$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: ge2Pn0DFhPvBbRNgMwXfovlu4e3Ei2RLH3LhqPcACn4= Subject key identifier: E4:FB:92:3A:FE:3C:5D:43:20:69:C6:FA:3A:FA:E3:B0:C7:77:71:30 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 1C7180ACF8FAD9654DD85030A28614C429CFC5F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: AB Signing time: Sat 09 Aug 2025 09:42:20 +0000 Manifest this update: Sat 09 Aug 2025 09:37:20 +0000 Manifest next update: Tue 12 Aug 2025 11:33:20 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: F5AyEV9jxeccq/mPCA9YsCUivWhCJBozUcxF+14O/uI=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 11:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:71:80:ac:f8:fa:d9:65:4d:d8:50:30:a2:86:14:c4:29:cf:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Aug 9 09:37:20 2025 GMT Not After : Aug 12 11:33:20 2025 GMT Subject: CN=E4FB923AFE3C5D432069C6FA3AFAE3B0C7777130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:ef:08:b1:2e:16:8e:ff:20:18:dd:8d:4b: d1:86:f9:c4:bc:b2:a8:b6:f6:60:2a:d8:8e:dc:a3: ba:28:59:07:28:67:d5:45:2f:ef:c4:16:5e:3d:b0: 52:15:3a:e3:d7:b5:fc:47:d8:11:40:c4:dc:0a:75: c0:bc:83:c9:f2:68:fe:2f:78:26:e6:e7:21:0c:ad: db:13:16:1e:81:1e:13:fc:a6:1b:35:8b:cf:99:37: 29:cb:22:7a:6b:64:05:ff:de:24:e3:75:7f:a5:e7: 40:11:e3:d2:a2:14:24:b9:1a:e4:50:a9:44:12:59: c4:15:5b:3f:81:2c:08:a4:bf:84:51:6d:3d:62:9c: 0a:60:15:b3:e0:29:05:79:34:ea:43:a5:75:8e:ef: 86:40:63:e3:29:37:9e:1d:d0:a7:45:58:11:93:f4: 02:b8:ee:4b:fc:1c:dc:7d:12:b1:9d:e7:4d:97:88: b5:ce:e1:e7:0e:af:32:98:70:a4:34:95:0b:74:cb: 3c:f6:a5:c1:d1:fc:bf:f0:37:3d:2f:de:58:af:f3: f2:28:82:dd:0b:e8:a0:67:0d:18:59:60:72:5e:69: 23:8a:ff:2f:d5:a4:69:bc:77:a7:81:a3:81:39:8d: 48:00:7c:c3:6a:af:b9:66:7a:75:ec:c6:45:d6:14: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FB:92:3A:FE:3C:5D:43:20:69:C6:FA:3A:FA:E3:B0:C7:77:71:30 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2f:37:d9:4b:c6:a7:22:0c:70:6f:45:c9:74:2b:5c:86:0d: 3b:94:fb:0a:23:35:bd:85:06:88:ab:f7:c9:d8:26:c5:c0:b6: 89:63:89:b6:a5:b8:9c:75:14:20:91:de:ad:b4:3e:ba:f8:f6: 0d:b8:3d:af:f7:5b:7f:02:cd:28:b3:27:7f:56:16:b7:59:5b: e5:21:8d:02:0e:7f:bb:bc:a1:5e:8b:65:cc:e6:4c:79:c5:7a: dd:23:52:08:3c:da:33:02:87:f1:c9:83:4c:a4:cc:eb:b5:04: 73:2b:c2:5c:d3:17:4e:23:72:66:66:15:66:90:21:3d:49:5a: 20:80:c5:0a:3a:8f:86:a8:9c:9f:36:e9:cb:26:db:80:81:ea: 5e:ed:84:ae:53:e3:ea:5c:39:d0:22:a2:c1:aa:7a:91:0a:10: cc:74:dd:f6:02:a3:ab:31:2c:8f:f9:05:8e:a8:05:47:99:52: fe:53:30:94:45:7f:6a:6b:e0:57:bd:13:aa:05:a9:3b:4e:12: f0:1e:4d:7e:c8:5f:f5:43:3e:3b:6d:a2:b8:e1:23:83:d9:0f: 7a:ad:51:88:e9:71:4f:69:a8:96:6f:cd:83:f6:0a:63:f9:14: 5e:d1:6b:49:af:04:d5:e2:ae:34:37:eb:6b:1e:cd:f1:a5:7e: c5:e8:7d:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHGArPj62WVN2FAwooYUxCnPxfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA4MDkwOTM3MjBaFw0yNTA4MTIxMTMzMjBaMDMxMTAvBgNV BAMTKEU0RkI5MjNBRkUzQzVENDMyMDY5QzZGQTNBRkFFM0IwQzc3NzcxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVO8IsS4Wjv8gGN2NS9GG+cS8 sqi29mAq2I7co7ooWQcoZ9VFL+/EFl49sFIVOuPXtfxH2BFAxNwKdcC8g8nyaP4v eCbm5yEMrdsTFh6BHhP8phs1i8+ZNynLInprZAX/3iTjdX+l50AR49KiFCS5GuRQ qUQSWcQVWz+BLAikv4RRbT1inApgFbPgKQV5NOpDpXWO74ZAY+MpN54d0KdFWBGT 9AK47kv8HNx9ErGd502XiLXO4ecOrzKYcKQ0lQt0yzz2pcHR/L/wNz0v3liv8/Io gt0L6KBnDRhZYHJeaSOK/y/VpGm8d6eBo4E5jUgAfMNqr7lmenXsxkXWFIe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5PuSOv48XUMgacb6OvrjsMd3cTAwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUvN9lLxqciDHBvRcl0K1yGDTuU+wojNb2F Boir98nYJsXAtoljibaluJx1FCCR3q20Prr49g24Pa/3W38CzSizJ39WFrdZW+Uh jQIOf7u8oV6LZczmTHnFet0jUgg82jMCh/HJg0ykzOu1BHMrwlzTF04jcmZmFWaQ IT1JWiCAxQo6j4aonJ826csm24CB6l7thK5T4+pcOdAiosGqepEKEMx03fYCo6sx LI/5BY6oBUeZUv5TMJRFf2pr4Fe9E6oFqTtOEvAeTX7IX/VDPjttorjhI4PZD3qt UYjpcU9pqJZvzYP2CmP5FF7Ra0mvBNXirjQ362sezfGlfsXofQE= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:23 2025 by rpki-client