$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: K1fkmx6/e/i0zWjZmU2NNxVyjfd1sa7WhJsPThILaj4= Subject key identifier: C2:18:D3:63:78:63:BA:03:76:35:E3:32:A4:94:7C:C6:59:7E:13:6E Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 43BA16561ECC20B8DD82585165072CA73A397ADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 010F Signing time: Tue 03 Jun 2025 13:34:51 +0000 Manifest this update: Tue 03 Jun 2025 13:29:51 +0000 Manifest next update: Fri 06 Jun 2025 16:38:51 +0000 Files and hashes: 1: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: oDawNS+t0ykpXs6MBlkz7OiMCeWXHneV/7DBJw7Aucs=) 2: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=) 3: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=) 4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:16:56:1e:cc:20:b8:dd:82:58:51:65:07:2c:a7:3a:39:7a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Jun 3 13:29:51 2025 GMT Not After : Jun 6 16:38:51 2025 GMT Subject: CN=C218D3637863BA037635E332A4947CC6597E136E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:e3:4c:9b:2d:f8:8e:23:de:e1:35:82:af: 9b:e9:4b:38:d8:e4:5d:60:95:74:3e:63:8c:7e:e5: fb:3d:c0:2d:60:2e:1c:10:5e:f1:8d:23:74:a4:36: 75:a1:4c:17:c4:1e:f0:d4:17:94:55:ce:4d:ad:49: a7:d4:a0:c9:b7:bc:45:88:eb:00:e7:2c:04:c1:db: aa:58:5c:2b:65:d8:0e:94:7f:3f:25:b1:32:5d:70: 20:f9:31:b7:74:4f:fe:13:ec:47:8c:50:64:5e:79: 12:0b:20:16:8a:26:2a:56:f5:e8:33:32:24:f2:6c: 59:da:f8:7a:69:34:13:e6:ac:24:58:02:e2:42:f6: aa:54:0c:d0:e8:5e:aa:08:e5:11:a8:3c:b6:29:30: 9f:d8:8a:eb:4b:83:89:be:91:8a:6b:84:8b:16:c5: c0:fd:95:8e:fe:8b:bd:25:be:d5:cb:38:73:c1:3c: 5d:9a:ca:31:eb:ee:b7:64:ef:65:97:0c:d2:a5:90: 65:a5:05:ca:69:af:d4:a9:76:8e:a3:3a:b2:8e:c0: 32:cb:7e:e2:7e:21:c5:04:bd:e9:80:91:ee:f5:75: 3d:a1:9e:79:ef:ee:b3:f1:69:f0:13:69:ee:31:60: ab:db:b3:fa:89:7b:04:29:88:f6:8b:d6:da:09:5c: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:D3:63:78:63:BA:03:76:35:E3:32:A4:94:7C:C6:59:7E:13:6E X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:90:45:43:e0:05:82:4c:0d:3f:a0:07:43:41:f8:4b:71:d0: 77:37:f1:18:d4:a7:3b:1f:2b:02:d9:49:07:be:14:db:6d:9e: be:c4:10:6b:3a:f1:c5:b4:f4:49:07:ef:37:fe:be:ea:dd:e6: d6:58:3c:51:7b:48:21:0b:4e:13:7f:0f:bd:ee:9b:fa:24:fb: c5:54:ce:b9:28:02:6f:b4:b2:34:13:b3:04:30:bd:7e:83:e4: 29:66:e0:88:d5:94:b0:d7:81:93:97:fe:a3:d1:a3:09:6b:e9: 2e:5c:92:92:e3:76:93:95:63:6d:8a:85:da:c1:ab:62:87:f6: 61:92:fe:26:e0:3a:fa:a6:7c:82:7c:3b:31:0c:43:4f:f3:eb: a2:c1:a9:ca:6b:93:6b:f7:57:29:2d:ce:53:6f:24:2e:8b:4a: 10:a2:bb:37:72:19:c4:71:a1:c7:f1:ca:34:46:3f:08:f7:5a: ac:32:07:08:ea:d1:7e:6d:99:58:fe:f3:9c:a7:0b:3b:6b:61: 83:33:79:10:ca:c9:48:af:47:96:78:7d:75:83:23:54:90:30: b0:d2:4b:d7:eb:5f:5d:2a:5e:61:98:d1:16:3c:58:2d:d6:e1: 1f:91:7e:f1:cf:fd:1a:b0:51:06:5d:0e:38:47:6f:11:ba:86: e8:c7:62:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7oWVh7MILjdglhRZQcspzo5et4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA2MDMxMzI5NTFaFw0yNTA2MDYxNjM4NTFaMDMxMTAvBgNV BAMTKEMyMThEMzYzNzg2M0JBMDM3NjM1RTMzMkE0OTQ3Q0M2NTk3RTEzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5+NMmy34jiPe4TWCr5vpSzjY 5F1glXQ+Y4x+5fs9wC1gLhwQXvGNI3SkNnWhTBfEHvDUF5RVzk2tSafUoMm3vEWI 6wDnLATB26pYXCtl2A6Ufz8lsTJdcCD5Mbd0T/4T7EeMUGReeRILIBaKJipW9egz MiTybFna+HppNBPmrCRYAuJC9qpUDNDoXqoI5RGoPLYpMJ/YiutLg4m+kYprhIsW xcD9lY7+i70lvtXLOHPBPF2ayjHr7rdk72WXDNKlkGWlBcppr9Spdo6jOrKOwDLL fuJ+IcUEvemAke71dT2hnnnv7rPxafATae4xYKvbs/qJewQpiPaL1toJXAwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhjTY3hjugN2NeMypJR8xll+E24wHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyQRUPgBYJMDT+gB0NB+Etx0Hc38RjUpzsf KwLZSQe+FNttnr7EEGs68cW09EkH7zf+vurd5tZYPFF7SCELThN/D73um/ok+8VU zrkoAm+0sjQTswQwvX6D5Clm4IjVlLDXgZOX/qPRowlr6S5ckpLjdpOVY22KhdrB q2KH9mGS/ibgOvqmfIJ8OzEMQ0/z66LBqcprk2v3VyktzlNvJC6LShCiuzdyGcRx ocfxyjRGPwj3WqwyBwjq0X5tmVj+85ynCztrYYMzeRDKyUivR5Z4fXWDI1SQMLDS S9frX10qXmGY0RY8WC3W4R+RfvHP/RqwUQZdDjhHbxG6hujHYqA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:06 2025 by rpki-client