$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: aO8xzrl51+t5jj1LKxIBrJdjOlZPN7mKwo6dpEvu7cM= Subject key identifier: D3:D1:47:71:C9:3C:C9:C7:6E:A4:B0:DF:52:A1:B2:F7:22:9A:0A:AC Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 04CAEB58229551843477628CD06531F24A6693C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 0186 Signing time: Sun 07 Sep 2025 04:11:35 +0000 Manifest this update: Sun 07 Sep 2025 04:06:35 +0000 Manifest next update: Wed 10 Sep 2025 11:56:35 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: m2iCWb0vuRf7PMjYngrVzM4DYzJQIPkyrt64yob/H9g=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ca:eb:58:22:95:51:84:34:77:62:8c:d0:65:31:f2:4a:66:93:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Sep 7 04:06:35 2025 GMT Not After : Sep 10 11:56:35 2025 GMT Subject: CN=D3D14771C93CC9C76EA4B0DF52A1B2F7229A0AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:b5:7a:8b:8b:40:cc:9b:54:8c:1d:96:73: 63:0d:63:a2:73:41:ac:04:dc:6a:70:a1:87:41:b3: d2:ae:43:30:45:76:25:87:d4:e3:98:3a:4b:2c:1e: 4b:e1:1e:20:c7:f1:57:29:9d:a3:a7:4c:29:78:a8: bc:a0:d7:8a:2d:1f:c4:7d:24:21:76:73:21:94:3f: 7d:5a:28:a9:97:60:b4:a6:a0:a9:55:9d:34:7b:f0: d0:b5:f1:0b:18:e9:a0:41:bb:f4:f8:ae:ed:4c:46: d6:de:c3:16:93:e6:8d:2c:96:34:8f:37:d4:96:c6: 4c:b7:d1:6c:4c:56:c4:0d:aa:fc:5d:d9:bc:7f:40: 74:06:8d:0b:8f:b0:f7:16:40:0c:34:68:df:38:fe: 9d:48:2b:2c:f4:c2:87:b0:2e:69:23:d7:0e:b3:4e: d0:31:d9:fd:73:7d:df:dd:b4:f6:26:b3:b9:08:0a: 2d:bb:db:98:99:e3:06:4a:97:5b:cf:7d:10:da:e2: 1f:d5:e5:92:c0:40:87:05:c3:d7:54:f5:8d:63:41: 41:d1:9a:4d:d5:70:d0:0c:5c:6f:da:f3:cd:d8:a1: d8:98:70:a9:e8:28:30:36:67:70:10:5f:b7:a9:7e: 53:5d:7d:9b:72:2d:0d:91:b6:f8:30:f7:0a:86:5b: c5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D1:47:71:C9:3C:C9:C7:6E:A4:B0:DF:52:A1:B2:F7:22:9A:0A:AC X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e1:df:10:90:a1:72:7f:b8:7b:16:bf:e8:e6:ec:a0:20:8d: f2:8c:06:62:c0:24:fc:f0:93:b1:df:b0:21:cc:c2:c1:f1:99: 42:bb:a4:5a:15:f0:a5:47:eb:0c:fe:bf:e2:ef:81:d1:59:51: 04:39:aa:e5:c1:a7:bb:9c:0d:db:13:64:c3:c4:09:39:88:a6: 9a:19:d6:a4:f1:ce:a0:75:5a:25:fc:35:51:f6:06:5c:14:05: fc:a9:4b:87:03:76:fb:02:29:e5:c7:3a:d9:5f:d5:b7:75:1a: 97:73:44:5c:a5:68:89:e9:71:d0:6d:9c:ee:5f:45:9d:65:4c: 9c:08:0a:10:b0:04:0d:e7:fc:39:92:32:4f:a8:8a:3e:e2:77: a0:f1:27:a1:95:3c:8c:9d:37:74:e9:1d:e0:72:bc:8d:a8:bb: 63:d8:77:1a:08:e2:f1:cd:e8:c2:7d:8a:ce:fd:fe:8e:4f:70: a7:78:5e:31:16:bd:71:3d:f0:8a:bf:26:34:ac:ce:2a:d9:50: 3c:84:51:a3:40:d3:48:c2:d4:e2:35:64:2a:62:19:6e:b8:05: 61:fc:cc:88:3a:f0:13:b3:7b:73:0e:fe:be:8f:42:bb:2b:a2: bc:26:80:24:8b:58:ab:a6:64:c9:bf:49:72:96:be:70:aa:56: 89:5e:ab:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMrrWCKVUYQ0d2KM0GUx8kpmk8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTA5MDcwNDA2MzVaFw0yNTA5MTAxMTU2MzVaMDMxMTAvBgNV BAMTKEQzRDE0NzcxQzkzQ0M5Qzc2RUE0QjBERjUyQTFCMkY3MjI5QTBBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2bV6i4tAzJtUjB2Wc2MNY6Jz QawE3GpwoYdBs9KuQzBFdiWH1OOYOkssHkvhHiDH8VcpnaOnTCl4qLyg14otH8R9 JCF2cyGUP31aKKmXYLSmoKlVnTR78NC18QsY6aBBu/T4ru1MRtbewxaT5o0sljSP N9SWxky30WxMVsQNqvxd2bx/QHQGjQuPsPcWQAw0aN84/p1IKyz0woewLmkj1w6z TtAx2f1zfd/dtPYms7kICi2725iZ4wZKl1vPfRDa4h/V5ZLAQIcFw9dU9Y1jQUHR mk3VcNAMXG/a883YodiYcKnoKDA2Z3AQX7epflNdfZtyLQ2Rtvgw9wqGW8WvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09FHcck8ycdupLDfUqGy9yKaCqwwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjh3xCQoXJ/uHsWv+jm7KAgjfKMBmLAJPzw k7HfsCHMwsHxmUK7pFoV8KVH6wz+v+LvgdFZUQQ5quXBp7ucDdsTZMPECTmIppoZ 1qTxzqB1WiX8NVH2BlwUBfypS4cDdvsCKeXHOtlf1bd1GpdzRFylaInpcdBtnO5f RZ1lTJwIChCwBA3n/DmSMk+oij7id6DxJ6GVPIydN3TpHeByvI2ou2PYdxoI4vHN 6MJ9is79/o5PcKd4XjEWvXE98Iq/JjSszirZUDyEUaNA00jC1OI1ZCpiGW64BWH8 zIg68BOze3MO/r6PQrsrorwmgCSLWKumZMm/SXKWvnCqVoleq/g= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:36 2025 by rpki-client