$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: Io5fYkzr+Sz7wt9A1vMFQ5GqCze8PRiuSwxWLbtBwN4= Subject key identifier: 5D:30:04:F2:16:3F:87:28:86:FA:9C:CF:35:98:6B:8D:67:BF:72:14 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 0DCCD618FB9E99DB304FCB9DA868BF4167B0F3CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 02:05:06 +0000 Manifest this update: Mon 02 Jun 2025 02:00:06 +0000 Manifest next update: Thu 05 Jun 2025 11:02:06 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: XmohXu6Trtad32uXjyo3BGhWmi/9pA67whgplHJCIbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 11:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cc:d6:18:fb:9e:99:db:30:4f:cb:9d:a8:68:bf:41:67:b0:f3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Jun 2 02:00:06 2025 GMT Not After : Jun 5 11:02:06 2025 GMT Subject: CN=5D3004F2163F872886FA9CCF35986B8D67BF7214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:f9:d2:af:b3:59:5e:10:34:93:a7:01:42: 71:04:48:0d:8d:1d:96:65:11:e3:b1:5f:0e:87:cd: 00:68:4f:da:ae:0d:28:d8:c1:ea:13:2a:c8:5b:c6: 29:57:43:76:cb:5a:43:cb:3c:81:e1:f5:86:94:aa: 23:e7:68:0a:66:38:38:3a:52:2a:d4:10:64:15:12: ed:6e:ce:d4:05:3e:c0:e3:86:45:ff:84:5a:56:0d: ae:fb:16:92:2a:08:3b:6e:a0:fb:7b:4b:fe:f8:88: 0c:c8:4b:7f:2c:11:f0:c0:93:e4:06:df:84:5d:5c: fd:c1:f6:a1:0e:09:da:35:88:d8:c0:00:98:44:d1: 1d:44:1e:43:4e:4e:c2:48:6b:2a:23:5d:34:55:89: 7d:a8:04:74:41:5b:a7:5f:4d:b1:f2:fe:77:60:5a: 0e:5d:39:3e:8a:fa:91:52:84:28:4d:5e:86:4d:89: e9:02:27:29:31:7d:a8:11:aa:67:26:d9:fd:d8:c4: 40:54:6c:63:75:3a:bc:87:b3:30:c6:5a:85:7f:e8: c3:55:b6:95:04:15:a2:c4:95:91:08:6e:1f:55:1d: 58:a4:23:cd:39:5f:a2:8b:78:82:75:c2:67:72:60: 0d:37:49:ed:d8:21:7d:ca:e3:f1:a2:f8:bb:79:14: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:04:F2:16:3F:87:28:86:FA:9C:CF:35:98:6B:8D:67:BF:72:14 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:ad:0e:59:74:2b:ef:cd:aa:11:85:f8:b9:63:cb:3c:4a: fe:71:a0:d8:e9:61:a5:71:01:fd:cc:f7:e5:73:82:6e:7e:66: 7b:0b:73:ad:ac:fc:5a:b8:9f:35:3a:f5:9a:d8:07:28:c4:64: a0:a3:ef:bf:49:8a:c5:4a:da:69:44:f0:28:cf:c2:fd:53:53: c0:84:3a:ab:02:ed:96:e5:0f:26:a1:22:54:a8:7b:0b:4f:a0: 8f:3b:bb:a7:df:0c:32:3d:76:4b:96:40:0b:49:40:46:98:18: 82:5e:2e:4b:6a:ba:c1:43:b0:16:30:c6:e3:3d:15:57:2d:6a: eb:9d:e8:fe:04:0f:1e:c3:9e:82:93:d8:01:6c:12:15:9e:d8: bd:f8:96:44:b9:ad:e4:de:66:de:69:48:e3:58:41:2c:bc:2f: ee:fe:9e:ca:3f:7e:21:ed:34:5d:e7:c6:04:b8:2d:a2:d7:3a: 34:61:8a:eb:99:d6:c6:a3:02:36:9b:1c:6a:ad:d8:f4:8d:38: b1:a2:0e:dd:e0:bd:72:b2:bf:52:0e:d0:b0:3e:a4:f9:09:dd: 3d:9e:b7:ff:b9:9d:4d:46:7c:d8:a9:a3:ae:d7:1a:57:88:76: ed:16:87:3c:98:69:ad:94:e6:85:87:64:7e:52:73:75:aa:55: 7e:da:2d:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDczWGPuemdswT8udqGi/QWew88owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA2MDIwMjAwMDZaFw0yNTA2MDUxMTAyMDZaMDMxMTAvBgNV BAMTKDVEMzAwNEYyMTYzRjg3Mjg4NkZBOUNDRjM1OTg2QjhENjdCRjcyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kPnSr7NZXhA0k6cBQnEESA2N HZZlEeOxXw6HzQBoT9quDSjYweoTKshbxilXQ3bLWkPLPIHh9YaUqiPnaApmODg6 UirUEGQVEu1uztQFPsDjhkX/hFpWDa77FpIqCDtuoPt7S/74iAzIS38sEfDAk+QG 34RdXP3B9qEOCdo1iNjAAJhE0R1EHkNOTsJIayojXTRViX2oBHRBW6dfTbHy/ndg Wg5dOT6K+pFShChNXoZNiekCJykxfagRqmcm2f3YxEBUbGN1OryHszDGWoV/6MNV tpUEFaLElZEIbh9VHVikI805X6KLeIJ1wmdyYA03Se3YIX3K4/Gi+Lt5FINvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTAE8hY/hyiG+pzPNZhrjWe/chQwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED1rQ5ZdCvvzaoRhfi5Y8s8Sv5xoNjpYaVx Af3M9+Vzgm5+ZnsLc62s/Fq4nzU69ZrYByjEZKCj779JisVK2mlE8CjPwv1TU8CE OqsC7ZblDyahIlSoewtPoI87u6ffDDI9dkuWQAtJQEaYGIJeLktqusFDsBYwxuM9 FVctauud6P4EDx7DnoKT2AFsEhWe2L34lkS5reTeZt5pSONYQSy8L+7+nso/fiHt NF3nxgS4LaLXOjRhiuuZ1sajAjabHGqt2PSNOLGiDt3gvXKyv1IO0LA+pPkJ3T2e t/+5nU1GfNipo67XGleIdu0WhzyYaa2U5oWHZH5Sc3WqVX7aLas= -----END CERTIFICATE-----Generated at Tue Jun 3 23:29:05 2025 by rpki-client