$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: tJJliFlRx9kzB3dub9ZDyBL24hzSv8RK9Ghh78piq2o= Subject key identifier: C0:5E:F6:F0:AC:27:D7:A9:D4:46:82:8B:2F:8B:58:18:AA:99:9F:5D Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 0EB5428C0D50CB82C75777B5A6F9FE75322903F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01E7 Signing time: Sun 20 Jul 2025 21:52:01 +0000 Manifest this update: Sun 20 Jul 2025 21:47:01 +0000 Manifest next update: Thu 24 Jul 2025 02:21:01 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: QPu49tnTJbWrZS/jyHv1de2KgzqcDY4Jgw6nr5ASJBQ=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b5:42:8c:0d:50:cb:82:c7:57:77:b5:a6:f9:fe:75:32:29:03:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Jul 20 21:47:01 2025 GMT Not After : Jul 24 02:21:01 2025 GMT Subject: CN=C05EF6F0AC27D7A9D446828B2F8B5818AA999F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:ed:56:7e:51:30:e2:79:dd:46:02:be:07: c9:9f:02:aa:96:60:33:dd:d5:1d:97:58:45:01:54: e0:ee:1c:91:83:6a:bf:a4:2a:0e:45:55:7a:23:8d: e4:d2:aa:48:ee:fb:01:e2:87:19:ed:25:c3:df:1b: 95:d2:4f:91:d5:75:6a:3e:49:f1:f3:74:cc:ad:3c: 18:51:41:6c:a0:f2:e3:72:f7:b5:dc:71:b5:02:2f: c5:81:a1:bd:54:80:a1:b4:be:bd:9b:9a:c0:4e:d8: 0f:7e:c2:68:14:4a:f8:07:c5:ea:69:30:46:71:d0: 0f:c2:2a:55:f9:a9:69:73:8d:38:80:23:7f:1b:f2: ad:17:0e:bc:03:02:7f:65:b8:96:95:00:6e:c7:43: 2f:fc:83:9c:6f:71:94:c2:a4:b0:1f:0e:78:33:79: 27:d6:e3:8b:bf:dc:5c:52:5d:53:a5:89:e1:e7:6b: 8f:93:5a:4d:e7:4e:39:d3:d2:b4:47:fe:25:ab:fb: fe:2e:f1:5e:6c:b2:08:04:fb:f6:22:b6:5e:ed:e5: 7f:a9:33:c8:a9:88:30:20:3b:72:63:02:8e:9f:e1: 4f:8a:70:38:1d:ca:fc:5d:67:9a:31:21:f3:da:f6: 47:18:59:c4:d2:56:d3:9c:64:f0:5a:b7:27:4c:72: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:F6:F0:AC:27:D7:A9:D4:46:82:8B:2F:8B:58:18:AA:99:9F:5D X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:19:c2:c1:d9:0f:14:50:26:af:b2:ee:6f:68:10:0f:3d:5b: ff:95:ad:dd:f7:8d:40:a9:ac:39:3d:6e:02:a9:13:0d:63:07: 27:72:a8:be:3c:1e:70:7d:8e:41:77:9b:99:0c:ff:3b:1f:09: 37:b8:f6:23:b4:da:e2:6b:42:db:c7:10:69:36:7b:23:64:27: 5e:a9:2b:ff:75:b5:8b:a6:f9:57:3e:fb:f8:d2:75:cb:da:31: 43:e3:b6:6c:9c:ae:76:9c:e4:6d:3b:e0:a8:8b:e6:fe:22:57: 65:23:f8:55:be:60:98:d2:7f:fb:2f:e7:af:09:fd:84:da:54: 67:e1:c6:90:2f:4d:2b:63:90:b9:96:c4:52:00:9c:a5:0d:0e: 52:ad:8d:c3:58:be:88:ac:26:ab:48:43:68:d1:d5:35:65:a9: db:20:e5:9d:7f:39:4e:6f:0d:e7:db:2b:68:2c:3d:e9:01:3e: 4d:fb:71:3e:5a:08:2d:d2:86:b2:2c:18:75:4b:ff:68:8b:ea: c5:5b:c9:6c:45:2e:b4:63:01:96:31:b0:b2:46:ea:dd:ed:6c: 17:05:18:f6:73:26:fb:4c:c9:7b:30:89:a4:61:40:37:03:a4: c5:4c:34:b3:02:86:23:bb:6d:f7:8d:1f:29:3e:86:ec:cc:00: ce:7d:7c:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrVCjA1Qy4LHV3e1pvn+dTIpA/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA3MjAyMTQ3MDFaFw0yNTA3MjQwMjIxMDFaMDMxMTAvBgNV BAMTKEMwNUVGNkYwQUMyN0Q3QTlENDQ2ODI4QjJGOEI1ODE4QUE5OTlGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/O1WflEw4nndRgK+B8mfAqqW YDPd1R2XWEUBVODuHJGDar+kKg5FVXojjeTSqkju+wHihxntJcPfG5XST5HVdWo+ SfHzdMytPBhRQWyg8uNy97XccbUCL8WBob1UgKG0vr2bmsBO2A9+wmgUSvgHxepp MEZx0A/CKlX5qWlzjTiAI38b8q0XDrwDAn9luJaVAG7HQy/8g5xvcZTCpLAfDngz eSfW44u/3FxSXVOlieHna4+TWk3nTjnT0rRH/iWr+/4u8V5ssggE+/Yitl7t5X+p M8ipiDAgO3JjAo6f4U+KcDgdyvxdZ5oxIfPa9kcYWcTSVtOcZPBatydMckdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwF728Kwn16nURoKLL4tYGKqZn10wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQZwsHZDxRQJq+y7m9oEA89W/+Vrd33jUCp rDk9bgKpEw1jBydyqL48HnB9jkF3m5kM/zsfCTe49iO02uJrQtvHEGk2eyNkJ16p K/91tYum+Vc++/jSdcvaMUPjtmycrnac5G074KiL5v4iV2Uj+FW+YJjSf/sv568J /YTaVGfhxpAvTStjkLmWxFIAnKUNDlKtjcNYvoisJqtIQ2jR1TVlqdsg5Z1/OU5v DefbK2gsPekBPk37cT5aCC3ShrIsGHVL/2iL6sVbyWxFLrRjAZYxsLJG6t3tbBcF GPZzJvtMyXswiaRhQDcDpMVMNLMChiO7bfeNHyk+huzMAM59fKo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:12 2025 by rpki-client