$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft File: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft (raw, json) Hash identifier: /dVFhUuNDycEDnNy1OFlmckyPwEk8fF7lDH0G3m18S8= Subject key identifier: CB:B2:9E:A9:36:5D:43:F7:89:F3:41:01:7B:E6:84:BB:12:13:AC:88 Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Certificate serial: 054C1458CE4C291C6E1317865A59B5B2824FBA44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft Manifest number: 0238 Signing time: Fri 17 Oct 2025 22:52:04 +0000 Manifest this update: Fri 17 Oct 2025 22:47:04 +0000 Manifest next update: Tue 21 Oct 2025 08:53:04 +0000 Files and hashes: 1: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl (hash: OwGbVL30rro4xcgeIYONHXymR4a9mXTJrxxwfnO8kio=) 2: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: Ok/OluvS5h7lKD3sSNYwAY0KsbjVMJ4hxy4FEh3uKmk=) 3: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: y57hfH1lBOVunH6wiRrVTULW7uqhPZnP/h9yu/EhF5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4c:14:58:ce:4c:29:1c:6e:13:17:86:5a:59:b5:b2:82:4f:ba:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Validity Not Before: Oct 17 22:47:04 2025 GMT Not After : Oct 21 08:53:04 2025 GMT Subject: CN=CBB29EA9365D43F789F341017BE684BB1213AC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:47:5e:05:c7:d0:20:62:0e:e9:32:ba:fd: 23:fc:e0:80:90:e7:51:5e:26:7f:e6:c3:e6:48:1d: e6:36:b6:fd:c8:29:22:49:31:6e:92:5f:0f:2a:ec: 6c:be:bf:b5:80:87:5e:29:82:bf:4e:62:3e:ef:f0: cc:2f:7c:6b:61:e9:0f:a1:df:22:30:e7:fa:00:26: d5:83:e7:a6:51:d2:6f:e2:50:29:69:96:45:e8:f4: 88:7c:4a:eb:c8:66:22:05:93:d7:8b:b1:eb:93:c1: 99:b1:21:fc:ee:62:c2:77:2b:04:81:81:17:38:b0: eb:32:33:99:e5:8d:7c:7b:1f:6d:26:5b:57:7d:b8: 4e:67:11:7d:6e:e4:78:de:90:2c:ce:27:c3:ee:ab: 96:e5:78:8f:ac:df:53:17:f8:b0:a0:47:ad:f1:28: a2:7a:7a:59:e4:98:bd:df:86:da:58:ab:ec:6c:27: 7b:62:f3:6e:fa:c5:1a:8d:a9:7d:f5:cd:5c:74:f1: 3c:13:f2:b7:c3:0d:22:a6:4a:49:f0:2d:84:0c:59: 6a:60:e1:d9:cd:bf:1d:b6:c8:46:3d:a2:d3:5a:d6: 6a:8c:f3:b3:15:07:8f:81:47:19:c0:fc:82:d6:4c: 53:f7:8d:3e:ee:58:42:e4:d6:57:43:60:da:2a:3d: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B2:9E:A9:36:5D:43:F7:89:F3:41:01:7B:E6:84:BB:12:13:AC:88 X509v3 Authority Key Identifier: keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:77:81:94:3f:c5:f8:d9:04:d3:56:20:1e:88:bd:22:23:4d: 6d:c2:a8:77:22:cc:6b:1e:7b:6c:b5:d4:ef:d8:d2:11:d4:bf: fa:4f:bd:f0:b8:e5:dc:79:85:9d:7f:d2:7f:30:ff:93:52:26: 82:f3:fa:a0:7a:bd:a6:8d:2c:39:18:67:2a:29:e5:ee:1e:98: 2c:8a:34:f6:68:fd:99:bf:a8:a2:0a:96:97:f6:ba:32:d9:6e: c1:08:b9:78:21:e1:c4:25:4d:8e:01:06:88:38:97:47:ef:3f: 3e:83:5f:89:d9:cd:1a:b8:04:f2:3e:eb:07:21:96:93:eb:0b: 9b:fc:93:3a:f2:22:2a:e0:91:f4:04:9c:a7:d3:2d:55:a7:30: 54:80:35:35:f8:05:cb:d0:65:77:2f:84:63:5e:72:6c:74:f3: 36:65:5f:9a:65:4e:25:28:6a:1d:1f:00:99:c1:25:57:47:18: e3:05:d2:23:7b:4d:cd:87:a5:be:89:fc:8e:33:42:07:76:a0: fb:3f:a3:ef:45:63:4d:0c:1e:4f:29:59:73:ec:4f:16:f8:2b: 4a:38:2d:0c:0e:b9:ae:4e:15:a6:b8:45:0d:de:59:09:87:f5: cc:a2:5b:93:ef:6f:1f:5d:d6:86:86:9b:c2:03:5b:86:7a:02: 46:7a:d7:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUwUWM5MKRxuExeGWlm1soJPukQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF MEVDMjJGNjAeFw0yNTEwMTcyMjQ3MDRaFw0yNTEwMjEwODUzMDRaMDMxMTAvBgNV BAMTKENCQjI5RUE5MzY1RDQzRjc4OUYzNDEwMTdCRTY4NEJCMTIxM0FDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yEdeBcfQIGIO6TK6/SP84ICQ 51FeJn/mw+ZIHeY2tv3IKSJJMW6SXw8q7Gy+v7WAh14pgr9OYj7v8MwvfGth6Q+h 3yIw5/oAJtWD56ZR0m/iUClplkXo9Ih8SuvIZiIFk9eLseuTwZmxIfzuYsJ3KwSB gRc4sOsyM5nljXx7H20mW1d9uE5nEX1u5HjekCzOJ8Puq5bleI+s31MX+LCgR63x KKJ6elnkmL3fhtpYq+xsJ3ti8276xRqNqX31zVx08TwT8rfDDSKmSknwLYQMWWpg 4dnNvx22yEY9otNa1mqM87MVB4+BRxnA/ILWTFP3jT7uWELk1ldDYNoqPZ+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7KeqTZdQ/eJ80EBe+aEuxITrIgwHwYDVR0j BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRD NTVFMEVDMjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl3gZQ/xfjZBNNWIB6IvSIjTW3CqHcizGse e2y11O/Y0hHUv/pPvfC45dx5hZ1/0n8w/5NSJoLz+qB6vaaNLDkYZyop5e4emCyK NPZo/Zm/qKIKlpf2ujLZbsEIuXgh4cQlTY4BBog4l0fvPz6DX4nZzRq4BPI+6wch lpPrC5v8kzryIirgkfQEnKfTLVWnMFSANTX4BcvQZXcvhGNecmx08zZlX5plTiUo ah0fAJnBJVdHGOMF0iN7Tc2Hpb6J/I4zQgd2oPs/o+9FY00MHk8pWXPsTxb4K0o4 LQwOua5OFaa4RQ3eWQmH9cyiW5Pvbx9d1oaGm8IDW4Z6AkZ61+w= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:37 2025 by rpki-client