$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: DlVwBdM4Pk1PDeFLuNfGSpCMnpTQ/Sgxw5rezsxhh68= Subject key identifier: 45:C4:4A:00:93:99:26:9C:C8:1F:EC:D8:91:70:36:06:9B:BA:5E:1D Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 4B5D3D9B7B7E33822D0411F966C9C39567834C02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 0134 Signing time: Fri 05 Sep 2025 18:41:12 +0000 Manifest this update: Fri 05 Sep 2025 18:36:12 +0000 Manifest next update: Tue 09 Sep 2025 00:38:12 +0000 Files and hashes: 1: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=) 2: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dY9Wzss484cDHvQy3+/U0nuyLvB8FHOPJZ4fbRc99IE=) 3: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: KYg2eP+qnyahabsQS5xdyRs5Ya80Q1XBZpzh8eR7p5s=) 4: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: Tf0s9rQvNu+TjkIdHpJ1rJvHo6nxGOAVBiCKfJCRwFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5d:3d:9b:7b:7e:33:82:2d:04:11:f9:66:c9:c3:95:67:83:4c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Sep 5 18:36:12 2025 GMT Not After : Sep 9 00:38:12 2025 GMT Subject: CN=45C44A009399269CC81FECD8917036069BBA5E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:72:cb:8d:ab:cd:36:a1:f6:b8:9f:b9:69: 7a:94:a5:69:d7:1e:75:7f:dd:a6:0a:f6:fc:08:36: 31:df:f2:d4:a9:47:fc:4d:77:df:72:cd:9d:de:13: 32:84:8b:01:a5:62:c5:38:9d:fa:42:2c:c4:79:27: cf:8d:76:62:e8:c1:b6:f8:94:1d:70:4a:77:e1:07: c1:e1:c1:8f:1c:86:e9:81:75:86:28:69:a3:10:53: 04:24:57:25:b4:54:d2:4e:67:b7:d1:7c:1d:a4:1e: 49:1a:00:51:e0:92:c9:31:3f:c5:2c:b1:b5:77:78: 6f:c9:9e:25:9a:72:89:57:cc:6f:9f:ac:6a:ac:07: 5a:01:c0:94:c7:47:b3:4e:7a:2d:54:32:46:96:9f: 95:fe:95:eb:22:ca:19:d1:6c:86:b3:7a:a5:9b:ba: 79:5c:e6:8c:a6:72:25:4f:67:e3:5d:9f:71:2d:73: 63:ef:7a:58:10:5e:39:1a:22:75:1c:ea:ad:d1:52: e8:94:ff:01:5b:5e:0f:ab:ef:f0:43:bf:c8:63:5d: 28:2d:22:e0:54:97:71:0d:2a:85:6f:5e:dd:f8:a6: ad:3f:13:a3:f4:70:8d:95:12:de:4d:02:a3:10:6c: 9a:ce:77:48:f5:a7:24:c5:79:ad:00:fb:05:54:c2: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C4:4A:00:93:99:26:9C:C8:1F:EC:D8:91:70:36:06:9B:BA:5E:1D X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:55:d3:29:06:56:2e:8d:b7:ea:ea:fe:95:62:7a:2b:5c:29: a8:a4:24:b3:c4:6f:4f:a4:9a:78:29:41:42:5f:14:05:88:f2: 16:c1:b3:e0:d3:fd:be:6a:11:ba:ef:7f:f5:7a:72:69:8e:c6: fc:b3:f2:ab:50:a4:e0:ef:68:f7:a8:7e:e2:8b:f6:13:af:e2: 9a:35:26:61:d5:d6:dd:37:94:64:f0:ba:8c:fe:c7:e8:6f:ec: 18:f0:57:c5:bc:fe:c8:b3:94:b5:62:ca:65:15:b7:de:a9:08: ff:ef:40:d5:74:40:28:31:9a:ef:b4:be:40:f3:a0:f8:af:ca: 5a:14:98:b2:48:3b:77:87:7d:26:87:2e:09:20:73:af:fc:f3: 96:a8:e2:92:1c:bc:21:57:e3:9e:c4:24:8f:ec:74:35:55:f8: d6:16:48:0c:d2:cf:fb:ae:6d:5d:e8:b3:52:af:7c:4b:a4:b0: c8:3f:85:08:66:92:cc:b8:00:a0:01:5c:98:22:a4:db:e5:c0: 02:f6:b7:55:58:8f:88:06:0c:53:85:43:05:c0:d5:69:b8:18: 10:ae:f9:65:34:a5:bc:56:2f:91:f6:6b:b7:64:32:1e:41:b6: 93:95:96:11:16:50:18:15:47:8c:b7:44:0d:59:1c:b9:a6:74: 32:3d:74:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS109m3t+M4ItBBH5ZsnDlWeDTAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA5MDUxODM2MTJaFw0yNTA5MDkwMDM4MTJaMDMxMTAvBgNV BAMTKDQ1QzQ0QTAwOTM5OTI2OUNDODFGRUNEODkxNzAzNjA2OUJCQTVFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJ3LLjavNNqH2uJ+5aXqUpWnX HnV/3aYK9vwINjHf8tSpR/xNd99yzZ3eEzKEiwGlYsU4nfpCLMR5J8+NdmLowbb4 lB1wSnfhB8HhwY8chumBdYYoaaMQUwQkVyW0VNJOZ7fRfB2kHkkaAFHgkskxP8Us sbV3eG/JniWacolXzG+frGqsB1oBwJTHR7NOei1UMkaWn5X+lesiyhnRbIazeqWb unlc5oymciVPZ+Ndn3Etc2PvelgQXjkaInUc6q3RUuiU/wFbXg+r7/BDv8hjXSgt IuBUl3ENKoVvXt34pq0/E6P0cI2VEt5NAqMQbJrOd0j1pyTFea0A+wVUwgjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURcRKAJOZJpzIH+zYkXA2Bpu6Xh0wHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlV0ykGVi6Nt+rq/pVieitcKaikJLPEb0+k mngpQUJfFAWI8hbBs+DT/b5qEbrvf/V6cmmOxvyz8qtQpODvaPeofuKL9hOv4po1 JmHV1t03lGTwuoz+x+hv7BjwV8W8/sizlLViymUVt96pCP/vQNV0QCgxmu+0vkDz oPivyloUmLJIO3eHfSaHLgkgc6/885ao4pIcvCFX457EJI/sdDVV+NYWSAzSz/uu bV3os1KvfEuksMg/hQhmksy4AKABXJgipNvlwAL2t1VYj4gGDFOFQwXA1Wm4GBCu +WU0pbxWL5H2a7dkMh5BtpOVlhEWUBgVR4y3RA1ZHLmmdDI9dBw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:49 2025 by rpki-client