$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: rcroaQd0mlEvmNgeYKkduo6eInIzGSs/1gD+keyyVxM= Subject key identifier: 0D:87:EF:8C:4E:1C:48:59:B7:CF:34:1F:9C:3C:F7:62:EC:D9:F6:80 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 1C7FB37822A8253688385F8F940E21C55093B6B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 0170 Signing time: Fri 18 Jul 2025 22:11:34 +0000 Manifest this update: Fri 18 Jul 2025 22:06:34 +0000 Manifest next update: Tue 22 Jul 2025 07:20:34 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: UPuF0iDJbIT1WOccxPIm8sGhkUtDj72c5lsgncDNvnw=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:b3:78:22:a8:25:36:88:38:5f:8f:94:0e:21:c5:50:93:b6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Jul 18 22:06:34 2025 GMT Not After : Jul 22 07:20:34 2025 GMT Subject: CN=0D87EF8C4E1C4859B7CF341F9C3CF762ECD9F680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:75:d2:8d:48:75:e0:01:a7:41:e8:56:bd: f7:88:52:7e:11:c6:4b:00:f6:1f:29:fe:88:cd:a9: 56:11:4f:0e:a3:5d:cf:2f:eb:a2:10:ee:86:92:20: 78:28:e9:37:ae:15:92:15:f7:9c:70:d4:b2:04:01: c2:1f:a7:8a:a0:ea:42:7f:74:5b:96:53:bf:4a:9f: 80:04:9e:eb:f1:55:52:cd:8e:60:d4:b8:86:4d:37: c0:e0:39:43:5c:56:0c:05:9b:25:ff:51:a0:ba:44: 23:75:bc:44:64:1a:dd:52:5b:04:64:6d:73:e6:59: 7c:7e:37:df:f8:be:49:c3:a8:17:c7:a8:62:b2:23: 47:59:83:fd:32:81:b5:44:07:7a:72:44:94:3c:7a: c1:3a:5a:42:1f:6d:a4:5d:00:7e:a9:86:b6:ac:4d: 54:b5:2e:97:e6:08:4b:c7:d3:c2:3d:fd:7d:f8:e8: 6d:94:d5:d2:80:cd:d5:f9:dd:0a:81:61:f2:0d:09: 73:4f:55:1f:b3:65:9a:c3:95:07:1a:13:54:21:08: 72:4d:59:81:1f:db:c8:35:3a:94:a5:07:77:53:45: 04:3c:84:ca:f5:3b:d3:a6:b1:84:35:34:0f:91:de: 8f:3b:37:9d:49:f1:ba:46:77:64:c2:03:e3:0d:84: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:87:EF:8C:4E:1C:48:59:B7:CF:34:1F:9C:3C:F7:62:EC:D9:F6:80 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:67:56:b8:04:d9:06:6f:26:9c:64:13:40:02:f3:b9:f9:f4: c1:28:66:d2:4e:17:a0:33:53:51:d7:45:ac:3e:99:f8:b9:d9: a4:e9:37:1b:1b:87:f1:b1:00:bd:76:77:fb:35:72:a6:c7:8d: b2:ea:88:80:d5:6d:0b:b3:12:70:91:cd:a7:c6:b9:9a:e2:3d: a5:3c:5a:e4:21:6a:54:e5:1c:11:ce:52:77:60:ff:df:32:93: 06:4a:9e:e3:e8:55:87:51:54:b0:2b:c7:13:ba:98:fa:6c:e3: d1:44:15:fb:c7:de:93:d6:3b:68:dd:1b:26:e8:4f:31:99:e7: 8d:e4:8f:1f:43:b9:56:4f:8c:6e:35:0b:66:27:44:7b:d6:c7: b6:b8:52:a5:be:3e:0a:64:d8:e2:1d:96:ca:32:03:99:c9:c6: ae:a0:f3:ee:23:b5:1e:b4:f2:68:ce:38:7c:84:18:f5:81:d2: 8f:2d:45:e8:52:82:93:0c:dc:4d:31:ad:38:f0:a6:5b:b8:e8: 2f:c9:6f:f6:11:d1:2a:c3:e0:dc:dd:ea:fb:4d:58:c8:d3:f1: 22:c2:f5:76:3c:c6:5c:06:27:72:5a:9f:73:0d:2f:e2:05:e7: 9a:7c:8c:92:ca:a8:71:9a:5e:a6:93:2e:d6:26:e4:5d:51:70: 75:47:57:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH+zeCKoJTaIOF+PlA4hxVCTtrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTA3MTgyMjA2MzRaFw0yNTA3MjIwNzIwMzRaMDMxMTAvBgNV BAMTKDBEODdFRjhDNEUxQzQ4NTlCN0NGMzQxRjlDM0NGNzYyRUNEOUY2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4y3XSjUh14AGnQehWvfeIUn4R xksA9h8p/ojNqVYRTw6jXc8v66IQ7oaSIHgo6TeuFZIV95xw1LIEAcIfp4qg6kJ/ dFuWU79Kn4AEnuvxVVLNjmDUuIZNN8DgOUNcVgwFmyX/UaC6RCN1vERkGt1SWwRk bXPmWXx+N9/4vknDqBfHqGKyI0dZg/0ygbVEB3pyRJQ8esE6WkIfbaRdAH6phras TVS1LpfmCEvH08I9/X346G2U1dKAzdX53QqBYfINCXNPVR+zZZrDlQcaE1QhCHJN WYEf28g1OpSlB3dTRQQ8hMr1O9OmsYQ1NA+R3o87N51J8bpGd2TCA+MNhK/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYfvjE4cSFm3zzQfnDz3YuzZ9oAwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpnVrgE2QZvJpxkE0AC87n59MEoZtJOF6Az U1HXRaw+mfi52aTpNxsbh/GxAL12d/s1cqbHjbLqiIDVbQuzEnCRzafGuZriPaU8 WuQhalTlHBHOUndg/98ykwZKnuPoVYdRVLArxxO6mPps49FEFfvH3pPWO2jdGybo TzGZ543kjx9DuVZPjG41C2YnRHvWx7a4UqW+Pgpk2OIdlsoyA5nJxq6g8+4jtR60 8mjOOHyEGPWB0o8tRehSgpMM3E0xrTjwplu46C/Jb/YR0SrD4Nzd6vtNWMjT8SLC 9XY8xlwGJ3Jan3MNL+IF55p8jJLKqHGaXqaTLtYm5F1RcHVHVww= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:48 2025 by rpki-client