$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: EU8s8vLbqqJA7oPsOmnrP5UqzeWJhVxEiNSV9i1jwf4= Subject key identifier: 92:AE:A4:0D:CE:90:F0:BD:78:02:46:9E:42:B5:5C:2D:58:6A:D5:DB Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 10051689097E1631A580814A76F7DE74C3960A92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 0148 Signing time: Mon 20 Oct 2025 06:11:15 +0000 Manifest this update: Mon 20 Oct 2025 06:06:15 +0000 Manifest next update: Thu 23 Oct 2025 16:39:15 +0000 Files and hashes: 1: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: KYg2eP+qnyahabsQS5xdyRs5Ya80Q1XBZpzh8eR7p5s=) 2: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dY9Wzss484cDHvQy3+/U0nuyLvB8FHOPJZ4fbRc99IE=) 4: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: 7mHZGsyvX+cMUeVBlNryIFFTEz/LI/rSsdnie67o79g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:05:16:89:09:7e:16:31:a5:80:81:4a:76:f7:de:74:c3:96:0a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Oct 20 06:06:15 2025 GMT Not After : Oct 23 16:39:15 2025 GMT Subject: CN=92AEA40DCE90F0BD7802469E42B55C2D586AD5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b9:36:22:8d:b2:5c:e4:73:fa:b6:1c:a5:10: 4e:5d:19:09:09:c5:a1:f7:e0:4d:f2:69:73:f2:7e: df:14:79:60:52:a6:8f:f9:0e:2a:87:fb:a9:70:92: dd:a8:61:29:ca:e4:e8:fd:d8:ce:bf:a3:6a:82:b9: 4f:db:8f:1e:00:b0:a4:26:c5:3d:69:34:ea:a8:91: 8e:66:f5:ba:96:d2:32:f2:75:c5:97:68:6d:22:de: 2c:8b:2f:24:87:78:57:64:ed:b8:bc:02:8f:07:75: 06:8a:71:00:7c:13:4b:40:80:27:45:15:62:a1:e1: 30:ad:88:aa:79:06:af:3f:e2:80:40:bc:b6:4e:e2: 32:d2:c1:64:3e:98:80:2b:d3:8a:b8:a8:88:09:27: e7:90:28:6e:f6:98:b3:a6:a2:33:30:51:e6:85:2f: 53:0c:71:20:68:25:77:2c:cd:02:12:06:42:96:1e: 66:90:b3:c8:48:4f:37:dc:df:95:b1:99:c3:c5:52: 84:44:a0:33:e5:1c:c6:92:9c:ca:e7:02:97:1c:0b: 99:0b:60:88:23:8d:c9:2d:3d:8a:7b:41:e9:91:cf: 91:27:27:e4:a4:c2:12:b2:9b:38:ca:26:a8:9f:ec: 47:e6:f7:1b:45:84:a4:e0:21:24:29:96:df:3a:b9: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:A4:0D:CE:90:F0:BD:78:02:46:9E:42:B5:5C:2D:58:6A:D5:DB X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:cb:f7:ed:d8:04:4e:68:7e:a0:40:69:1a:4c:9b:fb:60:4b: 62:17:c4:d4:33:11:c9:5f:b6:af:34:02:16:96:97:c7:2e:25: 54:a6:13:99:08:f8:13:04:0c:73:ef:3a:dc:c2:f9:58:1e:23: 9e:05:b2:fc:70:7e:fc:d1:4b:bf:b5:2f:50:a4:a5:82:a4:47: 37:25:9d:e7:7e:91:e1:0e:16:0e:b2:dd:33:3a:ac:6d:6a:19: 57:1f:c1:68:09:e1:8c:38:7a:72:ca:38:72:82:d5:97:05:3b: 1c:65:06:a8:c6:b8:e1:97:6a:93:db:b6:21:9a:8f:55:47:af: d8:12:6d:75:a6:f2:7f:a8:ab:68:4d:88:ef:3b:39:1d:7f:43: 3c:01:9b:88:e6:6e:30:c2:97:6f:86:9b:80:b7:24:e8:ac:d6: 64:55:27:11:8c:b6:be:93:c5:2a:03:a1:d2:62:aa:be:67:d9: 55:52:63:c5:39:6d:dc:2a:23:1b:64:7c:a7:7f:11:1d:57:33: a1:9e:e4:4e:44:c3:c9:c8:1b:80:f3:5b:46:d0:97:69:ec:c8: 8d:dd:ae:d7:c8:96:23:83:8b:5f:f9:a3:5d:35:62:fd:7a:cd: 93:35:27:ee:48:41:35:21:d2:6e:7e:b5:df:0c:f6:00:34:57: 62:9f:ad:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAUWiQl+FjGlgIFKdvfedMOWCpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTEwMjAwNjA2MTVaFw0yNTEwMjMxNjM5MTVaMDMxMTAvBgNV BAMTKDkyQUVBNDBEQ0U5MEYwQkQ3ODAyNDY5RTQyQjU1QzJENTg2QUQ1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1uTYijbJc5HP6thylEE5dGQkJ xaH34E3yaXPyft8UeWBSpo/5DiqH+6lwkt2oYSnK5Oj92M6/o2qCuU/bjx4AsKQm xT1pNOqokY5m9bqW0jLydcWXaG0i3iyLLySHeFdk7bi8Ao8HdQaKcQB8E0tAgCdF FWKh4TCtiKp5Bq8/4oBAvLZO4jLSwWQ+mIAr04q4qIgJJ+eQKG72mLOmojMwUeaF L1MMcSBoJXcszQISBkKWHmaQs8hITzfc35WxmcPFUoREoDPlHMaSnMrnApccC5kL YIgjjcktPYp7QemRz5EnJ+SkwhKymzjKJqif7Efm9xtFhKTgISQplt86uZAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkq6kDc6Q8L14AkaeQrVcLVhq1dswHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTL9+3YBE5ofqBAaRpMm/tgS2IXxNQzEclf tq80AhaWl8cuJVSmE5kI+BMEDHPvOtzC+VgeI54FsvxwfvzRS7+1L1CkpYKkRzcl ned+keEOFg6y3TM6rG1qGVcfwWgJ4Yw4enLKOHKC1ZcFOxxlBqjGuOGXapPbtiGa j1VHr9gSbXWm8n+oq2hNiO87OR1/QzwBm4jmbjDCl2+Gm4C3JOis1mRVJxGMtr6T xSoDodJiqr5n2VVSY8U5bdwqIxtkfKd/ER1XM6Ge5E5Ew8nIG4DzW0bQl2nsyI3d rtfIliODi1/5o101Yv16zZM1J+5IQTUh0m5+td8M9gA0V2KfrfM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:39:08 2025 by rpki-client