$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: FQ6mEGAncyEYrSbKEqBq3ch3W1ugY3yY4oDGEOBb224= Subject key identifier: 0B:96:6F:AD:BA:08:14:F4:24:27:A1:AB:00:51:E7:A2:01:0F:E8:D2 Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 4CDED1FB51123286BE4BE89C8DF3779111F2EACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 0109 Signing time: Tue 03 Jun 2025 16:21:56 +0000 Manifest this update: Tue 03 Jun 2025 16:16:56 +0000 Manifest next update: Fri 06 Jun 2025 18:26:56 +0000 Files and hashes: 1: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 2: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: AZZTv6ADZZ5HXAjCUsBOWpawUCuf+70K1nilBYvclro=) 3: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 4: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:de:d1:fb:51:12:32:86:be:4b:e8:9c:8d:f3:77:91:11:f2:ea:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Jun 3 16:16:56 2025 GMT Not After : Jun 6 18:26:56 2025 GMT Subject: CN=0B966FADBA0814F42427A1AB0051E7A2010FE8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:87:59:69:8f:52:fc:1b:8d:89:9b:2b:5a: 06:53:ac:e6:6a:a7:26:12:1d:77:14:9b:d7:9b:22: 40:e7:2b:b8:fd:4f:e8:91:76:1b:1a:62:03:67:a5: 5a:09:9c:15:2e:83:57:c6:03:7a:d6:76:f9:fa:89: 6a:0a:8d:56:a2:41:d2:d1:16:d7:cc:60:0a:66:21: ae:52:dd:f2:ae:5b:19:15:9d:7d:58:53:1b:3f:0f: 92:f2:72:b0:27:cc:a3:c0:fb:ca:24:9a:04:3f:b9: ba:b7:4b:a8:be:6a:30:c7:c0:e8:da:89:55:c5:30: c1:02:8f:c6:c8:c1:35:d6:1f:c0:8c:e2:80:46:8b: 75:a2:40:bc:40:74:76:cd:4d:36:a3:9c:10:22:dc: e6:28:f9:fb:3f:d0:c9:d2:76:29:ff:93:db:12:47: dc:45:84:b1:f3:a4:57:09:c6:f1:1c:44:0f:a4:fc: 20:11:3a:a6:15:91:c4:09:8a:99:b8:5a:da:6c:84: 7d:ba:06:41:87:5f:2b:52:66:3a:1a:e4:51:e5:da: 83:d3:ea:8b:c3:a3:e3:b2:b9:8c:47:a6:b1:82:17: fc:d3:1d:a8:3f:81:42:69:90:9e:62:f7:3d:0e:65: 92:04:f8:5a:cc:3e:e1:69:39:eb:55:5f:29:02:d0: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:6F:AD:BA:08:14:F4:24:27:A1:AB:00:51:E7:A2:01:0F:E8:D2 X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:4b:0a:05:57:93:f0:ff:b1:e5:1d:53:40:b2:76:f5:d9: 29:4b:89:98:0b:ad:4e:37:20:4f:25:72:44:f2:44:15:4f:b9: 27:26:ba:aa:e3:cd:de:76:04:59:83:cc:03:6a:51:54:75:54: 95:bd:be:11:9b:1c:bd:fa:82:51:9b:fc:7c:97:50:56:16:a9: d4:99:9e:e1:fc:0f:0f:43:9b:ff:35:8f:fe:66:63:ad:fb:fe: 61:96:7a:96:ae:27:4e:78:9c:04:28:17:78:bc:dc:64:91:8a: c3:12:0d:2a:de:82:ff:55:db:2e:e9:07:17:9e:cf:30:0d:75: 97:fc:d4:f0:b3:7e:39:54:04:86:ed:04:1c:98:4e:65:f9:c2: a4:3b:c2:ff:e1:8d:51:f8:e1:36:98:49:3c:b0:8b:a0:3c:11: 5e:a0:4a:21:d9:ce:95:f1:5a:fc:46:0a:18:6a:1f:86:a3:0f: c2:fe:22:47:3c:25:af:02:b3:e2:23:e1:c5:78:4a:44:e5:9d: 8f:47:f5:d8:ed:4c:55:5e:d2:2a:3f:70:3d:e1:7b:9a:c9:84: b6:c2:46:41:47:3f:dd:0b:7e:ab:d0:30:25:d1:63:ed:c2:77: f4:b0:36:2e:0b:91:cf:40:36:6e:22:32:9a:3b:20:89:f3:13: b3:d3:ed:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTN7R+1ESMoa+S+icjfN3kRHy6s4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA2MDMxNjE2NTZaFw0yNTA2MDYxODI2NTZaMDMxMTAvBgNV BAMTKDBCOTY2RkFEQkEwODE0RjQyNDI3QTFBQjAwNTFFN0EyMDEwRkU4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOYdZaY9S/BuNiZsrWgZTrOZq pyYSHXcUm9ebIkDnK7j9T+iRdhsaYgNnpVoJnBUug1fGA3rWdvn6iWoKjVaiQdLR FtfMYApmIa5S3fKuWxkVnX1YUxs/D5LycrAnzKPA+8okmgQ/ubq3S6i+ajDHwOja iVXFMMECj8bIwTXWH8CM4oBGi3WiQLxAdHbNTTajnBAi3OYo+fs/0MnSdin/k9sS R9xFhLHzpFcJxvEcRA+k/CAROqYVkcQJipm4WtpshH26BkGHXytSZjoa5FHl2oPT 6ovDo+OyuYxHprGCF/zTHag/gUJpkJ5i9z0OZZIE+FrMPuFpOetVXykC0Fl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5ZvrboIFPQkJ6GrAFHnogEP6NIwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3iSwoFV5Pw/7HlHVNAsnb12SlLiZgLrU43 IE8lckTyRBVPuScmuqrjzd52BFmDzANqUVR1VJW9vhGbHL36glGb/HyXUFYWqdSZ nuH8Dw9Dm/81j/5mY637/mGWepauJ054nAQoF3i83GSRisMSDSregv9V2y7pBxee zzANdZf81PCzfjlUBIbtBByYTmX5wqQ7wv/hjVH44TaYSTywi6A8EV6gSiHZzpXx WvxGChhqH4ajD8L+Ikc8Ja8Cs+Ij4cV4SkTlnY9H9djtTFVe0io/cD3he5rJhLbC RkFHP90LfqvQMCXRY+3Cd/SwNi4Lkc9ANm4iMpo7IInzE7PT7ZQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:02 2025 by rpki-client