$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: PcxHC8uP1CZ5xxMdliLQhtebYKyIgjg/JFiSG10rLBA= Subject key identifier: EC:93:97:84:2E:EE:BB:3E:BE:CD:BC:36:BF:49:03:08:D5:54:EC:C7 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 2F4489A6D80F1470D12F0466D72A9F584A415111 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0139 Signing time: Wed 03 Sep 2025 23:41:38 +0000 Manifest this update: Wed 03 Sep 2025 23:36:38 +0000 Manifest next update: Sun 07 Sep 2025 01:29:38 +0000 Files and hashes: 1: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: nXoyusFqytUMZi8n8aS08DG1bv+C6vp5birg2/kGef8=) 3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 4: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:44:89:a6:d8:0f:14:70:d1:2f:04:66:d7:2a:9f:58:4a:41:51:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Sep 3 23:36:38 2025 GMT Not After : Sep 7 01:29:38 2025 GMT Subject: CN=EC9397842EEEBB3EBECDBC36BF490308D554ECC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:a4:4f:7b:e4:98:a7:8f:98:9a:36:9e:02: f7:81:4e:f2:1d:f1:99:e8:41:0c:19:f8:91:dc:bf: 77:e2:50:80:53:67:a2:01:2e:6a:db:6e:e3:00:2a: 89:68:d0:33:3b:21:29:b5:f5:78:8c:f2:6e:af:29: 3f:17:1a:81:a8:95:56:69:81:ea:be:8d:71:f9:4a: 15:65:0d:28:e0:f1:bb:06:94:d5:9f:81:3a:43:cf: 9b:7b:bc:be:4a:5c:a8:08:c3:6b:f3:d6:a7:0a:d3: 65:20:33:f8:80:25:c9:40:3a:62:09:e2:c2:b5:5d: 7b:40:32:b7:75:00:2f:d4:2e:fa:67:8f:72:3e:20: e5:e8:29:0a:3b:81:59:82:9b:24:3d:47:d3:fc:02: bc:6f:40:3f:b7:c4:04:f2:d0:b7:54:9d:65:39:85: 7d:25:03:95:cc:b5:19:c7:37:53:75:a9:a1:24:46: 00:2f:17:f4:7d:85:a3:66:4e:b1:6e:91:ef:da:40: 6b:fe:af:91:d8:e0:84:f8:22:df:e1:82:cf:66:b5: 6f:8d:5a:94:d2:22:81:a2:e8:70:58:90:74:e7:19: 9e:fe:f6:b2:9a:03:98:0a:62:56:3a:d7:64:de:ce: 61:28:8d:b4:b2:bf:fc:c6:ac:0e:32:5c:2e:97:8b: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:97:84:2E:EE:BB:3E:BE:CD:BC:36:BF:49:03:08:D5:54:EC:C7 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7e:f5:aa:08:db:14:a4:79:64:a6:2e:a6:3e:c6:fa:a5:4b: 8d:04:9c:34:87:dc:83:77:cc:0f:92:c1:14:9b:6a:b5:89:80: 42:15:f8:e7:fa:17:70:8f:a3:8d:0e:96:61:8b:ca:f6:fc:eb: 84:9a:e3:71:c9:72:e2:10:fd:de:01:f8:90:b9:c5:c5:07:b4: 95:2e:42:e6:4b:c4:f8:b3:7b:eb:e4:8c:7b:98:b4:f4:e6:20: 3a:a9:14:7d:0c:42:36:11:d1:0a:28:ae:d2:6e:a2:e1:ec:05: b4:ec:85:a2:a0:d4:64:c2:d0:70:93:a4:90:ef:4d:a1:f8:1a: 09:9f:0a:10:32:63:cb:25:70:06:68:cf:44:9d:c1:7f:96:49: 92:7d:39:a0:2a:5f:eb:81:72:71:5f:69:fd:3d:62:9c:29:fc: ff:99:3f:72:1e:76:33:9e:46:75:d6:b8:60:a7:2a:c9:ca:98: 3b:05:9a:42:8b:88:78:34:1c:8c:78:28:b4:8d:77:2a:f4:ea: 48:23:87:b7:87:8e:e7:d7:46:1b:01:a7:aa:6f:98:d0:41:0f: 1f:3b:d3:92:91:02:53:09:72:4d:3c:9b:4f:82:9b:a6:10:76: 83:2f:c3:72:51:8c:bc:3a:f2:a7:5d:bd:a4:3a:ec:03:21:a7: df:b3:7a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0SJptgPFHDRLwRm1yqfWEpBUREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA5MDMyMzM2MzhaFw0yNTA5MDcwMTI5MzhaMDMxMTAvBgNV BAMTKEVDOTM5Nzg0MkVFRUJCM0VCRUNEQkMzNkJGNDkwMzA4RDU1NEVDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsaRPe+SYp4+YmjaeAveBTvId 8ZnoQQwZ+JHcv3fiUIBTZ6IBLmrbbuMAKolo0DM7ISm19XiM8m6vKT8XGoGolVZp geq+jXH5ShVlDSjg8bsGlNWfgTpDz5t7vL5KXKgIw2vz1qcK02UgM/iAJclAOmIJ 4sK1XXtAMrd1AC/ULvpnj3I+IOXoKQo7gVmCmyQ9R9P8ArxvQD+3xATy0LdUnWU5 hX0lA5XMtRnHN1N1qaEkRgAvF/R9haNmTrFuke/aQGv+r5HY4IT4It/hgs9mtW+N WpTSIoGi6HBYkHTnGZ7+9rKaA5gKYlY612TezmEojbSyv/zGrA4yXC6Xi3whAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7JOXhC7uuz6+zbw2v0kDCNVU7McwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV+9aoI2xSkeWSmLqY+xvqlS40EnDSH3IN3 zA+SwRSbarWJgEIV+Of6F3CPo40OlmGLyvb864Sa43HJcuIQ/d4B+JC5xcUHtJUu QuZLxPize+vkjHuYtPTmIDqpFH0MQjYR0QoortJuouHsBbTshaKg1GTC0HCTpJDv TaH4GgmfChAyY8slcAZoz0SdwX+WSZJ9OaAqX+uBcnFfaf09Ypwp/P+ZP3IedjOe RnXWuGCnKsnKmDsFmkKLiHg0HIx4KLSNdyr06kgjh7eHjufXRhsBp6pvmNBBDx87 05KRAlMJck08m0+Cm6YQdoMvw3JRjLw68qddvaQ67AMhp9+zel0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client