$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: Vyl27LjDUb/PDdzJMrElzSNO8zqP8h4C0bIT6PXMK2g= Subject key identifier: 62:4B:36:FF:17:43:5A:50:35:03:72:0A:E2:E0:D2:ED:6D:21:0D:B0 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 4519CEE5801AAD68A6E94231A43E9453F801DBDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 7E Signing time: Tue 29 Apr 2025 11:43:46 +0000 Manifest this update: Tue 29 Apr 2025 11:38:46 +0000 Manifest next update: Fri 02 May 2025 16:13:46 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: xJ7jPZiRN5p9CCeavvlkfOq9xqVrWGN0H9fWEY/Ic+k=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: qRknkcFtXrfwbZzwuyl4I3VxccKIXIPbOb5XLc+F9YM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:19:ce:e5:80:1a:ad:68:a6:e9:42:31:a4:3e:94:53:f8:01:db:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Apr 29 11:38:46 2025 GMT Not After : May 2 16:13:46 2025 GMT Subject: CN=624B36FF17435A503503720AE2E0D2ED6D210DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:a8:1a:5d:65:99:5f:f4:c9:71:7f:de:01: 4a:41:7a:cd:c8:96:af:28:96:38:58:f7:2c:96:c1: c5:2c:9b:76:08:53:b4:b2:29:02:46:95:0f:c1:2b: b6:b3:f1:56:cc:ff:81:3e:e8:1a:22:0b:74:b7:f2: 79:51:7d:dd:2c:12:f0:fb:20:1c:ca:af:f1:b6:24: 7f:af:e2:c2:42:48:74:fb:9b:74:48:ee:bf:9c:75: cc:d4:d8:59:62:1c:02:7e:b7:21:de:74:10:fb:3f: ac:6d:82:bf:96:28:b6:6f:e7:3b:38:96:4a:6e:81: c4:e4:42:b4:2e:e8:f0:19:32:75:93:ca:51:8d:fb: b5:6f:e6:a2:56:49:24:fa:c6:80:7e:f4:8d:62:89: 61:19:28:52:72:41:66:1f:4f:18:3b:42:c9:01:42: 07:ad:ec:47:e1:35:32:52:66:53:46:b1:61:88:50: 0d:76:8c:68:5e:22:fa:82:f6:ee:4a:64:c6:83:a6: 3a:6a:36:9b:b7:7e:93:03:c1:0a:59:c9:87:11:79: b0:44:3e:31:01:59:53:03:ff:3c:28:0a:23:12:f0: 88:bb:81:d9:42:09:74:3d:2a:69:45:dd:8b:a3:70: b5:e1:78:80:64:a4:b7:5c:c9:84:de:93:27:56:9c: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4B:36:FF:17:43:5A:50:35:03:72:0A:E2:E0:D2:ED:6D:21:0D:B0 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:89:a0:0b:9d:9c:eb:f2:dc:a1:a8:f4:b2:08:cb:6f:bc: ee:7e:61:ea:f5:ad:40:f2:5e:cf:e3:01:f5:88:f6:20:8c:05: 21:d0:d4:97:19:91:f5:58:03:96:b7:d7:20:d7:1c:fb:c3:55: fe:9f:9a:41:4a:af:7a:29:8c:bd:cc:c0:b8:28:da:45:82:27: 7b:82:30:f5:c8:fa:04:5f:a5:e5:73:5d:f3:67:db:7f:6a:9d: e9:b0:9e:d5:54:35:6b:68:d5:3d:5b:c8:ae:51:e4:e2:1c:52: 8b:4b:ba:ef:2f:49:7d:e4:02:3e:09:8b:c1:db:c9:ac:d3:3f: 9d:c1:6f:37:36:b6:64:17:51:57:64:4e:c3:7b:ab:a1:c2:da: 17:d8:a4:85:c3:f7:9d:d3:69:ae:4b:23:8f:3d:9b:7e:87:43: d8:24:38:26:15:b8:96:33:0a:15:51:bd:64:b0:07:d7:09:ec: b7:2d:7f:2f:c8:c2:d8:cb:8d:7a:48:4c:06:9f:da:88:5b:0e: ed:24:09:7a:bc:63:5c:00:44:97:c8:16:68:95:28:ab:fc:c6: ab:90:18:cf:ac:3c:f4:72:61:72:a7:8a:f6:fa:58:27:85:6a: e7:a3:5c:e2:23:9f:19:f6:e4:2f:e3:5d:84:37:e6:a5:33:3f: 13:2f:9b:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRnO5YAarWim6UIxpD6UU/gB29owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA0MjkxMTM4NDZaFw0yNTA1MDIxNjEzNDZaMDMxMTAvBgNV BAMTKDYyNEIzNkZGMTc0MzVBNTAzNTAzNzIwQUUyRTBEMkVENkQyMTBEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlY6gaXWWZX/TJcX/eAUpBes3I lq8oljhY9yyWwcUsm3YIU7SyKQJGlQ/BK7az8VbM/4E+6BoiC3S38nlRfd0sEvD7 IBzKr/G2JH+v4sJCSHT7m3RI7r+cdczU2FliHAJ+tyHedBD7P6xtgr+WKLZv5zs4 lkpugcTkQrQu6PAZMnWTylGN+7Vv5qJWSST6xoB+9I1iiWEZKFJyQWYfTxg7QskB Qget7EfhNTJSZlNGsWGIUA12jGheIvqC9u5KZMaDpjpqNpu3fpMDwQpZyYcRebBE PjEBWVMD/zwoCiMS8Ii7gdlCCXQ9KmlF3YujcLXheIBkpLdcyYTekydWnFslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYks2/xdDWlA1A3IK4uDS7W0hDbAwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFkiaALnZzr8tyhqPSyCMtvvO5+Yer1rUDy Xs/jAfWI9iCMBSHQ1JcZkfVYA5a31yDXHPvDVf6fmkFKr3opjL3MwLgo2kWCJ3uC MPXI+gRfpeVzXfNn239qnemwntVUNWto1T1byK5R5OIcUotLuu8vSX3kAj4Ji8Hb yazTP53Bbzc2tmQXUVdkTsN7q6HC2hfYpIXD953Taa5LI489m36HQ9gkOCYVuJYz ChVRvWSwB9cJ7Lctfy/IwtjLjXpITAaf2ohbDu0kCXq8Y1wARJfIFmiVKKv8xquQ GM+sPPRyYXKnivb6WCeFauejXOIjnxn25C/jXYQ35qUzPxMvm5Q= -----END CERTIFICATE-----Generated at Tue Apr 29 19:08:40 2025 by rpki-client