Ytgf47dIBB m72l89ZzdcyD4A5E/ucDghHkoUpEHweY8Stv24Ukdp6o9Jxs6W/yoaCpV6M2etRX 24CBobQmOLgsehZxmXnk4/DMODnHg7Rl4c5U31TiyJmC3THf0gTrBtoaj4Lp2nbU QRYufyNpKLof8G9bjlcTpKbVrGaL5K37xh3WtSgZNX2TYOX25vjVW6fe8k3biSym dyrTI7l0oVIwNjQnfK8UzNUeUlnQsAfGTw1LaMyS7l1OwoagJXx8TqrDthyrvQiQ y+dugfDGt6NWNeqaAq+eey608ZkT3L3CgZT4hvp4foLwCr++ZJA= -----END CERTIFICATE-----Generated at Mon Jun 16 20:21:29 2025 by rpki-client