$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: men/IJOrY99qss26tlvvaOk/yhDjs1Oke+kmRnfJjOw= Subject key identifier: 62:7B:F0:00:45:93:AF:BD:48:E9:55:70:FA:F8:0E:53:75:1C:2D:C3 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 762F404D27B4AB9E348CACF11827E08A8232D780 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04F0 Signing time: Mon 21 Jul 2025 09:51:45 +0000 Manifest this update: Mon 21 Jul 2025 09:46:45 +0000 Manifest next update: Thu 24 Jul 2025 14:19:45 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: UYScY0fUwakVkCTACUACoAzL67Dn1ABcRiKk9SsazhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2f:40:4d:27:b4:ab:9e:34:8c:ac:f1:18:27:e0:8a:82:32:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Jul 21 09:46:45 2025 GMT Not After : Jul 24 14:19:45 2025 GMT Subject: CN=627BF0004593AFBD48E95570FAF80E53751C2DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:35:f4:77:66:8f:94:2c:ef:91:da:1d:56:c4: e7:e9:e3:af:92:bb:af:e0:d2:b8:21:d9:61:84:50: db:7e:d4:ee:f0:e2:a7:82:63:1e:f4:5a:a0:e7:55: 83:e5:ee:11:51:f1:2c:2b:55:e0:ba:8b:93:d5:a3: b7:de:87:d8:eb:16:61:62:45:fa:4f:71:d0:f5:e5: a4:8a:ff:fe:e6:2c:6a:4c:7c:51:51:62:52:06:2e: 58:fc:04:90:df:cf:20:83:b4:29:87:42:db:6e:21: 6c:c2:25:02:8e:7f:f7:76:4d:63:90:0d:82:e8:91: b4:48:19:c7:bb:c1:64:ef:67:14:82:15:5e:fa:6b: ba:4c:96:26:63:51:f5:b8:8c:0e:d1:c2:96:30:e8: 3e:99:b3:b1:33:6e:c6:63:8d:b8:bf:23:91:9f:e3: d4:f7:4b:64:e2:9b:90:c9:6a:e2:a4:df:78:e2:fd: 81:f1:45:4a:6c:14:5f:31:74:b4:99:1a:5a:68:e2: 91:da:4f:03:5a:85:59:9b:5c:2c:a3:05:ac:71:f0: a6:3f:6c:c7:f4:36:bc:3b:ae:83:01:74:3a:1f:ca: 89:df:a2:26:61:00:d8:92:ea:6b:a8:13:ec:4d:92: 2d:67:88:ab:0a:33:97:e7:2c:3e:0a:34:13:19:88: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:F0:00:45:93:AF:BD:48:E9:55:70:FA:F8:0E:53:75:1C:2D:C3 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:96:ee:13:b3:19:7a:e2:5c:0e:01:2d:ff:e0:36:e4:48:cf: 0b:f9:33:23:8b:7b:39:7c:61:d5:e7:87:11:cf:9d:da:9d:44: 90:90:7c:10:5d:b0:84:09:6c:23:2c:1a:5d:ab:cc:50:5e:f2: e5:b1:0d:8e:6e:da:d2:77:ea:78:f9:6e:e6:b8:c7:aa:46:17: d5:14:f4:7f:d9:8b:52:fa:5d:ba:9f:01:58:7b:14:e3:c0:b0: 74:da:a1:d5:34:ec:32:9f:c9:97:09:78:ad:2d:cc:86:aa:60: 03:bd:e5:cb:bd:b9:57:d5:e1:95:e8:c9:05:1b:57:d1:b3:15: eb:20:fa:99:91:d8:46:1b:04:8f:02:39:19:7e:c1:12:ba:82: 16:16:c7:e6:33:20:30:37:c7:28:6a:e2:e3:6d:76:b1:5d:e6: fe:fe:80:3e:45:35:dc:c3:85:72:0b:04:8e:9c:fc:8d:ef:a6: 4c:89:c6:f5:61:14:3b:61:ff:fc:aa:d9:61:a4:dc:81:f0:b4: 8c:4a:10:2f:b2:2f:8d:8a:ba:a5:72:d8:68:67:9e:39:31:42: 97:59:58:a0:fc:ef:72:17:15:b8:b2:77:fb:dd:c6:73:81:b2: 5f:ef:b9:5f:06:8b:28:45:16:c2:90:59:c7:96:c3:4c:2b:e8: 99:57:35:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdi9ATSe0q540jKzxGCfgioIy14AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA3MjEwOTQ2NDVaFw0yNTA3MjQxNDE5NDVaMDMxMTAvBgNV BAMTKDYyN0JGMDAwNDU5M0FGQkQ0OEU5NTU3MEZBRjgwRTUzNzUxQzJEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeNfR3Zo+ULO+R2h1WxOfp46+S u6/g0rgh2WGEUNt+1O7w4qeCYx70WqDnVYPl7hFR8SwrVeC6i5PVo7feh9jrFmFi RfpPcdD15aSK//7mLGpMfFFRYlIGLlj8BJDfzyCDtCmHQttuIWzCJQKOf/d2TWOQ DYLokbRIGce7wWTvZxSCFV76a7pMliZjUfW4jA7RwpYw6D6Zs7EzbsZjjbi/I5Gf 49T3S2Tim5DJauKk33ji/YHxRUpsFF8xdLSZGlpo4pHaTwNahVmbXCyjBaxx8KY/ bMf0Nrw7roMBdDofyonfoiZhANiS6muoE+xNki1niKsKM5fnLD4KNBMZiDQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYnvwAEWTr71I6VVw+vgOU3UcLcMwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGW7hOzGXriXA4BLf/gNuRIzwv5MyOLezl8 YdXnhxHPndqdRJCQfBBdsIQJbCMsGl2rzFBe8uWxDY5u2tJ36nj5bua4x6pGF9UU 9H/Zi1L6XbqfAVh7FOPAsHTaodU07DKfyZcJeK0tzIaqYAO95cu9uVfV4ZXoyQUb V9GzFesg+pmR2EYbBI8CORl+wRK6ghYWx+YzIDA3xyhq4uNtdrFd5v7+gD5FNdzD hXILBI6c/I3vpkyJxvVhFDth//yq2WGk3IHwtIxKEC+yL42KuqVy2GhnnjkxQpdZ WKD873IXFbiyd/vdxnOBsl/vuV8GiyhFFsKQWceWw0wr6JlXNR0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:33 2025 by rpki-client