$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: CgsYndNa3NMaDgWcsb+ZT5RDWeiox8Da4VGRbPXb4lg= Subject key identifier: 76:9B:F5:E0:64:D7:04:14:5F:35:89:BA:6E:1F:3B:FA:A9:1F:FB:1F Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 2CC6E5C1E717F77C1842B16B3730558DDD9BF4F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 01BB Signing time: Sun 08 Jun 2025 13:51:43 +0000 Manifest this update: Sun 08 Jun 2025 13:46:43 +0000 Manifest next update: Thu 12 Jun 2025 00:27:43 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: vP9GPcAKmsUU+Ckysn34OnwkbKG3UKuDCNsjlZZY9N0=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: XruL81aH+YN1ovypVRcmkN6zvYT5ojMoMI2ZZS2pPEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c6:e5:c1:e7:17:f7:7c:18:42:b1:6b:37:30:55:8d:dd:9b:f4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Jun 8 13:46:43 2025 GMT Not After : Jun 12 00:27:43 2025 GMT Subject: CN=769BF5E064D704145F3589BA6E1F3BFAA91FFB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:23:ac:94:ca:da:6c:f1:6d:40:ff:eb:ad: aa:0a:28:d4:8c:51:b1:82:52:1e:9b:00:fe:47:8a: de:0d:e3:5a:5c:1f:ef:62:04:30:66:db:e6:94:b0: 4e:16:0f:9f:88:ad:07:8c:e5:28:de:d5:46:20:53: 3f:be:56:8c:4d:63:47:f4:bc:31:46:aa:1d:3b:13: 8a:ce:f4:61:77:95:f8:17:f8:53:8d:a6:cc:f8:78: 53:76:21:13:94:13:1f:b4:2d:44:d5:24:e7:5d:70: 97:ac:08:af:ca:4e:d0:a8:21:d5:40:55:cd:f8:f6: 39:89:ed:a6:60:33:b7:79:ab:81:32:99:d0:c4:47: e7:6d:53:62:fe:ec:84:f4:b1:b6:8b:7c:0e:a1:79: ca:4a:81:8c:25:96:dd:4c:c9:f5:5b:5b:b6:7c:cc: 67:de:50:dd:81:cf:0c:ef:7f:89:45:e0:34:76:c6: be:fe:53:69:56:0b:9a:b7:88:bd:ec:0a:4c:23:af: d3:f8:3d:de:a3:6d:1f:50:a9:e0:19:b3:f7:a9:6a: 13:9e:de:b9:b3:19:a1:ca:59:65:2c:7a:92:ef:99: fd:90:32:bf:7d:54:10:50:87:53:a7:90:e7:04:0f: f0:de:d1:9c:fc:c4:8b:44:58:01:5b:84:f5:32:99: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:F5:E0:64:D7:04:14:5F:35:89:BA:6E:1F:3B:FA:A9:1F:FB:1F X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:aa:0d:3e:b6:80:6f:2b:35:ff:34:f6:09:da:f8:36:51:b1: 8e:5a:85:76:9f:3b:3f:8f:4f:68:52:bb:b8:32:cd:3c:71:f8: dc:ea:ae:19:c3:c9:cf:26:b1:2f:d9:19:b2:57:9f:f4:b2:82: 20:6a:52:8a:48:74:1d:89:da:42:2f:b9:e9:ac:12:02:41:1a: d3:80:5e:19:16:a8:5e:8b:a0:e6:a9:b4:ce:9e:71:30:3b:4f: 73:95:08:ae:1e:d0:07:a3:f3:36:1e:3b:2b:30:64:58:62:e7: 28:3d:7d:71:38:31:9e:75:f4:9a:44:5b:7c:1d:8b:ee:c5:3d: 4c:2f:20:6b:a6:cb:16:4f:3e:d8:57:b2:c0:3f:24:a6:10:30: 91:6a:63:1e:0d:3d:e4:2d:57:1f:e7:44:eb:d7:67:a9:53:40: c3:67:b7:8e:1a:54:f7:25:9c:7a:97:b2:95:e0:8c:8f:f2:b7: 33:9b:dd:9b:3d:31:0a:7c:c6:2a:9d:2e:77:e0:06:61:aa:7f: 3d:b8:61:41:d6:86:c8:9c:0c:05:2a:2e:c8:df:76:ed:72:86: be:b5:ab:a3:89:3d:b6:12:d6:69:4a:56:38:71:87:b5:27:63: dc:51:2f:6c:8e:99:fa:94:91:12:ce:85:c5:5e:29:f8:fc:3c: 1e:34:e0:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMblwecX93wYQrFrNzBVjd2b9PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTA2MDgxMzQ2NDNaFw0yNTA2MTIwMDI3NDNaMDMxMTAvBgNV BAMTKDc2OUJGNUUwNjRENzA0MTQ1RjM1ODlCQTZFMUYzQkZBQTkxRkZCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGyOslMrabPFtQP/rraoKKNSM UbGCUh6bAP5Hit4N41pcH+9iBDBm2+aUsE4WD5+IrQeM5Sje1UYgUz++VoxNY0f0 vDFGqh07E4rO9GF3lfgX+FONpsz4eFN2IROUEx+0LUTVJOddcJesCK/KTtCoIdVA Vc349jmJ7aZgM7d5q4EymdDER+dtU2L+7IT0sbaLfA6hecpKgYwllt1MyfVbW7Z8 zGfeUN2Bzwzvf4lF4DR2xr7+U2lWC5q3iL3sCkwjr9P4Pd6jbR9QqeAZs/epahOe 3rmzGaHKWWUsepLvmf2QMr99VBBQh1OnkOcED/De0Zz8xItEWAFbhPUymch5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpv14GTXBBRfNYm6bh87+qkf+x8wHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKqDT62gG8rNf809gna+DZRsY5ahXafOz+P T2hSu7gyzTxx+NzqrhnDyc8msS/ZGbJXn/SygiBqUopIdB2J2kIvuemsEgJBGtOA XhkWqF6LoOaptM6ecTA7T3OVCK4e0Aej8zYeOyswZFhi5yg9fXE4MZ519JpEW3wd i+7FPUwvIGumyxZPPthXssA/JKYQMJFqYx4NPeQtVx/nROvXZ6lTQMNnt44aVPcl nHqXspXgjI/ytzOb3Zs9MQp8xiqdLnfgBmGqfz24YUHWhsicDAUqLsjfdu1yhr61 q6OJPbYS1mlKVjhxh7UnY9xRL2yOmfqUkRLOhcVeKfj8PB404GM= -----END CERTIFICATE-----Generated at Sun Jun 8 23:34:13 2025 by rpki-client