$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: OTC6yyjZ8hCn0Zvwbana+FW5bIkzkcZYqKSyjxX+hM8= Subject key identifier: 32:58:91:17:94:0B:7B:3E:60:25:20:2A:63:D6:12:22:4B:6F:29:C3 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 2E13AF2C6A51E2FD21876A2D372795AB51DF2D99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04F7 Signing time: Wed 06 Aug 2025 21:01:49 +0000 Manifest this update: Wed 06 Aug 2025 20:56:49 +0000 Manifest next update: Sun 10 Aug 2025 04:31:49 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: lA4/kaqr17rCYQVZX5Rax51AsPQhz8RGW+luuqnR8Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:af:2c:6a:51:e2:fd:21:87:6a:2d:37:27:95:ab:51:df:2d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Aug 6 20:56:49 2025 GMT Not After : Aug 10 04:31:49 2025 GMT Subject: CN=32589117940B7B3E6025202A63D612224B6F29C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9e:42:f2:96:41:ff:87:d6:e6:14:19:1a:bf: ae:c1:20:ab:78:46:31:0d:18:85:48:77:c6:09:92: a0:3e:2c:46:63:49:f2:63:aa:fe:26:ac:bd:25:19: 98:cc:4c:5c:e8:42:53:8e:8f:a1:a3:36:51:4f:67: 9e:e2:8f:20:05:44:67:26:7c:06:8e:18:2b:dc:39: c0:0e:a9:f9:39:2f:34:e5:a2:af:31:c2:6e:d2:42: 33:65:82:0c:a0:6e:a4:b3:60:c9:12:a1:02:e8:8a: 68:2d:42:53:96:9d:b7:16:10:f1:be:56:8c:19:59: de:f5:6f:7a:79:09:34:d3:da:71:94:47:31:27:4f: 75:6f:d3:89:4b:45:a5:37:4d:6c:c0:85:7f:63:85: 09:af:ef:41:5e:6b:4f:a9:21:45:8d:a2:06:f2:44: 18:8d:65:4e:d1:5c:27:1b:b9:d5:54:86:33:ae:25: 38:13:93:a4:ec:53:e0:21:2e:40:bd:8f:89:c4:0b: f8:29:66:68:f0:43:f5:cd:6b:a7:c7:b0:8c:a1:ee: a8:55:69:a0:93:db:b0:8e:83:57:27:1d:d1:dd:71: 91:91:da:2e:c9:bd:26:20:9c:76:5a:f4:ab:09:eb: 6d:e9:09:cd:c2:5a:f6:8c:ca:7e:6f:db:b1:cc:bd: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:58:91:17:94:0B:7B:3E:60:25:20:2A:63:D6:12:22:4B:6F:29:C3 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3a:83:17:40:e1:ee:2f:55:a8:60:e8:bb:e7:66:64:39:ec: 85:fc:71:39:90:86:29:41:cd:0a:81:70:41:79:fd:f5:4e:fb: 4a:e0:5e:0c:31:c9:50:c5:76:16:82:7c:64:1a:d7:41:6c:6a: 43:bf:31:84:ef:06:8d:b5:dc:59:4d:20:35:ba:29:65:08:12: d5:04:17:46:63:3d:c2:6d:e2:3c:41:49:a2:9c:7f:9c:ec:18: b5:b0:66:05:9f:39:b4:56:15:10:c5:9a:fc:86:9e:20:42:84: ab:42:1e:6e:19:58:7d:80:c9:cb:bd:2a:73:7b:a0:3c:d3:6c: b4:7c:f7:e4:a5:94:9e:62:7d:26:fb:7c:eb:e3:e1:79:aa:5c: 8d:c5:f6:56:83:2d:c7:f2:4f:a4:b4:a4:c7:d6:68:af:53:84: 6a:db:ab:f2:6c:e0:95:6d:c6:3a:81:37:e0:f7:fd:ca:49:00: 04:57:bb:bf:6c:f7:3f:96:14:34:75:4f:9d:37:87:d1:07:be: 45:57:a1:32:e3:f7:75:dd:40:0b:33:3e:83:ad:1c:be:a1:d1: 4b:d2:ac:ca:24:59:92:23:f0:5b:da:a0:58:aa:16:02:90:d9: 98:a6:29:8e:a1:ed:7c:f6:70:bf:35:24:d7:c5:1f:b5:25:31: db:fc:3c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhOvLGpR4v0hh2otNyeVq1HfLZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA4MDYyMDU2NDlaFw0yNTA4MTAwNDMxNDlaMDMxMTAvBgNV BAMTKDMyNTg5MTE3OTQwQjdCM0U2MDI1MjAyQTYzRDYxMjIyNEI2RjI5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDknkLylkH/h9bmFBkav67BIKt4 RjENGIVId8YJkqA+LEZjSfJjqv4mrL0lGZjMTFzoQlOOj6GjNlFPZ57ijyAFRGcm fAaOGCvcOcAOqfk5LzTloq8xwm7SQjNlggygbqSzYMkSoQLoimgtQlOWnbcWEPG+ VowZWd71b3p5CTTT2nGURzEnT3Vv04lLRaU3TWzAhX9jhQmv70Fea0+pIUWNogby RBiNZU7RXCcbudVUhjOuJTgTk6TsU+AhLkC9j4nEC/gpZmjwQ/XNa6fHsIyh7qhV aaCT27COg1cnHdHdcZGR2i7JvSYgnHZa9KsJ623pCc3CWvaMyn5v27HMvevTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMliRF5QLez5gJSAqY9YSIktvKcMwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg6gxdA4e4vVahg6LvnZmQ57IX8cTmQhilB zQqBcEF5/fVO+0rgXgwxyVDFdhaCfGQa10FsakO/MYTvBo213FlNIDW6KWUIEtUE F0ZjPcJt4jxBSaKcf5zsGLWwZgWfObRWFRDFmvyGniBChKtCHm4ZWH2Aycu9KnN7 oDzTbLR89+SllJ5ifSb7fOvj4XmqXI3F9laDLcfyT6S0pMfWaK9ThGrbq/Js4JVt xjqBN+D3/cpJAARXu79s9z+WFDR1T503h9EHvkVXoTLj93XdQAszPoOtHL6h0UvS rMokWZIj8FvaoFiqFgKQ2ZimKY6h7Xz2cL81JNfFH7UlMdv8PGA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:59:54 2025 by rpki-client