$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: 5n/Fdy3zdMPcXeYkqwrFqe2y8sxfGPC7W9OOd/sKNis= Subject key identifier: CA:F3:1E:55:B4:0C:A7:6E:14:E9:7A:22:31:A5:F2:10:60:EB:0E:72 Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 0B95D9DB38CA45364FE8573039BBF7EBE04ACCD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: FB Signing time: Fri 02 May 2025 23:11:12 +0000 Manifest this update: Fri 02 May 2025 23:06:12 +0000 Manifest next update: Tue 06 May 2025 09:22:12 +0000 Files and hashes: 1: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 2: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) 3: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: IcpEFxL1UH5+z5MkeSWXjanF5MCp7zT/Wn+GzlZl0Mc=) 4: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 09:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:95:d9:db:38:ca:45:36:4f:e8:57:30:39:bb:f7:eb:e0:4a:cc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: May 2 23:06:12 2025 GMT Not After : May 6 09:22:12 2025 GMT Subject: CN=CAF31E55B40CA76E14E97A2231A5F21060EB0E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:4e:a8:8b:ab:09:b6:51:4e:09:19:83:8e: 9e:5b:81:8b:3b:f1:de:99:c4:54:bf:7c:3a:ab:62: 28:cb:3b:bb:e9:da:31:3d:6c:36:2c:82:58:e6:a5: b0:5f:ca:22:7a:6a:c9:a5:1c:d4:a9:71:37:96:fd: f4:25:8b:9b:26:48:22:4b:e7:61:3d:bd:54:21:e8: 81:25:cd:e7:cf:a9:81:2c:6b:52:66:c0:5c:7d:ac: 70:57:27:88:c8:7d:43:07:0a:94:d5:22:23:55:1c: c0:33:92:25:3c:18:c9:08:21:de:3c:cc:4d:7e:de: f7:04:1f:d3:b5:e8:d6:57:1b:ce:97:79:96:5b:dc: 4f:8d:66:9d:83:29:2a:b0:3b:38:67:21:da:b7:ff: b9:c5:55:fd:6c:54:eb:ac:2f:68:65:46:69:0d:3b: 84:c0:7d:56:72:9b:f0:4f:2e:aa:67:05:29:95:af: 45:68:a0:01:2d:57:84:04:d5:16:31:8e:4d:c2:e3: f1:9c:f6:80:87:b6:79:fe:34:69:1a:31:c6:e7:09: df:a6:b1:4c:98:e9:67:a0:17:2f:82:de:45:58:05: f3:2f:d5:7d:1b:51:bc:d3:a5:ba:e9:6d:25:0d:b6: 5c:2a:0b:51:a2:75:55:43:97:0d:be:7b:22:4f:7d: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F3:1E:55:B4:0C:A7:6E:14:E9:7A:22:31:A5:F2:10:60:EB:0E:72 X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e7:e7:43:29:05:7a:53:e2:bc:05:64:27:d4:42:ee:5c:f7: 1e:e7:0a:a2:d5:72:4d:01:69:e4:40:89:a0:c0:70:32:9a:77: 4c:6e:a3:42:77:96:95:3d:b8:c4:ff:65:cb:91:98:9f:a2:66: 83:a1:de:7b:38:f2:eb:03:97:0d:fb:3c:ea:53:20:65:a8:ff: bc:3e:88:45:1d:77:15:8f:ac:37:16:d2:83:ab:cc:ee:89:7b: 4a:fa:fb:a4:53:44:bb:6e:ce:af:86:a2:64:ab:e1:ce:f2:8f: 7c:94:fa:14:04:23:67:7c:77:9e:59:7b:30:b5:bb:e2:18:1a: f2:b9:a4:b2:f9:a6:de:80:15:bf:83:70:4e:54:c9:f5:3a:55: 18:f4:f8:82:a9:06:0d:e4:4f:a6:6c:8e:f9:b8:09:ac:a6:c0: 93:16:df:2e:fa:1e:6f:df:4f:a7:57:68:98:aa:96:3d:46:31: 15:06:66:23:46:b9:20:b2:65:a6:1f:8d:44:6d:d9:e6:ed:d4: d4:72:33:40:92:00:72:f7:a2:52:d4:1a:a2:7e:25:0f:3c:fe: 55:5a:17:81:cd:8d:27:16:6b:1d:f7:b0:4c:c9:b4:9c:4b:03: 6b:91:fb:7f:8f:09:69:86:bd:2a:0e:59:16:4f:17:2a:45:3f: 17:b7:41:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5XZ2zjKRTZP6FcwObv36+BKzNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA1MDIyMzA2MTJaFw0yNTA1MDYwOTIyMTJaMDMxMTAvBgNV BAMTKENBRjMxRTU1QjQwQ0E3NkUxNEU5N0EyMjMxQTVGMjEwNjBFQjBFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYk6oi6sJtlFOCRmDjp5bgYs7 8d6ZxFS/fDqrYijLO7vp2jE9bDYsgljmpbBfyiJ6asmlHNSpcTeW/fQli5smSCJL 52E9vVQh6IElzefPqYEsa1JmwFx9rHBXJ4jIfUMHCpTVIiNVHMAzkiU8GMkIId48 zE1+3vcEH9O16NZXG86XeZZb3E+NZp2DKSqwOzhnIdq3/7nFVf1sVOusL2hlRmkN O4TAfVZym/BPLqpnBSmVr0VooAEtV4QE1RYxjk3C4/Gc9oCHtnn+NGkaMcbnCd+m sUyY6WegFy+C3kVYBfMv1X0bUbzTpbrpbSUNtlwqC1GidVVDlw2+eyJPfQ3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyvMeVbQMp24U6XoiMaXyEGDrDnIwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXn50MpBXpT4rwFZCfUQu5c9x7nCqLVck0B aeRAiaDAcDKad0xuo0J3lpU9uMT/ZcuRmJ+iZoOh3ns48usDlw37POpTIGWo/7w+ iEUddxWPrDcW0oOrzO6Je0r6+6RTRLtuzq+GomSr4c7yj3yU+hQEI2d8d55ZezC1 u+IYGvK5pLL5pt6AFb+DcE5UyfU6VRj0+IKpBg3kT6Zsjvm4CaymwJMW3y76Hm/f T6dXaJiqlj1GMRUGZiNGuSCyZaYfjURt2ebt1NRyM0CSAHL3olLUGqJ+JQ88/lVa F4HNjScWax33sEzJtJxLA2uR+3+PCWmGvSoOWRZPFypFPxe3QSM= -----END CERTIFICATE-----Generated at Tue May 6 00:08:55 2025 by rpki-client