$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: 80rlECAtrcAWw5UL3NrnjNk3S+eArouWkUSoNUvpW1o= Subject key identifier: 64:3A:FD:60:7A:90:4B:B8:CB:D2:89:52:C9:CE:D9:FB:6F:6B:48:B6 Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 6468BA7FC7FAFD4C7543AFD62F82125BBE8601FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 0114 Signing time: Sat 28 Jun 2025 00:21:11 +0000 Manifest this update: Sat 28 Jun 2025 00:16:11 +0000 Manifest next update: Tue 01 Jul 2025 00:51:11 +0000 Files and hashes: 1: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: Ph/Z6uCsn2el3lClnfjgfhO2CG+cKCM7uOxaOdJWdBQ=) 2: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: cmehz3unFDq/m/HSU3xfJVWnULqlAOmDCa2f/3f1n8Q=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: TQUOGgnpygpm3E58lKQ0df5PgwIbrwKhVW+LboJlm4g=) 4: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: ITLyFu1Ls0Ci12l43DmrSkBj5B2lVNQ/8Ynx9TiHrL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:68:ba:7f:c7:fa:fd:4c:75:43:af:d6:2f:82:12:5b:be:86:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Jun 28 00:16:11 2025 GMT Not After : Jul 1 00:51:11 2025 GMT Subject: CN=643AFD607A904BB8CBD28952C9CED9FB6F6B48B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:81:ae:30:b9:42:10:2b:88:12:63:ac:fb: 41:1b:18:21:69:b6:5a:f2:47:78:e7:02:fb:ca:29: de:b6:96:f0:09:f7:d6:c4:8e:a5:f9:7f:3d:43:f7: 6d:6f:99:b9:ef:70:8e:39:10:e1:19:43:9b:fe:a5: 06:2a:c6:0a:c0:60:35:53:85:39:0e:d2:6a:5d:0b: 20:07:be:20:df:bf:a6:16:e4:2b:5d:b1:b8:76:cf: 68:d1:0b:31:ee:1f:65:6e:43:ca:97:9c:c3:1a:04: 3c:c2:6c:88:b1:c3:ca:3b:af:a4:1e:da:34:39:e4: b4:83:6f:27:c2:61:a2:c2:f9:c6:dd:3b:86:83:a6: a5:33:47:11:35:ea:6c:bc:78:ec:9c:eb:ad:f9:7e: 9b:a3:e0:c3:56:50:00:9c:fb:a6:f8:9d:15:e3:4d: a7:66:c1:8b:86:26:02:d3:fc:96:77:68:fd:4c:51: 7d:ce:d0:15:40:39:24:c1:12:d1:2b:c0:4c:da:e4: d4:04:36:7a:7c:3b:d4:1f:e7:71:a1:4b:7f:a7:72: 5f:cc:fc:f6:dd:09:dc:15:c7:36:2d:39:db:84:68: 7a:e2:2f:69:7b:37:4e:d4:d2:0a:96:bf:41:a8:06: 08:2a:9a:fd:7b:ea:0f:93:9b:ec:25:b5:3d:20:c7: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:FD:60:7A:90:4B:B8:CB:D2:89:52:C9:CE:D9:FB:6F:6B:48:B6 X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:82:27:27:90:c7:10:e2:64:cf:71:7a:90:55:89:fa:2c:c7: 1d:89:a3:e3:b6:02:70:1f:f0:27:ec:a1:4d:cd:23:26:ce:6a: 2b:b3:2c:bf:3e:a8:74:ad:11:46:ec:de:84:c1:d0:94:0b:ef: 7a:4b:cc:41:ac:84:7c:7a:ba:7e:bb:e9:31:2e:8b:c7:62:34: ba:90:ee:5d:8b:80:71:df:9e:e8:77:e3:c3:b2:00:46:dc:c1: 20:d3:39:5e:88:17:f3:82:3d:5a:2d:2c:71:45:6c:fa:d4:90: 4a:8c:ec:ae:22:10:16:9e:d3:7a:0f:b9:1f:5b:a6:d4:72:58: e4:f7:6b:ac:d1:6c:4d:24:3a:36:29:21:9b:53:ae:20:c3:20: e0:b6:18:9e:f3:ac:51:79:c4:a5:78:2b:04:a5:92:ad:2a:b9: f8:e4:67:76:60:79:a8:f2:02:dc:50:f7:7d:87:4c:3c:4e:e4: d6:d1:ca:b4:68:09:35:26:3f:ff:7b:1c:f9:49:da:0b:63:c4: 92:a2:5c:23:c3:b6:45:df:9e:13:b0:04:3e:eb:c1:4c:54:1d: f3:63:a0:87:aa:71:1e:0b:e2:4a:dd:55:f6:a9:4f:e2:31:7a: 15:82:62:6f:b9:d1:e3:5b:8b:82:59:50:40:42:a7:8a:2e:c3: ce:d5:a2:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGi6f8f6/Ux1Q6/WL4ISW76GAf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTA2MjgwMDE2MTFaFw0yNTA3MDEwMDUxMTFaMDMxMTAvBgNV BAMTKDY0M0FGRDYwN0E5MDRCQjhDQkQyODk1MkM5Q0VEOUZCNkY2QjQ4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigYGuMLlCECuIEmOs+0EbGCFp tlryR3jnAvvKKd62lvAJ99bEjqX5fz1D921vmbnvcI45EOEZQ5v+pQYqxgrAYDVT hTkO0mpdCyAHviDfv6YW5Ctdsbh2z2jRCzHuH2VuQ8qXnMMaBDzCbIixw8o7r6Qe 2jQ55LSDbyfCYaLC+cbdO4aDpqUzRxE16my8eOyc6635fpuj4MNWUACc+6b4nRXj TadmwYuGJgLT/JZ3aP1MUX3O0BVAOSTBEtErwEza5NQENnp8O9Qf53GhS3+ncl/M /PbdCdwVxzYtOduEaHriL2l7N07U0gqWv0GoBggqmv176g+Tm+wltT0gx+9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDr9YHqQS7jL0olSyc7Z+29rSLYwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOCJyeQxxDiZM9xepBVifosxx2Jo+O2AnAf 8CfsoU3NIybOaiuzLL8+qHStEUbs3oTB0JQL73pLzEGshHx6un676TEui8diNLqQ 7l2LgHHfnuh348OyAEbcwSDTOV6IF/OCPVotLHFFbPrUkEqM7K4iEBae03oPuR9b ptRyWOT3a6zRbE0kOjYpIZtTriDDIOC2GJ7zrFF5xKV4KwSlkq0qufjkZ3Zgeajy AtxQ932HTDxO5NbRyrRoCTUmP/97HPlJ2gtjxJKiXCPDtkXfnhOwBD7rwUxUHfNj oIeqcR4L4krdVfapT+IxehWCYm+50eNbi4JZUEBCp4ouw87VolA= -----END CERTIFICATE-----Generated at Mon Jun 30 00:40:56 2025 by rpki-client