$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: vCZs+6olcKOQX9PK/X11d9NGlIxdIsRMUXEkjUAR6GQ= Subject key identifier: AB:67:B2:BE:E6:AC:DC:DF:58:57:9A:7D:5B:B7:04:7E:8C:85:EF:9C Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 2338CE253A6DABF0775DBA6A84A531C5D31AAAE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 0475 Signing time: Sun 01 Jun 2025 11:10:40 +0000 Manifest this update: Sun 01 Jun 2025 11:05:40 +0000 Manifest next update: Wed 04 Jun 2025 21:24:40 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 2: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 3: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 4: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: bPGl3CO9lOA7k1CHQFybl781kf8M5kfS2C5Ay9Hrw/E=) 5: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) 6: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 7: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 21:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:38:ce:25:3a:6d:ab:f0:77:5d:ba:6a:84:a5:31:c5:d3:1a:aa:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Jun 1 11:05:40 2025 GMT Not After : Jun 4 21:24:40 2025 GMT Subject: CN=AB67B2BEE6ACDCDF58579A7D5BB7047E8C85EF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:41:0f:5b:e8:a3:b6:99:73:50:cb:3b:4e: 8a:e9:e3:4e:e8:4c:c2:f5:71:fb:e2:5e:aa:a6:6a: 2a:a9:ed:90:63:06:43:1b:81:f9:62:ea:9f:12:5d: 4f:1f:e1:aa:70:47:64:fb:5d:9e:e8:9c:9a:14:69: 46:11:a2:60:1f:c2:37:87:e9:2a:ad:24:b9:7c:6f: ce:1f:4d:34:56:4f:a7:e7:47:1a:79:62:a4:93:94: d8:65:bb:e2:7f:00:67:de:a1:7a:1e:b1:e8:79:2d: 42:bc:c2:1f:01:d8:36:4b:84:e8:ba:3a:47:8d:bc: d7:cf:25:13:cc:ed:d8:ac:5e:ab:a6:87:b3:66:9f: 2e:63:0d:54:ee:75:f4:d0:67:ed:20:77:72:41:0e: 93:4d:24:cf:cb:a9:2e:c2:c4:e1:17:08:52:46:dd: 41:6b:04:30:e0:3f:a0:8c:0b:67:20:78:9c:9b:4c: 97:62:3f:5d:04:2a:85:97:46:94:67:70:0a:7c:35: 55:30:9a:6e:de:d2:63:42:56:a5:fd:8e:7f:a8:62: 78:06:43:3e:18:4f:5f:5c:f2:40:61:db:ff:6e:e2: c2:0f:62:f1:0e:8e:02:14:8e:42:61:0b:98:49:85: 8a:f9:59:7f:ef:31:5b:37:7a:8c:68:a3:90:5c:e9: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:B2:BE:E6:AC:DC:DF:58:57:9A:7D:5B:B7:04:7E:8C:85:EF:9C X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bd:ce:ba:88:1c:b9:58:84:af:9d:f9:61:1e:07:9f:bc:b2: 92:35:f6:e2:13:05:e0:ed:4e:88:fa:f4:c2:c1:80:bc:4f:b5: 3a:e9:37:9a:29:78:67:15:65:ec:c3:42:74:1e:46:1b:16:82: e6:81:27:87:87:b2:30:ab:4f:2d:c7:d5:cd:a4:b9:1f:63:9c: 11:98:61:bc:47:9d:83:b0:6d:d7:7a:92:41:84:03:07:30:63: 98:c2:d2:7a:8b:60:81:0c:1f:68:23:b4:e8:e7:0a:c1:ec:96: 10:3f:12:9a:38:98:32:31:ff:5a:fb:58:32:9c:54:8d:c0:43: fd:b3:3b:fc:fd:a8:43:21:a1:57:2e:fe:a5:59:0c:11:9d:67: 73:d1:e5:bc:3b:49:be:0f:49:91:28:3c:91:18:fd:9a:7c:4d: f1:6b:9c:34:04:18:00:92:53:cc:ba:0e:61:f0:ac:9a:c6:c2: a9:3f:4d:73:d9:7e:43:c1:6d:f1:c1:43:b8:a6:e1:22:4c:70: a4:59:61:34:ed:09:65:a5:7d:80:da:e6:cb:7c:fb:9a:e8:7b: ee:29:63:8a:17:f7:74:0f:a7:1d:1d:40:7d:33:4a:3f:fd:da: f1:d0:1a:16:32:80:0f:8d:0d:84:f2:40:4d:9f:48:28:d2:fa: d5:5f:69:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzjOJTptq/B3XbpqhKUxxdMaquYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA2MDExMTA1NDBaFw0yNTA2MDQyMTI0NDBaMDMxMTAvBgNV BAMTKEFCNjdCMkJFRTZBQ0RDREY1ODU3OUE3RDVCQjcwNDdFOEM4NUVGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDch0EPW+ijtplzUMs7Torp407o TML1cfviXqqmaiqp7ZBjBkMbgfli6p8SXU8f4apwR2T7XZ7onJoUaUYRomAfwjeH 6SqtJLl8b84fTTRWT6fnRxp5YqSTlNhlu+J/AGfeoXoeseh5LUK8wh8B2DZLhOi6 OkeNvNfPJRPM7disXqumh7Nmny5jDVTudfTQZ+0gd3JBDpNNJM/LqS7CxOEXCFJG 3UFrBDDgP6CMC2cgeJybTJdiP10EKoWXRpRncAp8NVUwmm7e0mNCVqX9jn+oYngG Qz4YT19c8kBh2/9u4sIPYvEOjgIUjkJhC5hJhYr5WX/vMVs3eoxoo5Bc6fmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2eyvuas3N9YV5p9W7cEfoyF75wwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa9zrqIHLlYhK+d+WEeB5+8spI19uITBeDt Toj69MLBgLxPtTrpN5opeGcVZezDQnQeRhsWguaBJ4eHsjCrTy3H1c2kuR9jnBGY YbxHnYOwbdd6kkGEAwcwY5jC0nqLYIEMH2gjtOjnCsHslhA/Epo4mDIx/1r7WDKc VI3AQ/2zO/z9qEMhoVcu/qVZDBGdZ3PR5bw7Sb4PSZEoPJEY/Zp8TfFrnDQEGACS U8y6DmHwrJrGwqk/TXPZfkPBbfHBQ7im4SJMcKRZYTTtCWWlfYDa5st8+5roe+4p Y4oX93QPpx0dQH0zSj/92vHQGhYygA+NDYTyQE2fSCjS+tVfaSo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:49 2025 by rpki-client