$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: xwJ6n0x7diXkfUhNQhTokDcrE95xd54YyrV1EVzXd/I= Subject key identifier: 33:A7:8B:41:90:D2:33:8C:E3:BF:D6:E9:97:B0:AA:A9:B6:1F:83:C5 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 6E130E8D10227082FA0BCBCCB8D46CB22C7E1A93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0208 Signing time: Sun 15 Jun 2025 05:01:15 +0000 Manifest this update: Sun 15 Jun 2025 04:56:15 +0000 Manifest next update: Wed 18 Jun 2025 06:44:15 +0000 Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) 2: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: NtPPYPE+Z02bc/WFE/K1JpHaeoBJK4jLzn0lF6C9jwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:13:0e:8d:10:22:70:82:fa:0b:cb:cc:b8:d4:6c:b2:2c:7e:1a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Jun 15 04:56:15 2025 GMT Not After : Jun 18 06:44:15 2025 GMT Subject: CN=33A78B4190D2338CE3BFD6E997B0AAA9B61F83C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:1c:50:b4:69:11:86:3e:1a:86:82:7b:39: 6c:ea:6a:89:25:a6:5e:93:99:15:db:80:73:2a:46: 00:aa:d3:e2:c9:07:83:e7:cf:1d:92:03:6d:01:ec: e9:4c:7b:1e:23:d6:1f:bf:4e:31:52:e0:06:9b:af: 17:9d:f4:43:c5:65:94:e7:fb:19:89:23:58:71:30: d4:5f:71:58:79:e9:11:98:6c:00:d6:69:64:5d:2e: 99:63:8c:c0:8d:7e:d1:ac:ab:33:46:bd:24:96:2e: 33:23:db:6b:e3:c5:de:5c:65:2a:a7:52:65:af:f7: 09:ed:75:98:18:70:3b:6e:a6:d5:33:2c:e3:b5:4d: 70:7e:5d:49:f4:63:6f:76:74:1b:d4:99:94:18:19: a7:32:50:63:1f:bf:e6:6d:df:eb:8b:6e:dd:b6:8a: 1e:ed:0c:d0:2e:16:fc:c7:c7:40:8c:fd:fd:b9:ee: 01:0c:3f:b7:7c:93:b0:1e:25:b9:b0:85:d6:da:1f: e8:b3:2f:ba:65:0d:c0:c1:db:9e:a1:b7:8c:af:d2: f1:48:b4:d9:ca:29:6d:08:2e:14:70:4e:fd:9f:17: d1:87:d1:54:82:85:3f:d0:5c:09:b8:fa:dd:a0:22: a7:1a:ab:ae:68:b2:17:49:ae:bb:6b:b7:c8:1f:d9: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:8B:41:90:D2:33:8C:E3:BF:D6:E9:97:B0:AA:A9:B6:1F:83:C5 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e9:e3:7f:50:e0:92:9b:41:94:e2:79:32:95:e6:5f:4d:d4: 63:a1:b2:21:01:73:a2:10:60:12:1d:fd:30:f5:5f:c1:84:40: 1a:c3:a6:c1:0e:ff:8a:96:07:ab:71:57:6c:51:7d:b9:fa:a5: fa:91:fe:39:55:8b:c3:76:5d:47:c1:18:13:56:cb:bf:f7:63: 3c:5d:1e:1f:f3:df:c5:55:1d:d9:72:fc:29:5d:f7:78:4f:3e: 65:ff:7b:17:fb:43:84:0f:1d:66:cb:d8:71:45:30:f8:26:02: 92:dd:05:47:7c:60:98:f7:20:64:ba:45:bb:26:a0:78:ef:ce: 9d:17:42:bd:7a:1f:7e:43:50:2b:08:60:a4:f5:28:3b:06:46: e8:ae:00:6b:5d:7a:0d:12:96:25:78:b0:95:b4:83:1a:01:28: 05:ab:12:16:3a:3c:b5:4e:70:2d:bf:95:89:b3:dc:8d:5e:ca: 9a:48:da:5d:9b:7e:0f:d1:6f:b3:4c:fe:05:64:fc:b0:fc:08: 1e:b2:47:e8:f4:d1:27:b4:e1:63:e2:c0:6f:d3:62:79:c3:dd: 7f:2b:6a:1e:30:93:eb:24:2a:d7:e1:91:ac:b1:31:be:c3:e4: 0b:38:0d:9e:b0:3c:67:5d:37:82:d4:e4:18:2c:9a:b5:20:ad: b8:33:48:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhMOjRAicIL6C8vMuNRssix+GpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA2MTUwNDU2MTVaFw0yNTA2MTgwNjQ0MTVaMDMxMTAvBgNV BAMTKDMzQTc4QjQxOTBEMjMzOENFM0JGRDZFOTk3QjBBQUE5QjYxRjgzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBhxQtGkRhj4ahoJ7OWzqaokl pl6TmRXbgHMqRgCq0+LJB4Pnzx2SA20B7OlMex4j1h+/TjFS4Aabrxed9EPFZZTn +xmJI1hxMNRfcVh56RGYbADWaWRdLpljjMCNftGsqzNGvSSWLjMj22vjxd5cZSqn UmWv9wntdZgYcDtuptUzLOO1TXB+XUn0Y292dBvUmZQYGacyUGMfv+Zt3+uLbt22 ih7tDNAuFvzHx0CM/f257gEMP7d8k7AeJbmwhdbaH+izL7plDcDB256ht4yv0vFI tNnKKW0ILhRwTv2fF9GH0VSChT/QXAm4+t2gIqcaq65oshdJrrtrt8gf2ab/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6eLQZDSM4zjv9bpl7CqqbYfg8UwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDp439Q4JKbQZTieTKV5l9N1GOhsiEBc6IQ YBId/TD1X8GEQBrDpsEO/4qWB6txV2xRfbn6pfqR/jlVi8N2XUfBGBNWy7/3Yzxd Hh/z38VVHdly/Cld93hPPmX/exf7Q4QPHWbL2HFFMPgmApLdBUd8YJj3IGS6Rbsm oHjvzp0XQr16H35DUCsIYKT1KDsGRuiuAGtdeg0SliV4sJW0gxoBKAWrEhY6PLVO cC2/lYmz3I1eyppI2l2bfg/Rb7NM/gVk/LD8CB6yR+j00Se04WPiwG/TYnnD3X8r ah4wk+skKtfhkayxMb7D5As4DZ6wPGddN4LU5BgsmrUgrbgzSHU= -----END CERTIFICATE-----Generated at Mon Jun 16 12:34:05 2025 by rpki-client