$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: 8cVK6RX4HefFXWLrNg+tQNHuxv8NHXkAbzK1EqcJF44= Subject key identifier: 68:99:0A:63:29:64:CD:21:B6:3C:A1:F1:AA:30:12:A2:CE:EE:BE:FC Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 5CE28DFBADFC7FAFB5D2F7DE6BB15A96BA1EE9A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0114 Signing time: Sat 14 Jun 2025 14:01:38 +0000 Manifest this update: Sat 14 Jun 2025 13:56:38 +0000 Manifest next update: Tue 17 Jun 2025 18:01:38 +0000 Files and hashes: 1: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=) 2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: FOQh7/UpbKU57Fz+FvuLJufZ+1RiH/R0wmCq8CFXUtY=) 3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=) 4: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e2:8d:fb:ad:fc:7f:af:b5:d2:f7:de:6b:b1:5a:96:ba:1e:e9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Jun 14 13:56:38 2025 GMT Not After : Jun 17 18:01:38 2025 GMT Subject: CN=68990A632964CD21B63CA1F1AA3012A2CEEEBEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:3f:3c:1b:08:fa:d6:a3:40:55:64:3a:1b: e5:75:e3:31:38:c3:2e:d3:c9:49:39:e6:a3:1f:ae: 60:28:29:71:d7:1f:2a:c2:87:3e:c9:83:00:63:8c: 74:9c:d5:56:77:8b:ce:17:5d:af:d6:f1:49:3f:e6: bf:12:9c:56:81:de:1a:ad:67:e3:b5:04:56:80:1e: c9:41:28:80:58:04:cb:f4:1a:85:78:72:aa:dc:64: c2:61:9a:5f:2d:5b:ee:d4:f9:ba:ad:81:14:8f:cf: 1e:84:eb:52:1c:4b:6d:47:7e:bd:0d:18:9e:38:d3: 93:64:80:a0:19:c6:a1:ea:59:ff:e8:e1:23:22:4f: 28:10:a6:24:91:50:29:ca:c8:c9:88:63:25:a9:3f: ae:03:c1:e8:31:de:3e:18:be:69:de:a2:2f:34:d7: e0:4e:1e:ce:56:96:1c:c6:6a:c6:e6:84:8d:43:2c: 58:e2:33:3e:a8:d9:44:bd:fd:22:da:f6:af:37:81: 7c:4e:9d:81:ee:31:ff:1a:af:5a:59:09:5d:d3:87: bf:51:13:49:e3:12:3d:73:3a:fb:7d:d6:1b:50:3d: 25:f8:0b:00:75:a9:84:39:ba:08:9d:4a:41:35:3d: 84:b7:43:ef:e1:45:22:44:91:ca:d0:74:19:44:e0: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:0A:63:29:64:CD:21:B6:3C:A1:F1:AA:30:12:A2:CE:EE:BE:FC X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f4:88:fe:cf:74:5f:2d:b6:7c:70:30:2d:de:2d:7f:18:71: d9:8f:d6:67:19:59:cf:2e:2a:0e:bf:fd:b8:53:50:66:3c:f3: a6:29:09:7e:a8:64:3b:93:cd:7d:fb:73:c7:60:59:d5:1e:2b: 89:51:db:41:a1:d9:bf:02:5d:13:b2:29:a6:30:23:4f:8b:46: 07:bb:19:74:f9:aa:1a:d8:40:64:ed:77:ef:c8:de:65:b8:97: 45:90:3c:01:09:dd:9d:ca:41:db:f2:59:8c:28:9d:c8:71:00: 57:28:2c:e0:74:31:b2:10:5c:02:15:22:fa:7b:03:43:fc:53: fd:99:18:ce:9b:04:03:90:56:7b:72:97:50:20:c3:e0:06:e2: 24:17:62:9a:fc:42:62:eb:4f:f3:80:d9:2c:80:5c:53:c9:6b: 7e:86:a6:b7:15:aa:d4:50:ac:31:21:11:1b:4e:a9:98:72:0d: 27:96:3d:05:71:e1:3c:43:e6:f5:e2:b9:8e:5c:2d:ce:3a:fb: 51:8f:09:03:e4:a3:6e:2d:1d:d0:ea:af:28:eb:4d:99:10:0d: 2b:42:df:b8:fd:81:9e:2a:a1:6e:67:bc:ea:e2:b3:2a:50:46: 61:9e:07:67:4a:15:0b:3c:7b:ca:91:fd:3e:cc:9e:dc:50:e9: e9:62:1b:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOKN+638f6+10vfea7Falroe6agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA2MTQxMzU2MzhaFw0yNTA2MTcxODAxMzhaMDMxMTAvBgNV BAMTKDY4OTkwQTYzMjk2NENEMjFCNjNDQTFGMUFBMzAxMkEyQ0VFRUJFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpT88Gwj61qNAVWQ6G+V14zE4 wy7TyUk55qMfrmAoKXHXHyrChz7JgwBjjHSc1VZ3i84XXa/W8Uk/5r8SnFaB3hqt Z+O1BFaAHslBKIBYBMv0GoV4cqrcZMJhml8tW+7U+bqtgRSPzx6E61IcS21Hfr0N GJ4405NkgKAZxqHqWf/o4SMiTygQpiSRUCnKyMmIYyWpP64Dwegx3j4Yvmneoi80 1+BOHs5WlhzGasbmhI1DLFjiMz6o2US9/SLa9q83gXxOnYHuMf8ar1pZCV3Th79R E0njEj1zOvt91htQPSX4CwB1qYQ5ugidSkE1PYS3Q+/hRSJEkcrQdBlE4JtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJkKYylkzSG2PKHxqjASos7uvvwwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv0iP7PdF8ttnxwMC3eLX8YcdmP1mcZWc8u Kg6//bhTUGY886YpCX6oZDuTzX37c8dgWdUeK4lR20Gh2b8CXROyKaYwI0+LRge7 GXT5qhrYQGTtd+/I3mW4l0WQPAEJ3Z3KQdvyWYwonchxAFcoLOB0MbIQXAIVIvp7 A0P8U/2ZGM6bBAOQVntyl1Agw+AG4iQXYpr8QmLrT/OA2SyAXFPJa36GprcVqtRQ rDEhERtOqZhyDSeWPQVx4TxD5vXiuY5cLc46+1GPCQPko24tHdDqryjrTZkQDStC 37j9gZ4qoW5nvOrisypQRmGeB2dKFQs8e8qR/T7MntxQ6eliG4M= -----END CERTIFICATE-----Generated at Sun Jun 15 19:15:17 2025 by rpki-client