$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json) Hash identifier: QeQxLP1+mce2BQtWYv+hzXKKmMKK8u0J4whk+Bbg8kM= Subject key identifier: FD:31:25:62:41:11:A8:45:6F:15:DE:50:C3:0A:80:2E:CA:E5:1A:05 Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Certificate serial: 3D2B773C1C792B07B3CC66F5E0D8FB273DEAC9B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft Manifest number: 012F Signing time: Fri 05 Sep 2025 23:01:11 +0000 Manifest this update: Fri 05 Sep 2025 22:56:11 +0000 Manifest next update: Tue 09 Sep 2025 03:12:11 +0000 Files and hashes: 1: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: uJRh2Nl1FFa/n59O3LHHXi5yld34YwSbP4aHzoucvHk=) 2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2b:77:3c:1c:79:2b:07:b3:cc:66:f5:e0:d8:fb:27:3d:ea:c9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Validity Not Before: Sep 5 22:56:11 2025 GMT Not After : Sep 9 03:12:11 2025 GMT Subject: CN=FD3125624111A8456F15DE50C30A802ECAE51A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:b7:9c:39:1a:53:35:29:69:7b:ea:c8:ac: e8:be:75:01:81:48:a5:e0:7f:d0:73:97:96:f2:80: b9:0f:fa:79:e5:25:87:c0:16:3c:39:6a:9a:24:6a: e0:8d:dd:4b:8e:4e:a6:ea:28:35:36:67:bc:16:50: 34:e3:1e:fa:bf:b2:15:e3:3a:73:66:45:c7:b7:08: 9e:ba:1c:43:3f:1a:6b:0d:f3:20:f4:f7:ca:a0:da: 7c:93:8e:5f:40:25:fc:d3:a8:46:b0:3a:e0:2b:13: a6:c9:3d:8f:ac:cc:84:26:65:75:0f:56:d1:b7:0e: 60:43:00:d8:7b:d5:a3:a0:4f:f3:d0:6f:4d:93:23: 05:25:e6:a1:ad:28:1c:7b:e7:63:b9:89:92:0e:70: b9:b6:26:40:e3:df:a0:53:4e:8b:8f:80:93:70:05: c3:3b:e3:9b:c1:4b:ea:84:07:8e:43:96:82:62:a4: 62:b8:17:e3:0e:aa:ad:43:0b:f5:82:1e:76:30:3f: a0:0c:c8:16:48:d0:04:d9:61:cc:a2:e7:f7:10:9a: ae:02:b8:ee:63:d1:ed:8d:b5:ac:61:10:66:13:9f: 8d:f5:f0:92:51:74:75:6e:38:90:60:b7:8c:a1:e0: 98:c9:ad:e3:74:01:8e:65:e2:d6:ee:b1:68:06:df: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:31:25:62:41:11:A8:45:6F:15:DE:50:C3:0A:80:2E:CA:E5:1A:05 X509v3 Authority Key Identifier: keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:f3:bd:a7:a3:8f:f6:cb:97:a6:9c:2f:d3:0d:34:77:2c: 3b:3e:7b:52:78:aa:60:dd:ad:4b:da:bc:88:33:1e:f7:65:a3: cb:17:ca:16:a7:2f:21:c4:91:4d:2d:af:3f:ad:c8:c8:19:19: bd:9c:26:c0:b0:3a:e8:52:7d:4d:4a:40:09:e5:ea:b7:df:21: cb:fa:8b:7a:d4:c8:bc:a2:85:1d:03:bf:3f:19:23:65:55:07: 71:37:e5:01:d8:1f:88:78:c4:39:89:71:f9:e3:21:fb:0d:79: 65:ed:80:92:6e:5b:8d:d6:80:9c:d7:ac:3e:6e:0e:1d:69:99: bf:e8:b3:4a:70:64:28:06:50:84:84:e4:70:b3:66:8b:fc:0f: 17:3e:29:18:e5:b0:9d:a1:8d:8c:be:17:6b:86:36:e7:47:cc: ef:92:bb:6a:45:77:52:02:b5:12:36:68:b3:67:a1:65:9f:a2: 3e:27:24:48:29:07:e2:0b:3e:bc:2d:35:11:eb:c5:88:8d:6c: 72:90:31:a4:80:e3:67:ff:e2:63:3d:68:10:03:b4:56:63:f3: 34:e5:f5:71:21:8c:93:d8:5c:60:74:34:0d:41:9e:de:c1:c0: 19:94:f8:bc:26:ab:6d:cc:8b:90:12:82:41:1d:02:01:12:b4: bd:c0:5e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSt3PBx5KwezzGb14Nj7Jz3qybQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFD QzYxMDhCMjAeFw0yNTA5MDUyMjU2MTFaFw0yNTA5MDkwMzEyMTFaMDMxMTAvBgNV BAMTKEZEMzEyNTYyNDExMUE4NDU2RjE1REU1MEMzMEE4MDJFQ0FFNTFBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiprecORpTNSlpe+rIrOi+dQGB SKXgf9Bzl5bygLkP+nnlJYfAFjw5apokauCN3UuOTqbqKDU2Z7wWUDTjHvq/shXj OnNmRce3CJ66HEM/GmsN8yD098qg2nyTjl9AJfzTqEawOuArE6bJPY+szIQmZXUP VtG3DmBDANh71aOgT/PQb02TIwUl5qGtKBx752O5iZIOcLm2JkDj36BTTouPgJNw BcM745vBS+qEB45DloJipGK4F+MOqq1DC/WCHnYwP6AMyBZI0ATZYcyi5/cQmq4C uO5j0e2NtaxhEGYTn4318JJRdHVuOJBgt4yh4JjJreN0AY5l4tbusWgG3ws1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/TElYkERqEVvFd5QwwqALsrlGgUwHwYDVR0j BBgwFoAUg6qfggmTMxDIfZ+FvSN56sxhCLIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzdlMDk0Yy1jOTNiLTRkNzItYjlmMi03NWIyNTJhYjgzZjkvMC84M0FBOUY4MjA5 OTMzMzEwQzg3RDlGODVCRDIzNzlFQUNDNjEwOEIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFDQzYx MDhCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5 ZjItNzViMjUyYWI4M2Y5LzAvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5 RUFDQzYxMDhCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT+872no4/2y5emnC/TDTR3LDs+e1J4qmDd rUvavIgzHvdlo8sXyhanLyHEkU0trz+tyMgZGb2cJsCwOuhSfU1KQAnl6rffIcv6 i3rUyLyihR0Dvz8ZI2VVB3E35QHYH4h4xDmJcfnjIfsNeWXtgJJuW43WgJzXrD5u Dh1pmb/os0pwZCgGUISE5HCzZov8Dxc+KRjlsJ2hjYy+F2uGNudHzO+Su2pFd1IC tRI2aLNnoWWfoj4nJEgpB+ILPrwtNRHrxYiNbHKQMaSA42f/4mM9aBADtFZj8zTl 9XEhjJPYXGB0NA1Bnt7BwBmU+Lwmq23Mi5ASgkEdAgEStL3AXhc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:16 2025 by rpki-client