$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json) Hash identifier: N394TPu63tQo5TUG+GPd9sklSy9Bf3HD/r5s/AaWJQE= Subject key identifier: AB:DA:E1:BE:05:8C:F0:40:70:E7:77:51:3A:42:CD:E9:78:94:2C:9E Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Certificate serial: 5FA9D9A8D5ACC1AB6E9ADBD659AA400AAB29F242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft Manifest number: 0142 Signing time: Sat 18 Oct 2025 18:11:09 +0000 Manifest this update: Sat 18 Oct 2025 18:06:09 +0000 Manifest next update: Tue 21 Oct 2025 21:36:09 +0000 Files and hashes: 1: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=) 2: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: 6PoNrJHt7kacQ0geA5WdDyPF2Ntf3DJvwsxf4Ph5Sns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a9:d9:a8:d5:ac:c1:ab:6e:9a:db:d6:59:aa:40:0a:ab:29:f2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Validity Not Before: Oct 18 18:06:09 2025 GMT Not After : Oct 21 21:36:09 2025 GMT Subject: CN=ABDAE1BE058CF04070E777513A42CDE978942C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:f4:5f:03:7b:51:06:4f:78:78:6c:0d:d3: 53:91:cb:b6:36:07:73:d6:19:2c:46:27:ab:e6:92: 89:71:64:a6:09:a2:a5:5b:65:28:72:a8:85:f2:2a: c9:6f:a6:d4:79:b0:6e:5a:e3:8d:6d:58:a1:4e:93: 76:1b:54:b2:82:a6:fd:cd:a3:a1:22:5b:57:60:68: 18:e5:89:84:8d:f6:f3:3d:23:e4:de:16:6d:b6:72: 57:c6:dd:b7:12:f5:60:86:64:19:fb:bd:82:7b:ca: 5c:af:68:3a:dd:f0:be:78:ee:b2:68:f3:da:89:4b: 2b:9b:37:f0:86:a3:8e:8c:40:1e:f6:86:96:86:a7: 94:18:ed:8c:4a:74:e9:a1:cf:d5:f6:1b:cd:1e:34: 09:f0:9f:b0:67:fe:49:bc:dc:85:9f:ba:bf:2f:4f: dd:ca:fb:40:fe:c5:05:b4:a4:5c:0d:ef:a4:69:da: 44:09:06:a3:59:38:90:17:15:a4:9b:9e:64:d9:ab: 52:82:29:0d:63:bf:59:be:6b:42:fe:6e:7d:06:d5: c0:a7:c1:c8:38:71:ad:e9:d1:b2:b4:13:7c:a6:01: c1:d5:92:ed:50:60:40:b6:bd:95:6e:9d:ff:0a:b9: e3:61:86:ed:44:aa:32:c6:48:83:46:b1:da:65:cb: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DA:E1:BE:05:8C:F0:40:70:E7:77:51:3A:42:CD:E9:78:94:2C:9E X509v3 Authority Key Identifier: keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b5:c3:86:08:e9:45:07:a2:61:78:e6:7c:96:fb:ab:7b:80: c3:6c:07:77:4a:04:41:45:a0:f2:5d:e5:d6:8f:ac:cc:88:2b: 68:da:ec:98:22:05:72:a7:1f:68:4d:2c:7c:19:ea:77:22:7d: e2:87:1e:69:8c:77:35:54:da:0f:79:f2:88:75:f3:af:c9:00: e8:dd:59:0e:17:20:24:9f:45:f9:00:85:26:ce:e3:1b:27:1d: 7c:7b:3a:4e:04:f6:2c:ba:67:ef:b4:44:d4:04:6a:f9:fa:10: 87:d7:4a:ac:d9:02:ea:4a:44:df:b5:e8:1c:c0:91:4b:49:e3: 6d:d1:1a:eb:27:da:bb:65:da:dc:72:f3:af:2d:21:9f:8f:97: 57:62:c4:39:d8:19:86:b8:77:2d:bc:3b:3d:5b:1d:14:a0:8e: 88:ff:2e:4d:33:d5:28:25:24:12:d1:7b:94:be:1b:5c:ef:ff: e8:d1:d1:de:78:c5:7f:5c:1a:1a:6a:98:0b:4c:03:56:99:f0: 58:79:94:25:fa:c0:fe:53:4a:66:4c:4f:3d:57:e9:e9:9b:26: ef:c8:eb:ec:4a:ff:14:05:bd:b7:4c:5a:a2:9d:71:14:9f:d2: de:75:3a:19:a9:ed:96:a9:65:dd:05:7f:39:e6:73:32:70:88: d9:27:8b:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6nZqNWswatumtvWWapACqsp8kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFD QzYxMDhCMjAeFw0yNTEwMTgxODA2MDlaFw0yNTEwMjEyMTM2MDlaMDMxMTAvBgNV BAMTKEFCREFFMUJFMDU4Q0YwNDA3MEU3Nzc1MTNBNDJDREU5Nzg5NDJDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2vRfA3tRBk94eGwN01ORy7Y2 B3PWGSxGJ6vmkolxZKYJoqVbZShyqIXyKslvptR5sG5a441tWKFOk3YbVLKCpv3N o6EiW1dgaBjliYSN9vM9I+TeFm22clfG3bcS9WCGZBn7vYJ7ylyvaDrd8L547rJo 89qJSyubN/CGo46MQB72hpaGp5QY7YxKdOmhz9X2G80eNAnwn7Bn/km83IWfur8v T93K+0D+xQW0pFwN76Rp2kQJBqNZOJAXFaSbnmTZq1KCKQ1jv1m+a0L+bn0G1cCn wcg4ca3p0bK0E3ymAcHVku1QYEC2vZVunf8KueNhhu1EqjLGSINGsdply6ZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq9rhvgWM8EBw53dROkLN6XiULJ4wHwYDVR0j BBgwFoAUg6qfggmTMxDIfZ+FvSN56sxhCLIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzdlMDk0Yy1jOTNiLTRkNzItYjlmMi03NWIyNTJhYjgzZjkvMC84M0FBOUY4MjA5 OTMzMzEwQzg3RDlGODVCRDIzNzlFQUNDNjEwOEIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFDQzYx MDhCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5 ZjItNzViMjUyYWI4M2Y5LzAvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5 RUFDQzYxMDhCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG1w4YI6UUHomF45nyW+6t7gMNsB3dKBEFF oPJd5daPrMyIK2ja7JgiBXKnH2hNLHwZ6ncifeKHHmmMdzVU2g958oh186/JAOjd WQ4XICSfRfkAhSbO4xsnHXx7Ok4E9iy6Z++0RNQEavn6EIfXSqzZAupKRN+16BzA kUtJ423RGusn2rtl2txy868tIZ+Pl1dixDnYGYa4dy28Oz1bHRSgjoj/Lk0z1Sgl JBLRe5S+G1zv/+jR0d54xX9cGhpqmAtMA1aZ8Fh5lCX6wP5TSmZMTz1X6embJu/I 6+xK/xQFvbdMWqKdcRSf0t51Ohmp7ZapZd0FfznmczJwiNkni5g= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:52 2025 by rpki-client