$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: e6wG4FriRMfLDzuheVls/8JJ41S0BttONs08UpKKtK4= Subject key identifier: 80:52:39:16:09:15:95:4B:A9:C9:81:F8:2E:31:29:D9:B6:B9:BD:F5 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 3E541A61933B68B6B9E53A6CC07E90AAA20D9BAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 045B Signing time: Fri 04 Apr 2025 01:00:39 +0000 Manifest this update: Fri 04 Apr 2025 00:55:39 +0000 Manifest next update: Mon 07 Apr 2025 11:22:39 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 2: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) 3: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) 4: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 5: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: mGqfGp2UFUuJyz1ql/8dQUInadyvzUmuTP63dYt5J9o=) 6: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 7: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:54:1a:61:93:3b:68:b6:b9:e5:3a:6c:c0:7e:90:aa:a2:0d:9b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Apr 4 00:55:39 2025 GMT Not After : Apr 7 11:22:39 2025 GMT Subject: CN=805239160915954BA9C981F82E3129D9B6B9BDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:30:7e:4d:f5:c6:c7:8c:c7:83:c7:d6:f9:b8: f0:cc:1b:f3:aa:92:e6:c3:7d:e8:5c:0e:2a:d1:94: 26:4b:14:15:0f:2e:3f:16:dd:40:18:18:23:83:c6: 45:a7:94:ad:9b:4f:5b:b0:ca:d2:21:00:71:d7:d7: 05:d4:58:1a:d1:1c:a6:73:a6:1c:60:65:27:6f:df: e5:44:93:44:ca:98:40:28:5a:ff:68:d3:a4:03:07: 1d:a6:c7:f0:9d:49:cd:63:97:6a:d1:da:e1:55:5c: 0c:8f:16:2f:d9:27:6e:15:fb:4e:ce:61:bd:08:9d: bf:c1:73:ba:fe:5a:7c:73:7e:c8:0a:f5:d0:52:a3: b2:a5:8b:9b:51:1a:05:b2:13:1d:64:cb:f9:27:6f: ed:07:ea:41:2d:a3:a2:5f:43:65:bf:e9:77:72:84: 6c:db:15:3e:f7:59:34:d3:ad:c6:17:10:51:de:ad: 81:34:1f:40:ba:96:41:28:d8:0b:b5:61:f5:ee:6b: c1:24:15:f9:ce:89:92:51:f8:7e:94:45:17:91:ab: a7:1e:c4:7e:3e:1f:d8:07:cc:7b:de:30:75:1c:70: e0:cc:a2:26:fd:83:ae:9d:e8:61:2f:f4:6d:27:35: e3:94:be:c3:d5:61:c1:04:db:9e:5c:ee:8d:db:84: 98:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:52:39:16:09:15:95:4B:A9:C9:81:F8:2E:31:29:D9:B6:B9:BD:F5 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d4:6f:ec:d3:6b:07:b7:a1:a8:66:cc:bd:73:8e:7e:ad:b1: b1:cd:b6:c1:2e:e5:e5:a1:30:c9:11:96:fd:a9:96:19:56:1e: 26:62:58:0a:93:04:4a:8a:41:50:d3:26:75:5f:41:bf:f8:f2: 5a:fd:6f:4c:43:9c:d3:1f:ac:6f:4e:f6:6a:0a:ff:21:ac:1c: 39:4f:0d:cf:ba:0a:5f:f7:57:ab:42:45:70:30:fe:be:06:07: e9:a3:de:c4:e6:59:1c:6b:ec:89:01:bf:d8:34:9a:2a:82:3c: b4:2a:e8:53:2f:03:67:39:25:ed:f9:70:52:9d:4b:dd:e9:4e: f8:f7:f0:47:3f:aa:88:9f:cd:eb:1e:8b:8b:08:3c:3d:50:e9: 53:84:d1:11:e0:86:db:07:4e:f0:07:51:fc:74:82:8b:d2:f8: 56:da:25:14:30:84:a4:d7:08:41:68:80:b5:23:d9:b6:42:55: f7:7c:e0:b2:36:3f:20:92:4a:21:f5:3d:6e:e7:ef:36:5c:8d: 10:8b:76:10:1f:5c:dc:5d:e8:f8:b9:a1:59:3e:b3:85:06:aa: 0b:91:99:d6:bd:f6:46:df:04:f4:01:50:fa:30:5d:f6:69:23: a2:08:77:00:43:ad:f2:c0:07:d0:4c:5e:5c:da:a5:b2:fc:b6: 8b:e4:65:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlQaYZM7aLa55TpswH6QqqINm6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA0MDQwMDU1MzlaFw0yNTA0MDcxMTIyMzlaMDMxMTAvBgNV BAMTKDgwNTIzOTE2MDkxNTk1NEJBOUM5ODFGODJFMzEyOUQ5QjZCOUJERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwMH5N9cbHjMeDx9b5uPDMG/Oq kubDfehcDirRlCZLFBUPLj8W3UAYGCODxkWnlK2bT1uwytIhAHHX1wXUWBrRHKZz phxgZSdv3+VEk0TKmEAoWv9o06QDBx2mx/CdSc1jl2rR2uFVXAyPFi/ZJ24V+07O Yb0Inb/Bc7r+WnxzfsgK9dBSo7Kli5tRGgWyEx1ky/knb+0H6kEto6JfQ2W/6Xdy hGzbFT73WTTTrcYXEFHerYE0H0C6lkEo2Au1YfXua8EkFfnOiZJR+H6URReRq6ce xH4+H9gHzHveMHUccODMoib9g66d6GEv9G0nNeOUvsPVYcEE255c7o3bhJjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFI5FgkVlUupyYH4LjEp2ba5vfUwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3Ub+zTawe3oahmzL1zjn6tsbHNtsEu5eWh MMkRlv2plhlWHiZiWAqTBEqKQVDTJnVfQb/48lr9b0xDnNMfrG9O9moK/yGsHDlP Dc+6Cl/3V6tCRXAw/r4GB+mj3sTmWRxr7IkBv9g0miqCPLQq6FMvA2c5Je35cFKd S93pTvj38Ec/qoifzesei4sIPD1Q6VOE0RHghtsHTvAHUfx0govS+FbaJRQwhKTX CEFogLUj2bZCVfd84LI2PyCSSiH1PW7n7zZcjRCLdhAfXNxd6Pi5oVk+s4UGqguR mda99kbfBPQBUPowXfZpI6IIdwBDrfLAB9BMXlzapbL8tovkZQo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:17:26 2025 by rpki-client