$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: ijRqIAKBSTSIW22LmubIdkTkRSlWWLtyRPhoy10OdiU= Subject key identifier: BE:F4:D6:6D:08:A3:1D:F9:6B:E1:C5:6E:A7:B0:A5:3D:71:C1:5D:2B Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 5344D2859C43F4DCD67EC8CD19162A1F36166C62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 0160 Signing time: Fri 13 Jun 2025 15:31:32 +0000 Manifest this update: Fri 13 Jun 2025 15:26:32 +0000 Manifest next update: Mon 16 Jun 2025 16:36:32 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: +hYNHK6kub6jyn35J5JWVf6mplURCTGin3exkjl7lec=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 16:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:44:d2:85:9c:43:f4:dc:d6:7e:c8:cd:19:16:2a:1f:36:16:6c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Jun 13 15:26:32 2025 GMT Not After : Jun 16 16:36:32 2025 GMT Subject: CN=BEF4D66D08A31DF96BE1C56EA7B0A53D71C15D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d7:ea:a6:27:5e:f1:99:1f:4f:22:71:17:0b: dd:a8:3e:2b:36:0c:86:eb:ec:6e:2b:5f:d9:b5:84: 28:a7:74:b3:a0:ee:a0:d9:bc:39:0d:a5:6d:78:c5: 7f:92:1f:74:9e:83:58:b6:95:23:e0:e8:09:e6:4a: 21:85:ce:05:cf:f8:da:90:c0:4c:c9:c6:d5:6f:b1: 56:f0:28:8a:6c:95:08:02:e3:43:09:37:77:f1:bc: 32:8f:b1:c2:e6:ac:2c:52:ea:43:b0:41:67:21:04: 24:90:ed:25:aa:70:5e:cc:45:ad:32:fe:0f:69:df: 5b:61:51:32:d9:97:60:31:3e:58:fe:ce:05:e8:89: 06:16:6a:95:97:be:60:1e:18:cf:f2:2b:a2:66:45: f4:c6:1b:7c:51:1f:f0:0c:28:3e:41:72:d7:b5:71: 8c:e7:c5:d7:9f:5e:77:11:5d:98:ff:bf:0f:3f:ca: f3:8f:fd:7d:bd:9f:9f:41:bd:79:2a:74:32:57:b8: 20:e5:ac:7c:ac:4e:1b:1d:45:f3:29:bb:58:1c:72: c9:52:e6:c1:ab:ed:bb:82:f2:65:05:57:5d:53:41: b9:5a:4e:25:65:8e:94:51:00:ba:35:4d:e7:0b:d0: 12:d9:10:76:bf:14:ac:84:2a:de:b3:b2:04:46:86: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F4:D6:6D:08:A3:1D:F9:6B:E1:C5:6E:A7:B0:A5:3D:71:C1:5D:2B X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:14:95:0b:2d:31:c4:90:8e:47:4e:f6:50:3e:23:6a:4c:1c: b9:27:02:49:e3:02:5b:99:a7:e8:19:51:97:1f:71:55:4b:d8: 49:86:6b:2a:ad:93:77:4d:1e:8f:ca:30:9b:2d:8e:59:08:26: 24:61:0a:dc:89:75:ac:78:79:d4:7d:ca:92:37:f0:02:23:4f: eb:69:82:d7:d4:10:01:b2:db:fd:52:58:db:b3:9a:81:9a:3c: 1a:85:0f:d9:ef:e7:4d:83:4a:cb:3f:e0:74:67:c3:75:1e:85: 65:a9:32:d3:5c:79:7c:df:fc:cf:9f:4d:2e:a3:84:6d:91:1a: 70:9c:e2:d8:ec:97:21:e2:34:11:18:52:e2:08:84:c5:d0:1f: f4:b2:09:11:07:34:70:76:f8:46:6f:01:5d:65:8a:95:1f:c5: 67:4b:50:b5:a7:ec:59:e9:b6:60:0e:8c:dd:84:a7:c0:49:26: 3b:9d:45:0a:15:46:ac:0e:ac:5b:6c:29:09:c7:ff:e3:6a:b3: b8:75:c0:43:2c:38:ef:91:88:8c:f3:e7:fa:eb:ed:60:eb:c7: 7f:61:37:0e:68:41:03:25:3d:d8:24:14:c4:99:95:83:64:21: 26:0e:be:81:7d:53:39:8e:45:7e:17:5f:cc:41:ef:cb:07:ec: aa:9e:63:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0TShZxD9NzWfsjNGRYqHzYWbGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTA2MTMxNTI2MzJaFw0yNTA2MTYxNjM2MzJaMDMxMTAvBgNV BAMTKEJFRjRENjZEMDhBMzFERjk2QkUxQzU2RUE3QjBBNTNENzFDMTVEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1+qmJ17xmR9PInEXC92oPis2 DIbr7G4rX9m1hCindLOg7qDZvDkNpW14xX+SH3Seg1i2lSPg6AnmSiGFzgXP+NqQ wEzJxtVvsVbwKIpslQgC40MJN3fxvDKPscLmrCxS6kOwQWchBCSQ7SWqcF7MRa0y /g9p31thUTLZl2AxPlj+zgXoiQYWapWXvmAeGM/yK6JmRfTGG3xRH/AMKD5Bcte1 cYznxdefXncRXZj/vw8/yvOP/X29n59BvXkqdDJXuCDlrHysThsdRfMpu1gccslS 5sGr7buC8mUFV11TQblaTiVljpRRALo1TecL0BLZEHa/FKyEKt6zsgRGhoC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvvTWbQijHflr4cVup7ClPXHBXSswHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIUlQstMcSQjkdO9lA+I2pMHLknAknjAluZ p+gZUZcfcVVL2EmGayqtk3dNHo/KMJstjlkIJiRhCtyJdax4edR9ypI38AIjT+tp gtfUEAGy2/1SWNuzmoGaPBqFD9nv502DSss/4HRnw3UehWWpMtNceXzf/M+fTS6j hG2RGnCc4tjslyHiNBEYUuIIhMXQH/SyCREHNHB2+EZvAV1lipUfxWdLULWn7Fnp tmAOjN2Ep8BJJjudRQoVRqwOrFtsKQnH/+Nqs7h1wEMsOO+RiIzz5/rr7WDrx39h Nw5oQQMlPdgkFMSZlYNkISYOvoF9UzmORX4XX8xB78sH7KqeY2s= -----END CERTIFICATE-----Generated at Sun Jun 15 15:22:43 2025 by rpki-client