$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: 80yoKtUr2ebT6XwfLUJ5O4rRNRXaozjvmXAI34oayS8= Subject key identifier: A7:92:00:F9:FB:0E:EE:AE:F9:DA:56:04:1A:0B:CC:D1:BE:31:D9:3B Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 5910964308B22E3A5E3C39A79A6CF24AF4F92ADD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 018D Signing time: Wed 25 Mar 2026 16:21:23 +0000 Manifest this update: Wed 25 Mar 2026 16:16:23 +0000 Manifest next update: Sat 28 Mar 2026 23:13:23 +0000 Files and hashes: 1: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: KYg2eP+qnyahabsQS5xdyRs5Ya80Q1XBZpzh8eR7p5s=) 2: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: B4hkSRP9Nn/E/rFDkymYe5IrWbaofy2iFMJNuL2VoDg=) 3: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dY9Wzss484cDHvQy3+/U0nuyLvB8FHOPJZ4fbRc99IE=) 4: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:10:96:43:08:b2:2e:3a:5e:3c:39:a7:9a:6c:f2:4a:f4:f9:2a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Mar 25 16:16:23 2026 GMT Not After : Mar 28 23:13:23 2026 GMT Subject: CN=A79200F9FB0EEEAEF9DA56041A0BCCD1BE31D93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:39:fc:ee:98:f2:a8:17:c7:3a:20:59:fb: 6a:35:5f:51:40:56:8e:e3:8c:0e:1c:1d:a6:09:ee: 9d:4e:42:e7:7a:77:da:0f:ea:1f:b6:ed:f2:f2:a7: 3d:92:12:2c:73:59:d1:26:fe:bb:ff:47:5a:de:7d: 70:92:38:c2:f3:d3:1b:d1:20:5a:35:d2:9d:a0:a2: 2d:fa:f6:6f:f0:ee:29:37:ba:ad:c7:5d:30:e5:03: 29:c7:34:dc:45:cc:0e:eb:c1:1f:8e:36:70:40:a3: 6a:9c:d5:90:85:13:ad:85:a4:95:8a:c4:70:9a:6c: 72:95:55:12:1a:2e:47:b7:f9:25:d9:f2:a5:69:2b: f2:d6:ef:6d:39:15:d6:4b:56:80:d9:3a:e3:a3:ae: 71:bc:0a:65:38:f6:be:af:fa:52:a2:b4:4f:68:13: 56:e9:43:9f:74:42:4b:38:ed:c6:20:03:bc:68:d5: 27:23:39:48:39:31:2b:c2:f2:e9:57:2a:6e:74:ee: e1:b0:5d:6b:4d:26:85:61:b4:67:2f:66:09:f0:c5: 07:24:ed:ce:81:e4:7a:3d:d3:02:e4:e8:98:42:f6: af:e6:60:d5:90:73:1d:a5:c1:e4:cf:83:fc:f2:f2: de:d3:fb:51:4b:01:15:d2:fe:71:a5:4c:c9:5f:3e: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:92:00:F9:FB:0E:EE:AE:F9:DA:56:04:1A:0B:CC:D1:BE:31:D9:3B X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:20:f4:9f:24:c9:cc:a3:f4:9e:bf:a6:ff:3a:15:4b:90:76: 02:56:fc:31:86:e4:95:5d:d0:e5:c9:d7:b3:ff:2d:e3:d8:38: 74:e4:2b:6b:57:7b:0f:b6:7d:35:29:3b:f4:8c:03:0a:2e:18: be:4f:83:3a:29:a2:53:82:1b:c0:40:57:5e:a5:1e:d0:2b:e7: 60:3a:48:5a:2b:f2:31:fd:1b:82:14:28:b4:89:65:8c:cb:08: 05:68:35:1a:f4:a1:ff:78:94:b0:17:8e:6a:d4:2e:9c:3b:4d: 99:0f:c2:4a:bb:b0:9c:43:91:da:52:42:c3:15:1f:82:09:e3: 2b:3b:ef:86:b4:1c:bc:74:75:df:47:df:e8:d7:f4:5b:e3:d1: b5:fd:ae:4c:0a:0d:1d:66:15:e0:da:54:8d:37:73:fa:28:44: 22:eb:11:67:3d:7a:2d:cf:3d:76:e2:13:3b:a6:54:10:9d:23: b6:4e:ff:8a:d3:94:c3:75:89:8c:61:6b:35:25:f7:73:76:09: f7:d9:13:ee:26:3d:d8:66:82:2b:9d:9d:8a:75:c3:03:24:61: ba:17:37:98:57:46:a8:a2:b9:46:46:0d:58:50:a9:4b:9c:e2: a8:9c:32:37:9c:de:d7:50:ef:9b:e6:2f:9f:b9:6e:0a:07:9e: 44:b5:7e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRCWQwiyLjpePDmnmmzySvT5Kt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNjAzMjUxNjE2MjNaFw0yNjAzMjgyMzEzMjNaMDMxMTAvBgNV BAMTKEE3OTIwMEY5RkIwRUVFQUVGOURBNTYwNDFBMEJDQ0QxQkUzMUQ5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVDn87pjyqBfHOiBZ+2o1X1FA Vo7jjA4cHaYJ7p1OQud6d9oP6h+27fLypz2SEixzWdEm/rv/R1refXCSOMLz0xvR IFo10p2goi369m/w7ik3uq3HXTDlAynHNNxFzA7rwR+ONnBAo2qc1ZCFE62FpJWK xHCabHKVVRIaLke3+SXZ8qVpK/LW7205FdZLVoDZOuOjrnG8CmU49r6v+lKitE9o E1bpQ590Qks47cYgA7xo1ScjOUg5MSvC8ulXKm507uGwXWtNJoVhtGcvZgnwxQck 7c6B5Ho90wLk6JhC9q/mYNWQcx2lweTPg/zy8t7T+1FLARXS/nGlTMlfPg/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp5IA+fsO7q752lYEGgvM0b4x2TswHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQg9J8kycyj9J6/pv86FUuQdgJW/DGG5JVd 0OXJ17P/LePYOHTkK2tXew+2fTUpO/SMAwouGL5PgzopolOCG8BAV16lHtAr52A6 SFor8jH9G4IUKLSJZYzLCAVoNRr0of94lLAXjmrULpw7TZkPwkq7sJxDkdpSQsMV H4IJ4ys774a0HLx0dd9H3+jX9Fvj0bX9rkwKDR1mFeDaVI03c/ooRCLrEWc9ei3P PXbiEzumVBCdI7ZO/4rTlMN1iYxhazUl93N2CffZE+4mPdhmgiudnYp1wwMkYboX N5hXRqiiuUZGDVhQqUuc4qicMjec3tdQ75vmL5+5bgoHnkS1fqg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:42 2026 by rpki-client