$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: 0HsREF5zFaUo60S8H4nSY1iOrYl6RroiYCTpoWYxu6g= Subject key identifier: 80:BB:01:2E:D2:02:39:AA:D2:A6:C7:B5:E1:2B:6A:F6:31:E5:5B:EA Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 77DD4A2AD43BEEF371E1876A92351674E801B7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0154 Signing time: Mon 03 Nov 2025 13:41:40 +0000 Manifest this update: Mon 03 Nov 2025 13:36:40 +0000 Manifest next update: Thu 06 Nov 2025 19:05:40 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 2: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 4: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: ZeGH1kRjUeMt3sM+mkkL0v4kJBBg8ZAlp3l3/B3i/cM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:dd:4a:2a:d4:3b:ee:f3:71:e1:87:6a:92:35:16:74:e8:01:b7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Nov 3 13:36:40 2025 GMT Not After : Nov 6 19:05:40 2025 GMT Subject: CN=80BB012ED20239AAD2A6C7B5E12B6AF631E55BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:ca:53:d4:79:ff:20:4d:f5:42:ab:3d:1e: 48:37:ea:4d:eb:ee:c1:a6:35:ed:c8:2b:83:6b:a1: 99:1a:b2:4a:c7:b7:91:f5:2e:d2:73:bc:08:71:62: f5:ed:1d:e8:9c:12:e8:1b:16:07:f0:62:ff:68:e6: 2f:ab:68:ba:1a:8e:36:0d:6e:fc:b3:a3:bf:d1:01: ca:d4:db:ca:a2:29:57:43:dc:e2:40:0e:bc:0d:02: c5:36:2c:04:b1:d8:c8:51:0b:7d:41:f1:f9:7a:91: 19:e1:9d:b0:75:39:a2:50:c0:87:dd:8a:14:28:06: d5:f9:f3:8f:a1:a6:ea:33:3a:ba:3d:02:06:a9:0a: 29:bd:ed:04:44:85:e6:97:31:07:a2:3c:7f:e6:b8: de:2e:f9:af:2d:d7:65:70:3b:c2:01:aa:c0:67:17: 5e:33:cc:6d:f8:0a:95:9d:74:2c:96:d6:49:81:fa: 77:6f:20:2e:82:55:4b:08:6c:16:82:a1:a8:ad:c2: e7:0f:c7:e5:3b:c8:77:68:9c:80:b7:39:6a:30:cf: 55:55:db:63:26:db:ac:21:73:a1:99:f0:ab:55:fa: f4:84:82:ce:63:78:ff:74:f2:eb:5e:fa:ab:f9:77: 9c:9d:ef:9f:e6:8c:30:e0:d3:b4:a8:57:cb:b3:16: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BB:01:2E:D2:02:39:AA:D2:A6:C7:B5:E1:2B:6A:F6:31:E5:5B:EA X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:38:46:6d:e2:2f:81:3f:30:be:f5:fb:35:62:01:4a:15:88: 77:58:a1:98:88:33:c0:f0:18:55:33:38:d6:23:02:8a:bd:c2: 72:dd:f4:ef:c7:38:b4:a3:da:a8:65:93:d2:d9:2c:a3:30:99: 8c:40:4b:86:02:d9:45:84:47:0c:d2:0a:0c:b2:b5:44:c4:5d: d0:c2:0d:c1:1d:d4:24:6c:2a:d1:cb:1d:aa:bd:4b:b4:fc:9d: 52:f4:18:02:5b:e8:c7:02:29:2f:1c:2b:39:3b:6c:da:72:6b: 6c:fd:5f:ca:18:4d:cd:9d:f2:c2:c6:35:80:a3:55:02:d4:3f: f0:b9:da:6e:01:05:da:11:a9:59:5d:03:cd:68:58:70:4f:18: c2:d8:80:f7:6b:b0:ae:c6:c9:e8:77:c5:47:eb:2d:e4:0c:3f: c1:ec:8b:ce:14:31:00:1b:fd:4b:97:43:91:62:c5:97:42:78: 62:f7:34:22:77:21:df:15:a7:ab:ed:4e:5b:87:ff:06:3a:23: a4:fb:b9:e9:11:f8:b2:43:82:60:e9:56:25:00:50:d5:5f:39: 2d:fe:f1:69:9a:d9:a1:85:59:2e:0d:fe:47:70:c9:94:17:8f: 50:e7:db:d1:55:a3:2c:4d:ce:f7:13:33:fa:aa:88:04:db:fc: a0:02:37:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd91KKtQ77vNx4YdqkjUWdOgBt7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTExMDMxMzM2NDBaFw0yNTExMDYxOTA1NDBaMDMxMTAvBgNV BAMTKDgwQkIwMTJFRDIwMjM5QUFEMkE2QzdCNUUxMkI2QUY2MzFFNTVCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZMpT1Hn/IE31Qqs9Hkg36k3r 7sGmNe3IK4NroZkaskrHt5H1LtJzvAhxYvXtHeicEugbFgfwYv9o5i+raLoajjYN bvyzo7/RAcrU28qiKVdD3OJADrwNAsU2LASx2MhRC31B8fl6kRnhnbB1OaJQwIfd ihQoBtX584+hpuozOro9AgapCim97QREheaXMQeiPH/muN4u+a8t12VwO8IBqsBn F14zzG34CpWddCyW1kmB+ndvIC6CVUsIbBaCoaitwucPx+U7yHdonIC3OWowz1VV 22Mm26whc6GZ8KtV+vSEgs5jeP908ute+qv5d5yd75/mjDDg07SoV8uzFnvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLsBLtICOarSpse14Stq9jHlW+owHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALw4Rm3iL4E/ML71+zViAUoViHdYoZiIM8Dw GFUzONYjAoq9wnLd9O/HOLSj2qhlk9LZLKMwmYxAS4YC2UWERwzSCgyytUTEXdDC DcEd1CRsKtHLHaq9S7T8nVL0GAJb6McCKS8cKzk7bNpya2z9X8oYTc2d8sLGNYCj VQLUP/C52m4BBdoRqVldA81oWHBPGMLYgPdrsK7Gyeh3xUfrLeQMP8Hsi84UMQAb /UuXQ5FixZdCeGL3NCJ3Id8Vp6vtTluH/wY6I6T7uekR+LJDgmDpViUAUNVfOS3+ 8Wma2aGFWS4N/kdwyZQXj1Dn29FVoyxNzvcTM/qqiATb/KACN14= -----END CERTIFICATE-----Generated at Wed Nov 5 07:17:30 2025 by rpki-client