$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: FrKD3lblgkAn47KcOHPWnlQN3SpS4qvUBzbQDuirTq0= Subject key identifier: 18:D0:5B:85:C7:6B:FC:48:28:74:3F:2B:58:55:9F:67:13:10:1D:BC Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 6A3196B0BDA23AD0330E7AA81008E6EAAA3B9578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: A2 Signing time: Sat 19 Jul 2025 12:52:15 +0000 Manifest this update: Sat 19 Jul 2025 12:47:15 +0000 Manifest next update: Tue 22 Jul 2025 20:59:15 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: bP3NsLQ9HMwsFaApr36kzeeHtJpHJj89lUf4ostKreI=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:31:96:b0:bd:a2:3a:d0:33:0e:7a:a8:10:08:e6:ea:aa:3b:95:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Jul 19 12:47:15 2025 GMT Not After : Jul 22 20:59:15 2025 GMT Subject: CN=18D05B85C76BFC4828743F2B58559F6713101DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:a1:cd:fb:6a:f2:cc:c1:e7:71:c2:c6:e6: 4a:60:c4:0a:7a:94:30:22:ce:5e:9d:08:df:5e:e8: 14:80:2b:5b:aa:09:4e:f0:3f:9c:45:2f:01:d3:c2: a2:34:ec:31:6e:ae:2c:b8:5e:36:5f:d6:df:2d:f1: 96:d7:c5:8b:92:13:68:74:f9:b9:54:88:a6:a9:a5: be:ae:db:66:ad:28:86:dd:17:6d:5d:f1:cb:0b:76: 52:d5:f1:7e:17:ae:61:d7:4c:91:49:56:8a:4a:7b: 1c:4d:d5:34:cc:02:83:62:67:2b:f3:88:4d:24:10: 79:10:34:81:06:5c:d8:3a:67:a1:05:ef:18:b2:ee: fd:be:f9:16:c0:35:7d:ca:ab:d8:8c:d9:19:39:6d: de:73:1d:85:ba:7d:df:c2:74:29:9f:6e:c1:cd:49: c5:2b:90:2a:24:53:bb:3e:d6:89:37:4c:29:81:5f: 06:a2:be:b6:a0:20:4a:18:43:3a:27:87:b4:e1:9a: c7:06:0d:e3:eb:aa:0c:a7:92:77:90:e2:2a:47:63: a9:40:3e:77:b0:eb:cf:0f:8d:98:86:a6:09:0a:74: 83:29:0a:12:3e:c1:c5:80:28:e4:c1:42:a6:95:4a: 63:29:15:46:50:74:ae:7f:d0:51:49:84:5a:aa:81: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:5B:85:C7:6B:FC:48:28:74:3F:2B:58:55:9F:67:13:10:1D:BC X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:79:96:4c:22:d8:b3:d8:e6:2c:2d:59:81:74:42:ce:57:4a: d5:1f:66:2d:8f:b0:b9:74:37:d3:f6:8b:0c:84:59:4c:e9:71: 55:81:c5:d5:fa:1a:9d:05:d7:7c:1b:ae:9a:a6:4b:93:f8:f1: 34:e6:1c:43:92:dc:d7:5d:ca:d2:41:a6:ca:b6:77:af:34:f0: ac:86:2f:6d:8c:2d:9c:03:6e:e8:5a:7f:5a:df:a3:26:dd:b4: 47:70:40:ea:d7:07:2a:b7:97:c4:e0:3c:e3:54:92:08:55:c4: bf:fb:14:a3:55:be:65:34:eb:2e:c3:c5:b3:bb:9e:9b:24:ea: 51:cf:82:ff:30:79:66:8f:0a:80:7d:06:94:f1:02:45:41:7b: ad:d7:cf:85:7a:06:3d:bd:6c:9c:46:12:e2:b6:8f:4a:b0:13: fa:30:b6:87:8c:a1:95:70:b3:dc:a9:68:e4:90:2e:b3:c8:1e: 5c:61:1d:bc:72:67:c3:e4:3d:6e:5a:c2:b9:2d:1e:8c:b0:b5: ca:a3:d2:5e:fc:9c:42:a7:6b:5f:7c:e8:b5:3f:49:82:9e:c3: 7c:8f:0e:39:dd:6f:23:1c:5e:52:75:59:16:1b:5c:ea:1d:ec: 75:95:45:4a:78:0d:72:08:d0:d9:da:70:69:60:e7:82:53:73: c2:07:a0:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajGWsL2iOtAzDnqoEAjm6qo7lXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA3MTkxMjQ3MTVaFw0yNTA3MjIyMDU5MTVaMDMxMTAvBgNV BAMTKDE4RDA1Qjg1Qzc2QkZDNDgyODc0M0YyQjU4NTU5RjY3MTMxMDFEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1qHN+2ryzMHnccLG5kpgxAp6 lDAizl6dCN9e6BSAK1uqCU7wP5xFLwHTwqI07DFuriy4XjZf1t8t8ZbXxYuSE2h0 +blUiKappb6u22atKIbdF21d8csLdlLV8X4XrmHXTJFJVopKexxN1TTMAoNiZyvz iE0kEHkQNIEGXNg6Z6EF7xiy7v2++RbANX3Kq9iM2Rk5bd5zHYW6fd/CdCmfbsHN ScUrkCokU7s+1ok3TCmBXwaivragIEoYQzonh7ThmscGDePrqgynkneQ4ipHY6lA Pnew688PjZiGpgkKdIMpChI+wcWAKOTBQqaVSmMpFUZQdK5/0FFJhFqqgcOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNBbhcdr/EgodD8rWFWfZxMQHbwwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd5lkwi2LPY5iwtWYF0Qs5XStUfZi2PsLl0 N9P2iwyEWUzpcVWBxdX6Gp0F13wbrpqmS5P48TTmHEOS3NddytJBpsq2d6808KyG L22MLZwDbuhaf1rfoybdtEdwQOrXByq3l8TgPONUkghVxL/7FKNVvmU06y7DxbO7 npsk6lHPgv8weWaPCoB9BpTxAkVBe63Xz4V6Bj29bJxGEuK2j0qwE/owtoeMoZVw s9ypaOSQLrPIHlxhHbxyZ8PkPW5awrktHoywtcqj0l78nEKna1986LU/SYKew3yP DjndbyMcXlJ1WRYbXOod7HWVRUp4DXII0NnacGlg54JTc8IHoDY= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:29 2025 by rpki-client