$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: EY+b9YI87lOV7bt+5lLGGZ7pBojz/dZlUwQy1fCr5Ao= Subject key identifier: DD:8B:A9:AE:F4:02:40:01:B9:3A:17:CC:53:9F:51:47:83:8B:11:67 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 08A646B1F0A8681D8CA8064AA6CE6ABEBA4431FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 020E Signing time: Sun 19 Oct 2025 01:11:51 +0000 Manifest this update: Sun 19 Oct 2025 01:06:51 +0000 Manifest next update: Wed 22 Oct 2025 03:32:51 +0000 Files and hashes: 1: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 2: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: pHRG1798v1GCXQw3iLpSN7z900mtoEjYJDof4GOI1tU=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a6:46:b1:f0:a8:68:1d:8c:a8:06:4a:a6:ce:6a:be:ba:44:31:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Oct 19 01:06:51 2025 GMT Not After : Oct 22 03:32:51 2025 GMT Subject: CN=DD8BA9AEF4024001B93A17CC539F5147838B1167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b8:bb:f2:3e:1b:c2:45:98:b2:0c:82:3c:0c: 6e:bf:5e:e5:31:3d:6f:90:c6:e7:5e:a2:8c:f6:b2: b7:3c:3c:3c:75:5d:03:d8:06:b7:cf:7f:1f:bc:48: 41:39:c1:51:ef:d3:15:ad:73:0e:08:61:d0:9a:14: 87:18:6f:6a:7d:cc:ec:ab:44:1c:a7:46:56:43:74: 4f:f3:20:33:db:a5:15:12:09:a9:24:b7:f3:50:e4: 00:34:e9:8b:49:36:f0:19:c2:c8:80:8e:fa:ce:dd: f1:1d:b5:41:47:47:4b:40:1f:fd:38:64:eb:7a:98: c7:b9:ce:d1:12:44:9f:88:13:38:e7:f2:8e:ce:46: 1d:7a:ec:50:58:89:7c:66:d5:c6:6c:01:49:47:94: 7f:ae:cf:53:61:6b:a8:2d:f7:49:ba:91:85:48:03: 2e:b3:76:58:31:1b:12:d7:b8:d4:c2:44:05:56:50: 0d:c0:71:2a:62:4f:fd:8f:87:d6:bd:29:f5:2e:6d: 83:eb:b8:e9:27:b5:fc:cf:e1:38:5c:bb:cb:a0:c9: c3:f0:ed:05:68:91:14:40:79:98:46:42:45:4b:44: c1:06:0b:4a:bd:76:62:a2:8c:e9:91:b9:e9:30:4e: b7:c7:91:fa:8a:f0:fd:92:0f:5c:37:4d:b2:e1:cc: d0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:A9:AE:F4:02:40:01:B9:3A:17:CC:53:9F:51:47:83:8B:11:67 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a7:c5:61:5b:19:4a:80:f8:86:2b:a2:68:99:72:92:ed:60: 2c:53:ad:22:f6:17:10:28:ad:ca:ca:c7:90:b2:08:83:83:bb: fb:15:5c:43:3a:43:b1:04:1c:91:69:95:1a:b5:7f:58:34:e7: 2b:83:94:c4:b2:cb:e8:ba:de:fa:df:40:99:6a:1a:4d:fa:28: 7f:38:6a:9b:e7:65:13:51:7a:25:db:95:80:c6:28:cf:ac:b3: 2f:ee:1c:d1:25:0b:9d:fd:af:0b:84:c3:6b:e1:ec:6c:4d:1e: 81:48:49:f3:60:d3:43:20:ab:54:e3:c1:0a:a3:d2:b4:86:33: 5f:fd:b7:f2:22:93:8e:b1:33:7a:ff:04:4c:c8:04:7d:16:dd: d5:bf:52:24:d9:81:cc:7f:6f:39:38:81:1b:20:cb:3f:3b:7c: 5a:53:0b:c3:db:d1:e3:7b:d8:de:d8:8a:33:4a:78:3c:bd:a5: 24:ff:1c:43:39:78:d5:a7:c5:7d:37:12:d3:f8:92:7b:dd:d1: 61:4d:42:cd:f6:59:39:a0:29:a0:a4:60:6c:27:af:50:d3:c0: f6:6d:91:52:eb:dc:1d:c8:a9:5c:36:f7:19:d4:d1:0a:73:95: d4:db:b0:73:48:cf:8a:dc:f2:1c:aa:c9:b1:c7:f8:a4:29:2a: 6d:7e:6e:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKZGsfCoaB2MqAZKps5qvrpEMf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTEwMTkwMTA2NTFaFw0yNTEwMjIwMzMyNTFaMDMxMTAvBgNV BAMTKEREOEJBOUFFRjQwMjQwMDFCOTNBMTdDQzUzOUY1MTQ3ODM4QjExNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpuLvyPhvCRZiyDII8DG6/XuUx PW+Qxudeooz2src8PDx1XQPYBrfPfx+8SEE5wVHv0xWtcw4IYdCaFIcYb2p9zOyr RBynRlZDdE/zIDPbpRUSCakkt/NQ5AA06YtJNvAZwsiAjvrO3fEdtUFHR0tAH/04 ZOt6mMe5ztESRJ+IEzjn8o7ORh167FBYiXxm1cZsAUlHlH+uz1Nha6gt90m6kYVI Ay6zdlgxGxLXuNTCRAVWUA3AcSpiT/2Ph9a9KfUubYPruOkntfzP4Thcu8ugycPw 7QVokRRAeZhGQkVLRMEGC0q9dmKijOmRuekwTrfHkfqK8P2SD1w3TbLhzNA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YuprvQCQAG5OhfMU59RR4OLEWcwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWnxWFbGUqA+IYromiZcpLtYCxTrSL2FxAo rcrKx5CyCIODu/sVXEM6Q7EEHJFplRq1f1g05yuDlMSyy+i63vrfQJlqGk36KH84 apvnZRNReiXblYDGKM+ssy/uHNElC539rwuEw2vh7GxNHoFISfNg00Mgq1TjwQqj 0rSGM1/9t/Iik46xM3r/BEzIBH0W3dW/UiTZgcx/bzk4gRsgyz87fFpTC8Pb0eN7 2N7YijNKeDy9pST/HEM5eNWnxX03EtP4knvd0WFNQs32WTmgKaCkYGwnr1DTwPZt kVLr3B3IqVw29xnU0QpzldTbsHNIz4rc8hyqybHH+KQpKm1+bgw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:43:06 2025 by rpki-client