$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: 5XLOSHFQJ+p0H3RbCNSPjvs87eZA0Nt08k3RO3Zl4TQ= Subject key identifier: AE:56:82:C2:48:69:42:77:46:35:4A:D5:0C:2E:C8:C9:41:5A:33:F6 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 1FAFB83D89EF0FB6C2A6C81195D6C367373AB178 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01EE Signing time: Wed 06 Aug 2025 05:31:51 +0000 Manifest this update: Wed 06 Aug 2025 05:26:51 +0000 Manifest next update: Sat 09 Aug 2025 14:37:51 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: QfpkI7upS0wjGn0BmFkAEuAoBspDH3Jmn5V63ko4zGY=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:af:b8:3d:89:ef:0f:b6:c2:a6:c8:11:95:d6:c3:67:37:3a:b1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Aug 6 05:26:51 2025 GMT Not After : Aug 9 14:37:51 2025 GMT Subject: CN=AE5682C24869427746354AD50C2EC8C9415A33F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:a5:2a:eb:8f:a7:3b:4c:27:10:cb:f1:b5: 5d:e2:e4:ba:ea:85:f7:89:d8:0c:cd:64:82:53:b2: a3:c6:ae:6a:da:d3:c8:24:73:4e:9c:83:73:4a:ba: 2e:6e:d6:a2:88:bf:28:c0:54:fc:1c:a0:0c:90:36: 88:ad:15:56:93:fd:dc:32:3e:a0:db:20:6e:e7:a7: 4c:5d:fc:37:ab:8b:0d:43:6c:ea:8a:7e:1e:b0:09: a8:80:bc:65:0c:2d:5f:f3:64:a9:a3:fe:89:4c:6f: e1:da:de:27:6e:1e:9e:e0:da:7b:0e:11:98:78:71: 9e:1e:0f:96:f9:55:08:7b:df:51:4c:cc:ec:94:b4: 38:a0:1f:2b:9d:c6:62:3e:d6:9e:49:2a:c9:12:f4: 87:21:4f:a1:b0:3b:3f:06:75:ac:9b:ff:80:a9:4a: 63:9c:86:f9:11:75:7f:aa:03:45:72:a9:79:80:f2: 71:f9:9e:b7:ed:c3:88:53:47:b2:62:2c:92:96:a1: a8:d1:f9:b5:b1:a0:3e:27:be:ea:be:6c:57:16:28: ae:7b:ee:06:39:3a:40:69:72:14:4b:e9:25:ea:99: 40:6f:74:af:48:bc:d6:1c:e0:74:5c:40:28:ed:1e: 56:4f:38:28:f2:35:2b:e2:b9:15:d8:03:22:2d:e1: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:82:C2:48:69:42:77:46:35:4A:D5:0C:2E:C8:C9:41:5A:33:F6 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4d:c0:51:7f:37:b3:39:8d:b8:41:ed:c4:90:0a:76:b1:ee: 60:7a:d0:8d:b2:f6:f0:61:9a:fa:c8:52:8d:00:0b:8a:96:87: 29:b3:45:79:19:5e:c6:c3:c4:31:93:5c:76:39:88:ad:71:b9: 84:84:29:fb:a3:7d:8b:1c:af:93:0d:86:82:2d:81:d8:fa:17: 5a:f6:f8:5b:3f:8e:2c:73:5c:df:e1:fc:ef:72:bf:3b:63:9c: 37:d6:f7:f6:40:67:f8:a1:f9:92:a8:b8:d0:2d:7e:1e:7c:8e: 8b:79:d9:dc:cb:1d:c6:c4:70:4f:8d:49:49:4e:ae:d1:65:80: 7d:16:9e:88:69:74:27:b7:ef:e3:d1:7d:f0:60:31:88:14:f3: ab:c3:bb:fb:0b:90:f0:92:dc:57:5d:32:89:83:d8:19:47:eb: ff:1f:fa:9f:d0:14:fb:69:53:b5:bc:d6:f3:88:9f:e0:2b:22: d2:5f:23:64:24:37:9e:00:e8:f4:d5:12:97:62:5e:64:1c:30: ba:73:dd:c6:0c:0d:f9:56:e5:14:52:2c:e7:b5:1c:e5:35:d3: 15:6b:30:d1:e3:33:89:d2:b7:11:b1:36:73:13:16:62:c8:e2: 2b:97:c1:80:55:ac:a0:c8:13:4f:1e:53:b6:4b:91:a2:27:d4: 8c:cb:3d:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6+4PYnvD7bCpsgRldbDZzc6sXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA4MDYwNTI2NTFaFw0yNTA4MDkxNDM3NTFaMDMxMTAvBgNV BAMTKEFFNTY4MkMyNDg2OTQyNzc0NjM1NEFENTBDMkVDOEM5NDE1QTMzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYKUq64+nO0wnEMvxtV3i5Lrq hfeJ2AzNZIJTsqPGrmra08gkc06cg3NKui5u1qKIvyjAVPwcoAyQNoitFVaT/dwy PqDbIG7np0xd/Deriw1DbOqKfh6wCaiAvGUMLV/zZKmj/olMb+Ha3iduHp7g2nsO EZh4cZ4eD5b5VQh731FMzOyUtDigHyudxmI+1p5JKskS9IchT6GwOz8Gdayb/4Cp SmOchvkRdX+qA0VyqXmA8nH5nrftw4hTR7JiLJKWoajR+bWxoD4nvuq+bFcWKK57 7gY5OkBpchRL6SXqmUBvdK9IvNYc4HRcQCjtHlZPOCjyNSviuRXYAyIt4S+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlaCwkhpQndGNUrVDC7IyUFaM/YwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhNwFF/N7M5jbhB7cSQCnax7mB60I2y9vBh mvrIUo0AC4qWhymzRXkZXsbDxDGTXHY5iK1xuYSEKfujfYscr5MNhoItgdj6F1r2 +Fs/jixzXN/h/O9yvztjnDfW9/ZAZ/ih+ZKouNAtfh58jot52dzLHcbEcE+NSUlO rtFlgH0WnohpdCe37+PRffBgMYgU86vDu/sLkPCS3FddMomD2BlH6/8f+p/QFPtp U7W81vOIn+ArItJfI2QkN54A6PTVEpdiXmQcMLpz3cYMDflW5RRSLOe1HOU10xVr MNHjM4nStxGxNnMTFmLI4iuXwYBVrKDIE08eU7ZLkaIn1IzLPYk= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:27 2025 by rpki-client