$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: JSBI26B9+RYHdtIg2uGGuaPNR0Q38pYkbQW0tbeBVJU= Subject key identifier: AC:44:EB:A6:BE:9F:6B:3B:61:83:52:3A:2E:BB:97:E0:80:08:40:EC Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 45BDE0BB6D93420BBB8CE4D88D7210F3FCD945E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0124 Signing time: Sat 19 Jul 2025 22:01:36 +0000 Manifest this update: Sat 19 Jul 2025 21:56:36 +0000 Manifest next update: Wed 23 Jul 2025 02:48:36 +0000 Files and hashes: 1: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=) 2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=) 3: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: T1yJugkespUa34on5h1TFjSrCM5BHJjayG2VgWDF7v0=) 4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bd:e0:bb:6d:93:42:0b:bb:8c:e4:d8:8d:72:10:f3:fc:d9:45:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Jul 19 21:56:36 2025 GMT Not After : Jul 23 02:48:36 2025 GMT Subject: CN=AC44EBA6BE9F6B3B6183523A2EBB97E0800840EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:b2:57:56:c0:c0:f1:42:96:5d:7f:57:32: 72:20:38:bc:75:07:c3:0d:bb:13:16:2d:b9:0d:b5: d6:91:2e:99:01:8f:f4:b1:d7:34:da:ac:de:7d:43: 78:be:2a:cc:12:b0:60:cc:8c:d3:a8:d3:73:e8:7a: 20:7f:91:b0:62:6a:5b:c0:6f:03:a9:b2:c7:8e:51: 8e:2c:9c:ed:ef:7f:de:fd:52:8b:b8:46:95:7e:79: 7c:c6:d5:0d:0e:00:78:0c:2d:43:73:a3:88:21:eb: 0c:4b:2e:d2:fa:c4:32:ea:1a:e1:48:6e:76:0f:3c: 7e:8b:4e:60:29:28:a6:72:d9:c0:0b:f6:b2:53:b5: 2b:a2:4d:1c:fe:42:e2:a3:7c:ae:69:d3:73:af:b4: 2a:db:b6:14:6e:78:be:2f:dd:e4:80:20:0f:83:0d: b0:62:5d:57:9a:d0:8e:a5:04:c0:1d:75:07:f0:8f: 76:87:f3:60:a5:ae:ae:e5:9a:ea:1d:58:5a:57:64: 9d:51:3e:83:f4:fc:50:50:ee:d9:13:e1:7f:ad:eb: 36:5d:c2:1f:09:0a:cf:92:dc:de:f6:d4:f3:93:35: b3:34:e7:b8:2c:f0:5a:68:47:a1:59:a6:6f:b2:f6: 32:5b:f4:42:01:a6:62:b0:2c:f0:1d:42:a8:6e:a8: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:EB:A6:BE:9F:6B:3B:61:83:52:3A:2E:BB:97:E0:80:08:40:EC X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:53:c4:84:e9:48:e1:3c:7f:19:51:d5:33:2a:58:bd:20:2e: c3:8f:37:65:98:f0:74:7b:02:9e:ed:db:eb:8f:8a:60:39:4e: b7:d2:c4:d2:57:f6:b7:96:3f:55:fc:69:25:db:23:27:8c:61: 39:f1:d0:40:0a:3f:b2:c6:81:09:60:b2:20:8c:8d:46:e0:9f: 8c:49:25:4b:97:d5:9b:f7:52:39:4d:7b:72:95:38:a2:9b:56: f5:68:90:6d:e9:d8:fc:92:90:46:5b:f0:fb:b9:6d:66:3c:3c: 9c:a9:71:47:ea:5c:75:11:fa:16:7d:b9:80:20:cc:13:bb:a2: 4f:96:dd:88:7a:08:e7:69:1d:8e:cb:40:dd:a1:5a:12:69:4c: 18:a1:dd:f4:5f:94:48:c2:28:bd:1d:fa:e7:ba:ac:3a:a2:77: c2:b7:4b:ac:b1:dc:69:9e:ff:dd:92:9c:2f:37:1e:5a:05:c5: a3:a5:75:c7:85:c1:0f:f5:31:35:3e:eb:2e:6f:55:48:0e:1f: 8e:81:b6:a2:ba:c9:0b:58:fa:fe:e4:80:29:bc:e1:ca:74:a9: 79:41:3d:89:72:d4:45:bf:49:96:76:3e:64:06:6e:85:22:04: ab:60:28:35:46:8c:93:d8:ec:d1:8a:61:3d:0a:07:80:e8:9b: 85:b0:8f:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURb3gu22TQgu7jOTYjXIQ8/zZReMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA3MTkyMTU2MzZaFw0yNTA3MjMwMjQ4MzZaMDMxMTAvBgNV BAMTKEFDNDRFQkE2QkU5RjZCM0I2MTgzNTIzQTJFQkI5N0UwODAwODQwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzLJXVsDA8UKWXX9XMnIgOLx1 B8MNuxMWLbkNtdaRLpkBj/Sx1zTarN59Q3i+KswSsGDMjNOo03PoeiB/kbBialvA bwOpsseOUY4snO3vf979Uou4RpV+eXzG1Q0OAHgMLUNzo4gh6wxLLtL6xDLqGuFI bnYPPH6LTmApKKZy2cAL9rJTtSuiTRz+QuKjfK5p03OvtCrbthRueL4v3eSAIA+D DbBiXVea0I6lBMAddQfwj3aH82Clrq7lmuodWFpXZJ1RPoP0/FBQ7tkT4X+t6zZd wh8JCs+S3N721POTNbM057gs8FpoR6FZpm+y9jJb9EIBpmKwLPAdQqhuqOhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrETrpr6fazthg1I6LruX4IAIQOwwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRTxITpSOE8fxlR1TMqWL0gLsOPN2WY8HR7 Ap7t2+uPimA5TrfSxNJX9reWP1X8aSXbIyeMYTnx0EAKP7LGgQlgsiCMjUbgn4xJ JUuX1Zv3UjlNe3KVOKKbVvVokG3p2PySkEZb8Pu5bWY8PJypcUfqXHUR+hZ9uYAg zBO7ok+W3Yh6COdpHY7LQN2hWhJpTBih3fRflEjCKL0d+ue6rDqid8K3S6yx3Gme /92SnC83HloFxaOldceFwQ/1MTU+6y5vVUgOH46BtqK6yQtY+v7kgCm84cp0qXlB PYly1EW/SZZ2PmQGboUiBKtgKDVGjJPY7NGKYT0KB4Dom4Wwj40= -----END CERTIFICATE-----Generated at Mon Jul 21 07:29:32 2025 by rpki-client