$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: GY/3y3z0UbxaDjpwN/LOXEAcOpe+ZjtP3V1tfeCMWYQ= Subject key identifier: FB:D3:6E:87:A9:AB:7D:EB:42:56:94:8A:F9:A6:4F:64:B1:A1:F6:8C Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 5A682705038A86723372BDC1ADAD9D3DEABF8965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: EF Signing time: Sat 05 Apr 2025 08:41:09 +0000 Manifest this update: Sat 05 Apr 2025 08:36:09 +0000 Manifest next update: Tue 08 Apr 2025 16:56:09 +0000 Files and hashes: 1: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) 2: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 4: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: IzmbbnLnz/RMTGwz4L3oxUbS1NTEEfVZgl6Dphqg9Mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:68:27:05:03:8a:86:72:33:72:bd:c1:ad:ad:9d:3d:ea:bf:89:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Apr 5 08:36:09 2025 GMT Not After : Apr 8 16:56:09 2025 GMT Subject: CN=FBD36E87A9AB7DEB4256948AF9A64F64B1A1F68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:28:16:47:e2:2b:fc:e7:9f:78:35:35:1a: ac:12:9e:34:df:80:ae:21:ca:77:56:2c:cd:1f:c2: 48:d8:6d:4f:16:05:1e:94:93:13:f9:c6:4f:e1:3b: 88:f4:82:fd:fd:c8:69:c1:42:35:20:88:3a:14:6b: 2d:71:99:8f:d6:0b:7a:86:67:a1:bf:cb:59:47:7f: af:30:83:aa:06:8d:19:1d:0c:ce:15:a6:54:48:74: fa:9f:df:04:9f:1a:fc:f7:41:a9:12:30:85:b9:0c: 5f:7f:9b:f0:26:4c:f3:24:c3:07:75:5e:76:30:2c: 9f:1f:44:45:f9:7c:ce:c0:32:3c:99:44:1d:c8:05: 51:6b:40:6c:59:cf:f6:fc:f4:fe:41:b3:da:b5:49: 8f:37:d2:c0:a3:fb:e1:4b:5e:44:b3:fd:62:46:1b: 2a:bb:d0:39:fa:81:2b:d0:0b:18:c9:70:2c:03:fd: f5:03:c3:21:ef:78:73:43:47:11:e1:8d:1e:5c:d1: 13:12:ea:2d:ec:b6:ca:5b:24:24:99:00:7f:fe:72: 35:a1:c7:b0:82:25:4c:f3:79:78:82:eb:4e:03:1d: fe:6c:45:ee:26:44:f0:90:c9:fe:87:34:70:ff:1e: bc:40:1c:0b:d5:d8:ff:45:6b:f5:32:f6:3b:3e:a1: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:6E:87:A9:AB:7D:EB:42:56:94:8A:F9:A6:4F:64:B1:A1:F6:8C X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8f:d2:4d:3a:23:22:ce:7f:f7:c6:8e:f2:56:9f:05:63:27: 0a:ac:fa:29:ec:28:c2:24:7b:d5:dc:81:17:43:4c:99:98:9f: 58:a7:ca:c4:e3:2d:88:78:28:5a:51:b2:fa:11:21:31:9c:20: 7e:fc:b8:b5:8d:9b:60:72:e6:89:b4:11:8a:f0:db:f2:44:c8: 94:e1:43:fb:35:c5:82:58:65:fe:62:1b:a3:ec:49:e4:69:17: b0:bf:1a:3e:23:81:29:90:78:d6:57:07:1f:66:59:1b:f0:68: 20:03:f9:4b:2a:fb:7d:cb:cc:20:b8:1d:04:45:66:21:69:75: 0a:ba:94:00:66:5f:72:1b:e0:38:8f:00:62:0d:9f:d1:a3:d7: b9:28:82:09:e5:6d:d6:4c:bb:ec:2e:33:31:89:81:4a:51:bd: 4f:9e:08:51:ab:f3:ef:77:a0:9f:4d:9a:da:2a:8c:63:b7:a3: 1a:a5:77:c6:d3:cd:23:1b:df:9d:17:ed:e9:ca:c4:07:26:be: 21:6b:ee:33:9d:a0:f6:71:0b:4c:ea:23:7c:74:71:c5:72:20: 0e:fa:9e:3e:c0:3e:9c:21:f1:28:3b:42:7f:bb:3e:24:b5:4d: 31:7a:41:fc:42:cf:a9:9d:d9:fe:f6:08:47:79:8a:95:5d:39: df:58:1b:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmgnBQOKhnIzcr3Bra2dPeq/iWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA0MDUwODM2MDlaFw0yNTA0MDgxNjU2MDlaMDMxMTAvBgNV BAMTKEZCRDM2RTg3QTlBQjdERUI0MjU2OTQ4QUY5QTY0RjY0QjFBMUY2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePigWR+Ir/OefeDU1GqwSnjTf gK4hyndWLM0fwkjYbU8WBR6UkxP5xk/hO4j0gv39yGnBQjUgiDoUay1xmY/WC3qG Z6G/y1lHf68wg6oGjRkdDM4VplRIdPqf3wSfGvz3QakSMIW5DF9/m/AmTPMkwwd1 XnYwLJ8fREX5fM7AMjyZRB3IBVFrQGxZz/b89P5Bs9q1SY830sCj++FLXkSz/WJG Gyq70Dn6gSvQCxjJcCwD/fUDwyHveHNDRxHhjR5c0RMS6i3stspbJCSZAH/+cjWh x7CCJUzzeXiC604DHf5sRe4mRPCQyf6HNHD/HrxAHAvV2P9Fa/Uy9js+odGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+9Nuh6mrfetCVpSK+aZPZLGh9owwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeP0k06IyLOf/fGjvJWnwVjJwqs+insKMIk e9XcgRdDTJmYn1inysTjLYh4KFpRsvoRITGcIH78uLWNm2By5om0EYrw2/JEyJTh Q/s1xYJYZf5iG6PsSeRpF7C/Gj4jgSmQeNZXBx9mWRvwaCAD+Usq+33LzCC4HQRF ZiFpdQq6lABmX3Ib4DiPAGINn9Gj17koggnlbdZMu+wuMzGJgUpRvU+eCFGr8+93 oJ9NmtoqjGO3oxqld8bTzSMb350X7enKxAcmviFr7jOdoPZxC0zqI3x0ccVyIA76 nj7APpwh8Sg7Qn+7PiS1TTF6QfxCz6md2f72CEd5ipVdOd9YG/c= -----END CERTIFICATE-----Generated at Sun Apr 6 00:02:17 2025 by rpki-client