$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: RfRXKcdl5nISW1LJCX10WSpHBJswApD1CtIaCYnhuTc= Subject key identifier: 72:70:11:BB:BE:27:86:49:34:83:40:43:0A:50:4D:6B:20:36:10:FD Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 587E6F27D7CA45B7833D397E0F2809F9DDF1C00A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01C6 Signing time: Sun 11 May 2025 07:01:50 +0000 Manifest this update: Sun 11 May 2025 06:56:50 +0000 Manifest next update: Wed 14 May 2025 13:07:50 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: pyzH9JDXTdf8m5LEXvVyxhz0uYtIxSnk0MOggVKheHE=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: MrMq1vmSsjx8+60pgP4jBoPEasKC/g1DeWLVozuft0A=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: zBmW9Bk2lLkpCt+UwsQR1DXBR9F91BW/SX5QBgtlozE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 13:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7e:6f:27:d7:ca:45:b7:83:3d:39:7e:0f:28:09:f9:dd:f1:c0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: May 11 06:56:50 2025 GMT Not After : May 14 13:07:50 2025 GMT Subject: CN=727011BBBE278649348340430A504D6B203610FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:90:54:17:67:2e:fd:26:e6:a2:54:a1:88: ce:35:a0:8e:77:66:c8:ea:13:fc:b2:64:ea:0c:6e: ce:19:f5:15:5e:41:3d:49:d1:99:9e:36:0f:1e:f3: 9d:26:39:4f:cf:31:9a:ce:86:f6:a0:fd:bb:a7:8d: 10:75:4b:08:75:31:96:cd:e1:25:cb:d9:d9:29:a7: 0c:9f:a4:88:31:ca:73:0e:6a:bb:4b:09:ae:a1:fd: ab:c7:ca:c9:86:60:7c:4a:07:eb:55:a2:34:0b:96: 4e:fb:41:0e:ff:38:37:a6:4e:0d:89:89:54:b5:9c: c7:32:73:b3:72:82:e8:f4:f2:6d:55:e4:72:b7:0d: 5c:29:73:08:33:8c:ef:cd:fd:e9:cb:1f:48:00:c0: 10:be:30:8b:63:a3:da:b3:e8:97:f1:78:37:30:0b: ab:86:67:58:ef:90:f3:cf:24:d8:f5:08:4d:4e:46: 21:6b:4c:3e:0c:78:21:c3:26:36:d5:71:f5:50:16: 17:88:b2:ef:5e:64:a6:e7:f9:c4:17:b3:e7:23:84: 24:1a:50:65:64:05:e9:43:3b:ab:27:04:9e:d5:bd: 58:06:c0:b4:fc:49:99:b9:8c:f0:74:5a:93:58:f9: 2b:22:c0:56:15:24:17:f2:b0:d3:ce:e7:7c:0a:06: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:70:11:BB:BE:27:86:49:34:83:40:43:0A:50:4D:6B:20:36:10:FD X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:67:29:bf:d0:4a:c8:3b:5d:d6:12:d7:9c:76:fa:06:0a:83: 74:cc:08:48:33:d0:36:b7:f0:7d:0b:c5:a1:04:9d:3b:a9:19: 85:c7:26:be:84:18:3e:11:48:f4:1f:89:f7:99:3a:dc:a6:13: 21:6b:6e:15:cc:c6:14:65:d0:59:a4:e8:cd:40:1d:af:a1:79: 9b:7b:48:3c:53:e7:6f:82:1e:40:04:fb:aa:e2:b0:69:26:06: be:6b:a1:20:b0:77:8e:ae:bc:3c:e5:f1:f9:2e:bc:32:75:0f: 53:fa:a9:47:a1:55:a8:a3:fe:23:26:e2:6d:b4:04:55:93:81: 23:2d:39:75:44:8a:c3:76:b4:6b:06:cf:35:17:3c:96:b1:4f: 78:c8:bf:16:26:36:b7:cb:14:61:eb:2a:2b:37:08:2a:19:aa: 09:8c:ce:99:99:18:9d:63:f3:5b:85:aa:50:6b:da:5f:3f:17: fe:d3:58:be:f2:a1:e7:3e:e8:cb:e0:04:a3:b7:21:b8:f4:a7: a9:8d:5e:d9:65:33:17:b6:38:18:06:28:8d:9f:07:eb:34:6b: a6:d5:78:8e:1d:54:7a:61:cd:d9:03:57:73:40:6d:f2:97:d4: 21:ce:93:f3:46:b5:f5:fd:bb:4b:73:7d:ae:b4:a6:20:06:e0: c8:8b:b2:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWH5vJ9fKRbeDPTl+DygJ+d3xwAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA1MTEwNjU2NTBaFw0yNTA1MTQxMzA3NTBaMDMxMTAvBgNV BAMTKDcyNzAxMUJCQkUyNzg2NDkzNDgzNDA0MzBBNTA0RDZCMjAzNjEwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHpBUF2cu/SbmolShiM41oI53 ZsjqE/yyZOoMbs4Z9RVeQT1J0ZmeNg8e850mOU/PMZrOhvag/bunjRB1Swh1MZbN 4SXL2dkppwyfpIgxynMOartLCa6h/avHysmGYHxKB+tVojQLlk77QQ7/ODemTg2J iVS1nMcyc7Nyguj08m1V5HK3DVwpcwgzjO/N/enLH0gAwBC+MItjo9qz6JfxeDcw C6uGZ1jvkPPPJNj1CE1ORiFrTD4MeCHDJjbVcfVQFheIsu9eZKbn+cQXs+cjhCQa UGVkBelDO6snBJ7VvVgGwLT8SZm5jPB0WpNY+SsiwFYVJBfysNPO53wKBvFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnARu74nhkk0g0BDClBNayA2EP0wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1nKb/QSsg7XdYS15x2+gYKg3TMCEgz0Da3 8H0LxaEEnTupGYXHJr6EGD4RSPQfifeZOtymEyFrbhXMxhRl0Fmk6M1AHa+heZt7 SDxT52+CHkAE+6risGkmBr5roSCwd46uvDzl8fkuvDJ1D1P6qUehVaij/iMm4m20 BFWTgSMtOXVEisN2tGsGzzUXPJaxT3jIvxYmNrfLFGHrKis3CCoZqgmMzpmZGJ1j 81uFqlBr2l8/F/7TWL7yoec+6MvgBKO3Ibj0p6mNXtllMxe2OBgGKI2fB+s0a6bV eI4dVHphzdkDV3NAbfKX1CHOk/NGtfX9u0tzfa60piAG4MiLsus= -----END CERTIFICATE-----Generated at Mon May 12 07:46:15 2025 by rpki-client