$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: FlgDdLENtixGNcj6mHxGCw5O76KjE/XQJleRWjL5AQs= Subject key identifier: 2B:42:41:46:2A:AE:5F:9A:98:88:BC:CD:20:EC:07:5A:97:24:CB:08 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 5288885971C3F4D1A97A15AC70112451D7FBAC62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 8D Signing time: Mon 02 Jun 2025 06:42:16 +0000 Manifest this update: Mon 02 Jun 2025 06:37:16 +0000 Manifest next update: Thu 05 Jun 2025 16:53:16 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: xJ7jPZiRN5p9CCeavvlkfOq9xqVrWGN0H9fWEY/Ic+k=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: cJLXLQjExEoRjWGy22X92TF7HDl+eFD9DIWErskz/Og=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 16:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:88:59:71:c3:f4:d1:a9:7a:15:ac:70:11:24:51:d7:fb:ac:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Jun 2 06:37:16 2025 GMT Not After : Jun 5 16:53:16 2025 GMT Subject: CN=2B4241462AAE5F9A9888BCCD20EC075A9724CB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a6:6c:a1:ca:45:5c:c5:08:43:99:c9:27:c0: fc:b0:76:a2:c8:c8:44:18:2d:c2:4d:cb:99:9f:e0: 82:94:7e:84:ca:f9:8b:08:58:5d:07:40:46:0a:4c: 1f:f8:9d:a9:85:0d:a9:ff:6c:69:55:72:3b:1a:f8: 43:12:23:5c:82:50:30:73:9e:ac:dd:49:9d:e8:96: 13:45:a0:0e:d6:31:b6:51:68:c1:3f:9b:9b:54:62: 20:fe:57:42:0b:59:38:e4:d7:67:9d:7c:c0:c3:e8: 56:c0:40:01:ca:c1:48:4f:ab:c9:9e:d4:97:e2:9c: 3f:b4:5a:6b:31:71:78:33:5a:4d:d5:d2:51:d9:c0: 7c:85:0f:7b:68:3e:56:a5:76:53:21:25:0e:e8:6a: f7:43:e3:98:35:87:ef:82:0b:d9:90:ea:71:a6:24: c8:36:5a:83:0c:cf:80:d9:4d:1f:40:d6:5d:c5:76: cc:11:b0:c3:1d:95:9e:aa:81:af:23:7d:57:94:88: 06:1a:e6:de:3b:a9:4d:e7:3c:24:07:aa:4c:2e:fb: 7f:2c:c6:5c:37:78:f3:18:0c:ce:49:58:9e:ba:bb: 9b:73:6b:2f:79:31:13:0f:e4:80:97:a3:f0:9c:2f: bd:65:30:98:21:c9:39:28:ef:61:3c:a5:8e:83:83: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:41:46:2A:AE:5F:9A:98:88:BC:CD:20:EC:07:5A:97:24:CB:08 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bb:6d:1a:a1:1c:f7:9c:82:fc:63:80:22:45:62:ed:44:56: 6c:a5:af:a9:6f:45:d4:ca:5d:2f:f4:ed:2c:30:9c:83:38:71: 94:7b:ae:dd:92:4f:19:dd:05:b0:24:22:2b:b5:cb:ef:9b:02: 65:a8:5c:1e:5e:ff:85:30:fb:64:15:64:0f:df:5f:28:76:22: bb:9b:1d:fd:14:67:14:2e:30:65:d8:0f:e4:46:f5:12:fe:21: 59:09:eb:5d:c3:35:52:14:58:63:17:fe:91:37:9c:a3:73:de: d0:81:3a:1a:f8:f5:22:ee:26:54:e1:71:9f:54:b3:52:10:d2: 41:86:9f:55:a5:97:48:ce:1e:37:61:29:36:63:15:bc:f5:41: 22:69:ed:c4:c6:7a:3c:b9:c1:a0:53:32:e1:d2:6b:fc:14:3c: cd:8e:dd:be:f5:d7:d5:0a:08:f2:18:88:51:d7:12:70:9c:63: 22:af:45:75:b2:71:9f:3b:1d:e2:00:11:27:d8:5b:d6:21:e8: 2a:14:73:09:b8:01:9b:60:a0:e8:71:8e:a9:e5:94:2a:d9:d9: 4f:25:06:10:8e:a2:a5:b8:7c:ce:16:6e:c3:1d:b1:f8:5f:4c: 5c:a9:56:28:17:e5:33:be:48:8a:44:cb:cc:33:4a:e1:ff:6a: 8c:b6:2f:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUoiIWXHD9NGpehWscBEkUdf7rGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA2MDIwNjM3MTZaFw0yNTA2MDUxNjUzMTZaMDMxMTAvBgNV BAMTKDJCNDI0MTQ2MkFBRTVGOUE5ODg4QkNDRDIwRUMwNzVBOTcyNENCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvpmyhykVcxQhDmcknwPywdqLI yEQYLcJNy5mf4IKUfoTK+YsIWF0HQEYKTB/4namFDan/bGlVcjsa+EMSI1yCUDBz nqzdSZ3olhNFoA7WMbZRaME/m5tUYiD+V0ILWTjk12edfMDD6FbAQAHKwUhPq8me 1JfinD+0WmsxcXgzWk3V0lHZwHyFD3toPlaldlMhJQ7oavdD45g1h++CC9mQ6nGm JMg2WoMMz4DZTR9A1l3FdswRsMMdlZ6qga8jfVeUiAYa5t47qU3nPCQHqkwu+38s xlw3ePMYDM5JWJ66u5tzay95MRMP5ICXo/CcL71lMJghyTko72E8pY6DgxwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0JBRiquX5qYiLzNIOwHWpckywgwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH27bRqhHPecgvxjgCJFYu1EVmylr6lvRdTK XS/07SwwnIM4cZR7rt2STxndBbAkIiu1y++bAmWoXB5e/4Uw+2QVZA/fXyh2Irub Hf0UZxQuMGXYD+RG9RL+IVkJ613DNVIUWGMX/pE3nKNz3tCBOhr49SLuJlThcZ9U s1IQ0kGGn1Wll0jOHjdhKTZjFbz1QSJp7cTGejy5waBTMuHSa/wUPM2O3b7119UK CPIYiFHXEnCcYyKvRXWycZ87HeIAESfYW9Yh6CoUcwm4AZtgoOhxjqnllCrZ2U8l BhCOoqW4fM4WbsMdsfhfTFypVigX5TO+SIpEy8wzSuH/aoy2L0Y= -----END CERTIFICATE-----Generated at Tue Jun 3 23:37:40 2025 by rpki-client