$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: 2ck8aK64nF55sIhHcqKuh3xtHNbxTmoz/S9m9ceGAbQ= Subject key identifier: 89:0E:B9:30:5B:B4:3C:39:D7:CD:76:59:F7:0C:FA:69:71:0C:55:E5 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 727BA4D9C61C6A758423775D852E241217A34E1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 021C Signing time: Mon 20 Oct 2025 09:11:29 +0000 Manifest this update: Mon 20 Oct 2025 09:06:29 +0000 Manifest next update: Thu 23 Oct 2025 20:13:29 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: OqojZVLjuAbtyoOVqEGUR6AscFIn6Jx5PVCMc5j+YBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7b:a4:d9:c6:1c:6a:75:84:23:77:5d:85:2e:24:12:17:a3:4e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Oct 20 09:06:29 2025 GMT Not After : Oct 23 20:13:29 2025 GMT Subject: CN=890EB9305BB43C39D7CD7659F70CFA69710C55E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:c8:89:37:49:4f:ce:9a:ea:5e:69:46:1c: 86:f4:c9:10:81:82:f2:b0:0b:7b:c7:a1:41:01:57: 24:de:67:3e:97:a5:73:55:ba:46:b9:0c:08:62:22: 61:3a:1e:e8:25:65:07:65:b1:f3:fc:ed:7d:ca:fc: d1:9e:ac:61:95:da:e6:9a:93:0c:42:3d:21:60:8a: 9f:24:cd:cf:62:a8:a9:8f:22:53:b6:e7:34:75:d9: 29:ce:03:08:6c:d2:8a:40:f4:2b:67:47:b2:7f:e8: 0a:43:b4:91:7c:3d:0e:d3:82:d9:21:84:94:5a:4a: 6c:da:59:5f:99:9d:4e:9d:31:c1:89:ce:dc:56:58: 0e:a5:76:18:f1:f8:e2:c8:06:48:9e:ba:0a:1d:2a: 78:f2:6b:f2:c6:04:a2:db:41:28:95:70:45:be:1f: 39:eb:fa:6b:3f:f1:a6:a7:20:6f:b5:de:f6:ce:40: 96:3c:3e:13:15:3b:9a:1f:92:a4:e5:68:39:16:06: c1:d0:2f:79:30:a8:41:ef:f7:85:0b:ee:4f:df:32: ff:bc:fd:dc:02:9a:49:ae:ac:47:07:33:ec:47:7a: 5f:28:b1:77:3f:e9:e5:81:b1:f3:e5:df:a8:0c:42: a3:64:6e:26:f0:ff:62:7f:bc:92:fc:59:53:b7:40: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0E:B9:30:5B:B4:3C:39:D7:CD:76:59:F7:0C:FA:69:71:0C:55:E5 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dd:90:f4:27:05:29:20:b3:10:23:ab:1f:75:b7:34:4d:e9: 5a:dd:63:6f:02:8f:30:d0:d0:75:0a:57:72:b9:b5:22:ab:ee: e6:38:98:ff:1f:1f:e0:45:64:89:d1:23:c5:b5:0b:dc:b3:42: f7:20:54:a1:df:6d:f5:aa:03:98:55:ac:bb:dc:79:a0:f6:a5: 10:ed:cd:28:bb:26:f7:64:d5:df:5f:6b:8a:a5:ff:05:4e:a0: 13:ac:ca:c0:25:e7:90:0a:c8:b2:c8:b8:a2:f3:79:28:58:e8: 24:c5:b7:00:ca:2d:3b:22:82:e0:08:32:9a:3f:22:03:20:65: af:b7:8e:2c:f3:79:d0:2d:c0:0b:06:46:0e:a3:92:c3:0f:fa: 92:d6:00:2e:bc:8f:f7:aa:87:0a:13:a0:2f:0d:06:ac:2a:5e: f4:7b:c3:db:dd:ab:a9:34:c8:d1:f8:36:26:cb:ad:81:1b:16: aa:5b:32:2a:73:a8:07:e1:c5:5d:1f:30:4e:09:fd:5c:66:90: 63:e2:ef:18:15:a0:69:2c:c3:09:d3:7c:46:86:82:3a:f1:a9: fa:50:42:24:b7:27:e6:d2:6d:9c:77:c1:49:13:bf:4c:4e:d9: 57:69:26:1c:42:11:42:03:38:04:54:d3:49:b0:88:24:cc:f9: f6:16:f6:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnuk2cYcanWEI3ddhS4kEhejTh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTEwMjAwOTA2MjlaFw0yNTEwMjMyMDEzMjlaMDMxMTAvBgNV BAMTKDg5MEVCOTMwNUJCNDNDMzlEN0NENzY1OUY3MENGQTY5NzEwQzU1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgyciJN0lPzprqXmlGHIb0yRCB gvKwC3vHoUEBVyTeZz6XpXNVuka5DAhiImE6HuglZQdlsfP87X3K/NGerGGV2uaa kwxCPSFgip8kzc9iqKmPIlO25zR12SnOAwhs0opA9CtnR7J/6ApDtJF8PQ7Tgtkh hJRaSmzaWV+ZnU6dMcGJztxWWA6ldhjx+OLIBkieugodKnjya/LGBKLbQSiVcEW+ Hznr+ms/8aanIG+13vbOQJY8PhMVO5ofkqTlaDkWBsHQL3kwqEHv94UL7k/fMv+8 /dwCmkmurEcHM+xHel8osXc/6eWBsfPl36gMQqNkbibw/2J/vJL8WVO3QKa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQ65MFu0PDnXzXZZ9wz6aXEMVeUwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvdkPQnBSkgsxAjqx91tzRN6VrdY28CjzDQ 0HUKV3K5tSKr7uY4mP8fH+BFZInRI8W1C9yzQvcgVKHfbfWqA5hVrLvceaD2pRDt zSi7Jvdk1d9fa4ql/wVOoBOsysAl55AKyLLIuKLzeShY6CTFtwDKLTsiguAIMpo/ IgMgZa+3jizzedAtwAsGRg6jksMP+pLWAC68j/eqhwoToC8NBqwqXvR7w9vdq6k0 yNH4NibLrYEbFqpbMipzqAfhxV0fME4J/VxmkGPi7xgVoGkswwnTfEaGgjrxqfpQ QiS3J+bSbZx3wUkTv0xO2VdpJhxCEUIDOARU00mwiCTM+fYW9ns= -----END CERTIFICATE-----Generated at Mon Oct 20 11:47:18 2025 by rpki-client