$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: FPKxr7XLGYIvj52HKPvGk5lmM8gq9WPnvljd8vAi52I= Subject key identifier: 5C:B9:E3:5D:5D:93:2A:2D:3F:4C:F9:0E:B3:81:CB:7E:9B:CB:BB:7D Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 5F937B5A2D93CC81E3140365A81E567D8433D6F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 022E Signing time: Sun 07 Sep 2025 09:11:15 +0000 Manifest this update: Sun 07 Sep 2025 09:06:15 +0000 Manifest next update: Wed 10 Sep 2025 13:30:15 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: 5ETvlfAORpnQziyNl/zp3e8TXU+ap9OeJ2vHT7AuEkQ=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:93:7b:5a:2d:93:cc:81:e3:14:03:65:a8:1e:56:7d:84:33:d6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Sep 7 09:06:15 2025 GMT Not After : Sep 10 13:30:15 2025 GMT Subject: CN=5CB9E35D5D932A2D3F4CF90EB381CB7E9BCBBB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bc:06:45:e9:07:30:eb:9a:9f:8d:88:1e:da: 6b:b5:80:4e:1b:eb:69:05:e2:b3:7a:75:f6:5b:ac: 47:96:90:4a:05:c4:0a:5b:be:8a:c3:b1:05:e4:d6: a1:ec:b3:65:44:ed:09:af:3f:23:ad:39:5f:41:1a: e3:93:57:91:b4:05:cc:be:e6:b2:f7:86:67:c3:57: ff:c5:7c:8f:8f:54:53:81:ca:c9:4b:d3:35:bf:90: 8a:06:ea:84:c7:1e:7e:ec:9b:15:dc:b4:dc:74:f2: c5:20:ff:30:21:40:89:bb:89:b4:d7:2b:48:36:9f: e1:51:f0:b4:a0:98:25:74:14:cd:e7:e5:99:7a:21: 53:c6:67:43:96:e3:47:7c:c9:49:82:62:6e:22:7c: 9d:86:dc:e7:6a:22:51:ae:2d:ce:80:84:5b:2b:50: a7:2c:f5:88:99:b0:f9:68:74:4b:1f:a5:53:e7:75: 8f:df:e2:eb:fc:c7:88:6f:ef:0b:c9:84:8f:c4:f9: 29:78:4b:45:aa:67:28:1d:5e:40:38:57:a9:64:c1: 20:ef:61:29:30:fb:05:74:d0:91:12:e6:c5:84:bf: 2d:ef:b2:65:0c:c2:bb:97:6e:47:47:41:13:b8:26: 67:2d:17:50:a1:14:04:02:3e:54:05:3a:6b:1e:1e: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B9:E3:5D:5D:93:2A:2D:3F:4C:F9:0E:B3:81:CB:7E:9B:CB:BB:7D X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:57:0c:90:6c:99:b5:0f:c5:7b:18:29:fe:a9:e9:82:c4: d7:25:07:1a:9e:53:d0:a0:22:13:2c:44:9d:9b:5e:55:26:a3: 89:f1:e9:c1:b5:c1:28:af:17:02:13:e2:8c:1b:b9:b2:71:85: ae:9d:28:2c:99:a3:fb:46:3f:f8:1d:2a:e6:0e:ed:1d:0f:62: 97:53:96:a6:5f:94:87:a0:f8:8c:74:cb:90:be:c1:4f:2d:d7: ba:61:61:e0:21:ad:4f:19:3c:9c:8b:bf:bf:47:4c:d8:a1:35: 67:11:24:2c:c1:30:76:90:17:36:f0:c5:ca:e8:1c:38:c0:4d: 14:d7:19:74:82:b9:43:da:0e:ad:a3:b9:f4:ab:de:1f:1f:9a: 16:0d:b1:13:bf:c2:05:2f:bc:d4:89:1f:c0:98:34:91:2d:fb: e5:c4:88:ad:e5:92:28:d3:00:07:12:5e:6c:c1:8f:a6:9b:5c: af:89:93:55:11:45:43:b0:e5:3b:9c:53:0c:37:fc:a4:79:70: ce:d6:36:eb:1b:5d:68:36:14:a3:fe:2e:b9:84:59:e4:28:c3: 26:f1:46:b3:80:19:80:df:4a:c8:ae:ce:20:e7:48:2d:79:a8: 9a:9d:8c:74:60:53:09:74:20:54:2a:74:2f:d1:53:d9:ef:25: c2:b3:af:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5N7Wi2TzIHjFANlqB5WfYQz1vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA5MDcwOTA2MTVaFw0yNTA5MTAxMzMwMTVaMDMxMTAvBgNV BAMTKDVDQjlFMzVENUQ5MzJBMkQzRjRDRjkwRUIzODFDQjdFOUJDQkJCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvAZF6Qcw65qfjYge2mu1gE4b 62kF4rN6dfZbrEeWkEoFxApbvorDsQXk1qHss2VE7QmvPyOtOV9BGuOTV5G0Bcy+ 5rL3hmfDV//FfI+PVFOByslL0zW/kIoG6oTHHn7smxXctNx08sUg/zAhQIm7ibTX K0g2n+FR8LSgmCV0FM3n5Zl6IVPGZ0OW40d8yUmCYm4ifJ2G3OdqIlGuLc6AhFsr UKcs9YiZsPlodEsfpVPndY/f4uv8x4hv7wvJhI/E+Sl4S0WqZygdXkA4V6lkwSDv YSkw+wV00JES5sWEvy3vsmUMwruXbkdHQRO4JmctF1ChFAQCPlQFOmseHrphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLnjXV2TKi0/TPkOs4HLfpvLu30wHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA47VwyQbJm1D8V7GCn+qemCxNclBxqeU9Cg IhMsRJ2bXlUmo4nx6cG1wSivFwIT4owbubJxha6dKCyZo/tGP/gdKuYO7R0PYpdT lqZflIeg+Ix0y5C+wU8t17phYeAhrU8ZPJyLv79HTNihNWcRJCzBMHaQFzbwxcro HDjATRTXGXSCuUPaDq2jufSr3h8fmhYNsRO/wgUvvNSJH8CYNJEt++XEiK3lkijT AAcSXmzBj6abXK+Jk1URRUOw5TucUww3/KR5cM7WNusbXWg2FKP+LrmEWeQowybx RrOAGYDfSsiuziDnSC15qJqdjHRgUwl0IFQqdC/RU9nvJcKzrz8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:46 2025 by rpki-client