$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: GcZTY9SLugfjr3E+MPTeSO/TPrW1h32zUqYl1cZXRAs= Subject key identifier: 02:0E:14:FE:D0:05:13:D6:3F:EF:1B:50:B2:D4:A5:6A:B5:7E:13:0D Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 676D4C5B8F838CEC48D31A0F4FC05B3410353661 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01DD Signing time: Mon 30 Jun 2025 01:11:49 +0000 Manifest this update: Mon 30 Jun 2025 01:06:49 +0000 Manifest next update: Thu 03 Jul 2025 02:38:49 +0000 Files and hashes: 1: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) 3: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: p3HfT8na/Q3KZxDZgVP4Z3u4x/CCiQCSL4MVS/D9hbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6d:4c:5b:8f:83:8c:ec:48:d3:1a:0f:4f:c0:5b:34:10:35:36:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Jun 30 01:06:49 2025 GMT Not After : Jul 3 02:38:49 2025 GMT Subject: CN=020E14FED00513D63FEF1B50B2D4A56AB57E130D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:75:60:d9:ae:67:37:0b:c7:c6:10:ad:c2: 08:23:c7:df:7f:09:a5:88:5d:77:15:a2:61:be:4b: 4f:c4:5a:03:31:2a:6d:18:43:d0:fb:8b:b2:78:09: 18:1f:00:c6:dd:22:09:1f:ca:0b:aa:39:ae:79:d5: 60:f9:c3:00:7e:18:89:20:5e:58:5e:84:d2:73:92: a2:2f:1a:11:fb:25:cd:45:cd:58:84:e5:45:2c:e6: 36:b9:2d:6c:92:90:ef:13:39:02:36:0b:89:2c:55: b0:4d:72:73:c0:91:0c:e4:51:9c:9a:c5:e9:78:d6: 12:05:46:b7:ac:18:da:74:09:81:38:78:f9:92:d2: 52:87:b5:0f:fd:21:68:74:bf:a5:31:4c:8e:d6:ca: 40:ea:4f:f8:f5:21:53:d6:6c:54:fd:96:d7:21:74: 97:17:6d:65:40:5e:1c:64:70:88:b5:d0:11:fa:ef: 47:11:e4:c9:bf:9a:58:a0:23:97:0d:92:01:15:5a: 99:6d:f2:c0:2b:6b:2a:91:46:37:ff:0a:9d:87:dc: 1a:77:08:a6:22:30:76:af:6e:75:9e:50:6a:a4:85: d8:e0:08:59:f6:8f:83:b0:f5:fe:49:fe:b0:1a:22: 5b:59:55:5b:40:f0:e5:9d:86:d5:86:6c:25:c4:a3: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:14:FE:D0:05:13:D6:3F:EF:1B:50:B2:D4:A5:6A:B5:7E:13:0D X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1f:b5:03:6d:0e:94:b1:26:94:3c:fe:46:4e:1f:68:97:d4: 58:78:68:6c:ce:0f:24:7d:7d:79:07:9b:41:58:78:60:9f:03: 97:4a:48:84:ca:9b:a6:25:75:e8:42:9b:fc:6c:ed:11:c3:d8: cd:89:75:3f:38:2f:7a:b3:e0:5c:1e:ae:3b:a0:fb:98:51:81: 3f:c8:71:31:15:c7:5a:61:a0:74:fc:ca:dd:78:fa:44:a6:b2: 93:11:21:2d:36:e4:2d:93:cb:e8:fe:d2:77:86:13:e8:2f:c0: cf:39:15:af:d4:24:36:75:63:ee:59:6e:74:3e:b7:65:87:50: ad:fc:66:f9:11:ba:28:31:49:32:7f:c7:e1:05:4b:f9:00:31: d2:72:63:d4:cb:b3:dd:a2:ba:00:49:16:97:e1:2a:76:a1:ff: b7:e0:c6:c4:e4:72:a4:cb:28:cc:42:14:87:7b:9b:65:a9:90: 9d:fd:1a:d0:d7:c3:9c:9d:31:9a:71:43:71:88:fd:a0:4b:83: 9e:c4:0d:15:86:12:c9:44:07:f9:c1:21:6f:b6:80:bb:64:08: 6e:d4:39:d6:d0:ca:18:d9:81:59:11:16:e4:23:e0:cd:09:a5: 3b:85:32:19:75:b9:e6:59:f5:ec:51:e1:55:bf:e8:81:e3:e5: 72:c1:12:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ21MW4+DjOxI0xoPT8BbNBA1NmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA2MzAwMTA2NDlaFw0yNTA3MDMwMjM4NDlaMDMxMTAvBgNV BAMTKDAyMEUxNEZFRDAwNTEzRDYzRkVGMUI1MEIyRDRBNTZBQjU3RTEzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhHVg2a5nNwvHxhCtwggjx99/ CaWIXXcVomG+S0/EWgMxKm0YQ9D7i7J4CRgfAMbdIgkfyguqOa551WD5wwB+GIkg XlhehNJzkqIvGhH7Jc1FzViE5UUs5ja5LWySkO8TOQI2C4ksVbBNcnPAkQzkUZya xel41hIFRresGNp0CYE4ePmS0lKHtQ/9IWh0v6UxTI7WykDqT/j1IVPWbFT9ltch dJcXbWVAXhxkcIi10BH670cR5Mm/mligI5cNkgEVWplt8sArayqRRjf/Cp2H3Bp3 CKYiMHavbnWeUGqkhdjgCFn2j4Ow9f5J/rAaIltZVVtA8OWdhtWGbCXEo2oJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAg4U/tAFE9Y/7xtQstSlarV+Ew0wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwftQNtDpSxJpQ8/kZOH2iX1Fh4aGzODyR9 fXkHm0FYeGCfA5dKSITKm6YldehCm/xs7RHD2M2JdT84L3qz4Fwerjug+5hRgT/I cTEVx1phoHT8yt14+kSmspMRIS025C2Ty+j+0neGE+gvwM85Fa/UJDZ1Y+5ZbnQ+ t2WHUK38ZvkRuigxSTJ/x+EFS/kAMdJyY9TLs92iugBJFpfhKnah/7fgxsTkcqTL KMxCFId7m2WpkJ39GtDXw5ydMZpxQ3GI/aBLg57EDRWGEslEB/nBIW+2gLtkCG7U OdbQyhjZgVkRFuQj4M0JpTuFMhl1ueZZ9exR4VW/6IHj5XLBErM= -----END CERTIFICATE-----Generated at Mon Jun 30 07:20:05 2025 by rpki-client