$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: /KfJYojHpYE64fMW0M+t+6Y4yu3G+Nt/98z1UOtXDRg= Subject key identifier: 8E:2D:D8:9D:67:08:46:F1:3A:B7:66:39:2E:36:05:25:DE:1E:39:33 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 374FD667473A63EB77F54BA70974A90B224FABEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 34 Signing time: Sat 19 Jul 2025 11:01:25 +0000 Manifest this update: Sat 19 Jul 2025 10:56:25 +0000 Manifest next update: Tue 22 Jul 2025 12:20:25 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) 2: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: MZnJwq+3uR6Q7g2BZ6+mRK17yBA3xv7aFUmReNYivIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4f:d6:67:47:3a:63:eb:77:f5:4b:a7:09:74:a9:0b:22:4f:ab:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Jul 19 10:56:25 2025 GMT Not After : Jul 22 12:20:25 2025 GMT Subject: CN=8E2DD89D670846F13AB766392E360525DE1E3933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:3b:14:2b:71:a0:66:b7:db:71:46:4b:3d: 96:ed:7b:b1:88:3c:87:50:7b:cf:9e:34:dc:6c:85: 99:b3:e8:c4:dd:15:73:39:73:b1:a2:ce:b4:16:70: 76:24:43:7c:3b:b5:ab:79:83:95:59:de:15:2a:6c: f6:f6:2a:08:94:a3:81:67:5f:60:b2:2c:71:5c:be: f1:4b:86:5a:22:6c:aa:b9:02:0f:e1:3c:9e:05:e8: 1d:1d:7d:b6:a5:03:1e:c0:8b:c7:ba:0d:73:4f:67: 06:e2:5a:5a:00:f2:c2:98:51:23:b2:11:0c:58:f0: f7:9d:13:76:91:f3:43:22:30:82:7f:82:7b:28:ab: 47:9e:71:ce:2c:b4:f6:21:f8:f3:50:34:87:73:84: e5:1b:16:98:9c:9d:34:ca:ab:78:0a:f0:f0:8f:c6: d8:04:e9:ba:cb:5f:d6:d5:42:6a:24:81:ac:28:eb: 4c:63:68:19:ea:b7:c2:50:a6:fd:06:1f:12:8b:68: a8:e5:76:db:7c:c3:fc:3d:31:53:51:58:75:89:29: 05:ec:ea:30:0c:37:9b:e9:f8:e3:90:e7:e2:11:7b: 89:a9:17:c9:0d:b3:4e:ef:1b:3a:bf:b5:a6:f6:a0: 7b:7a:e6:8b:79:a9:53:2a:98:dd:33:fe:9a:69:08: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2D:D8:9D:67:08:46:F1:3A:B7:66:39:2E:36:05:25:DE:1E:39:33 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ed:6a:2b:3d:7a:a6:9e:5b:54:89:1d:e9:3a:91:bd:e1:bd: bd:84:bc:5f:c2:e5:88:51:e8:34:62:e4:58:03:92:b7:2a:72: 9f:2f:35:1f:b7:78:02:8f:a5:65:45:3a:fc:76:9a:ba:e3:9d: 06:e8:f9:37:f1:70:75:76:ce:d9:34:8c:84:f7:de:46:3b:a1: 3a:c6:bd:6e:28:5b:ce:e5:96:08:ea:bb:4e:18:22:89:cc:d4: 9c:96:dd:52:71:ae:54:29:57:e0:08:25:84:05:c3:a3:93:35: a4:0e:d7:03:de:10:ab:e2:b1:5d:3d:79:98:aa:7e:0c:dc:4b: 99:ed:bc:de:35:0b:f3:76:26:7f:36:f7:6e:e9:cd:54:c5:2b: d9:1e:b1:5c:ea:45:07:0b:30:0e:c2:c3:2d:20:cf:df:38:68: 05:3a:65:fa:6c:61:f5:18:05:56:a4:48:e9:a4:94:30:fd:dc: b6:79:9f:0f:42:da:4f:04:f7:15:2c:a5:a1:88:ce:e3:54:8c: 26:1f:98:82:b6:ae:90:65:2e:be:89:63:c5:bd:70:68:9e:8a: fa:46:1b:a2:b3:0e:19:d6:c5:46:4d:6e:85:0d:ab:e2:82:53: ad:a5:df:93:24:18:3f:01:7f:10:e8:7b:85:84:f3:04:41:45: d1:d0:29:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0/WZ0c6Y+t39UunCXSpCyJPq+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA3MTkxMDU2MjVaFw0yNTA3MjIxMjIwMjVaMDMxMTAvBgNV BAMTKDhFMkREODlENjcwODQ2RjEzQUI3NjYzOTJFMzYwNTI1REUxRTM5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCasjsUK3GgZrfbcUZLPZbte7GI PIdQe8+eNNxshZmz6MTdFXM5c7GizrQWcHYkQ3w7tat5g5VZ3hUqbPb2KgiUo4Fn X2CyLHFcvvFLhloibKq5Ag/hPJ4F6B0dfbalAx7Ai8e6DXNPZwbiWloA8sKYUSOy EQxY8PedE3aR80MiMIJ/gnsoq0eecc4stPYh+PNQNIdzhOUbFpicnTTKq3gK8PCP xtgE6brLX9bVQmokgawo60xjaBnqt8JQpv0GHxKLaKjldtt8w/w9MVNRWHWJKQXs 6jAMN5vp+OOQ5+IRe4mpF8kNs07vGzq/tab2oHt65ot5qVMqmN0z/pppCKq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUji3YnWcIRvE6t2Y5LjYFJd4eOTMwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGztais9eqaeW1SJHek6kb3hvb2EvF/C5YhR 6DRi5FgDkrcqcp8vNR+3eAKPpWVFOvx2mrrjnQbo+TfxcHV2ztk0jIT33kY7oTrG vW4oW87llgjqu04YIonM1JyW3VJxrlQpV+AIJYQFw6OTNaQO1wPeEKvisV09eZiq fgzcS5ntvN41C/N2Jn82927pzVTFK9kesVzqRQcLMA7Cwy0gz984aAU6ZfpsYfUY BVakSOmklDD93LZ5nw9C2k8E9xUspaGIzuNUjCYfmIK2rpBlLr6JY8W9cGieivpG G6KzDhnWxUZNboUNq+KCU62l35MkGD8BfxDoe4WE8wRBRdHQKYk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:07 2025 by rpki-client