$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: GHt12oSEK25qrrj3NOcFzu957Oc24onN229dWB2/JZo= Subject key identifier: 6B:D9:06:47:BB:0E:F3:B0:A0:4B:79:46:CE:95:10:6A:3D:84:B3:36 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 105AAE9F189019598DCA16C6745494B8D3EAA2DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 03:51:46 +0000 Manifest this update: Fri 05 Sep 2025 03:46:46 +0000 Manifest next update: Mon 08 Sep 2025 13:54:46 +0000 Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: zvPKsME9xOy6+orDH6JKGcb/iw5DB4xq04+qmN/kJW8=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5a:ae:9f:18:90:19:59:8d:ca:16:c6:74:54:94:b8:d3:ea:a2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Sep 5 03:46:46 2025 GMT Not After : Sep 8 13:54:46 2025 GMT Subject: CN=6BD90647BB0EF3B0A04B7946CE95106A3D84B336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:03:12:02:a9:87:af:6f:20:76:e5:a2:56: c0:77:3b:a7:fc:14:5d:45:9e:56:2b:e5:0a:f7:e5: 5a:25:99:5a:43:cb:15:53:1f:9e:b7:6a:26:e7:5c: 83:89:b1:f3:b0:ca:58:f6:01:71:07:19:95:7c:34: 7f:01:81:be:01:03:7d:aa:c6:78:0d:0a:ca:76:35: 5d:4d:59:5d:ae:f4:1d:0a:5f:c0:98:52:db:cc:ad: 68:7f:46:13:c2:07:01:b6:d8:1d:3d:8a:d8:45:62: db:a7:99:dc:bc:b2:9c:8f:79:ce:67:f4:aa:02:61: 75:8b:b3:7d:99:7c:bd:16:7a:c2:1e:65:9c:7c:33: 56:8d:e3:4e:fe:8c:b8:5f:ad:6a:c6:8c:f8:5b:02: 82:00:f9:ae:03:36:84:50:10:02:e5:73:4d:bc:ba: 1b:2d:eb:9f:2e:71:de:f4:a7:c0:2d:25:8d:30:4f: 78:bc:89:fa:ef:78:34:53:da:b7:8e:d7:05:d4:24: 28:0d:d6:db:11:45:02:d1:5e:ee:54:6e:46:c9:11: 81:37:8a:3c:6e:c5:c8:2e:c8:e6:96:de:61:4e:11: 85:76:b0:02:09:2c:a9:d6:2d:18:16:f8:90:48:72: 9d:c0:36:fb:35:81:17:07:17:30:bf:cf:5b:17:90: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D9:06:47:BB:0E:F3:B0:A0:4B:79:46:CE:95:10:6A:3D:84:B3:36 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:44:82:be:d8:b9:60:d3:cf:c0:e7:2b:35:62:bf:1d:e7:0c: 40:32:06:3f:67:52:d0:89:8a:ac:2a:31:66:04:20:bb:80:ab: ec:19:32:ea:5c:f7:14:89:a8:ac:15:3d:d2:bf:5e:ba:24:fc: 6f:17:02:72:96:52:9b:77:84:d5:a5:8c:90:04:ba:23:9d:cc: 7d:44:e8:f4:a2:77:61:54:62:32:a7:c8:5d:75:95:86:32:44: 85:e6:43:c4:4b:3e:47:0c:06:02:7c:3a:e0:db:b4:9a:3e:1c: 59:a1:61:83:e0:20:66:6a:f9:4d:ad:79:66:e4:18:25:51:fb: cb:25:93:0e:ed:5f:ce:e1:27:af:3b:ed:59:c2:ff:7a:02:49: d8:8b:0c:c1:ca:a5:7d:70:69:57:83:a3:93:6a:7f:25:f9:e3: a3:55:b7:c7:15:7b:b2:23:9d:30:3e:1b:81:08:73:2e:db:c5: d5:65:d8:04:a7:e3:fe:c0:05:63:28:85:51:f4:d0:33:bf:7e: 51:e8:98:d6:ec:92:45:83:09:d9:96:39:ff:84:f9:58:8a:f9: 5c:b0:c4:c7:6c:ec:c1:14:4d:98:df:83:77:c3:4b:5e:c9:1f: 23:b7:7a:2a:3e:9e:0c:05:c3:77:a0:41:01:b6:78:bf:52:3e: aa:45:4f:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFqunxiQGVmNyhbGdFSUuNPqot4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA5MDUwMzQ2NDZaFw0yNTA5MDgxMzU0NDZaMDMxMTAvBgNV BAMTKDZCRDkwNjQ3QkIwRUYzQjBBMDRCNzk0NkNFOTUxMDZBM0Q4NEIzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WwMSAqmHr28gduWiVsB3O6f8 FF1FnlYr5Qr35VolmVpDyxVTH563aibnXIOJsfOwylj2AXEHGZV8NH8Bgb4BA32q xngNCsp2NV1NWV2u9B0KX8CYUtvMrWh/RhPCBwG22B09ithFYtunmdy8spyPec5n 9KoCYXWLs32ZfL0WesIeZZx8M1aN407+jLhfrWrGjPhbAoIA+a4DNoRQEALlc028 uhst658ucd70p8AtJY0wT3i8ifrveDRT2reO1wXUJCgN1tsRRQLRXu5UbkbJEYE3 ijxuxcguyOaW3mFOEYV2sAIJLKnWLRgW+JBIcp3ANvs1gRcHFzC/z1sXkNr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9kGR7sO87CgS3lGzpUQaj2EszYwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxEgr7YuWDTz8DnKzVivx3nDEAyBj9nUtCJ iqwqMWYEILuAq+wZMupc9xSJqKwVPdK/Xrok/G8XAnKWUpt3hNWljJAEuiOdzH1E 6PSid2FUYjKnyF11lYYyRIXmQ8RLPkcMBgJ8OuDbtJo+HFmhYYPgIGZq+U2teWbk GCVR+8slkw7tX87hJ6877VnC/3oCSdiLDMHKpX1waVeDo5NqfyX546NVt8cVe7Ij nTA+G4EIcy7bxdVl2ASn4/7ABWMohVH00DO/flHomNbskkWDCdmWOf+E+ViK+Vyw xMds7MEUTZjfg3fDS17JHyO3eio+ngwFw3egQQG2eL9SPqpFT1A= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:02 2025 by rpki-client