$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft File: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft (raw, json) Hash identifier: 8LKOIdlJPLTQvWg7NCqSciC7wr1iIQdy+0Gl7GSKenE= Subject key identifier: B7:E3:4B:3A:BC:A8:6F:C6:F0:08:0B:CC:A6:85:90:AE:60:E4:9A:89 Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Certificate serial: 6840CE4C3FC12124B8448B9BDD2524D038CD543A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft Manifest number: 0200 Signing time: Mon 16 Jun 2025 08:02:02 +0000 Manifest this update: Mon 16 Jun 2025 07:57:02 +0000 Manifest next update: Thu 19 Jun 2025 17:52:02 +0000 Files and hashes: 1: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: Ok/OluvS5h7lKD3sSNYwAY0KsbjVMJ4hxy4FEh3uKmk=) 2: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl (hash: 5xAWdI1ggU3tJpy/LWYjFZss3uWYgbsEwMHV7OflOEs=) 3: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: y57hfH1lBOVunH6wiRrVTULW7uqhPZnP/h9yu/EhF5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:40:ce:4c:3f:c1:21:24:b8:44:8b:9b:dd:25:24:d0:38:cd:54:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Validity Not Before: Jun 16 07:57:02 2025 GMT Not After : Jun 19 17:52:02 2025 GMT Subject: CN=B7E34B3ABCA86FC6F0080BCCA68590AE60E49A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:ce:05:68:d2:4a:a3:32:89:c9:4c:b6:3a: 9f:a8:9b:ea:11:ba:21:c0:5d:08:da:c3:03:12:d1: bc:26:2b:0f:11:68:d2:66:fc:aa:4e:6f:92:ec:f2: 7f:7a:3e:2c:fe:14:25:c1:da:83:61:0f:7a:aa:d5: 3e:74:76:42:5d:07:98:97:08:10:24:76:d1:93:48: 93:3d:63:aa:8d:26:00:63:4a:ee:76:a9:95:7d:46: da:cd:bf:99:bc:a7:40:0f:31:0b:63:1b:44:3d:0f: 78:9f:5f:c4:29:5e:2f:aa:cc:22:e4:4f:f8:3a:0e: 58:37:37:42:01:a1:ec:db:54:f8:1a:58:db:7e:8f: 18:09:60:57:78:d1:48:84:f9:59:a6:aa:33:cb:a5: e3:2b:48:68:65:d2:45:1b:de:a3:4d:fd:9a:5b:5a: fe:08:a6:17:ee:b9:3d:88:a7:4b:1c:68:b0:75:dc: 60:4b:b8:5c:ef:93:df:d3:0f:0d:d1:1f:2d:32:aa: 81:d9:c3:fb:ae:1a:94:ea:cd:73:cf:70:d3:0f:4b: be:19:24:96:a0:45:27:09:d5:5a:94:51:3b:63:68: a8:53:36:bd:55:11:91:95:d4:7d:17:b2:80:e0:45: 0a:41:2c:05:84:8c:59:76:ea:08:b1:97:db:6a:f6: 18:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E3:4B:3A:BC:A8:6F:C6:F0:08:0B:CC:A6:85:90:AE:60:E4:9A:89 X509v3 Authority Key Identifier: keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c2:5a:dd:4b:44:3d:b5:d5:79:78:4f:f8:a1:e8:b6:0c:cc: 98:fc:87:c9:33:1f:1e:35:7b:79:ff:8d:75:de:6b:6a:40:24: da:23:52:b0:2c:82:49:2c:93:0b:e8:7e:48:a4:d1:ac:b5:b6: 6e:8a:42:1d:03:87:0c:e4:af:0c:9c:b7:22:5f:4d:96:07:78: d5:13:b8:9a:a6:0c:f3:40:0c:1d:c5:9d:20:10:79:51:fc:1f: 72:03:af:a0:42:40:53:3e:61:4c:72:b5:71:24:55:3c:18:e0: 6f:ac:46:3d:8a:29:aa:55:9a:99:12:8c:d0:3b:96:ea:c8:b9: a2:e9:38:29:6b:81:0a:08:a5:92:4f:5a:d2:2d:c3:01:9c:e1: b1:24:b5:45:f1:4e:ca:fb:f5:f6:eb:30:e6:61:07:89:f3:b8: ae:b8:09:1d:90:3e:25:51:70:a7:d6:08:eb:ed:50:2c:cd:20: 2a:8e:b5:6d:d0:15:30:76:4e:83:6c:fa:5d:1b:9f:4a:ab:9c: b1:31:c6:50:e5:c8:65:7b:78:94:4f:e3:46:d0:31:51:bf:24: 59:70:02:3e:d5:e7:f1:dc:75:d2:1e:54:2b:fa:14:6b:31:af: c5:a8:8d:12:ee:a7:a2:ac:84:e4:b6:c8:1a:d1:26:0e:a7:e0: c9:7c:e5:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEDOTD/BISS4RIub3SUk0DjNVDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF MEVDMjJGNjAeFw0yNTA2MTYwNzU3MDJaFw0yNTA2MTkxNzUyMDJaMDMxMTAvBgNV BAMTKEI3RTM0QjNBQkNBODZGQzZGMDA4MEJDQ0E2ODU5MEFFNjBFNDlBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTs4FaNJKozKJyUy2Op+om+oR uiHAXQjawwMS0bwmKw8RaNJm/KpOb5Ls8n96Piz+FCXB2oNhD3qq1T50dkJdB5iX CBAkdtGTSJM9Y6qNJgBjSu52qZV9RtrNv5m8p0APMQtjG0Q9D3ifX8QpXi+qzCLk T/g6Dlg3N0IBoezbVPgaWNt+jxgJYFd40UiE+VmmqjPLpeMrSGhl0kUb3qNN/Zpb Wv4IphfuuT2Ip0scaLB13GBLuFzvk9/TDw3RHy0yqoHZw/uuGpTqzXPPcNMPS74Z JJagRScJ1VqUUTtjaKhTNr1VEZGV1H0XsoDgRQpBLAWEjFl26gixl9tq9hhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt+NLOryob8bwCAvMpoWQrmDkmokwHwYDVR0j BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRD NTVFMEVDMjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTCWt1LRD211Xl4T/ih6LYMzJj8h8kzHx41 e3n/jXXea2pAJNojUrAsgkkskwvofkik0ay1tm6KQh0DhwzkrwyctyJfTZYHeNUT uJqmDPNADB3FnSAQeVH8H3IDr6BCQFM+YUxytXEkVTwY4G+sRj2KKapVmpkSjNA7 lurIuaLpOClrgQoIpZJPWtItwwGc4bEktUXxTsr79fbrMOZhB4nzuK64CR2QPiVR cKfWCOvtUCzNICqOtW3QFTB2ToNs+l0bn0qrnLExxlDlyGV7eJRP40bQMVG/JFlw Aj7V5/HcddIeVCv6FGsxr8WojRLup6KshOS2yBrRJg6n4Ml85c4= -----END CERTIFICATE-----Generated at Wed Jun 18 04:06:50 2025 by rpki-client