$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json) Hash identifier: 2ujO1mxs6X2HcANi4NWvzXjqQO5wnZ+m5x0dxw4btxc= Subject key identifier: C6:4B:CE:7E:7A:D3:FF:74:A4:5E:D1:F7:5E:2B:18:6E:47:7E:8C:10 Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Certificate serial: 2CAD8E6E2B5185C7C50E0D3988141F9B682D702D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft Manifest number: 0121 Signing time: Tue 05 Aug 2025 18:41:10 +0000 Manifest this update: Tue 05 Aug 2025 18:36:10 +0000 Manifest next update: Sat 09 Aug 2025 03:17:10 +0000 Files and hashes: 1: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: x3kzy45IgxrrujHFNfyJkcO6iFJc1nyBAES1E3zvgTw=) 2: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: pE5lRU2Eg8QKe/7IfTlvHBXH7Du0H+xfCoog3EqeVr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ad:8e:6e:2b:51:85:c7:c5:0e:0d:39:88:14:1f:9b:68:2d:70:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Validity Not Before: Aug 5 18:36:10 2025 GMT Not After : Aug 9 03:17:10 2025 GMT Subject: CN=C64BCE7E7AD3FF74A45ED1F75E2B186E477E8C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:b3:d3:63:03:7a:6a:4f:63:ba:9c:bc:01: 7b:bc:5c:4a:f2:5b:a2:8e:40:62:ce:ff:81:23:a1: 1f:5c:09:b6:6e:5a:c9:28:fa:09:a9:ed:c5:64:9a: 19:5c:fa:d8:75:61:45:84:2f:f9:b4:11:24:32:69: 87:98:53:91:16:5a:56:e2:4e:6e:21:57:24:30:e6: b1:b2:f4:90:ee:dd:31:c2:1c:e1:7b:88:69:f0:74: 3e:f0:b4:68:fd:4c:83:8e:ab:ac:39:28:01:71:65: 1f:3b:f4:b5:0c:62:6c:fd:0c:e0:2c:83:54:6a:ff: 02:94:f5:76:fa:15:4d:26:72:4d:d3:a9:16:fe:f1: 60:b2:56:19:20:09:09:64:dc:ea:51:8d:8b:48:60: a9:2e:23:ce:4c:02:63:b0:fe:9f:c1:56:cf:97:df: 1e:c5:32:ab:fe:7b:43:0c:a4:ad:6b:fa:ce:6a:c8: de:5b:21:b9:a0:6e:5f:c7:1e:99:e5:a0:6b:52:73: c0:73:23:57:34:ab:57:b3:7f:c5:44:65:92:11:3f: 70:f0:b2:15:e7:6a:cc:61:ef:65:91:b7:3b:22:5b: 82:7f:59:da:00:ab:91:fc:f5:9c:b2:d2:1a:5d:48: b2:dd:91:56:3f:e1:a4:0b:bb:5c:cd:b2:6c:e7:3a: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:CE:7E:7A:D3:FF:74:A4:5E:D1:F7:5E:2B:18:6E:47:7E:8C:10 X509v3 Authority Key Identifier: keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f2:ee:e0:7f:ec:eb:9a:e0:f2:41:89:42:85:43:6f:98:ce: ce:42:90:e3:67:12:02:b7:96:02:3b:3f:2c:2f:3e:5f:29:63: 0b:2a:67:5a:38:b6:57:55:8d:d8:9a:b2:0c:85:cd:d9:a3:96: 14:ef:c1:cd:67:52:3c:1f:72:ee:a4:53:ca:fd:13:b6:ba:7e: 23:13:7c:a5:3b:17:db:ef:60:89:1c:78:8b:d9:61:bf:23:73: ef:b9:b6:8c:57:38:f3:3f:d8:03:c5:82:6a:b0:8b:4c:54:87: e8:a3:c6:90:05:a9:0b:0f:32:e9:f8:cd:e5:7e:aa:15:7c:13: 95:c1:88:f8:3e:b1:e0:4b:44:a7:b8:a2:b4:54:c0:e6:9d:dc: 9a:72:1e:28:06:c5:c6:ce:c9:78:b2:4c:6e:5e:9b:c5:ed:71: 1a:93:fc:53:b5:04:b0:28:b2:c9:67:ba:8a:bf:0a:09:43:0b: d8:11:55:5f:6c:8a:dd:19:e5:0b:ee:e2:6f:06:0f:2e:7c:af: 09:4c:33:d7:25:a6:51:09:d8:4b:e0:9a:ab:f3:ec:1a:4b:c9: 9e:71:1c:92:09:a0:7e:67:63:4c:8d:18:cd:66:9b:02:81:b7: 78:1e:ff:66:cf:0b:90:9c:15:de:b6:1f:2f:d5:99:bb:b4:e3: 08:65:ae:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULK2ObitRhcfFDg05iBQfm2gtcC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFD QzYxMDhCMjAeFw0yNTA4MDUxODM2MTBaFw0yNTA4MDkwMzE3MTBaMDMxMTAvBgNV BAMTKEM2NEJDRTdFN0FEM0ZGNzRBNDVFRDFGNzVFMkIxODZFNDc3RThDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkLPTYwN6ak9jupy8AXu8XEry W6KOQGLO/4EjoR9cCbZuWsko+gmp7cVkmhlc+th1YUWEL/m0ESQyaYeYU5EWWlbi Tm4hVyQw5rGy9JDu3THCHOF7iGnwdD7wtGj9TIOOq6w5KAFxZR879LUMYmz9DOAs g1Rq/wKU9Xb6FU0mck3TqRb+8WCyVhkgCQlk3OpRjYtIYKkuI85MAmOw/p/BVs+X 3x7FMqv+e0MMpK1r+s5qyN5bIbmgbl/HHpnloGtSc8BzI1c0q1ezf8VEZZIRP3Dw shXnasxh72WRtzsiW4J/WdoAq5H89Zyy0hpdSLLdkVY/4aQLu1zNsmznOpfNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkvOfnrT/3SkXtH3XisYbkd+jBAwHwYDVR0j BBgwFoAUg6qfggmTMxDIfZ+FvSN56sxhCLIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzdlMDk0Yy1jOTNiLTRkNzItYjlmMi03NWIyNTJhYjgzZjkvMC84M0FBOUY4MjA5 OTMzMzEwQzg3RDlGODVCRDIzNzlFQUNDNjEwOEIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFDQzYx MDhCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5 ZjItNzViMjUyYWI4M2Y5LzAvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5 RUFDQzYxMDhCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALy7uB/7Oua4PJBiUKFQ2+Yzs5CkONnEgK3 lgI7PywvPl8pYwsqZ1o4tldVjdiasgyFzdmjlhTvwc1nUjwfcu6kU8r9E7a6fiMT fKU7F9vvYIkceIvZYb8jc++5toxXOPM/2APFgmqwi0xUh+ijxpAFqQsPMun4zeV+ qhV8E5XBiPg+seBLRKe4orRUwOad3JpyHigGxcbOyXiyTG5em8XtcRqT/FO1BLAo sslnuoq/CglDC9gRVV9sit0Z5Qvu4m8GDy58rwlMM9clplEJ2Evgmqvz7BpLyZ5x HJIJoH5nY0yNGM1mmwKBt3ge/2bPC5CcFd62Hy/Vmbu04whlrk8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:45 2025 by rpki-client