$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json) Hash identifier: watJSD5cUkJvIAVk4eyW6PZizj7h2exu1kplvjyloHg= Subject key identifier: 54:24:45:04:DA:63:DF:04:35:19:A0:5B:8A:AA:DB:28:5A:89:BB:3A Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Certificate serial: 0C04D478711A0CAC2F590A8CC2D97F61322A9713 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft Manifest number: 017D Signing time: Sun 01 Mar 2026 14:31:18 +0000 Manifest this update: Sun 01 Mar 2026 14:26:18 +0000 Manifest next update: Wed 04 Mar 2026 19:42:18 +0000 Files and hashes: 1: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: 5YZYhRX1NWl6kiHAuD68v+UYoc5oqCutUosVT0Kj2XI=) 2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:04:d4:78:71:1a:0c:ac:2f:59:0a:8c:c2:d9:7f:61:32:2a:97:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Validity Not Before: Mar 1 14:26:18 2026 GMT Not After : Mar 4 19:42:18 2026 GMT Subject: CN=54244504DA63DF043519A05B8AAADB285A89BB3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:bd:31:e3:b1:fd:de:30:c4:6c:7d:92:e2: 2f:c6:d3:28:ec:77:14:e7:0a:ea:e6:41:1b:ab:e6: 56:82:98:4d:67:b3:db:be:8f:1c:b3:41:da:38:bd: 81:2c:ec:7b:2b:c4:00:07:6b:de:cf:4a:66:f4:d8: f5:21:b7:d0:89:33:f8:3d:fd:11:b2:ea:a4:52:3c: 65:6f:e5:5a:95:f0:9d:cb:50:e1:f3:02:b9:4d:93: 9c:3b:38:ca:08:32:52:7e:1f:bb:6b:5c:17:5d:1d: 83:0d:85:a3:d6:c2:2d:a0:a8:86:47:f1:56:45:95: cf:00:16:a3:14:7e:bd:61:ce:a9:8b:20:47:44:c0: 9c:d4:a7:9e:61:d9:99:d8:03:e2:2d:32:e1:0b:28: 73:9c:04:f5:1b:f4:f4:b1:2f:6a:e6:70:31:b3:5f: 75:1d:a8:57:6b:46:b6:d8:e1:f5:2c:e7:d6:08:2c: 22:62:c4:63:63:fa:c3:8c:bb:a4:5b:0d:91:81:72: 53:b4:c0:31:b7:a1:43:83:10:64:b0:eb:20:93:2d: 6b:63:b5:36:70:9e:85:2f:5a:98:07:72:68:f7:e3: 57:bf:e0:60:70:d7:a3:49:58:57:78:53:39:3a:35: 39:16:4b:27:f2:91:04:78:3b:c4:92:2f:0f:6e:0c: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:45:04:DA:63:DF:04:35:19:A0:5B:8A:AA:DB:28:5A:89:BB:3A X509v3 Authority Key Identifier: keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ea:8b:39:ca:1b:79:f0:2c:de:96:cf:cc:02:e2:e2:21:b4: 52:c8:2a:bc:47:b4:14:a1:56:ae:b1:74:26:e7:86:07:a8:0a: 19:de:53:e0:a7:33:82:8c:e3:9f:84:4f:77:df:e9:a4:89:d7: a8:92:b7:55:6b:29:16:cb:59:8e:1a:65:cc:75:36:9c:d8:b1: 9c:ab:a0:c9:63:db:1a:b0:1f:5c:5b:f0:4d:bf:8e:fb:0c:b6: d8:4a:d9:2a:1b:cb:2d:13:42:71:fb:7f:9c:e0:e6:ac:14:08: 9f:e3:66:da:a7:da:65:e1:ce:0f:8f:21:d2:b1:63:1c:91:b2: c7:51:88:d5:fa:b2:fa:30:3a:2d:72:79:20:8f:1a:e9:56:01: c1:75:5c:34:43:6c:9b:22:6c:17:20:79:2d:98:c5:6d:3b:d8: 41:34:c7:6a:b4:ee:a6:70:94:5d:27:89:f5:38:6b:20:b0:01: 4d:83:a9:b7:a2:e5:11:2b:12:c3:2f:27:f6:e0:6c:e1:b4:4b: 8c:76:19:14:38:67:1b:fa:6d:eb:92:c1:7b:5d:6f:aa:cd:62: ca:e6:72:92:0e:c4:e8:4b:b6:61:5b:f1:fd:9f:a3:81:62:fc: c7:46:12:c5:d9:3c:7d:7b:de:1b:d8:bd:87:98:e5:62:bb:c7: 96:ed:97:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDATUeHEaDKwvWQqMwtl/YTIqlxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFD QzYxMDhCMjAeFw0yNjAzMDExNDI2MThaFw0yNjAzMDQxOTQyMThaMDMxMTAvBgNV BAMTKDU0MjQ0NTA0REE2M0RGMDQzNTE5QTA1QjhBQUFEQjI4NUE4OUJCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEs70x47H93jDEbH2S4i/G0yjs dxTnCurmQRur5laCmE1ns9u+jxyzQdo4vYEs7HsrxAAHa97PSmb02PUht9CJM/g9 /RGy6qRSPGVv5VqV8J3LUOHzArlNk5w7OMoIMlJ+H7trXBddHYMNhaPWwi2gqIZH 8VZFlc8AFqMUfr1hzqmLIEdEwJzUp55h2ZnYA+ItMuELKHOcBPUb9PSxL2rmcDGz X3UdqFdrRrbY4fUs59YILCJixGNj+sOMu6RbDZGBclO0wDG3oUODEGSw6yCTLWtj tTZwnoUvWpgHcmj341e/4GBw16NJWFd4Uzk6NTkWSyfykQR4O8SSLw9uDP0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCRFBNpj3wQ1GaBbiqrbKFqJuzowHwYDVR0j BBgwFoAUg6qfggmTMxDIfZ+FvSN56sxhCLIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzdlMDk0Yy1jOTNiLTRkNzItYjlmMi03NWIyNTJhYjgzZjkvMC84M0FBOUY4MjA5 OTMzMzEwQzg3RDlGODVCRDIzNzlFQUNDNjEwOEIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFDQzYx MDhCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5 ZjItNzViMjUyYWI4M2Y5LzAvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5 RUFDQzYxMDhCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHqiznKG3nwLN6Wz8wC4uIhtFLIKrxHtBSh Vq6xdCbnhgeoChneU+CnM4KM45+ET3ff6aSJ16iSt1VrKRbLWY4aZcx1NpzYsZyr oMlj2xqwH1xb8E2/jvsMtthK2Sobyy0TQnH7f5zg5qwUCJ/jZtqn2mXhzg+PIdKx YxyRssdRiNX6svowOi1yeSCPGulWAcF1XDRDbJsibBcgeS2YxW072EE0x2q07qZw lF0nifU4ayCwAU2Dqbei5RErEsMvJ/bgbOG0S4x2GRQ4Zxv6beuSwXtdb6rNYsrm cpIOxOhLtmFb8f2fo4Fi/MdGEsXZPH173hvYvYeY5WK7x5btl1o= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:58 2026 by rpki-client