$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: UcQNKbSv2m91lqecxIGDlU9AJQXowt9EkLB6mafWo3Y= Subject key identifier: B5:BB:F1:EE:91:1C:02:67:DB:F8:4F:BC:34:F4:5E:17:6E:89:2D:CE Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 317423C3CB6968971E05035BDCA55F7A7D4553E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: D1 Signing time: Tue 04 Nov 2025 10:32:19 +0000 Manifest this update: Tue 04 Nov 2025 10:27:19 +0000 Manifest next update: Fri 07 Nov 2025 20:42:19 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: LbW4HQYjsL6qFvvC4/n3rC06uRLSb6kU/Ea6wSasF2I=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:74:23:c3:cb:69:68:97:1e:05:03:5b:dc:a5:5f:7a:7d:45:53:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Nov 4 10:27:19 2025 GMT Not After : Nov 7 20:42:19 2025 GMT Subject: CN=B5BBF1EE911C0267DBF84FBC34F45E176E892DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:f1:86:81:d1:7c:47:ad:ec:c4:66:5e:9f: a5:d8:0a:13:07:6a:d3:23:4b:fd:9e:c6:85:fc:ee: f2:9a:48:5a:02:7a:7f:f4:18:90:a8:24:6d:80:4b: f9:41:b0:cc:23:dd:da:ed:9c:5e:b2:88:ee:08:a2: b4:19:11:1b:05:f0:8f:93:2b:b0:0e:dd:70:05:a7: 28:24:ab:56:62:d5:9a:91:c2:5d:14:d6:dc:48:dd: fd:f3:36:90:cc:27:20:4e:a6:84:c6:18:e8:82:01: c2:00:aa:4d:59:d1:0d:89:17:94:c1:cb:ef:29:91: 1d:21:df:26:91:96:e2:2c:ec:b5:ab:73:15:da:1d: 63:bf:d6:94:fe:0f:d7:0c:16:8f:e0:3d:c6:95:fb: cf:b6:eb:25:86:01:e4:67:b2:a7:6b:46:58:1f:76: da:7f:6f:66:4c:12:9c:d8:f2:04:50:63:ac:cf:a5: 21:98:9e:61:30:38:53:2c:dd:ee:d9:2f:d7:6b:10: 4b:b7:a4:fd:e8:f2:00:8e:16:30:17:e1:da:3e:bb: 94:dd:33:aa:3a:51:e0:3c:58:df:69:ca:50:57:80: f9:f3:8a:5e:35:2e:86:04:25:c4:a6:2b:08:f9:16: 06:85:f4:fc:ff:26:4c:7b:28:6f:ff:9b:77:a3:67: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:F1:EE:91:1C:02:67:DB:F8:4F:BC:34:F4:5E:17:6E:89:2D:CE X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:59:9e:fb:2c:2f:5e:33:e9:7e:ee:50:85:f2:07:a9:2e:ba: 23:68:ac:19:b9:62:13:f0:00:8a:50:3a:dd:f3:be:8e:a1:50: 5e:0c:42:94:a3:10:73:50:32:a0:cf:ad:f6:08:ff:67:19:97: 03:c3:c5:a8:a8:66:de:b5:b6:6d:76:77:33:ef:d1:26:3e:7b: c7:34:c9:67:11:d7:54:11:d0:82:a9:d4:0e:55:8d:1a:01:b0: f2:0b:be:d8:8b:51:4f:51:c9:c7:51:f4:66:74:2d:32:a1:3c: 7c:c1:aa:d8:61:7f:0e:12:35:3f:ee:2c:9b:c5:13:8c:37:bb: 8b:d1:b2:c4:a0:0d:9c:7a:c9:16:c8:f9:c1:db:d1:70:e9:ca: e7:30:ed:b5:a6:f1:e4:7d:90:2f:31:75:60:60:2d:ba:fc:89: 00:89:3d:72:ea:c7:72:1e:b2:d7:c2:81:29:c5:59:b8:cf:60: 71:eb:a6:22:90:e6:e8:7b:b6:97:49:f1:59:b2:f9:62:ce:7e: b7:81:53:4b:19:c0:05:4d:0b:3b:ae:c7:7e:3a:37:05:54:19: 87:11:75:7b:9b:fd:0e:01:36:de:26:c4:fd:3f:ee:03:8b:b5: f5:b2:59:da:09:a7:b2:09:cb:73:77:bc:ff:93:a3:69:1d:3e: 33:dc:52:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXQjw8tpaJceBQNb3KVfen1FU+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTExMDQxMDI3MTlaFw0yNTExMDcyMDQyMTlaMDMxMTAvBgNV BAMTKEI1QkJGMUVFOTExQzAyNjdEQkY4NEZCQzM0RjQ1RTE3NkU4OTJEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CPGGgdF8R63sxGZen6XYChMH atMjS/2exoX87vKaSFoCen/0GJCoJG2AS/lBsMwj3drtnF6yiO4IorQZERsF8I+T K7AO3XAFpygkq1Zi1ZqRwl0U1txI3f3zNpDMJyBOpoTGGOiCAcIAqk1Z0Q2JF5TB y+8pkR0h3yaRluIs7LWrcxXaHWO/1pT+D9cMFo/gPcaV+8+26yWGAeRnsqdrRlgf dtp/b2ZMEpzY8gRQY6zPpSGYnmEwOFMs3e7ZL9drEEu3pP3o8gCOFjAX4do+u5Td M6o6UeA8WN9pylBXgPnzil41LoYEJcSmKwj5FgaF9Pz/Jkx7KG//m3ejZz2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtbvx7pEcAmfb+E+8NPReF26JLc4wHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFZnvssL14z6X7uUIXyB6kuuiNorBm5YhPw AIpQOt3zvo6hUF4MQpSjEHNQMqDPrfYI/2cZlwPDxaioZt61tm12dzPv0SY+e8c0 yWcR11QR0IKp1A5VjRoBsPILvtiLUU9RycdR9GZ0LTKhPHzBqthhfw4SNT/uLJvF E4w3u4vRssSgDZx6yRbI+cHb0XDpyucw7bWm8eR9kC8xdWBgLbr8iQCJPXLqx3Ie stfCgSnFWbjPYHHrpiKQ5uh7tpdJ8Vmy+WLOfreBU0sZwAVNCzuux346NwVUGYcR dXub/Q4BNt4mxP0/7gOLtfWyWdoJp7IJy3N3vP+To2kdPjPcUiU= -----END CERTIFICATE-----Generated at Tue Nov 4 18:51:09 2025 by rpki-client