$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: PtyDZbkChqayw5W0uToXr2o/cObrz/etIDwCiL2qsCU= Subject key identifier: EA:5D:E1:1B:3B:69:B2:9A:76:0F:71:14:12:3E:3D:44:5A:F0:BD:FD Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 89B6E86DF376D3BC036F9F3E26EC32645398E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 01F5 Signing time: Fri 22 Aug 2025 12:01:56 +0000 Manifest this update: Fri 22 Aug 2025 11:56:56 +0000 Manifest next update: Mon 25 Aug 2025 20:31:56 +0000 Files and hashes: 1: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: Qrym0ehHbg88AVnU/tjyxXVW1mp9n/NVUjzfvqF+kwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89:b6:e8:6d:f3:76:d3:bc:03:6f:9f:3e:26:ec:32:64:53:98:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Aug 22 11:56:56 2025 GMT Not After : Aug 25 20:31:56 2025 GMT Subject: CN=EA5DE11B3B69B29A760F7114123E3D445AF0BDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:57:93:c1:a8:ee:d0:81:28:5c:26:78:df: 55:56:c6:67:50:54:b4:87:e3:aa:d3:fb:fb:d4:f4: 83:9e:4c:66:31:28:b0:43:22:76:b7:9e:ca:57:da: 4e:5e:9a:21:cc:2b:f7:14:66:b6:c0:b4:50:7a:99: e8:83:60:a3:2e:2f:a8:56:d0:74:2e:e4:6c:a6:3a: 27:d8:fd:dc:8a:e2:84:b8:82:29:5c:a3:44:62:66: bf:50:6f:c7:d5:34:c4:e8:59:d4:1a:c5:d2:08:16: 89:98:63:cf:bf:56:c3:b9:29:a4:50:bb:12:36:2c: f8:f3:7c:b1:e3:42:8e:1c:ea:24:4d:ed:92:b4:6e: 2e:d2:fd:a0:2c:94:65:e9:d6:c3:76:98:6e:87:94: 67:78:e0:4a:eb:20:57:a7:3c:e4:96:d5:6e:5d:de: d3:5f:73:8f:a5:7a:83:6b:d4:ec:e5:f0:3d:3a:0c: 6c:21:2b:72:a7:33:da:ae:3d:ec:bb:6c:8e:19:08: 5b:40:83:a1:f4:73:6e:a0:e5:11:de:7d:72:f7:30: b0:67:c0:67:1a:44:8b:ba:0f:9e:63:60:57:59:5e: 30:29:7a:1a:4e:6e:95:9c:bf:7a:0a:3b:91:9b:b3: e6:6c:a2:7f:d6:22:2b:bc:fd:6a:f2:14:25:d3:78: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5D:E1:1B:3B:69:B2:9A:76:0F:71:14:12:3E:3D:44:5A:F0:BD:FD X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:af:99:e0:ce:77:ad:a3:56:d0:ec:a0:55:58:3e:85:7e:07: c2:64:45:9c:a7:7a:ef:d4:19:93:82:bd:cf:21:47:e1:87:ad: 10:63:e7:76:ef:db:ea:70:ae:47:aa:f7:65:f9:32:48:93:7c: e4:ac:6b:15:78:b9:3d:7e:1b:65:ef:c6:92:29:ea:4f:19:e4: 97:a7:a4:11:43:ae:a5:76:f1:ae:bc:48:60:93:80:0c:b1:ed: 23:b5:fd:cf:ae:e1:fb:8f:07:05:e0:b8:35:2b:91:5c:23:1c: 41:ea:1f:16:9a:63:ff:24:a1:ec:22:9c:ed:57:f6:84:9b:4a: 8d:2a:c9:c1:e2:62:14:62:65:b9:92:de:5a:29:d3:e5:ae:bc: 8d:e5:79:14:e6:61:22:22:4e:f2:8d:64:fc:44:ca:b2:f5:ec: f2:4a:09:1c:1e:d7:fd:23:45:42:22:64:20:05:64:d1:88:33: d0:c7:2a:bd:53:90:12:13:c0:fc:46:8b:ba:10:3f:80:24:6c: ff:5e:5e:37:04:41:3d:00:ef:cf:33:e6:fa:0d:68:e1:32:80: ba:10:da:48:59:15:91:69:e1:b0:e3:10:ec:4b:2e:22:ed:45: 9f:48:fa:53:5f:05:e1:f2:26:ca:74:21:ad:8d:46:6f:8f:18: 03:b9:ed:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIm26G3zdtO8A2+fPibsMmRTmOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTA4MjIxMTU2NTZaFw0yNTA4MjUyMDMxNTZaMDMxMTAvBgNV BAMTKEVBNURFMTFCM0I2OUIyOUE3NjBGNzExNDEyM0UzRDQ0NUFGMEJERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXFeTwaju0IEoXCZ431VWxmdQ VLSH46rT+/vU9IOeTGYxKLBDIna3nspX2k5emiHMK/cUZrbAtFB6meiDYKMuL6hW 0HQu5GymOifY/dyK4oS4gilco0RiZr9Qb8fVNMToWdQaxdIIFomYY8+/VsO5KaRQ uxI2LPjzfLHjQo4c6iRN7ZK0bi7S/aAslGXp1sN2mG6HlGd44ErrIFenPOSW1W5d 3tNfc4+leoNr1Ozl8D06DGwhK3KnM9quPey7bI4ZCFtAg6H0c26g5RHefXL3MLBn wGcaRIu6D55jYFdZXjApehpObpWcv3oKO5Gbs+Zson/WIiu8/WryFCXTeOm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6l3hGztpspp2D3EUEj49RFrwvf0wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyvmeDOd62jVtDsoFVYPoV+B8JkRZyneu/U GZOCvc8hR+GHrRBj53bv2+pwrkeq92X5MkiTfOSsaxV4uT1+G2XvxpIp6k8Z5Jen pBFDrqV28a68SGCTgAyx7SO1/c+u4fuPBwXguDUrkVwjHEHqHxaaY/8koewinO1X 9oSbSo0qycHiYhRiZbmS3lop0+WuvI3leRTmYSIiTvKNZPxEyrL17PJKCRwe1/0j RUIiZCAFZNGIM9DHKr1TkBITwPxGi7oQP4AkbP9eXjcEQT0A788z5voNaOEygLoQ 2khZFZFp4bDjEOxLLiLtRZ9I+lNfBeHyJsp0Ia2NRm+PGAO57UQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:34 2025 by rpki-client