$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: r2wLde7bWui8ZEDb7r3i/XU3DsHYlFWj3ZWbPa/wHcI= Subject key identifier: 8C:70:3C:3C:BC:40:98:51:1D:26:DC:FF:F7:D1:AD:AF:B5:F7:6F:01 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 113F75D20B36C7F65F84F27930A80B17812F441B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0202 Signing time: Sun 01 Jun 2025 22:21:14 +0000 Manifest this update: Sun 01 Jun 2025 22:16:14 +0000 Manifest next update: Thu 05 Jun 2025 02:59:14 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: 5h84v7eLYTQ3NPpUU6VoY9ArW0HBKJTMGzBZMJfBx48=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3f:75:d2:0b:36:c7:f6:5f:84:f2:79:30:a8:0b:17:81:2f:44:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Jun 1 22:16:14 2025 GMT Not After : Jun 5 02:59:14 2025 GMT Subject: CN=8C703C3CBC4098511D26DCFFF7D1ADAFB5F76F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:e2:90:15:e6:8d:e4:8a:ef:6f:bd:2d:aa: 5a:9b:52:4e:3c:4f:d3:e4:d6:c3:70:e0:24:bd:81: 5e:a5:dd:9f:25:06:c6:45:8d:c1:ad:c5:fb:32:19: 2a:68:ef:0f:cf:9a:20:0a:11:5e:e6:ba:ab:b0:70: 28:d7:30:73:2f:26:3f:d8:80:dc:80:6f:8c:c3:bd: f2:47:a3:d9:ca:8b:6c:66:c2:a6:8e:ce:c0:c4:01: af:74:d3:0b:08:2f:bf:f1:fb:31:89:dd:0c:98:86: 9d:ed:66:f4:9a:54:36:8e:8c:53:4c:85:38:9e:8f: ff:fb:c3:93:9b:e5:a8:bf:c2:e5:e8:f0:b0:a3:f1: 99:79:44:c9:67:da:10:4d:ec:d1:38:aa:98:33:e2: 4e:70:3e:96:01:0f:9b:85:8b:f1:f9:82:d6:b5:42: 00:45:fb:a7:1e:66:78:dd:1a:b6:7f:5e:ad:59:47: 03:fd:c9:d0:10:a5:71:05:1f:19:94:5f:4d:20:29: 17:fb:ff:0b:bb:7c:d1:8b:92:68:41:e4:2b:98:c5: f4:c3:c9:d9:a8:81:d1:23:3f:99:b8:7f:ab:89:86: 9e:2b:c7:8c:c9:14:0a:d6:53:f4:3a:e9:ff:8a:38: 2e:0e:a2:37:1a:f6:0c:3c:64:3c:19:86:3c:4f:87: ce:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:3C:3C:BC:40:98:51:1D:26:DC:FF:F7:D1:AD:AF:B5:F7:6F:01 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:52:27:53:5e:72:d0:3b:10:7e:21:44:0d:4a:fa:33:c8:71: 16:00:c2:74:9e:b4:9a:43:cb:11:df:ee:43:37:a8:fa:31:fd: 87:57:ab:69:a2:9f:0f:a2:15:bc:12:b3:dd:7b:a2:a3:dc:55: 64:25:28:bf:83:6a:0a:f9:92:c2:62:00:42:0d:a9:db:54:0f: 94:71:ad:48:a7:88:d5:16:9d:df:35:ba:93:1a:ef:ec:06:d5: dc:18:af:7f:43:f2:cd:b8:31:f5:f3:01:75:8b:cb:8c:2d:8f: 6b:d7:57:4b:14:31:df:8e:f3:f9:80:24:e2:3d:a3:82:21:4a: d8:dd:08:d0:e2:1b:b9:cc:0a:56:10:15:17:b0:a0:3b:a9:51: b7:b5:82:6b:f4:61:37:7d:c7:a0:47:be:71:a3:d4:08:a8:4a: 82:2c:1d:45:63:4b:e5:7e:43:a3:1f:9a:86:83:8d:c5:0c:4d: d2:f1:71:96:d3:5f:28:3c:2c:9a:24:f2:ea:43:5d:5f:c1:98: fe:d2:2e:ad:19:f5:42:d4:9e:b6:49:cf:7d:44:5f:df:93:08: 6a:ed:65:15:55:a9:df:29:56:56:95:0f:e5:49:0d:d0:f2:9b: 6b:c8:86:cb:e4:fb:e1:16:e0:17:89:47:b2:14:6a:62:48:e3: 79:fd:3d:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUET910gs2x/ZfhPJ5MKgLF4EvRBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA2MDEyMjE2MTRaFw0yNTA2MDUwMjU5MTRaMDMxMTAvBgNV BAMTKDhDNzAzQzNDQkM0MDk4NTExRDI2RENGRkY3RDFBREFGQjVGNzZGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmD+KQFeaN5Irvb70tqlqbUk48 T9Pk1sNw4CS9gV6l3Z8lBsZFjcGtxfsyGSpo7w/PmiAKEV7muquwcCjXMHMvJj/Y gNyAb4zDvfJHo9nKi2xmwqaOzsDEAa900wsIL7/x+zGJ3QyYhp3tZvSaVDaOjFNM hTiej//7w5Ob5ai/wuXo8LCj8Zl5RMln2hBN7NE4qpgz4k5wPpYBD5uFi/H5gta1 QgBF+6ceZnjdGrZ/Xq1ZRwP9ydAQpXEFHxmUX00gKRf7/wu7fNGLkmhB5CuYxfTD ydmogdEjP5m4f6uJhp4rx4zJFArWU/Q66f+KOC4Oojca9gw8ZDwZhjxPh85BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHA8PLxAmFEdJtz/99Gtr7X3bwEwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFSJ1NectA7EH4hRA1K+jPIcRYAwnSetJpD yxHf7kM3qPox/YdXq2minw+iFbwSs917oqPcVWQlKL+Dagr5ksJiAEINqdtUD5Rx rUiniNUWnd81upMa7+wG1dwYr39D8s24MfXzAXWLy4wtj2vXV0sUMd+O8/mAJOI9 o4IhStjdCNDiG7nMClYQFRewoDupUbe1gmv0YTd9x6BHvnGj1AioSoIsHUVjS+V+ Q6MfmoaDjcUMTdLxcZbTXyg8LJok8upDXV/BmP7SLq0Z9ULUnrZJz31EX9+TCGrt ZRVVqd8pVlaVD+VJDdDym2vIhsvk++EW4BeJR7IUamJI43n9PW8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:22 2025 by rpki-client