$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json) Hash identifier: NmDhLEAqyXQi1gJHf5gD8UhN0uMDKE7u6QlAVP37Zgc= Subject key identifier: CA:43:9E:AC:99:95:34:01:6C:AF:0C:BD:51:C2:84:52:32:AC:08:E6 Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Certificate serial: 11C0D90C7FCCA21464199D83BDCCC32D0B1184BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft Manifest number: 011A Signing time: Sun 20 Jul 2025 15:21:08 +0000 Manifest this update: Sun 20 Jul 2025 15:16:08 +0000 Manifest next update: Thu 24 Jul 2025 03:05:08 +0000 Files and hashes: 1: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: 2gD2jKr2pi56eulu0NDAUQC7Vha2fC52HqM0BVCtzmU=) 2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: x3kzy45IgxrrujHFNfyJkcO6iFJc1nyBAES1E3zvgTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c0:d9:0c:7f:cc:a2:14:64:19:9d:83:bd:cc:c3:2d:0b:11:84:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Validity Not Before: Jul 20 15:16:08 2025 GMT Not After : Jul 24 03:05:08 2025 GMT Subject: CN=CA439EAC999534016CAF0CBD51C2845232AC08E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:04:01:63:4f:95:34:b8:38:9f:4f:f1:87: b8:0d:8f:90:db:54:6e:c1:de:3c:46:d2:91:29:b8: 9d:ab:27:a0:0f:29:25:72:89:d6:d7:24:19:9c:a5: a2:4b:86:e2:fb:ac:2f:af:ee:ca:3a:0f:6d:3c:e5: 7e:4a:e3:6a:3a:17:a2:b5:a0:d3:80:1c:e6:cf:06: d1:41:bc:bf:9b:0b:49:20:df:ad:c0:e9:1d:ae:f0: fd:35:26:65:a4:74:43:c6:20:cf:ba:b5:aa:9e:a1: 48:83:a5:d8:e4:eb:42:43:d1:49:5d:73:cc:2e:0b: b2:e1:ad:03:f9:ae:69:45:5d:74:03:ab:d9:68:6b: 0c:d3:91:e2:81:4f:8b:61:3c:95:04:ed:b8:6c:39: b1:40:89:30:0e:cc:b9:2c:2f:cf:6a:5b:6d:12:27: 07:d7:95:5d:d6:e5:e3:0f:1e:4a:fb:aa:ac:c7:1e: 29:dc:f2:7f:73:bf:16:dd:81:68:13:5e:fc:59:ee: b6:ed:bc:74:31:af:76:f8:bf:ad:2b:80:db:e8:17: 5f:ee:b2:e2:ca:66:9c:93:75:06:20:7c:d4:81:1b: fc:0f:b3:8c:ac:8c:30:59:d1:6c:26:72:79:83:00: 45:f1:52:33:f9:14:80:5e:ad:d9:e9:d7:88:3a:17: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:9E:AC:99:95:34:01:6C:AF:0C:BD:51:C2:84:52:32:AC:08:E6 X509v3 Authority Key Identifier: keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:6c:ea:ac:93:01:ee:e4:44:a6:db:c9:36:2e:e0:f3:7c: a6:30:54:29:0c:8c:9f:89:81:02:63:13:7e:1c:36:dd:b3:04: 84:1a:4a:d0:7e:62:26:5f:09:99:f0:88:d0:2e:96:e2:f7:86: b7:2c:72:8f:08:29:46:b6:83:c3:35:e6:a0:4f:c3:7c:54:37: 0b:84:9f:d1:3e:67:6c:0c:dd:db:7a:6b:6c:dd:6e:16:7c:9a: 36:4e:99:f2:8f:58:38:97:ce:e6:f0:51:bd:d9:9e:9b:26:f4: bd:89:cb:81:25:ba:d2:5d:f4:e8:57:b3:9e:67:d4:b5:54:b5: 07:4d:5c:6c:af:db:63:75:45:2b:a7:73:d5:27:cb:81:db:cc: 09:82:33:0c:3a:b0:a3:74:e1:b2:f0:0a:8a:2e:bf:7b:5a:d7: b8:bb:c5:51:d8:51:7b:4e:8d:64:f4:de:5d:42:16:6e:29:21: c0:5f:4a:3d:77:a2:89:87:38:21:66:69:c3:d8:ef:ea:17:aa: 62:95:81:37:b7:bc:6c:43:c5:c2:87:a7:51:b8:a9:f0:be:3f: 98:a4:ee:17:ca:21:7d:d6:84:11:a3:3b:8c:98:2c:e6:1c:ac: 3c:44:70:cd:52:7f:1a:32:29:89:4a:90:82:b8:07:d5:74:b2: cb:0a:0d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcDZDH/MohRkGZ2DvczDLQsRhL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFD QzYxMDhCMjAeFw0yNTA3MjAxNTE2MDhaFw0yNTA3MjQwMzA1MDhaMDMxMTAvBgNV BAMTKENBNDM5RUFDOTk5NTM0MDE2Q0FGMENCRDUxQzI4NDUyMzJBQzA4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5wQBY0+VNLg4n0/xh7gNj5Db VG7B3jxG0pEpuJ2rJ6APKSVyidbXJBmcpaJLhuL7rC+v7so6D2085X5K42o6F6K1 oNOAHObPBtFBvL+bC0kg363A6R2u8P01JmWkdEPGIM+6taqeoUiDpdjk60JD0Uld c8wuC7LhrQP5rmlFXXQDq9loawzTkeKBT4thPJUE7bhsObFAiTAOzLksL89qW20S JwfXlV3W5eMPHkr7qqzHHinc8n9zvxbdgWgTXvxZ7rbtvHQxr3b4v60rgNvoF1/u suLKZpyTdQYgfNSBG/wPs4ysjDBZ0WwmcnmDAEXxUjP5FIBerdnp14g6F6yBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykOerJmVNAFsrwy9UcKEUjKsCOYwHwYDVR0j BBgwFoAUg6qfggmTMxDIfZ+FvSN56sxhCLIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzdlMDk0Yy1jOTNiLTRkNzItYjlmMi03NWIyNTJhYjgzZjkvMC84M0FBOUY4MjA5 OTMzMzEwQzg3RDlGODVCRDIzNzlFQUNDNjEwOEIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFDQzYx MDhCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5 ZjItNzViMjUyYWI4M2Y5LzAvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5 RUFDQzYxMDhCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4sbOqskwHu5ESm28k2LuDzfKYwVCkMjJ+J gQJjE34cNt2zBIQaStB+YiZfCZnwiNAuluL3hrcsco8IKUa2g8M15qBPw3xUNwuE n9E+Z2wM3dt6a2zdbhZ8mjZOmfKPWDiXzubwUb3Znpsm9L2Jy4ElutJd9OhXs55n 1LVUtQdNXGyv22N1RSunc9Uny4HbzAmCMww6sKN04bLwCoouv3ta17i7xVHYUXtO jWT03l1CFm4pIcBfSj13oomHOCFmacPY7+oXqmKVgTe3vGxDxcKHp1G4qfC+P5ik 7hfKIX3WhBGjO4yYLOYcrDxEcM1SfxoyKYlKkIK4B9V0sssKDT4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:20 2025 by rpki-client