$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: kYe+1xRKqhXXJTf0OxIYi7bYWcoALlg7jeaISVymoTE= Subject key identifier: 4E:00:90:53:37:4B:53:6D:19:2D:0F:62:55:CF:4C:43:02:AD:90:AC Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 0FFCEDFA8623DAA62498C3A50ED02CE1BD90DDA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01D6 Signing time: Sat 14 Jun 2025 16:21:48 +0000 Manifest this update: Sat 14 Jun 2025 16:16:48 +0000 Manifest next update: Wed 18 Jun 2025 00:47:48 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: WKvNfadumkHzwPHrCi/Sw7NiUkdDMoLIqu4r0F7QG8I=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fc:ed:fa:86:23:da:a6:24:98:c3:a5:0e:d0:2c:e1:bd:90:dd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Jun 14 16:16:48 2025 GMT Not After : Jun 18 00:47:48 2025 GMT Subject: CN=4E009053374B536D192D0F6255CF4C4302AD90AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:f5:9d:c0:12:b8:b9:a8:b5:38:d3:48:33: 1a:1a:04:94:16:77:9e:34:b3:ca:e8:2d:49:4b:48: a0:6f:cc:2e:94:79:5b:8e:ab:33:b3:08:51:38:bf: 0a:ba:a3:cf:b9:91:55:9e:72:dc:2a:31:4c:79:9a: 36:07:cc:a9:35:44:88:ee:b1:49:ca:2a:d9:04:e7: e5:76:69:85:6d:6a:6a:52:3e:f6:33:aa:6a:7a:be: 99:cd:62:62:aa:6c:f5:ab:e1:7a:de:75:11:5f:37: 58:41:0a:0c:e3:70:7b:41:d8:a6:e3:3f:b6:55:70: f5:c2:e8:dc:c4:ba:53:ed:c7:3c:f8:d0:7d:38:38: fc:1c:ae:4d:0a:1c:29:58:1c:96:77:45:52:4f:41: f4:01:0a:9e:10:4d:a4:e2:46:8e:30:b0:01:23:0e: 51:46:29:d3:8f:f2:ba:79:f4:3f:a7:bb:b9:22:66: b0:70:9b:33:29:d7:cb:98:28:18:2c:95:1e:86:4d: 10:97:01:51:5c:b4:da:5a:43:d6:8e:61:1a:68:d4: 8a:58:56:61:48:cc:de:91:c7:42:24:06:fe:54:cf: 14:a1:58:44:b4:0f:f1:59:e8:5e:97:88:a7:37:33: 18:9c:b1:2f:01:fd:7f:a3:db:ae:82:ad:ef:0a:8d: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:90:53:37:4B:53:6D:19:2D:0F:62:55:CF:4C:43:02:AD:90:AC X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:00:38:92:2e:52:9a:18:0a:ef:32:9c:83:76:d8:66:49:f9: 83:42:74:b8:91:d0:3c:d7:a3:15:7c:50:cc:98:ff:ae:da:f4: 36:16:e3:a2:1d:43:68:5b:e6:b8:d7:8c:0c:57:2b:98:68:b6: aa:45:81:c3:b5:7b:67:05:f1:d7:90:aa:62:04:b6:d7:12:2d: d3:6c:2a:8c:ce:98:f4:ea:03:a3:72:74:dd:e8:76:ef:a0:27: f2:00:69:3e:8c:90:c9:a7:b2:a0:37:5e:9b:7b:b0:c1:fc:1b: 04:7a:6e:2c:ab:61:ed:59:ef:73:f3:c7:43:32:21:ac:c3:d9: 24:e2:2a:fd:70:c4:71:f0:6c:ba:93:68:c2:c2:1d:2b:b2:2b: 67:ab:c5:fc:8a:22:8c:c9:c9:68:18:6a:a4:53:f3:04:94:f7: a7:c7:d5:30:bf:55:20:55:98:67:e7:6c:db:4f:57:af:55:e1: 7e:7e:ff:48:c5:b2:22:d8:f6:5e:6c:40:9c:f5:2f:20:4d:5d: d8:38:66:ef:52:b0:f2:e9:de:f2:f0:4b:d2:c9:68:bc:ab:1e: 76:20:ee:cf:c2:43:88:64:36:ae:2f:cc:39:97:ea:19:41:01: a3:f1:6f:53:c8:2a:d7:3c:33:5d:10:3d:32:c1:28:2f:33:f0: 93:66:34:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/zt+oYj2qYkmMOlDtAs4b2Q3aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA2MTQxNjE2NDhaFw0yNTA2MTgwMDQ3NDhaMDMxMTAvBgNV BAMTKDRFMDA5MDUzMzc0QjUzNkQxOTJEMEY2MjU1Q0Y0QzQzMDJBRDkwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D/WdwBK4uai1ONNIMxoaBJQW d540s8roLUlLSKBvzC6UeVuOqzOzCFE4vwq6o8+5kVWectwqMUx5mjYHzKk1RIju sUnKKtkE5+V2aYVtampSPvYzqmp6vpnNYmKqbPWr4XredRFfN1hBCgzjcHtB2Kbj P7ZVcPXC6NzEulPtxzz40H04OPwcrk0KHClYHJZ3RVJPQfQBCp4QTaTiRo4wsAEj DlFGKdOP8rp59D+nu7kiZrBwmzMp18uYKBgslR6GTRCXAVFctNpaQ9aOYRpo1IpY VmFIzN6Rx0IkBv5UzxShWES0D/FZ6F6XiKc3MxicsS8B/X+j266Cre8KjbePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgCQUzdLU20ZLQ9iVc9MQwKtkKwwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYAOJIuUpoYCu8ynIN22GZJ+YNCdLiR0DzX oxV8UMyY/67a9DYW46IdQ2hb5rjXjAxXK5hotqpFgcO1e2cF8deQqmIEttcSLdNs KozOmPTqA6NydN3odu+gJ/IAaT6MkMmnsqA3Xpt7sMH8GwR6biyrYe1Z73Pzx0My IazD2STiKv1wxHHwbLqTaMLCHSuyK2erxfyKIozJyWgYaqRT8wSU96fH1TC/VSBV mGfnbNtPV69V4X5+/0jFsiLY9l5sQJz1LyBNXdg4Zu9SsPLp3vLwS9LJaLyrHnYg 7s/CQ4hkNq4vzDmX6hlBAaPxb1PIKtc8M10QPTLBKC8z8JNmNAQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:18 2025 by rpki-client