$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: mCHABvpSnQmspK4fffAg7Pv1rdhgESgT2uAQDruiHio= Subject key identifier: 99:1B:24:0E:DD:0E:A6:39:7A:FF:17:F4:2E:44:92:C7:3E:8A:80:DC Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 72951FA903FB98835389528E86560ED9DEBB775C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 05 Signing time: Thu 03 Apr 2025 18:41:23 +0000 Manifest this update: Thu 03 Apr 2025 18:36:23 +0000 Manifest next update: Mon 07 Apr 2025 02:21:23 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: b6s8G8HGkeI/Jv85YTDxujdjfCuoHaJk2JBlgUqMgH0=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:95:1f:a9:03:fb:98:83:53:89:52:8e:86:56:0e:d9:de:bb:77:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Apr 3 18:36:23 2025 GMT Not After : Apr 7 02:21:23 2025 GMT Subject: CN=991B240EDD0EA6397AFF17F42E4492C73E8A80DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:38:f1:3a:ed:b6:69:d0:74:fe:3b:2f:40: fb:4b:ef:eb:94:87:c7:57:e0:e1:a2:e9:29:af:b2: f9:f2:ca:68:1f:aa:36:80:67:e7:22:11:77:c0:df: f1:7a:28:41:86:60:85:31:3b:1f:48:6e:e6:a6:df: da:a6:59:34:3c:5b:3e:d2:aa:25:07:84:a8:d6:91: e3:0c:d6:9e:db:de:f7:b7:87:9e:10:26:c7:0f:ea: 75:0b:95:17:e1:01:d7:7b:8b:59:27:43:ac:5b:ca: b4:ea:d3:7a:37:8a:ab:4f:77:ee:89:2a:95:7a:73: 24:84:79:28:93:60:1d:d5:49:84:fd:e9:e0:05:74: fb:b7:20:ef:ab:b6:07:cc:5c:f6:bf:c9:79:b3:27: 1d:0c:26:51:05:ec:94:b7:6c:9c:d5:28:8b:b2:80: 48:ac:5e:6a:9b:ad:05:69:13:22:c8:e5:01:46:08: 51:f3:4a:3a:dd:69:ea:84:45:fb:93:9c:f2:c6:f3: fb:5e:5a:5d:08:fc:f3:30:be:81:d4:47:a6:56:35: d0:c3:1f:32:f0:46:6b:ca:01:4a:f3:b0:82:79:5e: fd:88:f9:61:ce:fd:bc:36:c3:e2:4b:d9:d1:1a:35: b5:37:8d:93:bc:24:21:6d:be:30:dd:89:df:47:0f: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:24:0E:DD:0E:A6:39:7A:FF:17:F4:2E:44:92:C7:3E:8A:80:DC X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:26:c5:8a:e1:9c:77:6e:f5:30:d6:e5:ca:df:79:47:9e:74: aa:5b:d5:73:ef:06:48:84:5f:0f:51:9e:40:79:3a:4d:62:5d: 2d:90:5d:b2:d1:e5:ed:3f:b9:61:1a:1e:09:86:64:e1:e8:ce: fc:db:e8:a6:bb:56:88:97:71:66:8a:9d:7d:b8:57:5f:f5:71: 18:4c:dd:aa:f0:ae:9e:4b:eb:74:22:b2:99:4c:2d:39:c2:be: 93:f9:2f:d5:4c:16:5f:a0:ac:35:8d:2e:47:3d:ad:8f:1a:63: 75:05:eb:ee:21:d5:2b:fa:17:7a:81:a6:ae:eb:9e:c7:b8:ac: 47:3e:ca:e8:67:63:40:a5:d6:7c:94:cd:89:7a:66:24:10:14: f0:8f:3f:98:b5:09:4f:13:c4:21:5e:fd:fe:18:69:b7:f1:41: d7:87:58:cd:96:a7:97:71:d1:bf:62:b4:e4:aa:7a:ac:e6:4d: 77:70:12:ba:d8:25:f8:06:2a:8b:b6:da:7f:73:be:7a:8f:3e: af:34:9c:c1:ce:93:d8:7c:93:94:0c:99:05:df:2a:31:ed:9d: 22:b4:dc:e4:de:30:67:f8:fb:9c:3d:4e:87:1e:0e:0d:16:42: d6:f2:2d:e0:cf:e2:14:6e:96:58:77:be:f0:c3:81:99:4e:98: 62:c6:b3:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpUfqQP7mINTiVKOhlYO2d67d1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA0MDMxODM2MjNaFw0yNTA0MDcwMjIxMjNaMDMxMTAvBgNV BAMTKDk5MUIyNDBFREQwRUE2Mzk3QUZGMTdGNDJFNDQ5MkM3M0U4QTgwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU3TjxOu22adB0/jsvQPtL7+uU h8dX4OGi6SmvsvnyymgfqjaAZ+ciEXfA3/F6KEGGYIUxOx9Ibuam39qmWTQ8Wz7S qiUHhKjWkeMM1p7b3ve3h54QJscP6nULlRfhAdd7i1knQ6xbyrTq03o3iqtPd+6J KpV6cySEeSiTYB3VSYT96eAFdPu3IO+rtgfMXPa/yXmzJx0MJlEF7JS3bJzVKIuy gEisXmqbrQVpEyLI5QFGCFHzSjrdaeqERfuTnPLG8/teWl0I/PMwvoHUR6ZWNdDD HzLwRmvKAUrzsIJ5Xv2I+WHO/bw2w+JL2dEaNbU3jZO8JCFtvjDdid9HDzKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRskDt0Opjl6/xf0LkSSxz6KgNwwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQmxYrhnHdu9TDW5crfeUeedKpb1XPvBkiE Xw9RnkB5Ok1iXS2QXbLR5e0/uWEaHgmGZOHozvzb6Ka7VoiXcWaKnX24V1/1cRhM 3arwrp5L63QisplMLTnCvpP5L9VMFl+grDWNLkc9rY8aY3UF6+4h1Sv6F3qBpq7r nse4rEc+yuhnY0Cl1nyUzYl6ZiQQFPCPP5i1CU8TxCFe/f4YabfxQdeHWM2Wp5dx 0b9itOSqeqzmTXdwErrYJfgGKou22n9zvnqPPq80nMHOk9h8k5QMmQXfKjHtnSK0 3OTeMGf4+5w9ToceDg0WQtbyLeDP4hRullh3vvDDgZlOmGLGsy4= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:45 2025 by rpki-client