$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: sNZvlrZFsPGHbsdxEWP5rQMXz5NIYC1W0kJJ8wQ3gIU= Subject key identifier: 53:A7:1B:47:08:BE:54:73:81:E7:2B:9F:E6:02:4E:8D:40:3B:E0:18 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 46E0C453E416FC0D4FA1A949BECA743371A2F5E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 93 Signing time: Mon 16 Jun 2025 02:52:23 +0000 Manifest this update: Mon 16 Jun 2025 02:47:23 +0000 Manifest next update: Thu 19 Jun 2025 03:08:23 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: xJ7jPZiRN5p9CCeavvlkfOq9xqVrWGN0H9fWEY/Ic+k=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: 4aTfsXGjJCJDEnIhns1oynGmwUSbIQaRh7QKN2s2rmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e0:c4:53:e4:16:fc:0d:4f:a1:a9:49:be:ca:74:33:71:a2:f5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Jun 16 02:47:23 2025 GMT Not After : Jun 19 03:08:23 2025 GMT Subject: CN=53A71B4708BE547381E72B9FE6024E8D403BE018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:61:22:39:ad:ec:4a:d2:d0:ac:d8:1d:cb: 23:7a:22:14:b3:14:b1:8b:c0:3b:3b:e5:c1:cc:1d: df:38:67:2a:57:f0:43:5b:72:c5:a3:c9:1f:db:eb: d6:85:a5:f5:c7:53:db:13:14:a9:5e:b1:0b:ee:0f: da:e4:5e:a6:3e:0d:39:39:43:66:e5:ff:24:7a:a6: 26:a0:4f:e8:45:5c:38:eb:46:27:b1:6d:e3:75:a0: 47:a2:0a:82:30:1e:6e:d7:65:2f:ca:a9:23:8b:e6: 72:f8:7e:01:2e:fb:93:41:3d:38:20:74:a0:5f:77: e5:37:ce:20:ad:13:69:51:81:4f:c3:06:59:e4:c8: f8:f6:a3:c1:26:11:c6:90:52:4f:90:3c:d7:86:ef: 12:62:b1:6e:d4:99:5a:2d:92:07:0f:b1:58:f7:63: 91:5d:37:5d:bf:85:ca:67:6b:f5:d5:e5:22:e0:21: 12:55:a3:af:ff:60:4f:74:b3:25:64:d8:2c:af:9d: 8f:92:78:60:5b:36:aa:79:68:0a:62:02:64:63:12: 57:c0:75:86:ec:54:38:36:04:08:b7:db:e8:e4:55: 42:6b:af:d0:89:54:a6:46:97:21:e9:32:72:ae:26: 06:c0:25:ab:da:77:13:f8:e2:3e:92:73:8a:5c:87: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A7:1B:47:08:BE:54:73:81:E7:2B:9F:E6:02:4E:8D:40:3B:E0:18 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:ae:50:44:b4:55:d1:20:ed:bf:b7:78:e0:ca:25:5c:ea: 1e:c5:5f:90:fd:b9:90:29:f0:e7:88:75:d0:6d:8f:e8:f4:38: 37:2d:20:c0:7e:7d:68:25:76:55:86:d8:67:7a:66:7a:48:72: c0:51:2a:68:a2:0b:e4:0a:27:5c:e3:72:d8:1b:1a:70:4f:ed: 27:0f:ea:af:97:d3:20:9a:61:9f:86:6e:86:00:1b:84:08:4f: f7:de:96:78:1e:29:33:ca:16:61:db:b2:db:b9:4b:4f:ab:9c: 5c:d2:7f:9a:60:c4:a8:ea:03:bc:26:bb:4f:4f:e2:15:e2:85: a4:bf:eb:be:36:3f:c9:0e:04:34:7b:55:72:9d:b8:0f:c7:a9: a6:6c:66:c1:40:92:61:9f:10:7f:50:40:19:97:92:94:f2:42: 47:a8:81:a1:46:87:38:34:ad:e5:3b:e1:52:b7:12:41:f3:3d: 72:ec:6c:26:cd:db:1a:84:67:02:ab:80:8b:d4:0e:5c:cd:cf: 5a:91:52:9a:a3:a2:0d:8a:5f:d8:c8:19:60:25:94:af:8d:31: 0c:7b:ea:ec:70:cb:9c:34:60:da:dd:b3:65:ec:74:cc:80:01: 6c:bc:54:16:44:01:3f:49:9a:4c:41:4b:2a:27:db:d6:78:7a: 97:d5:40:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURuDEU+QW/A1PoalJvsp0M3Gi9eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA2MTYwMjQ3MjNaFw0yNTA2MTkwMzA4MjNaMDMxMTAvBgNV BAMTKDUzQTcxQjQ3MDhCRTU0NzM4MUU3MkI5RkU2MDI0RThENDAzQkUwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBWEiOa3sStLQrNgdyyN6IhSz FLGLwDs75cHMHd84ZypX8ENbcsWjyR/b69aFpfXHU9sTFKlesQvuD9rkXqY+DTk5 Q2bl/yR6piagT+hFXDjrRiexbeN1oEeiCoIwHm7XZS/KqSOL5nL4fgEu+5NBPTgg dKBfd+U3ziCtE2lRgU/DBlnkyPj2o8EmEcaQUk+QPNeG7xJisW7UmVotkgcPsVj3 Y5FdN12/hcpna/XV5SLgIRJVo6//YE90syVk2CyvnY+SeGBbNqp5aApiAmRjElfA dYbsVDg2BAi32+jkVUJrr9CJVKZGlyHpMnKuJgbAJavadxP44j6Sc4pch3vjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU6cbRwi+VHOB5yuf5gJOjUA74BgwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfyrlBEtFXRIO2/t3jgyiVc6h7FX5D9uZAp 8OeIddBtj+j0ODctIMB+fWgldlWG2Gd6ZnpIcsBRKmiiC+QKJ1zjctgbGnBP7ScP 6q+X0yCaYZ+GboYAG4QIT/felngeKTPKFmHbstu5S0+rnFzSf5pgxKjqA7wmu09P 4hXihaS/6742P8kOBDR7VXKduA/HqaZsZsFAkmGfEH9QQBmXkpTyQkeogaFGhzg0 reU74VK3EkHzPXLsbCbN2xqEZwKrgIvUDlzNz1qRUpqjog2KX9jIGWAllK+NMQx7 6uxwy5w0YNrds2XsdMyAAWy8VBZEAT9JmkxBSyon29Z4epfVQPg= -----END CERTIFICATE-----Generated at Tue Jun 17 20:50:38 2025 by rpki-client