$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: S9bAQ3v6DD/wL6+XXSc601LzNwBlP8TI/KgVLmSFpBA= Subject key identifier: CC:BD:B5:02:D4:46:39:4F:FF:39:16:C3:BA:0C:DA:2E:C0:D1:D3:39 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 26092DF96520D05F85C423DF8AE45FBD2DD11549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01FB Signing time: Fri 05 Sep 2025 05:41:50 +0000 Manifest this update: Fri 05 Sep 2025 05:36:50 +0000 Manifest next update: Mon 08 Sep 2025 09:49:50 +0000 Files and hashes: 1: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: G7jBP1GkiiR2PJhjOt5E2rdtHKhvUj3Ujocov7IhC14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:09:2d:f9:65:20:d0:5f:85:c4:23:df:8a:e4:5f:bd:2d:d1:15:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Sep 5 05:36:50 2025 GMT Not After : Sep 8 09:49:50 2025 GMT Subject: CN=CCBDB502D446394FFF3916C3BA0CDA2EC0D1D339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:18:10:26:c1:d3:6a:64:df:b3:8f:0b:07:03: 05:80:47:56:1b:cc:b0:aa:43:39:da:68:39:45:fd: f8:a5:a8:27:dc:ae:56:df:bd:b0:f8:20:35:54:31: b9:81:79:aa:5a:8c:a0:c9:86:cb:f8:15:1e:7d:82: b0:16:de:76:9a:11:8b:fb:61:12:37:36:c2:bf:57: cd:4b:74:74:e4:f7:bd:65:da:d5:83:b2:5c:d5:0c: 0c:16:21:6b:c8:55:a6:8d:89:dd:99:c0:68:32:e9: 4f:ec:69:1d:b4:de:bf:9f:4e:5d:c0:82:87:3c:c1: c5:04:27:b9:7b:2b:b3:70:51:2c:b6:f3:3a:10:28: 0b:8f:74:63:79:ce:37:dd:78:29:78:76:6d:86:5e: 94:8e:12:84:5d:f2:fb:b6:eb:57:51:76:2e:f0:ea: c3:6f:8c:ff:81:ac:21:23:48:b3:37:18:fd:0b:65: 31:19:05:5c:ce:df:10:be:70:29:2f:5b:36:ac:3a: 7b:90:5f:a1:b1:aa:02:c2:e1:3f:a0:5c:bb:9c:a5: 39:4c:43:e8:52:0f:93:59:1d:bd:77:70:71:08:58: ae:1d:41:dd:c5:07:61:52:f3:56:06:53:17:bf:a8: eb:3c:3a:69:ff:65:f5:01:a9:4b:ac:3b:27:dc:af: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:B5:02:D4:46:39:4F:FF:39:16:C3:BA:0C:DA:2E:C0:D1:D3:39 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7d:ee:89:5a:a1:4a:11:2e:f7:28:b6:da:67:81:d9:a1:40: 4d:d8:e4:ba:5e:87:bf:cf:18:62:c0:14:22:05:fc:02:46:15: ec:28:38:21:f4:09:b1:90:94:b6:73:74:16:a4:40:02:4e:c8: 5d:09:36:66:0d:3c:3e:c4:8a:23:93:45:d8:2e:bd:d9:c8:f9: 8a:51:8d:46:0d:a6:68:4a:60:57:57:e7:57:40:4f:00:13:92: f1:e2:22:6b:e4:2b:69:44:87:08:5c:e5:c6:39:b5:1f:68:cf: 30:06:ec:e7:8f:e0:cf:d1:79:d7:e6:37:cf:52:b2:9d:8f:b6: 6e:67:84:46:0f:cf:92:24:a7:43:9e:c7:70:71:da:5b:97:5c: bc:9f:33:fa:66:7f:29:a5:8c:cc:fe:ae:d2:f2:21:34:52:ea: 2e:b5:90:35:03:46:a9:6d:61:af:6c:d1:14:1f:ec:9a:8a:00: 73:93:18:e3:ad:2c:13:fa:9e:b0:c9:58:16:74:0f:ae:9a:cd: 41:ca:42:18:aa:f1:72:c6:b3:46:5d:63:ca:20:c9:22:87:a3: b6:71:a0:22:6c:b9:cd:d4:dc:17:9e:04:6a:05:9d:59:a1:88: cc:81:84:70:14:31:ad:67:b3:45:fe:d3:02:c6:32:3b:12:7f: 7b:39:65:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgkt+WUg0F+FxCPfiuRfvS3RFUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA5MDUwNTM2NTBaFw0yNTA5MDgwOTQ5NTBaMDMxMTAvBgNV BAMTKENDQkRCNTAyRDQ0NjM5NEZGRjM5MTZDM0JBMENEQTJFQzBEMUQzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwGBAmwdNqZN+zjwsHAwWAR1Yb zLCqQznaaDlF/filqCfcrlbfvbD4IDVUMbmBeapajKDJhsv4FR59grAW3naaEYv7 YRI3NsK/V81LdHTk971l2tWDslzVDAwWIWvIVaaNid2ZwGgy6U/saR203r+fTl3A goc8wcUEJ7l7K7NwUSy28zoQKAuPdGN5zjfdeCl4dm2GXpSOEoRd8vu261dRdi7w 6sNvjP+BrCEjSLM3GP0LZTEZBVzO3xC+cCkvWzasOnuQX6GxqgLC4T+gXLucpTlM Q+hSD5NZHb13cHEIWK4dQd3FB2FS81YGUxe/qOs8Omn/ZfUBqUusOyfcr4PNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzL21AtRGOU//ORbDugzaLsDR0zkwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt97olaoUoRLvcottpngdmhQE3Y5Lpeh7/P GGLAFCIF/AJGFewoOCH0CbGQlLZzdBakQAJOyF0JNmYNPD7EiiOTRdguvdnI+YpR jUYNpmhKYFdX51dATwATkvHiImvkK2lEhwhc5cY5tR9ozzAG7OeP4M/RedfmN89S sp2Ptm5nhEYPz5Ikp0Oex3Bx2luXXLyfM/pmfymljMz+rtLyITRS6i61kDUDRqlt Ya9s0RQf7JqKAHOTGOOtLBP6nrDJWBZ0D66azUHKQhiq8XLGs0ZdY8ogySKHo7Zx oCJsuc3U3BeeBGoFnVmhiMyBhHAUMa1ns0X+0wLGMjsSf3s5ZS8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:45 2025 by rpki-client