$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: SlS6frezcYF1QPZKJ0pm00TuAowy21ke051KH1Jy9C4= Subject key identifier: 45:6D:0C:F9:98:66:4A:1C:7D:B7:09:4C:93:AA:91:1D:4B:9F:FB:C3 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 3E862FA0773C61F1DEF98498287D6C8DBCC001A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 0209 Signing time: Sun 07 Sep 2025 03:41:27 +0000 Manifest this update: Sun 07 Sep 2025 03:36:27 +0000 Manifest next update: Wed 10 Sep 2025 14:34:27 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: luAhLAQkqkhGatVIhs2nUPCJer1FZRNTn1Iaglyulwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:86:2f:a0:77:3c:61:f1:de:f9:84:98:28:7d:6c:8d:bc:c0:01:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Sep 7 03:36:27 2025 GMT Not After : Sep 10 14:34:27 2025 GMT Subject: CN=456D0CF998664A1C7DB7094C93AA911D4B9FFBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:56:40:0c:b2:5e:87:08:e5:7f:9a:1c:df: a1:70:98:3c:66:97:84:a1:f5:56:4d:d0:7d:e8:42: b0:ba:2d:41:50:c8:1a:99:10:b4:84:30:1c:39:e1: a2:b0:79:6a:01:3d:66:dc:12:35:07:41:14:64:6e: a0:c5:b2:62:8d:e2:a3:2e:7e:e5:37:7b:53:a3:13: 03:5c:72:12:93:c7:9e:eb:af:51:33:0e:1a:c3:d2: 89:30:46:93:f3:4f:6b:dc:08:ff:91:db:d3:6b:3a: 0b:67:53:f6:bf:5a:e6:44:96:c3:9d:03:21:1d:f8: 44:4e:2e:c6:e1:1b:53:5e:b1:02:34:66:3e:6f:e1: 67:19:40:a1:c6:00:63:6d:79:e1:66:51:45:b2:ff: 92:4b:bf:54:4c:47:0e:d8:16:00:72:36:c7:61:59: b8:ba:ba:e8:d5:65:4d:36:bf:23:5c:2c:72:41:7c: a2:d3:2c:d4:c7:bc:a0:3f:37:30:b7:3c:b7:f2:2d: 21:fc:73:96:db:7c:e8:0f:d9:5c:3a:9d:6e:66:31: 96:65:7c:67:fd:c5:0e:b1:71:8d:3d:07:df:1a:c7: 75:65:5a:75:08:2e:c5:44:24:3b:12:1c:03:22:7a: 89:49:a7:4f:17:43:08:4e:c2:9a:c6:d5:a7:e9:2b: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:0C:F9:98:66:4A:1C:7D:B7:09:4C:93:AA:91:1D:4B:9F:FB:C3 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2d:9f:8d:e1:46:74:6d:34:46:b8:8b:4d:a5:e7:e8:26:2f: 37:df:4c:67:0a:eb:11:68:24:28:63:26:1a:17:7a:26:cd:d0: c9:15:9b:b0:52:dc:b8:29:1b:8a:4c:11:23:03:a6:64:79:ee: a4:8a:dc:44:06:74:5a:a8:0b:75:7c:07:90:9c:f1:46:d3:7d: 9a:c2:1f:80:8d:b6:07:1e:6a:44:1a:61:d8:f2:e6:11:87:4e: 71:d8:bc:75:61:5d:11:a4:e8:f0:3a:b1:9d:96:28:36:bd:1e: 02:77:bd:0d:5c:d8:31:ce:81:cb:92:38:7f:3f:34:1a:4e:0f: d7:21:76:94:26:d3:67:76:1e:b0:f7:89:8a:d8:ca:c8:2c:a2: ac:42:73:09:9a:e5:fa:40:51:0a:2b:1e:51:6a:40:9f:57:44: 87:00:c9:b9:8d:f5:3a:95:c4:d7:75:7b:02:98:6f:22:e9:b2: e2:a2:62:8a:39:d1:02:7e:51:2a:7b:19:c1:48:59:2a:70:b9: ee:eb:e9:45:61:69:0a:aa:a3:f3:55:33:67:54:d0:9d:78:9d: 50:a2:44:12:71:74:54:63:2a:86:45:d7:ef:94:37:8a:a0:78: 40:0a:98:8f:46:4f:01:b7:38:70:0a:0d:ef:4f:3f:11:4d:5e: b0:47:42:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoYvoHc8YfHe+YSYKH1sjbzAAacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA5MDcwMzM2MjdaFw0yNTA5MTAxNDM0MjdaMDMxMTAvBgNV BAMTKDQ1NkQwQ0Y5OTg2NjRBMUM3REI3MDk0QzkzQUE5MTFENEI5RkZCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqFZADLJehwjlf5oc36FwmDxm l4Sh9VZN0H3oQrC6LUFQyBqZELSEMBw54aKweWoBPWbcEjUHQRRkbqDFsmKN4qMu fuU3e1OjEwNcchKTx57rr1EzDhrD0okwRpPzT2vcCP+R29NrOgtnU/a/WuZElsOd AyEd+EROLsbhG1NesQI0Zj5v4WcZQKHGAGNteeFmUUWy/5JLv1RMRw7YFgByNsdh Wbi6uujVZU02vyNcLHJBfKLTLNTHvKA/NzC3PLfyLSH8c5bbfOgP2Vw6nW5mMZZl fGf9xQ6xcY09B98ax3VlWnUILsVEJDsSHAMieolJp08XQwhOwprG1afpK5Q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURW0M+ZhmShx9twlMk6qRHUuf+8MwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAtn43hRnRtNEa4i02l5+gmLzffTGcK6xFo JChjJhoXeibN0MkVm7BS3LgpG4pMESMDpmR57qSK3EQGdFqoC3V8B5Cc8UbTfZrC H4CNtgceakQaYdjy5hGHTnHYvHVhXRGk6PA6sZ2WKDa9HgJ3vQ1c2DHOgcuSOH8/ NBpOD9chdpQm02d2HrD3iYrYysgsoqxCcwma5fpAUQorHlFqQJ9XRIcAybmN9TqV xNd1ewKYbyLpsuKiYoo50QJ+USp7GcFIWSpwue7r6UVhaQqqo/NVM2dU0J14nVCi RBJxdFRjKoZF1++UN4qgeEAKmI9GTwG3OHAKDe9PPxFNXrBHQrw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:16 2025 by rpki-client