$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: Qq/9r/kQi7hM6o5MZQJGVUN41hTFwQZQqy+9Y2lm/OQ= Subject key identifier: 30:F8:37:0F:03:D4:65:7C:59:B4:7B:CC:ED:4B:A8:F5:1A:B7:BC:32 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 3AA218D61B7649593C7F6A0F77A880B585398865 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 015B Signing time: Mon 02 Jun 2025 14:51:34 +0000 Manifest this update: Mon 02 Jun 2025 14:46:34 +0000 Manifest next update: Thu 05 Jun 2025 22:53:34 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: IILoG6s3z9YNmBBtESd0KokrzBLzpA6uaNPMgRVQ688=) 3: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a2:18:d6:1b:76:49:59:3c:7f:6a:0f:77:a8:80:b5:85:39:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Jun 2 14:46:34 2025 GMT Not After : Jun 5 22:53:34 2025 GMT Subject: CN=30F8370F03D4657C59B47BCCED4BA8F51AB7BC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:55:5a:56:da:80:f5:6d:51:32:d9:6c:a1: 54:dc:6c:05:c5:c3:e9:4f:a6:ab:9a:5e:d8:ee:73: b2:ad:05:86:96:e4:1a:d2:9a:6e:8f:c3:36:e2:1b: 67:ea:4b:81:ca:8b:2c:42:08:ec:fe:3e:e3:98:db: 40:0b:48:2f:e2:23:7e:57:ab:de:c3:c4:fa:b5:bd: f0:65:70:c4:39:f3:27:57:de:bc:02:07:b2:9f:ca: 36:e9:6e:95:19:ef:37:99:0a:51:32:f9:4c:c9:29: 00:8f:26:2a:91:91:ff:00:f0:67:73:6a:b4:19:80: c9:49:89:59:08:b6:1a:08:29:6b:78:e1:1d:95:05: d7:4e:56:1d:b3:b3:7a:30:ce:68:ff:6a:e3:09:6f: cd:77:3a:4d:ee:dc:f4:ec:21:a7:17:e0:50:6e:93: bd:dd:ab:2b:28:c4:d0:4a:2f:75:f8:c8:f4:6f:e9: 61:69:29:c8:80:08:47:45:d3:b0:20:57:44:78:8a: e7:34:f8:0b:e7:35:be:c3:74:b5:ad:f8:42:16:1e: 75:ab:87:c6:28:ad:e6:7c:6d:ec:b7:ba:20:0c:ac: 00:44:da:9d:c1:db:0d:12:06:a8:39:a2:c0:26:a6: b2:66:5b:e8:85:83:50:64:38:69:3a:26:bf:9f:71: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F8:37:0F:03:D4:65:7C:59:B4:7B:CC:ED:4B:A8:F5:1A:B7:BC:32 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:b9:4e:3e:47:36:4f:33:bf:02:fc:13:4c:d7:d1:45:35: d0:da:43:1f:cf:22:24:bf:da:8e:cd:d3:75:70:cc:db:73:90: ca:6f:d0:c1:14:01:19:24:17:82:e1:ca:8a:74:a6:b7:ac:bc: 5b:37:22:bb:8d:6e:f5:c2:02:28:b2:d6:d1:34:97:ce:29:6c: cf:fd:c9:05:55:5f:58:bd:e2:d5:6a:5b:f9:66:00:26:3d:e3: 2d:73:68:68:56:0b:2b:4b:ae:ad:71:3c:5d:45:2c:18:34:93: d0:7a:4b:0c:5b:9c:4d:d7:5e:95:77:9f:e7:e3:8a:26:e4:84: fe:84:d7:da:38:47:01:be:ba:a3:6d:4d:67:6b:e6:9b:e4:0c: fd:2b:fb:3d:11:ab:7c:e0:38:80:75:74:d1:e9:8f:ae:82:51: a5:24:56:bd:b3:d1:df:7c:d1:c9:17:94:52:94:11:e7:e0:73: 7f:82:98:d7:21:71:51:e0:0f:e7:3d:c6:5e:87:69:b1:1f:7b: 8e:91:ed:7b:55:4d:22:22:56:4f:cd:7d:81:d4:5f:17:21:22: f9:67:80:e0:8b:ca:ff:54:8d:5a:ef:77:05:09:ea:ed:51:68: 51:b1:25:22:4d:58:0f:07:27:8a:2f:ae:31:bd:5b:b3:3c:0f: 59:44:e9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqIY1ht2SVk8f2oPd6iAtYU5iGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTA2MDIxNDQ2MzRaFw0yNTA2MDUyMjUzMzRaMDMxMTAvBgNV BAMTKDMwRjgzNzBGMDNENDY1N0M1OUI0N0JDQ0VENEJBOEY1MUFCN0JDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4aVVaVtqA9W1RMtlsoVTcbAXF w+lPpquaXtjuc7KtBYaW5BrSmm6PwzbiG2fqS4HKiyxCCOz+PuOY20ALSC/iI35X q97DxPq1vfBlcMQ58ydX3rwCB7KfyjbpbpUZ7zeZClEy+UzJKQCPJiqRkf8A8Gdz arQZgMlJiVkIthoIKWt44R2VBddOVh2zs3owzmj/auMJb813Ok3u3PTsIacX4FBu k73dqysoxNBKL3X4yPRv6WFpKciACEdF07AgV0R4iuc0+AvnNb7DdLWt+EIWHnWr h8YoreZ8bey3uiAMrABE2p3B2w0SBqg5osAmprJmW+iFg1BkOGk6Jr+fcemvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPg3DwPUZXxZtHvM7Uuo9Rq3vDIwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcjuU4+RzZPM78C/BNM19FFNdDaQx/PIiS/ 2o7N03VwzNtzkMpv0MEUARkkF4Lhyop0presvFs3IruNbvXCAiiy1tE0l84pbM/9 yQVVX1i94tVqW/lmACY94y1zaGhWCytLrq1xPF1FLBg0k9B6SwxbnE3XXpV3n+fj iibkhP6E19o4RwG+uqNtTWdr5pvkDP0r+z0Rq3zgOIB1dNHpj66CUaUkVr2z0d98 0ckXlFKUEefgc3+CmNchcVHgD+c9xl6HabEfe46R7XtVTSIiVk/NfYHUXxchIvln gOCLyv9UjVrvdwUJ6u1RaFGxJSJNWA8HJ4ovrjG9W7M8D1lE6WU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:06 2025 by rpki-client