$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: IoU1gdMPrxsQWw8UPmBjMaJN9V0CLX24OddJxvJz7YA= Subject key identifier: B2:DD:8A:1A:DB:28:23:0E:06:09:42:4E:C2:FF:FC:79:FC:39:49:D9 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 13B94BF0CD100D9CA5CD1F96E58B0EBBAE8318FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 048A Signing time: Sat 19 Jul 2025 03:30:39 +0000 Manifest this update: Sat 19 Jul 2025 03:25:39 +0000 Manifest next update: Tue 22 Jul 2025 14:03:39 +0000 Files and hashes: 1: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 2: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 3: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 4: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: x6Pp5Iezov634MktjRe64Ew0+EtMdmz0UoW8OF5jNwQ=) 5: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 6: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) 7: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b9:4b:f0:cd:10:0d:9c:a5:cd:1f:96:e5:8b:0e:bb:ae:83:18:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Jul 19 03:25:39 2025 GMT Not After : Jul 22 14:03:39 2025 GMT Subject: CN=B2DD8A1ADB28230E0609424EC2FFFC79FC3949D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:8a:3c:ab:89:9c:ea:c7:08:70:97:fa:d6: 93:f7:38:4f:f1:16:10:f9:d1:ff:97:e0:08:06:2e: 36:71:c8:d0:bc:53:44:ea:4d:8d:96:23:5d:cc:51: cc:4f:bb:23:4d:b4:43:14:76:99:88:0d:6c:b7:61: 12:8e:c4:75:2c:3b:1a:cc:6c:65:ae:9c:1d:89:00: 2b:97:b9:31:1c:8a:d5:47:9c:4e:65:ec:ae:9d:da: 79:ef:93:6a:6a:e7:4a:cf:72:72:fa:b7:6e:99:1a: be:28:2a:23:4b:76:93:58:b4:1a:c3:6c:00:e6:97: b8:26:17:d8:8d:28:c1:6a:e6:c6:b5:03:a2:6b:51: 57:5d:6c:c1:53:ea:de:82:e8:73:0c:52:52:46:a5: 5e:a6:66:fd:ef:97:6b:ab:5a:e0:8d:ee:34:4e:15: 8b:2c:80:8c:18:94:98:0e:c0:06:d4:f9:23:76:eb: 58:8f:f0:c9:d0:a8:6c:a5:38:d1:d9:3b:ad:c0:e1: fa:b6:1d:0a:34:e5:ef:3e:71:01:1b:89:c6:b1:48: 76:bc:1f:18:dc:ae:f6:79:a1:5c:b7:f1:d9:52:fa: 79:97:fb:20:4f:71:9a:30:b8:97:37:d4:ef:db:c1: 2b:03:76:88:36:05:ea:d4:95:bf:a5:ec:57:7a:2f: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:8A:1A:DB:28:23:0E:06:09:42:4E:C2:FF:FC:79:FC:39:49:D9 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1b:92:fb:7d:d3:e8:6e:f6:b2:38:ed:6c:6d:08:81:d4:8f: 7e:59:ef:39:f8:64:c8:c9:7c:84:03:89:8b:97:22:7c:52:12: 54:71:9a:40:46:b3:16:27:23:e0:eb:1e:d0:1e:63:9b:54:3d: 7a:26:d5:5d:d3:9d:2b:a5:9f:3b:f0:4d:0b:98:27:ee:ff:54: 46:5c:ae:52:8e:5b:68:81:ba:5e:69:dd:71:a2:a0:13:49:7e: b2:39:88:95:5f:35:c0:6b:b5:d8:59:d6:fb:86:d9:60:67:d0: 3e:a2:88:55:cc:d8:68:44:07:56:8d:57:f2:dc:c8:46:c5:99: 79:37:cd:bf:ff:e7:a0:9d:bd:11:70:f9:1d:4a:1c:79:b6:55: 0f:a5:06:7a:81:4f:65:55:ca:77:20:79:29:3b:96:cc:ec:07: 02:8b:b0:be:fc:89:6b:16:6b:ab:0a:05:57:d9:28:35:00:15: 85:06:6f:f6:32:8c:55:7b:ad:7c:34:99:73:da:46:69:25:69: f0:16:a6:58:7e:60:5b:d8:af:e7:e4:bb:78:92:35:d2:56:35: 54:41:5e:73:6b:42:bd:38:df:20:47:d6:3d:e9:a4:53:32:bb: 33:30:08:e5:8e:3e:21:bf:b0:59:94:79:12:05:ef:98:b6:e7: bc:2c:02:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7lL8M0QDZylzR+W5YsOu66DGPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA3MTkwMzI1MzlaFw0yNTA3MjIxNDAzMzlaMDMxMTAvBgNV BAMTKEIyREQ4QTFBREIyODIzMEUwNjA5NDI0RUMyRkZGQzc5RkMzOTQ5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0Io8q4mc6scIcJf61pP3OE/x FhD50f+X4AgGLjZxyNC8U0TqTY2WI13MUcxPuyNNtEMUdpmIDWy3YRKOxHUsOxrM bGWunB2JACuXuTEcitVHnE5l7K6d2nnvk2pq50rPcnL6t26ZGr4oKiNLdpNYtBrD bADml7gmF9iNKMFq5sa1A6JrUVddbMFT6t6C6HMMUlJGpV6mZv3vl2urWuCN7jRO FYssgIwYlJgOwAbU+SN261iP8MnQqGylONHZO63A4fq2HQo05e8+cQEbicaxSHa8 HxjcrvZ5oVy38dlS+nmX+yBPcZowuJc31O/bwSsDdog2BerUlb+l7Fd6LzOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUst2KGtsoIw4GCUJOwv/8efw5SdkwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcbkvt90+hu9rI47WxtCIHUj35Z7zn4ZMjJ fIQDiYuXInxSElRxmkBGsxYnI+DrHtAeY5tUPXom1V3TnSulnzvwTQuYJ+7/VEZc rlKOW2iBul5p3XGioBNJfrI5iJVfNcBrtdhZ1vuG2WBn0D6iiFXM2GhEB1aNV/Lc yEbFmXk3zb//56CdvRFw+R1KHHm2VQ+lBnqBT2VVyncgeSk7lszsBwKLsL78iWsW a6sKBVfZKDUAFYUGb/YyjFV7rXw0mXPaRmklafAWplh+YFvYr+fku3iSNdJWNVRB XnNrQr043yBH1j3ppFMyuzMwCOWOPiG/sFmUeRIF75i257wsAiw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:11 2025 by rpki-client