$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: CgvwE0qJ+d+Dbfi/Vg0VbvhWTJn7Yhlh6k7qTPOpev4= Subject key identifier: 3E:CE:C1:6D:85:3D:83:99:AC:39:51:AC:E3:1D:31:4F:27:12:46:74 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 46AB8FB99F79B7F1F6E921F4EDF767216FA2FEFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: B7 Signing time: Fri 05 Sep 2025 03:32:16 +0000 Manifest this update: Fri 05 Sep 2025 03:27:16 +0000 Manifest next update: Mon 08 Sep 2025 11:52:16 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: 6yCeWO4ECqRLO2epb2H5xlmHmFBZ2Og4Q/DJXBwpT2k=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ab:8f:b9:9f:79:b7:f1:f6:e9:21:f4:ed:f7:67:21:6f:a2:fe:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Sep 5 03:27:16 2025 GMT Not After : Sep 8 11:52:16 2025 GMT Subject: CN=3ECEC16D853D8399AC3951ACE31D314F27124674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:db:e0:f9:a9:5c:71:95:84:4e:1d:4b:68: 69:d2:85:bc:74:a9:3e:2e:3f:28:ec:8a:dc:35:96: 23:39:92:a9:e7:0a:cd:0e:d6:a4:77:2c:0b:f4:f3: c9:08:20:ac:d6:c9:57:09:05:ca:5c:89:c8:ce:f9: 93:03:63:68:4a:21:c2:70:72:d8:9f:96:a3:e3:2c: ea:bf:a3:f2:cd:06:c8:00:2e:e5:58:55:4a:71:4e: 9a:c9:7c:36:c4:82:b7:10:fc:3d:b3:ed:ac:49:5c: 51:c7:07:35:56:07:f2:88:46:28:51:b8:03:e0:f9: 9e:e6:bf:52:23:a6:3f:90:95:60:4c:cb:8f:a5:28: 1e:7a:f0:0a:59:41:03:38:27:a9:6a:12:ed:2b:34: 2b:80:49:4e:b3:41:31:54:04:81:33:d0:f8:33:c9: 03:63:e0:61:48:08:15:30:d8:04:96:19:4d:6f:cd: 2c:6c:a2:e8:b9:d8:53:8d:e6:e4:0f:88:09:0d:98: fd:e5:45:93:56:d5:88:4e:95:04:e9:20:29:a4:1f: 7d:4b:ef:05:ab:81:7f:49:d0:c8:cd:6c:f5:18:69: 09:09:54:9e:74:77:00:eb:58:ea:e7:27:11:60:98: 8d:e3:87:8b:8f:e4:14:fd:a6:39:d6:c4:96:12:87: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:C1:6D:85:3D:83:99:AC:39:51:AC:E3:1D:31:4F:27:12:46:74 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:0d:58:ca:b6:f4:7c:82:4c:d4:54:5f:87:f1:0d:49:7b:a5: 20:a2:29:5f:6f:83:88:aa:a5:c0:82:b2:ea:27:54:c9:b7:ae: 87:31:2a:0f:19:96:22:8e:b5:64:e8:c5:80:95:a4:40:42:08: 83:b9:f2:b1:0f:b8:57:7a:fe:2a:84:12:6c:97:2b:59:9b:36: 68:71:b2:df:4b:e3:cf:27:b8:47:fe:6b:fa:b2:f5:41:ca:e0: 6b:f1:dc:e2:b9:ff:4f:f2:2c:ca:20:2c:d1:7c:c9:98:2b:75: a2:df:df:c3:b3:6c:be:89:70:03:92:d2:ed:d1:8e:fd:42:9a: e5:b2:ff:07:fd:ce:6b:31:9c:6e:ce:fe:30:8e:7e:ff:49:5d: 48:1a:2e:0e:8c:3d:bc:ca:a8:e8:d5:36:87:46:8a:f9:91:28: 06:4b:77:a6:3e:ab:db:70:20:ce:0b:48:8d:dc:76:1a:e5:13: a3:a7:9b:3b:b4:d0:fb:82:b4:cb:e8:fa:cf:40:dc:d8:fe:29: 59:74:08:36:e2:1e:e2:82:ce:13:99:31:c4:7b:12:b1:ac:4c: 9c:0f:4d:b4:91:7b:e6:46:8d:28:a5:47:5c:cf:7a:7e:47:96: 81:60:e3:46:5d:49:47:04:26:0d:83:42:4b:6c:d9:e1:4b:ec: 0b:10:05:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURquPuZ95t/H26SH07fdnIW+i/v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA5MDUwMzI3MTZaFw0yNTA5MDgxMTUyMTZaMDMxMTAvBgNV BAMTKDNFQ0VDMTZEODUzRDgzOTlBQzM5NTFBQ0UzMUQzMTRGMjcxMjQ2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPtvg+alccZWETh1LaGnShbx0 qT4uPyjsitw1liM5kqnnCs0O1qR3LAv088kIIKzWyVcJBcpcicjO+ZMDY2hKIcJw ctiflqPjLOq/o/LNBsgALuVYVUpxTprJfDbEgrcQ/D2z7axJXFHHBzVWB/KIRihR uAPg+Z7mv1Ijpj+QlWBMy4+lKB568ApZQQM4J6lqEu0rNCuASU6zQTFUBIEz0Pgz yQNj4GFICBUw2ASWGU1vzSxsoui52FON5uQPiAkNmP3lRZNW1YhOlQTpICmkH31L 7wWrgX9J0MjNbPUYaQkJVJ50dwDrWOrnJxFgmI3jh4uP5BT9pjnWxJYSh5T7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPs7BbYU9g5msOVGs4x0xTycSRnQwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgNWMq29HyCTNRUX4fxDUl7pSCiKV9vg4iq pcCCsuonVMm3rocxKg8ZliKOtWToxYCVpEBCCIO58rEPuFd6/iqEEmyXK1mbNmhx st9L488nuEf+a/qy9UHK4Gvx3OK5/0/yLMogLNF8yZgrdaLf38OzbL6JcAOS0u3R jv1CmuWy/wf9zmsxnG7O/jCOfv9JXUgaLg6MPbzKqOjVNodGivmRKAZLd6Y+q9tw IM4LSI3cdhrlE6Onmzu00PuCtMvo+s9A3Nj+KVl0CDbiHuKCzhOZMcR7ErGsTJwP TbSRe+ZGjSilR1zPen5HloFg40ZdSUcEJg2DQkts2eFL7AsQBXI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client