$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: J1w8KSw0iYtX32ngSUyHl6dZPbO99bfozbMAZG/CpIU= Subject key identifier: AA:5A:05:F0:61:62:E6:C4:05:5B:57:36:A5:EF:D3:1E:45:E3:5C:10 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 3F5BFADF32808BD56A23EA93C23F295A9F75DC3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0217 Signing time: Fri 18 Jul 2025 20:43:17 +0000 Manifest this update: Fri 18 Jul 2025 20:38:17 +0000 Manifest next update: Mon 21 Jul 2025 21:16:17 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: gwHR0YxtKIR+hJeK7OZDR/KdD8fduOlzx+qkAfiMIqw=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 21:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5b:fa:df:32:80:8b:d5:6a:23:ea:93:c2:3f:29:5a:9f:75:dc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Jul 18 20:38:17 2025 GMT Not After : Jul 21 21:16:17 2025 GMT Subject: CN=AA5A05F06162E6C4055B5736A5EFD31E45E35C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:f4:10:ff:9c:ff:96:40:d6:08:67:8f:61: 11:b9:a3:02:59:4a:32:7a:24:53:f3:dd:20:54:b0: 27:59:40:95:77:2a:0b:b1:14:56:f3:b6:e7:a9:d2: 31:9e:92:6f:d2:e2:c3:bd:d0:fc:69:22:16:45:c1: a9:72:94:c0:3e:fe:b7:a8:c1:69:b8:bb:b1:c6:4b: 30:6b:f4:bc:5a:22:de:7b:f7:a7:93:34:44:14:8f: 23:d6:76:f6:4f:e8:c3:e5:af:4a:1f:a3:fd:05:14: ec:18:5e:3c:4c:67:dc:06:90:d5:38:27:b4:ae:1b: 7d:27:b6:81:8e:66:ca:6b:79:18:c4:cc:82:51:28: 06:74:35:cc:58:46:42:f4:dd:2a:7f:6f:c6:65:92: 4c:e0:5d:1b:1b:9e:dc:7d:27:cc:08:7b:04:dc:f2: 43:8d:ab:7f:ec:61:4b:e5:b8:ec:83:c0:84:84:cb: 4a:85:5f:22:0b:8d:aa:07:7d:2f:ed:99:6f:b3:65: 52:51:51:bd:9c:7d:97:e3:96:89:6a:74:39:d4:80: 46:91:4b:09:fd:2c:8c:f4:39:a6:a1:bf:9e:77:fd: 8f:4d:61:1d:da:88:31:ab:1d:ae:35:72:24:f2:d2: 77:c7:ed:37:fc:ea:a3:40:3d:fd:70:a4:93:dd:73: 50:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5A:05:F0:61:62:E6:C4:05:5B:57:36:A5:EF:D3:1E:45:E3:5C:10 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ee:e0:4d:30:48:bc:7b:6b:be:a2:ac:a7:dd:2b:5e:46:98: 05:a6:89:c4:44:3d:fe:47:25:04:7f:1b:b9:3e:ff:6e:df:a3: 8e:4b:53:3c:08:00:d0:34:0c:5c:5b:72:4c:55:0c:fd:74:d2: 33:cd:c5:20:a5:6b:ec:08:85:f0:2c:73:aa:22:06:35:b8:13: 95:fb:e0:c6:81:eb:3e:ab:66:18:29:40:13:f8:05:4d:5b:6c: c9:ac:e9:05:27:21:7e:3e:18:cd:89:32:51:0f:f4:d5:ae:fa: c5:9d:9a:5b:b0:73:02:d8:fe:29:c1:57:51:18:f7:9a:37:66: a5:52:d6:ab:6b:fb:8a:4c:fd:7c:19:0a:00:b4:41:a8:a7:47: c2:5f:8b:e3:78:67:d5:78:f8:7e:12:78:04:cd:60:ec:f2:43: 7e:13:38:7f:5e:98:d3:54:1b:c1:28:cc:08:7a:3a:86:f6:50: dc:02:5e:20:b1:a6:8f:25:c3:1a:46:8b:69:76:e3:45:59:fd: 3f:4b:b9:5b:54:bc:b6:bc:58:40:b8:0c:dc:c1:a5:3b:b8:65: bc:ee:78:fd:cd:bd:e2:e5:ae:e8:37:ea:2a:5c:2b:f8:c3:54: 87:a9:39:22:c0:18:2d:12:db:12:90:4f:53:68:8d:1d:c6:98: 2d:f1:f5:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1v63zKAi9VqI+qTwj8pWp913D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA3MTgyMDM4MTdaFw0yNTA3MjEyMTE2MTdaMDMxMTAvBgNV BAMTKEFBNUEwNUYwNjE2MkU2QzQwNTVCNTczNkE1RUZEMzFFNDVFMzVDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpLfQQ/5z/lkDWCGePYRG5owJZ SjJ6JFPz3SBUsCdZQJV3KguxFFbztuep0jGekm/S4sO90PxpIhZFwalylMA+/reo wWm4u7HGSzBr9LxaIt5796eTNEQUjyPWdvZP6MPlr0ofo/0FFOwYXjxMZ9wGkNU4 J7SuG30ntoGOZspreRjEzIJRKAZ0NcxYRkL03Sp/b8ZlkkzgXRsbntx9J8wIewTc 8kONq3/sYUvluOyDwISEy0qFXyILjaoHfS/tmW+zZVJRUb2cfZfjlolqdDnUgEaR Swn9LIz0Oaahv553/Y9NYR3aiDGrHa41ciTy0nfH7Tf86qNAPf1wpJPdc1ArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqloF8GFi5sQFW1c2pe/THkXjXBAwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLu4E0wSLx7a76irKfdK15GmAWmicREPf5H JQR/G7k+/27fo45LUzwIANA0DFxbckxVDP100jPNxSCla+wIhfAsc6oiBjW4E5X7 4MaB6z6rZhgpQBP4BU1bbMms6QUnIX4+GM2JMlEP9NWu+sWdmluwcwLY/inBV1EY 95o3ZqVS1qtr+4pM/XwZCgC0QainR8Jfi+N4Z9V4+H4SeATNYOzyQ34TOH9emNNU G8EozAh6Oob2UNwCXiCxpo8lwxpGi2l240VZ/T9LuVtUvLa8WEC4DNzBpTu4Zbzu eP3NveLlrug36ipcK/jDVIepOSLAGC0S2xKQT1NojR3GmC3x9aY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:22 2025 by rpki-client