$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: q2h4Ej3AhSY7nTeU/mwvyQDlrOxQUK7mNjoLSMDPEwY= Subject key identifier: 23:B0:A1:83:2D:13:00:1C:30:41:91:76:08:2B:7B:27:DE:C9:0A:0E Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 11566694A9C50E8D43483442C57223758AC07B8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04BF Signing time: Fri 04 Apr 2025 08:11:44 +0000 Manifest this update: Fri 04 Apr 2025 08:06:44 +0000 Manifest next update: Mon 07 Apr 2025 08:13:44 +0000 Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: YGPzLRypsr81WaQvFhZldrFYIVAS5QJNDpHBkaVwe8w=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: VmRTNF6O8M+AnB/zvqxaffecroR7hC8t3eEDnSwP8hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:56:66:94:a9:c5:0e:8d:43:48:34:42:c5:72:23:75:8a:c0:7b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Apr 4 08:06:44 2025 GMT Not After : Apr 7 08:13:44 2025 GMT Subject: CN=23B0A1832D13001C30419176082B7B27DEC90A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:72:7c:c9:70:af:a5:fb:e0:9f:07:1f:11: 30:95:ab:62:52:fe:72:33:81:0c:4d:fd:11:4e:96: d8:90:e5:e3:3f:8d:32:79:a0:2e:02:d2:8f:84:dc: 64:8d:b3:6f:fd:1a:20:10:14:f4:f6:ab:bf:92:e9: ff:9c:26:3e:b5:4d:e8:34:20:90:5f:5e:c3:0b:1b: 55:82:96:15:b8:65:34:2a:91:23:29:ff:2d:36:85: 80:13:b9:7f:df:35:42:90:ce:20:d0:9a:82:87:77: fb:66:8d:cf:d9:58:57:49:5f:fe:5a:e9:d7:e7:bc: 65:18:74:c3:3d:67:17:f7:6f:4d:d9:c3:a6:6a:73: a9:e7:46:90:f3:c8:a5:3d:55:46:77:bc:8f:10:4e: 97:41:df:01:46:63:4f:55:1d:e8:70:03:89:4e:4a: 3a:56:75:81:5c:48:68:8a:7c:31:1c:da:40:c2:6b: ea:28:fc:d3:e5:18:9c:b0:ff:3e:27:29:c3:38:23: d8:14:67:f1:59:c7:e8:e4:69:f8:a8:0a:81:7c:0e: ca:1e:c6:22:b4:11:34:e4:28:76:74:d8:1e:da:f5: b2:c4:41:e3:87:12:c2:53:2b:7b:50:61:d6:68:29: 26:63:20:32:5a:d5:57:7e:38:2f:02:77:d9:d9:0c: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:A1:83:2D:13:00:1C:30:41:91:76:08:2B:7B:27:DE:C9:0A:0E X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f5:a9:9d:e1:bb:be:db:f5:07:e4:48:dc:b9:4e:36:fe:4b: ab:24:c3:a1:5d:fe:39:c4:61:7a:4d:d6:08:b0:58:88:d4:e3: 77:9c:48:72:93:99:0a:09:56:94:7b:b3:9c:9e:78:80:cc:8a: 8b:3a:ca:c0:ef:51:3d:a4:2a:de:06:1e:25:ed:f4:c8:4d:5e: 07:00:a0:c6:3c:dd:17:db:68:71:59:5b:79:5b:aa:ed:4a:05: 08:7c:82:ec:2d:12:be:c6:ed:86:12:d9:a7:ca:44:1d:8b:2f: 53:86:6e:1d:01:6b:64:78:07:02:c8:69:0c:ee:ee:9d:f3:8c: 4c:0e:5d:78:46:e0:df:f3:3c:9b:7c:d5:d5:d1:97:55:8f:a8: ec:89:f0:26:75:54:b7:3c:f6:ad:ae:35:88:4a:cf:22:29:a9: 24:b1:e9:c2:7c:31:3b:bb:80:f4:cd:e6:4c:c2:ec:59:1f:3f: bd:36:c6:a5:9c:d9:e4:9f:dc:11:63:2e:97:ce:a6:69:08:54: 5f:c3:53:fb:92:9f:1d:d2:26:c7:2a:8d:60:4a:4e:be:4e:ab: 90:c3:51:40:30:9a:25:82:96:91:ff:72:d1:4f:af:00:81:5d: b0:53:29:fd:b3:91:1f:2a:1a:ce:38:85:83:71:56:b0:a3:a2: e4:cb:b9:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVZmlKnFDo1DSDRCxXIjdYrAe48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA0MDQwODA2NDRaFw0yNTA0MDcwODEzNDRaMDMxMTAvBgNV BAMTKDIzQjBBMTgzMkQxMzAwMUMzMDQxOTE3NjA4MkI3QjI3REVDOTBBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbnJ8yXCvpfvgnwcfETCVq2JS /nIzgQxN/RFOltiQ5eM/jTJ5oC4C0o+E3GSNs2/9GiAQFPT2q7+S6f+cJj61Teg0 IJBfXsMLG1WClhW4ZTQqkSMp/y02hYATuX/fNUKQziDQmoKHd/tmjc/ZWFdJX/5a 6dfnvGUYdMM9Zxf3b03Zw6Zqc6nnRpDzyKU9VUZ3vI8QTpdB3wFGY09VHehwA4lO SjpWdYFcSGiKfDEc2kDCa+oo/NPlGJyw/z4nKcM4I9gUZ/FZx+jkafioCoF8Dsoe xiK0ETTkKHZ02B7a9bLEQeOHEsJTK3tQYdZoKSZjIDJa1Vd+OC8Cd9nZDIZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI7Chgy0TABwwQZF2CCt7J97JCg4wHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/1qZ3hu77b9QfkSNy5Tjb+S6skw6Fd/jnE YXpN1giwWIjU43ecSHKTmQoJVpR7s5yeeIDMios6ysDvUT2kKt4GHiXt9MhNXgcA oMY83RfbaHFZW3lbqu1KBQh8guwtEr7G7YYS2afKRB2LL1OGbh0Ba2R4BwLIaQzu 7p3zjEwOXXhG4N/zPJt81dXRl1WPqOyJ8CZ1VLc89q2uNYhKzyIpqSSx6cJ8MTu7 gPTN5kzC7FkfP702xqWc2eSf3BFjLpfOpmkIVF/DU/uSnx3SJscqjWBKTr5Oq5DD UUAwmiWClpH/ctFPrwCBXbBTKf2zkR8qGs44hYNxVrCjouTLua4= -----END CERTIFICATE-----Generated at Sat Apr 5 20:29:25 2025 by rpki-client