$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: pAJQfJgFRfl3NFUXnTKCdBkYwJ082S2/lY6SJKEGGfQ= Subject key identifier: 12:55:3C:27:00:4F:80:AD:6A:0B:90:38:E5:2E:25:EE:A0:11:99:5A Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 04CF0D226D33CD908B3310CE289DAD57C1F86041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 0125 Signing time: Tue 05 Aug 2025 01:31:12 +0000 Manifest this update: Tue 05 Aug 2025 01:26:12 +0000 Manifest next update: Fri 08 Aug 2025 06:15:12 +0000 Files and hashes: 1: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 2: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 3: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) 4: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: slK0W8hLiSVRYb9ii0neADQcZ7d7RjnQQPAWIdW7yQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cf:0d:22:6d:33:cd:90:8b:33:10:ce:28:9d:ad:57:c1:f8:60:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Aug 5 01:26:12 2025 GMT Not After : Aug 8 06:15:12 2025 GMT Subject: CN=12553C27004F80AD6A0B9038E52E25EEA011995A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:4c:ff:07:e2:17:fa:4a:08:4c:e2:10:7c: cb:c8:fd:78:58:33:32:32:85:fd:78:a4:07:37:a7: 27:1f:09:1f:94:9b:4e:1e:55:a6:b2:b7:56:20:de: f1:a7:b3:4d:c3:0b:2c:4c:81:98:f2:39:8a:7c:23: 64:94:31:00:30:26:06:a8:d2:24:78:ca:61:5b:68: cf:20:16:17:13:0b:68:b6:91:7d:09:97:1b:09:96: 63:2a:91:c4:90:9c:08:0d:da:63:ed:89:88:ad:fc: c7:31:74:e2:62:fc:d0:33:47:f3:78:5b:ee:d9:2a: 6f:25:44:d9:5f:1b:d9:03:ea:25:a2:e2:40:26:64: c6:8f:32:47:da:36:0b:e2:0c:61:e9:fd:54:b4:e7: 1a:0e:d4:f0:36:be:4b:11:70:a1:fb:6a:fe:e0:b1: 95:00:2a:d4:83:75:51:7d:7f:3d:46:0b:16:15:f4: 6d:c4:5e:b6:83:ec:d5:bf:56:61:c4:17:fa:a5:4f: 41:d3:f2:f3:a6:0b:76:1e:47:a7:c8:cf:c4:41:9b: b4:b5:20:4c:2a:b4:73:7f:e0:98:5b:80:b1:3a:6b: f4:c0:a1:d4:01:e0:8d:96:ed:cd:9f:4d:81:f6:4d: 2d:2f:6e:bf:61:b3:8d:3a:c3:c5:51:3d:51:6b:cc: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:3C:27:00:4F:80:AD:6A:0B:90:38:E5:2E:25:EE:A0:11:99:5A X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6b:c7:d8:24:fd:a9:3f:75:e2:94:6c:7e:7b:00:45:02:3e: 80:44:62:79:ed:79:6d:e8:5e:07:14:a6:d5:05:2d:90:33:14: b0:42:1d:3c:c5:e7:79:0b:61:26:a2:5e:2d:92:4c:cd:09:d2: 0b:7a:1b:b7:e0:cd:ca:53:59:fc:cb:a1:5b:ca:ea:db:cf:cf: 6e:ec:3d:fa:64:32:77:a8:b0:f5:74:d4:74:6f:0b:42:6a:e0: 78:83:98:19:2f:ca:01:5a:e6:5b:a4:a7:7e:33:b3:62:10:4f: 0d:e9:0d:c1:ae:11:c7:01:e5:07:f4:0d:af:7d:90:a8:5f:cc: 0f:58:ac:6c:46:c5:9a:ee:8b:f8:2a:bd:9b:a0:26:23:49:ad: 6e:f9:f6:6a:af:16:8e:64:1b:a2:e3:60:29:10:78:80:33:60: 69:de:7d:fe:a8:d6:61:e9:77:e6:be:61:65:2d:b2:c4:d6:39: d9:fe:b4:6f:d5:7c:24:df:7d:af:d3:ce:fd:85:14:bf:b3:29: 8c:05:17:3c:0f:77:ae:4f:8c:cc:ca:0b:db:e9:80:c4:dc:60: 97:32:94:f0:c4:74:f6:3b:23:08:7e:b6:db:77:5b:38:fa:55: 6f:30:c2:ed:3d:1b:25:a3:86:1e:9d:47:35:0e:64:c7:d8:6d: 4a:ab:a9:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBM8NIm0zzZCLMxDOKJ2tV8H4YEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA4MDUwMTI2MTJaFw0yNTA4MDgwNjE1MTJaMDMxMTAvBgNV BAMTKDEyNTUzQzI3MDA0RjgwQUQ2QTBCOTAzOEU1MkUyNUVFQTAxMTk5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSUz/B+IX+koITOIQfMvI/XhY MzIyhf14pAc3pycfCR+Um04eVaayt1Yg3vGns03DCyxMgZjyOYp8I2SUMQAwJgao 0iR4ymFbaM8gFhcTC2i2kX0JlxsJlmMqkcSQnAgN2mPtiYit/McxdOJi/NAzR/N4 W+7ZKm8lRNlfG9kD6iWi4kAmZMaPMkfaNgviDGHp/VS05xoO1PA2vksRcKH7av7g sZUAKtSDdVF9fz1GCxYV9G3EXraD7NW/VmHEF/qlT0HT8vOmC3YeR6fIz8RBm7S1 IEwqtHN/4JhbgLE6a/TAodQB4I2W7c2fTYH2TS0vbr9hs406w8VRPVFrzHMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElU8JwBPgK1qC5A45S4l7qARmVowHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhrx9gk/ak/deKUbH57AEUCPoBEYnnteW3o XgcUptUFLZAzFLBCHTzF53kLYSaiXi2STM0J0gt6G7fgzcpTWfzLoVvK6tvPz27s PfpkMneosPV01HRvC0Jq4HiDmBkvygFa5lukp34zs2IQTw3pDcGuEccB5Qf0Da99 kKhfzA9YrGxGxZrui/gqvZugJiNJrW759mqvFo5kG6LjYCkQeIAzYGneff6o1mHp d+a+YWUtssTWOdn+tG/VfCTffa/Tzv2FFL+zKYwFFzwPd65PjMzKC9vpgMTcYJcy lPDEdPY7Iwh+ttt3Wzj6VW8wwu09GyWjhh6dRzUOZMfYbUqrqWg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:29 2025 by rpki-client