$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: kP6Nq6kQJrZKnUBNct8GYvNKNGCvcJP/YqOPs2IbmfA= Subject key identifier: F2:74:77:F1:B0:F4:2D:B0:29:E1:72:2A:96:FA:06:EF:69:B7:F7:73 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 61C6381D7344979D3C9CC505C588D0D5E85B5761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01B8 Signing time: Tue 08 Apr 2025 12:41:48 +0000 Manifest this update: Tue 08 Apr 2025 12:36:48 +0000 Manifest next update: Fri 11 Apr 2025 21:46:48 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: sqpRyzcFA+c54VNKGTRUY6oyAZTu6295syOmVLjaq9w=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: zBmW9Bk2lLkpCt+UwsQR1DXBR9F91BW/SX5QBgtlozE=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 12:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c6:38:1d:73:44:97:9d:3c:9c:c5:05:c5:88:d0:d5:e8:5b:57:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Apr 8 12:36:48 2025 GMT Not After : Apr 11 21:46:48 2025 GMT Subject: CN=F27477F1B0F42DB029E1722A96FA06EF69B7F773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:d6:d0:69:e2:da:c4:50:57:b4:c0:26:87: 57:4c:98:f2:28:24:7e:ef:13:ce:15:bd:03:36:57: cc:3b:c9:78:28:e9:6a:c9:e5:4b:75:7c:d9:14:f7: f5:a9:d0:1a:f9:f8:40:0a:4e:48:dd:23:4a:36:e6: de:45:9b:66:4f:98:ce:2d:7e:db:83:1c:26:35:40: 43:92:7b:53:89:5c:3f:bf:83:12:f8:fd:c1:02:57: 5b:1e:c0:dd:ee:42:ea:3e:41:9f:c1:1b:ce:e4:1e: 83:b7:88:54:f4:2b:d8:31:8b:cb:8a:a6:34:18:0f: 8a:bc:0e:18:66:43:d3:2d:df:4e:21:2c:93:2f:67: 49:0f:69:2c:d0:44:6c:9d:7b:68:2e:9c:69:8c:3f: 82:88:e5:81:21:90:f0:8a:1b:e1:6a:d4:2b:d0:c1: c2:69:63:30:e2:5a:ff:50:44:53:b4:b9:1a:37:f0: 67:79:6b:f5:91:32:02:66:a5:61:d3:2d:ce:73:5f: c5:95:a5:9c:89:c5:0c:bf:70:5f:e1:66:51:cd:bc: 2f:e5:94:18:85:9f:60:9b:7d:32:cb:cc:be:76:02: 00:f7:19:21:d1:aa:8f:03:58:9b:5b:84:79:6a:14: e1:c3:75:8c:af:bd:e5:be:2e:4b:dd:5c:24:a5:a2: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:77:F1:B0:F4:2D:B0:29:E1:72:2A:96:FA:06:EF:69:B7:F7:73 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:52:e2:fc:51:6c:9a:4d:73:26:53:33:45:19:dc:9b:25:e4: 63:1c:4b:fe:ce:91:ff:45:56:f3:20:30:b1:98:cc:7e:f9:ca: fa:4e:29:9a:e7:38:6b:ea:b3:6c:ba:60:7c:89:92:0d:88:fd: fc:b4:fd:8d:43:1a:05:1f:fc:31:d1:2a:af:a7:c3:cf:d1:78: f0:df:12:c0:95:3a:9b:3f:35:d9:ec:b6:4e:b8:34:dc:08:41: 13:cf:3a:ba:a6:e8:15:1d:19:e1:1e:dd:a8:a5:32:2f:8b:81: 28:f3:1e:95:ef:7f:20:1a:bf:3f:e0:dc:d3:35:8c:49:97:33: df:35:ad:18:a4:56:7c:7c:c4:b6:ea:c4:c9:24:62:4e:ae:5a: ab:dd:de:7c:97:71:d1:1d:19:67:b6:60:80:47:fd:d1:b3:4c: 5b:8a:ac:e9:6c:a0:68:b3:2e:64:4e:a7:37:f9:1a:a6:2f:9b: 76:dc:09:1c:bf:da:c2:15:73:f4:0f:a5:57:0f:3b:2e:3f:c2: 0d:f3:69:fa:0f:60:a8:1f:78:74:ba:02:7b:93:dc:ef:23:b8: 0c:72:2a:8d:66:1f:24:5d:a4:a1:a5:dc:72:b6:8d:eb:24:bd: 16:53:b5:d2:cd:24:b8:8b:45:8a:a3:72:b7:68:70:f8:84:52: ed:c0:41:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcY4HXNEl508nMUFxYjQ1ehbV2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA0MDgxMjM2NDhaFw0yNTA0MTEyMTQ2NDhaMDMxMTAvBgNV BAMTKEYyNzQ3N0YxQjBGNDJEQjAyOUUxNzIyQTk2RkEwNkVGNjlCN0Y3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGONbQaeLaxFBXtMAmh1dMmPIo JH7vE84VvQM2V8w7yXgo6WrJ5Ut1fNkU9/Wp0Br5+EAKTkjdI0o25t5Fm2ZPmM4t ftuDHCY1QEOSe1OJXD+/gxL4/cECV1sewN3uQuo+QZ/BG87kHoO3iFT0K9gxi8uK pjQYD4q8DhhmQ9Mt304hLJMvZ0kPaSzQRGyde2gunGmMP4KI5YEhkPCKG+Fq1CvQ wcJpYzDiWv9QRFO0uRo38Gd5a/WRMgJmpWHTLc5zX8WVpZyJxQy/cF/hZlHNvC/l lBiFn2CbfTLLzL52AgD3GSHRqo8DWJtbhHlqFOHDdYyvveW+LkvdXCSlokl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nR38bD0LbAp4XIqlvoG72m393MwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5S4vxRbJpNcyZTM0UZ3Jsl5GMcS/7Okf9F VvMgMLGYzH75yvpOKZrnOGvqs2y6YHyJkg2I/fy0/Y1DGgUf/DHRKq+nw8/RePDf EsCVOps/Ndnstk64NNwIQRPPOrqm6BUdGeEe3ailMi+LgSjzHpXvfyAavz/g3NM1 jEmXM981rRikVnx8xLbqxMkkYk6uWqvd3nyXcdEdGWe2YIBH/dGzTFuKrOlsoGiz LmROpzf5GqYvm3bcCRy/2sIVc/QPpVcPOy4/wg3zafoPYKgfeHS6AnuT3O8juAxy Ko1mHyRdpKGl3HK2jeskvRZTtdLNJLiLRYqjcrdocPiEUu3AQZU= -----END CERTIFICATE-----Generated at Tue Apr 8 15:59:24 2025 by rpki-client