$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: cM4WTTYFBzjEwBWrrFwhY45G67U1rDxY0rK/QSK3ERg= Subject key identifier: 29:F6:BE:78:49:C3:D3:2C:47:9C:FA:2B:96:55:61:06:8B:80:DE:3D Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 144C69D2B2433444A3F9071038ACACAF1A8B912F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 011E Signing time: Sun 20 Jul 2025 07:51:11 +0000 Manifest this update: Sun 20 Jul 2025 07:46:11 +0000 Manifest next update: Wed 23 Jul 2025 16:57:11 +0000 Files and hashes: 1: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 2: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: vcXFwPy7b01zKiw8WLOrHUXk0087Akwx3a0MP9GmfOQ=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 4: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4c:69:d2:b2:43:34:44:a3:f9:07:10:38:ac:ac:af:1a:8b:91:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Jul 20 07:46:11 2025 GMT Not After : Jul 23 16:57:11 2025 GMT Subject: CN=29F6BE7849C3D32C479CFA2B965561068B80DE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:1d:bc:52:04:49:dd:dd:9f:a9:79:4c:98: 36:de:15:07:df:2a:52:09:f1:c4:4e:21:b8:23:80: 2f:fc:3d:2a:c6:d0:89:fe:3b:3a:58:90:59:91:af: a9:45:66:a9:95:ea:e2:03:11:b2:5b:da:98:85:9b: 6d:80:86:e6:ef:58:fc:98:69:eb:94:79:00:50:d5: 58:eb:24:6a:4f:94:cf:6c:10:41:ba:7f:22:b8:f6: 3f:9a:f3:65:01:8a:ed:c8:10:44:98:14:59:6b:5a: b4:94:52:71:c2:0a:86:de:05:48:48:65:d0:d9:e2: 4a:83:14:62:cf:92:43:71:b9:af:e8:59:9a:f0:2b: 42:e1:ba:dc:25:06:31:c8:04:4b:68:87:a6:b4:13: 6c:38:13:d0:5f:70:49:d8:43:7d:99:af:e5:76:ef: 92:b4:06:b5:e4:f2:b9:d4:14:b8:64:dd:92:14:8a: 4d:84:f0:8e:f5:c6:97:69:a8:a1:33:ca:8d:c2:4b: 16:86:fa:dd:a4:ec:17:9f:d1:b4:db:f1:b6:0e:31: e4:e7:2d:66:07:f7:4f:0b:d7:ee:9c:1a:c7:dd:a0: 13:c8:f4:e0:c5:46:4b:e4:5a:f1:30:c0:eb:d6:12: 22:d6:f7:a0:fd:29:d6:6c:b6:05:56:12:61:17:a6: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F6:BE:78:49:C3:D3:2C:47:9C:FA:2B:96:55:61:06:8B:80:DE:3D X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a6:ee:3d:2e:88:ac:4b:19:46:d4:8a:a5:ec:05:ea:7a:47: 8d:dc:77:df:80:e4:28:d9:30:70:98:cf:d7:7b:33:10:8f:9c: 23:a0:5a:da:d0:90:af:34:f7:7d:f2:45:5f:c6:82:1c:49:f4: c5:de:76:a6:06:4b:37:90:c4:3f:4e:aa:c8:71:45:79:97:0a: 3b:61:94:f4:b2:56:36:ab:8b:47:04:58:ad:c7:e5:4a:ca:7c: 56:07:c0:55:19:dc:fb:fd:7c:f8:a6:70:ae:e0:a0:a2:fb:3c: 72:dc:f6:27:dd:20:e5:47:ba:03:bc:68:62:23:b6:e6:0c:72: f9:69:8b:e3:ea:84:d2:95:79:e2:be:eb:23:55:e0:db:be:97: 5a:de:6b:41:8b:79:fb:e7:2d:f3:a1:cb:5d:90:37:d4:db:20: 31:c6:55:8e:e1:97:7f:f3:2a:59:a5:cc:e6:ef:1b:22:25:10: 89:00:29:85:b8:a0:a3:c0:ce:84:2c:8b:5e:2b:50:2e:f8:94: f7:72:0a:c7:89:1f:62:53:98:d6:3e:9a:3d:9c:dd:c7:38:d5: a0:39:87:ab:28:4d:a7:c5:58:00:e9:1b:75:9f:fd:05:b6:89: 85:c4:8d:ed:eb:c9:9a:e7:18:b5:f5:17:be:6d:bd:85:e1:5d: b1:74:3c:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFExp0rJDNESj+QcQOKysrxqLkS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA3MjAwNzQ2MTFaFw0yNTA3MjMxNjU3MTFaMDMxMTAvBgNV BAMTKDI5RjZCRTc4NDlDM0QzMkM0NzlDRkEyQjk2NTU2MTA2OEI4MERFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMx28UgRJ3d2fqXlMmDbeFQff KlIJ8cROIbgjgC/8PSrG0In+OzpYkFmRr6lFZqmV6uIDEbJb2piFm22AhubvWPyY aeuUeQBQ1VjrJGpPlM9sEEG6fyK49j+a82UBiu3IEESYFFlrWrSUUnHCCobeBUhI ZdDZ4kqDFGLPkkNxua/oWZrwK0LhutwlBjHIBEtoh6a0E2w4E9BfcEnYQ32Zr+V2 75K0BrXk8rnUFLhk3ZIUik2E8I71xpdpqKEzyo3CSxaG+t2k7Bef0bTb8bYOMeTn LWYH908L1+6cGsfdoBPI9ODFRkvkWvEwwOvWEiLW96D9KdZstgVWEmEXpj0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfa+eEnD0yxHnPorllVhBouA3j0wHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACim7j0uiKxLGUbUiqXsBep6R43cd9+A5CjZ MHCYz9d7MxCPnCOgWtrQkK80933yRV/GghxJ9MXedqYGSzeQxD9OqshxRXmXCjth lPSyVjari0cEWK3H5UrKfFYHwFUZ3Pv9fPimcK7goKL7PHLc9ifdIOVHugO8aGIj tuYMcvlpi+PqhNKVeeK+6yNV4Nu+l1rea0GLefvnLfOhy12QN9TbIDHGVY7hl3/z KlmlzObvGyIlEIkAKYW4oKPAzoQsi14rUC74lPdyCseJH2JTmNY+mj2c3cc41aA5 h6soTafFWADpG3Wf/QW2iYXEje3ryZrnGLX1F75tvYXhXbF0PFM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:16 2025 by rpki-client