$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: 28IIE8zlstJPcPIXEOMSRtaHcvm2RrFJOB1cmtU5Gdk= Subject key identifier: A9:12:C1:7C:21:4B:02:64:84:2F:4E:09:8E:D1:F9:F7:5F:C9:16:18 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 2C282132C58CBEA58D1FD30827163E2FA26F2A52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 4A Signing time: Sun 07 Sep 2025 02:11:26 +0000 Manifest this update: Sun 07 Sep 2025 02:06:26 +0000 Manifest next update: Wed 10 Sep 2025 12:58:26 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: nNRtccVgXnVcteYKF8tke5l4OY++ROcOUESJFTTe6lI=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:28:21:32:c5:8c:be:a5:8d:1f:d3:08:27:16:3e:2f:a2:6f:2a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Sep 7 02:06:26 2025 GMT Not After : Sep 10 12:58:26 2025 GMT Subject: CN=A912C17C214B0264842F4E098ED1F9F75FC91618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:ff:e9:94:a6:55:9c:e2:b2:2b:dc:7f:da: b8:ba:db:3c:a5:3f:a4:b1:4f:25:9e:18:8c:0d:e1: ea:1a:c0:df:1a:49:1d:a3:9d:7d:3b:a7:59:f7:7f: 0c:0d:ad:b1:4b:50:f5:76:a5:0a:98:0c:96:96:f5: f1:dc:04:2d:6c:73:e7:56:0b:b8:07:78:46:29:1e: fe:36:51:13:fd:ff:76:b4:95:e9:3e:db:2d:51:8e: b2:71:7a:b6:ed:c4:03:12:9d:e3:bb:ba:74:68:6f: 07:e9:a8:26:57:c4:24:1c:e9:39:53:43:be:24:ca: 91:01:e2:97:94:74:0e:84:13:28:41:be:df:f7:8f: 73:cf:36:60:6d:b0:cb:16:08:89:0c:4a:c1:da:b1: 99:09:ef:08:31:c6:b2:71:5d:54:0a:a7:76:8e:8e: fe:8f:3d:4b:fd:97:fa:9b:9e:27:0f:2a:bb:ba:4f: be:42:1c:c8:77:17:2e:a0:28:76:f7:24:00:3c:42: 57:94:23:6d:79:53:19:b8:f1:67:27:27:10:b9:09: 8b:8e:5b:1f:ee:be:eb:1f:99:b3:cf:a5:32:c3:35: e3:df:54:f2:c5:62:70:25:83:4d:bf:c7:de:e1:e2: 8e:ec:51:c2:15:c9:66:7c:ef:6a:bc:5e:33:2b:58: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:12:C1:7C:21:4B:02:64:84:2F:4E:09:8E:D1:F9:F7:5F:C9:16:18 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2d:33:0c:28:79:ff:9d:5e:1a:15:53:1d:82:df:2d:89:07: bf:aa:c7:e0:c7:2c:42:43:2b:a9:86:96:df:38:0a:46:8f:5d: 74:58:65:0e:bf:44:15:68:9d:4b:1b:5e:26:fd:ed:e8:32:55: 96:50:c6:ac:fe:40:59:ac:01:60:70:63:92:69:ff:d6:a1:1c: 9f:1d:12:6f:68:8b:46:c7:c9:ef:57:a3:e8:7b:cc:36:9d:1c: 55:90:7b:33:a8:fb:a0:3e:b2:3c:7d:c3:53:75:85:a6:f0:4f: c3:92:35:a5:99:e1:b0:f7:7f:91:8e:e6:2c:17:be:d5:51:d3: d9:4a:44:4c:83:dc:11:24:b6:10:76:8d:88:f6:5b:f5:80:7a: dc:af:d3:78:12:95:e0:76:cc:24:5d:55:ba:0c:90:6b:5d:7c: 15:8d:05:71:dc:0a:f0:28:d3:e6:58:1c:c2:0a:4e:bb:d7:d4: 34:62:09:54:a9:38:c1:e1:3f:cb:98:d2:82:ac:bd:62:1e:58: e6:85:1f:63:1d:6b:b4:7e:9e:63:17:90:00:87:a1:12:50:7e: 67:3e:7c:9e:a9:7a:83:29:21:95:cc:87:26:e3:bc:bf:d5:4d: 96:ae:15:8e:f3:c3:a3:5d:5d:1e:ce:0f:a6:f8:1c:ca:50:c1: 59:26:dd:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCghMsWMvqWNH9MIJxY+L6JvKlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA5MDcwMjA2MjZaFw0yNTA5MTAxMjU4MjZaMDMxMTAvBgNV BAMTKEE5MTJDMTdDMjE0QjAyNjQ4NDJGNEUwOThFRDFGOUY3NUZDOTE2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWP/plKZVnOKyK9x/2ri62zyl P6SxTyWeGIwN4eoawN8aSR2jnX07p1n3fwwNrbFLUPV2pQqYDJaW9fHcBC1sc+dW C7gHeEYpHv42URP9/3a0lek+2y1RjrJxerbtxAMSneO7unRobwfpqCZXxCQc6TlT Q74kypEB4peUdA6EEyhBvt/3j3PPNmBtsMsWCIkMSsHasZkJ7wgxxrJxXVQKp3aO jv6PPUv9l/qbnicPKru6T75CHMh3Fy6gKHb3JAA8QleUI215Uxm48WcnJxC5CYuO Wx/uvusfmbPPpTLDNePfVPLFYnAlg02/x97h4o7sUcIVyWZ872q8XjMrWJGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqRLBfCFLAmSEL04JjtH591/JFhgwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0tMwwoef+dXhoVUx2C3y2JB7+qx+DHLEJD K6mGlt84CkaPXXRYZQ6/RBVonUsbXib97egyVZZQxqz+QFmsAWBwY5Jp/9ahHJ8d Em9oi0bHye9Xo+h7zDadHFWQezOo+6A+sjx9w1N1habwT8OSNaWZ4bD3f5GO5iwX vtVR09lKREyD3BEkthB2jYj2W/WAetyv03gSleB2zCRdVboMkGtdfBWNBXHcCvAo 0+ZYHMIKTrvX1DRiCVSpOMHhP8uY0oKsvWIeWOaFH2Mda7R+nmMXkACHoRJQfmc+ fJ6peoMpIZXMhybjvL/VTZauFY7zw6NdXR7OD6b4HMpQwVkm3Qc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:04 2025 by rpki-client