$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: n/lk/B+bmmH7nAIyyYyDwWd9UkmrZ2qGn0Q9SflG/o0= Subject key identifier: E1:C3:A4:19:21:EE:AF:DE:94:24:A0:73:52:8F:8F:BC:3D:54:AA:83 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 4A7592C2CC4C90827FE913AC3BFADBB41E682413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 04A2 Signing time: Fri 05 Sep 2025 01:02:24 +0000 Manifest this update: Fri 05 Sep 2025 00:57:24 +0000 Manifest next update: Mon 08 Sep 2025 12:44:24 +0000 Files and hashes: 1: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: 5V8TdCs3cgs+nmmoF4z5Y22rIV0qGc1uTgZVGMrslKU=) 2: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: Mt5SrkBl0TnCuOW6KjiUo7KU17URT0CCUG/IFHUWPhI=) 3: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: RqV7MiZCdh14rxtDpc1q1XSCPo3NljjgLxfzVCzw+60=) 4: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: MfxGUIrhtjjGajjX90ABbBqTVuaaEFP6XuBr1Yslsx0=) 5: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: laLJUGonDC43HjG3ZGNawYIEQ9ln67j38UngxvM2zgQ=) 6: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Hp5JXQrEPxCMGP++NvFxm2uvusi9TtoQlGvA7/UOH1I=) 7: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: DTVsh2XoacQGQ0M4VZPcXWe9xYvlSB7Zv3KJ/YTK1Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:75:92:c2:cc:4c:90:82:7f:e9:13:ac:3b:fa:db:b4:1e:68:24:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Sep 5 00:57:24 2025 GMT Not After : Sep 8 12:44:24 2025 GMT Subject: CN=E1C3A41921EEAFDE9424A073528F8FBC3D54AA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:e1:90:6f:99:1c:32:75:9a:a7:50:4b:db: 54:ce:95:f9:19:c3:91:70:d4:77:8e:dd:62:e4:ed: d8:37:f9:2a:7f:89:f3:23:eb:a0:81:39:c2:b1:ea: c7:1c:21:e4:f5:a6:b7:e3:19:97:c3:a4:49:12:2c: 59:c4:1e:86:ea:e8:a6:10:fb:ac:7c:6c:6d:2f:62: 3c:95:f5:1a:3b:c8:52:22:bc:47:b0:d3:ae:5a:d9: a0:b5:f0:6e:f4:3b:e3:25:85:7b:99:af:cb:f1:24: e1:1b:5c:b1:3e:fe:f4:e1:e9:b7:0c:27:b4:fd:60: 22:66:6b:8c:ee:7c:a4:36:28:4e:bc:cc:ef:86:7e: c8:31:18:80:2a:7e:24:6d:e6:04:70:2d:30:4f:39: 94:8a:20:8f:9a:ef:2b:dc:36:d1:32:be:1a:5b:71: 24:8a:05:d1:0d:cc:ce:38:44:5b:53:d8:91:38:69: 1a:f9:8e:11:64:e7:4e:18:89:0d:4c:c4:67:04:3b: f0:8e:9e:ba:54:cc:66:64:8d:99:e1:b5:c5:c3:47: 97:de:86:40:cd:b9:84:2f:2a:ff:d6:e2:cf:12:94: bb:f6:8c:88:21:11:6a:51:cb:70:12:c3:a9:d2:2c: e8:59:58:45:69:31:d0:46:d9:a9:67:cc:00:d6:91: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C3:A4:19:21:EE:AF:DE:94:24:A0:73:52:8F:8F:BC:3D:54:AA:83 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7b:70:46:79:86:14:8f:ec:b8:d1:fb:b2:c2:d9:02:40:c7: fe:be:f3:30:12:6c:8b:25:77:5f:fa:39:de:5e:f1:07:77:b8: 37:ad:b8:e1:a4:7b:10:32:0d:6b:ed:85:17:2e:3b:93:da:97: f0:bb:28:b8:72:a2:d2:32:e9:68:7d:f9:5e:73:14:ec:98:b7: a5:f4:bb:e8:9b:22:83:4d:8e:e5:49:b0:80:9e:72:36:4e:10: 5a:97:21:1b:b4:82:f9:41:c4:0c:d1:36:c7:11:68:10:db:00: 92:9f:25:ec:61:6f:cb:70:55:79:50:e2:55:f6:c6:23:eb:cd: d4:ca:0b:ae:ef:ea:6b:65:31:80:d8:e2:d1:ac:e9:e3:87:f3: a8:e4:6c:05:63:94:fd:03:b4:14:8f:4f:05:4d:97:15:e1:15: 64:83:07:5d:fb:9e:48:39:6a:9b:03:80:bf:3a:5d:fc:78:0f: 98:f1:93:08:ea:34:89:84:3b:fb:04:24:68:50:05:dd:6b:59: e3:15:c3:63:33:29:57:ac:f4:50:6f:08:72:9e:45:e9:ac:dc: 5b:9b:10:26:33:81:b3:ec:74:f8:70:ef:92:ce:b1:22:5d:a5: 03:f6:e0:67:82:13:2a:30:10:25:06:4c:2e:aa:34:73:a0:5f: 8c:00:20:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnWSwsxMkIJ/6ROsO/rbtB5oJBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA5MDUwMDU3MjRaFw0yNTA5MDgxMjQ0MjRaMDMxMTAvBgNV BAMTKEUxQzNBNDE5MjFFRUFGREU5NDI0QTA3MzUyOEY4RkJDM0Q1NEFBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6C+GQb5kcMnWap1BL21TOlfkZ w5Fw1HeO3WLk7dg3+Sp/ifMj66CBOcKx6sccIeT1prfjGZfDpEkSLFnEHobq6KYQ +6x8bG0vYjyV9Ro7yFIivEew065a2aC18G70O+MlhXuZr8vxJOEbXLE+/vTh6bcM J7T9YCJma4zufKQ2KE68zO+GfsgxGIAqfiRt5gRwLTBPOZSKII+a7yvcNtEyvhpb cSSKBdENzM44RFtT2JE4aRr5jhFk504YiQ1MxGcEO/COnrpUzGZkjZnhtcXDR5fe hkDNuYQvKv/W4s8SlLv2jIghEWpRy3ASw6nSLOhZWEVpMdBG2alnzADWkXo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cOkGSHur96UJKBzUo+PvD1UqoMwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh7cEZ5hhSP7LjR+7LC2QJAx/6+8zASbIsl d1/6Od5e8Qd3uDetuOGkexAyDWvthRcuO5Pal/C7KLhyotIy6Wh9+V5zFOyYt6X0 u+ibIoNNjuVJsICecjZOEFqXIRu0gvlBxAzRNscRaBDbAJKfJexhb8twVXlQ4lX2 xiPrzdTKC67v6mtlMYDY4tGs6eOH86jkbAVjlP0DtBSPTwVNlxXhFWSDB137nkg5 apsDgL86Xfx4D5jxkwjqNImEO/sEJGhQBd1rWeMVw2MzKVes9FBvCHKeRems3Fub ECYzgbPsdPhw75LOsSJdpQP24GeCEyowECUGTC6qNHOgX4wAIO0= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:42 2025 by rpki-client