$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: C3/WlOZ2yKEk+MbZzToIPIrMLfq20VoQoyBju1g/JOY= Subject key identifier: E3:ED:D2:4C:99:63:D9:DF:E2:F7:09:73:63:0F:99:F4:82:36:68:7C Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 1132A1159F2D7568DDE54EA8EB148DDDE547E39D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 010E Signing time: Sat 14 Jun 2025 13:51:11 +0000 Manifest this update: Sat 14 Jun 2025 13:46:11 +0000 Manifest next update: Tue 17 Jun 2025 20:55:11 +0000 Files and hashes: 1: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 2: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 3: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) 4: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: gOmh6SufCq+VhBhS8ppvdypCmmRle3Dzy+M7diXYQZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:32:a1:15:9f:2d:75:68:dd:e5:4e:a8:eb:14:8d:dd:e5:47:e3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Jun 14 13:46:11 2025 GMT Not After : Jun 17 20:55:11 2025 GMT Subject: CN=E3EDD24C9963D9DFE2F70973630F99F48236687C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:46:e3:31:d9:b2:21:9d:11:5d:b6:f1:07:80: 48:d1:4d:3b:78:17:c3:9b:72:47:35:2e:78:33:5b: 7f:b1:db:06:42:c3:97:91:d4:f8:eb:b5:93:d0:fb: 16:49:6b:71:1e:f0:85:f7:c5:15:64:87:b5:8e:f4: 89:eb:88:6e:ff:01:35:d8:9f:12:07:89:61:e0:f4: 62:5a:98:52:2c:ac:c9:b3:fd:ed:32:82:47:49:16: 3c:bc:9a:a4:62:69:88:37:71:5e:c9:9d:62:b0:58: d4:c7:14:2e:f7:8d:f9:21:dc:41:68:ee:16:52:ad: de:4d:6b:84:65:aa:c2:3a:ab:1f:9f:25:5a:45:a8: a2:cd:ca:b2:3c:38:c5:b4:2b:b3:4a:43:aa:73:6c: bf:7d:2d:91:fe:da:a8:71:25:dd:3f:8e:00:43:a3: bc:70:61:16:ff:9b:21:62:ae:e6:c2:79:e1:e1:fd: 7e:56:fc:61:c1:ac:4c:18:b7:bd:18:08:75:6f:c7: 07:fa:5d:1e:e7:50:cc:1b:49:e8:a8:4e:cd:5b:30: a8:0a:bb:ac:9a:68:cf:49:d2:7b:eb:46:38:15:89: 22:d6:bb:41:c4:05:66:1e:26:0c:f5:18:7f:4a:77: e6:ac:0b:ed:cf:f1:79:35:cd:cc:51:1f:68:4e:d6: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:ED:D2:4C:99:63:D9:DF:E2:F7:09:73:63:0F:99:F4:82:36:68:7C X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b7:78:b4:ec:00:62:da:a2:a2:71:32:75:50:4e:13:d5:bd: 92:ef:c8:3f:a3:b8:f4:71:dd:22:ef:bb:52:ea:a0:7e:d6:2d: 4e:66:2d:cd:3b:6e:8b:71:5d:37:72:9b:2c:ff:f4:ae:7b:ff: 7f:c1:43:af:c6:67:7a:79:bc:71:ca:97:c5:8f:c2:a2:0c:d9: 34:6f:af:43:81:85:ba:ab:04:a3:7a:d5:d5:63:92:50:4a:35: 41:46:49:50:ff:cc:e3:46:f0:34:5d:98:65:d8:5e:2a:13:de: 07:85:1d:38:39:3c:4f:44:b9:b8:6a:d3:16:a5:e7:b8:12:d6: 93:64:82:6f:db:8a:bf:50:1e:bd:f1:21:01:a6:0b:d5:01:84: 52:e9:73:7d:e9:4f:11:84:c3:7a:57:b6:62:9a:dc:ab:68:27: fd:3e:d0:3c:4b:b3:1e:ac:e9:64:9a:cd:4b:36:8d:c4:01:6e: 83:aa:55:b8:5d:9f:5b:76:b3:71:97:50:ab:21:1f:3c:4d:5a: 07:fa:ea:91:35:eb:50:98:18:de:15:56:d6:fe:a1:d9:07:d3: 5d:88:90:10:dd:79:5e:02:de:77:c1:1b:12:ef:91:f4:f0:b3: 05:d5:f6:de:1c:3e:18:f5:00:25:0e:f2:78:5a:6f:ac:35:13: 2b:66:ab:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETKhFZ8tdWjd5U6o6xSN3eVH450wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA2MTQxMzQ2MTFaFw0yNTA2MTcyMDU1MTFaMDMxMTAvBgNV BAMTKEUzRUREMjRDOTk2M0Q5REZFMkY3MDk3MzYzMEY5OUY0ODIzNjY4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhRuMx2bIhnRFdtvEHgEjRTTt4 F8Obckc1LngzW3+x2wZCw5eR1PjrtZPQ+xZJa3Ee8IX3xRVkh7WO9InriG7/ATXY nxIHiWHg9GJamFIsrMmz/e0ygkdJFjy8mqRiaYg3cV7JnWKwWNTHFC73jfkh3EFo 7hZSrd5Na4RlqsI6qx+fJVpFqKLNyrI8OMW0K7NKQ6pzbL99LZH+2qhxJd0/jgBD o7xwYRb/myFirubCeeHh/X5W/GHBrEwYt70YCHVvxwf6XR7nUMwbSeioTs1bMKgK u6yaaM9J0nvrRjgViSLWu0HEBWYeJgz1GH9Kd+asC+3P8Xk1zcxRH2hO1hDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+3STJlj2d/i9wlzYw+Z9II2aHwwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK3eLTsAGLaoqJxMnVQThPVvZLvyD+juPRx 3SLvu1LqoH7WLU5mLc07botxXTdymyz/9K57/3/BQ6/GZ3p5vHHKl8WPwqIM2TRv r0OBhbqrBKN61dVjklBKNUFGSVD/zONG8DRdmGXYXioT3geFHTg5PE9Eubhq0xal 57gS1pNkgm/bir9QHr3xIQGmC9UBhFLpc33pTxGEw3pXtmKa3KtoJ/0+0DxLsx6s 6WSazUs2jcQBboOqVbhdn1t2s3GXUKshHzxNWgf66pE161CYGN4VVtb+odkH012I kBDdeV4C3nfBGxLvkfTwswXV9t4cPhj1ACUO8nhab6w1Eytmq6I= -----END CERTIFICATE-----Generated at Mon Jun 16 00:14:32 2025 by rpki-client