$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: kpeq1c0aN1jKqTLwg6UO5htZXHhP+zntNWgVSLpBMZ8= Subject key identifier: 41:9D:F8:30:FB:2E:5E:FA:46:72:26:3E:E1:BF:36:49:33:DF:A2:22 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 3E7C8B7791B0CD723083C79D3014AA23F5C607CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 01FB Signing time: Wed 06 Aug 2025 00:51:29 +0000 Manifest this update: Wed 06 Aug 2025 00:46:29 +0000 Manifest next update: Sat 09 Aug 2025 11:09:29 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: Ek+qAEFtZuBh8PiIfP4Ys3RC7t04rugzJcn+R52JJXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7c:8b:77:91:b0:cd:72:30:83:c7:9d:30:14:aa:23:f5:c6:07:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Aug 6 00:46:29 2025 GMT Not After : Aug 9 11:09:29 2025 GMT Subject: CN=419DF830FB2E5EFA4672263EE1BF364933DFA222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:36:8b:d4:56:94:da:2c:5a:cd:e9:19:bc: 5a:99:a2:42:02:7e:69:42:7d:12:01:68:ef:07:e5: 20:7e:84:7d:33:6d:87:ca:a1:e0:fe:a8:a5:ec:fe: 60:a5:0c:e6:38:da:d8:dc:6d:c5:61:22:86:da:a3: 52:a1:72:fe:64:68:33:5a:24:f9:d7:e7:4f:96:cc: b5:0a:3a:15:8c:a0:85:96:c3:a5:30:90:72:01:02: f2:e1:b7:62:a5:d4:23:6f:10:db:8e:86:ad:a2:6e: 59:f8:75:c0:f3:8e:47:b8:93:36:99:44:22:a1:92: 59:6f:10:7d:52:10:dc:5a:8f:aa:a0:ec:ff:c8:de: 6d:e8:3a:90:ab:ab:9b:f2:f6:6a:d6:98:13:f1:8b: 59:75:cb:08:d4:29:da:85:a1:47:54:cd:c6:c3:7d: 68:b9:8f:35:de:a7:a6:e6:9f:5e:fd:9c:48:7b:94: 1a:d5:9d:24:df:f8:71:93:b0:03:d4:b0:2d:73:de: ea:ef:13:90:b4:e9:26:3f:e5:03:fe:fe:cc:9c:3b: 5a:d9:7b:17:2f:89:3c:8d:1e:ca:9e:18:25:0a:2a: 18:99:27:45:3e:f3:30:9c:8c:e1:6d:b3:2d:19:ff: c9:32:3e:66:b9:16:8d:c7:78:2c:f7:2f:70:a3:cc: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:F8:30:FB:2E:5E:FA:46:72:26:3E:E1:BF:36:49:33:DF:A2:22 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:46:c3:41:3c:cf:83:d0:d1:bf:f5:84:3c:44:25:5e:41:21: 6d:21:c1:0c:58:03:8c:50:47:cb:dc:e7:01:3c:b8:78:fd:a4: f8:06:46:ce:01:01:30:8a:4b:f0:4a:6e:d0:5a:62:b1:cf:06: 88:1f:5f:c8:8b:f8:44:bc:f3:42:8e:14:f3:0d:1f:ac:37:e5: b5:55:46:21:18:b1:43:d7:c2:d5:80:f0:d2:83:ce:f7:c7:bd: dd:55:f0:8a:15:c4:bb:66:d3:fd:d4:cf:c7:84:0a:6f:a1:f3: 9e:32:4a:9f:29:b0:79:1d:36:be:e0:5f:4c:65:6f:e6:c0:8f: 1d:9a:2c:79:0d:e3:ba:c7:c5:34:2d:dd:7f:32:25:94:0d:10: 28:35:9d:cc:64:b6:30:2c:23:5f:cf:c3:da:0d:ae:3d:e9:94: 47:7a:5b:e1:5a:ca:c7:50:df:b5:b7:a4:2e:95:bf:c4:09:86: fe:d0:3f:1f:20:93:6d:7f:6c:1f:b5:6d:51:6e:2e:9a:41:ae: f2:58:04:be:03:1d:50:7b:ee:73:88:38:57:f3:1c:d3:1f:a0: 84:6a:b3:d2:8b:36:11:3d:63:94:50:7b:a2:27:33:a0:20:2d: b2:0e:1e:2d:e7:29:f4:50:06:9b:eb:6d:61:df:74:b5:57:1b: 8c:cf:ad:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnyLd5GwzXIwg8edMBSqI/XGB8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA4MDYwMDQ2MjlaFw0yNTA4MDkxMTA5MjlaMDMxMTAvBgNV BAMTKDQxOURGODMwRkIyRTVFRkE0NjcyMjYzRUUxQkYzNjQ5MzNERkEyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QTaL1FaU2ixazekZvFqZokIC fmlCfRIBaO8H5SB+hH0zbYfKoeD+qKXs/mClDOY42tjcbcVhIobao1Khcv5kaDNa JPnX50+WzLUKOhWMoIWWw6UwkHIBAvLht2Kl1CNvENuOhq2ibln4dcDzjke4kzaZ RCKhkllvEH1SENxaj6qg7P/I3m3oOpCrq5vy9mrWmBPxi1l1ywjUKdqFoUdUzcbD fWi5jzXep6bmn179nEh7lBrVnSTf+HGTsAPUsC1z3urvE5C06SY/5QP+/sycO1rZ excviTyNHsqeGCUKKhiZJ0U+8zCcjOFtsy0Z/8kyPma5Fo3HeCz3L3CjzDkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZ34MPsuXvpGciY+4b82STPfoiIwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBGw0E8z4PQ0b/1hDxEJV5BIW0hwQxYA4xQ R8vc5wE8uHj9pPgGRs4BATCKS/BKbtBaYrHPBogfX8iL+ES880KOFPMNH6w35bVV RiEYsUPXwtWA8NKDzvfHvd1V8IoVxLtm0/3Uz8eECm+h854ySp8psHkdNr7gX0xl b+bAjx2aLHkN47rHxTQt3X8yJZQNECg1ncxktjAsI1/Pw9oNrj3plEd6W+FaysdQ 37W3pC6Vv8QJhv7QPx8gk21/bB+1bVFuLppBrvJYBL4DHVB77nOIOFfzHNMfoIRq s9KLNhE9Y5RQe6InM6AgLbIOHi3nKfRQBpvrbWHfdLVXG4zPrQk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:19 2025 by rpki-client