$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: Iyq/29ttt7SeEHVLemqHlwOVFhQ9zsbk2gmbsqrVvds= Subject key identifier: 8E:77:3F:CA:14:0D:2D:64:01:A1:69:BA:8C:07:9D:49:E5:DB:DB:46 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 27F814A570891B189AB14E0072EA9801C0012665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 0202 Signing time: Fri 22 Aug 2025 08:01:27 +0000 Manifest this update: Fri 22 Aug 2025 07:56:27 +0000 Manifest next update: Mon 25 Aug 2025 13:05:27 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: zZ4HkC2+slIInjqYv/NCJZHWXwFiYGSxjGIP5i4D1r0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f8:14:a5:70:89:1b:18:9a:b1:4e:00:72:ea:98:01:c0:01:26:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Aug 22 07:56:27 2025 GMT Not After : Aug 25 13:05:27 2025 GMT Subject: CN=8E773FCA140D2D6401A169BA8C079D49E5DBDB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:d4:e7:0f:fe:13:b6:d2:e7:e2:41:93:d1: 58:8b:0a:f0:b8:73:c5:dc:f0:cb:0c:62:46:4c:72: ec:ec:12:7c:b3:ef:73:28:8a:27:8a:e0:a2:68:69: 27:da:04:3d:6e:04:82:ae:ad:65:10:1c:ba:6f:8c: d4:28:63:cf:b0:d1:0a:f9:0d:7e:eb:62:c8:50:99: 36:ba:b9:8b:42:47:2d:5d:a0:50:a2:32:14:04:a1: b7:f7:14:f0:c6:a7:7d:75:6f:44:d7:7c:64:22:78: 60:15:67:65:38:c8:f4:ea:8a:c0:c2:30:b4:3a:65: 71:ba:f6:da:a6:c7:66:06:ba:70:b6:f6:cc:ee:e9: 23:99:fb:a6:d0:47:1a:2d:f3:08:85:85:a1:6b:2f: c9:07:75:5c:10:63:a9:cd:2c:b9:3b:72:d8:78:75: 9c:6c:d9:f3:24:cc:91:e7:05:f4:78:73:19:4d:e5: 64:81:c3:7b:65:7f:d1:a3:7c:ef:cd:7f:c7:73:ac: f0:01:8f:0e:41:19:96:be:42:1c:14:9e:bb:be:3f: a9:f4:e0:a3:c7:7d:f6:4c:6e:89:59:a1:3a:84:e0: c5:7f:d4:f4:8c:44:f4:69:95:25:94:0d:76:29:8e: 67:24:3d:ca:4e:18:14:4d:5e:8d:fc:b2:ac:2c:d8: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:77:3F:CA:14:0D:2D:64:01:A1:69:BA:8C:07:9D:49:E5:DB:DB:46 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:b7:6c:1e:4e:12:cb:9f:6d:cd:4e:de:20:c2:e1:41:82: 04:5f:e7:ff:6c:fa:01:e8:56:8a:6a:89:93:56:f3:eb:ed:ef: 10:3d:ee:64:ea:5f:e4:1e:f2:4c:de:30:23:14:3a:c8:b1:d6: 2f:29:5e:42:36:61:ec:c9:4b:e7:5a:b9:63:bc:fc:2b:46:95: d8:6f:fc:03:cd:9e:5e:a9:08:2a:98:98:2d:ad:70:64:27:36: 7f:20:19:ad:54:f7:ef:46:5b:44:df:65:37:09:0e:b0:14:d3: 16:41:1a:e0:76:4f:b9:ee:7c:00:3b:78:c8:71:42:1c:80:2a: a2:43:2c:1e:06:4c:5e:d5:d9:4d:83:d9:b7:58:ac:7c:52:f3: 9b:3b:7b:b2:63:39:4b:2f:f1:c4:22:f2:6b:69:4c:a9:f2:e0: af:ed:47:fa:60:ca:c5:d2:d1:5c:e3:7e:63:43:7e:66:2d:21: cc:f6:be:8f:d4:df:9a:83:03:c0:e1:84:83:8c:b1:d1:51:db: 31:eb:bd:09:54:b7:d4:be:a3:26:32:b5:a6:d8:e2:a5:f7:bf: 23:8d:04:6d:a6:75:38:27:1e:0c:27:a5:de:7e:e6:14:0f:cb: 65:86:46:d9:ce:f8:e9:f7:12:72:38:5f:55:6a:9d:50:6f:af: 67:82:47:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/gUpXCJGxiasU4AcuqYAcABJmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA4MjIwNzU2MjdaFw0yNTA4MjUxMzA1MjdaMDMxMTAvBgNV BAMTKDhFNzczRkNBMTQwRDJENjQwMUExNjlCQThDMDc5RDQ5RTVEQkRCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PNTnD/4TttLn4kGT0ViLCvC4 c8Xc8MsMYkZMcuzsEnyz73MoiieK4KJoaSfaBD1uBIKurWUQHLpvjNQoY8+w0Qr5 DX7rYshQmTa6uYtCRy1doFCiMhQEobf3FPDGp311b0TXfGQieGAVZ2U4yPTqisDC MLQ6ZXG69tqmx2YGunC29szu6SOZ+6bQRxot8wiFhaFrL8kHdVwQY6nNLLk7cth4 dZxs2fMkzJHnBfR4cxlN5WSBw3tlf9GjfO/Nf8dzrPABjw5BGZa+QhwUnru+P6n0 4KPHffZMbolZoTqE4MV/1PSMRPRplSWUDXYpjmckPcpOGBRNXo38sqws2HI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjnc/yhQNLWQBoWm6jAedSeXb20YwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDvt2weThLLn23NTt4gwuFBggRf5/9s+gHo VopqiZNW8+vt7xA97mTqX+Qe8kzeMCMUOsix1i8pXkI2YezJS+dauWO8/CtGldhv /APNnl6pCCqYmC2tcGQnNn8gGa1U9+9GW0TfZTcJDrAU0xZBGuB2T7nufAA7eMhx QhyAKqJDLB4GTF7V2U2D2bdYrHxS85s7e7JjOUsv8cQi8mtpTKny4K/tR/pgysXS 0VzjfmNDfmYtIcz2vo/U35qDA8DhhIOMsdFR2zHrvQlUt9S+oyYytabY4qX3vyON BG2mdTgnHgwnpd5+5hQPy2WGRtnO+On3EnI4X1VqnVBvr2eCR5w= -----END CERTIFICATE-----Generated at Sun Aug 24 00:22:47 2025 by rpki-client