$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: TzgwF5Wdmx1MflI0AdhvjZI2cQPEHMlz7qW8lBPKKo8= Subject key identifier: AB:EF:A2:6C:A0:F6:19:B9:07:52:D7:FF:F6:67:20:8F:C0:6D:BC:0E Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 399C384B9B8677E0C0744712EC3B5A9C799878B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 0481 Signing time: Sun 29 Jun 2025 11:40:40 +0000 Manifest this update: Sun 29 Jun 2025 11:35:40 +0000 Manifest next update: Wed 02 Jul 2025 20:26:40 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 2: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 3: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) 4: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) 5: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 6: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 7: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: Sgh6D0AY9jw9015D4A/EKOgKGSM0AbERnU3Xj2If2tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9c:38:4b:9b:86:77:e0:c0:74:47:12:ec:3b:5a:9c:79:98:78:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Jun 29 11:35:40 2025 GMT Not After : Jul 2 20:26:40 2025 GMT Subject: CN=ABEFA26CA0F619B90752D7FFF667208FC06DBC0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bb:af:21:e3:45:8a:cd:15:1e:8c:81:14:35: 79:da:3b:40:d6:2a:c1:3a:50:ba:e7:7b:41:03:3d: 1f:8a:3a:4b:9c:f9:0c:60:97:03:35:56:f7:37:51: 6f:03:80:93:8b:e0:8b:1d:ee:c4:0a:f1:a0:4b:6f: 1d:70:2c:16:37:e7:e0:22:4f:f7:b1:60:09:ad:b1: d0:b0:da:f3:9b:c9:57:13:86:25:89:5c:69:a6:fe: 51:18:2e:f7:6a:95:d7:bb:73:7e:c4:09:f6:8e:9f: ef:dc:0e:73:77:ee:30:94:7a:73:c9:36:0d:f7:9b: 77:f5:8b:b1:54:6d:fc:d6:cd:d1:3e:f6:15:51:0c: 87:96:6a:59:6c:cb:ae:07:da:c3:8b:d8:e7:ec:a9: f8:49:c7:7b:fc:f0:14:1c:cb:bc:be:08:b4:21:b0: db:40:15:f8:8d:7f:9e:df:51:b9:ec:4e:75:82:64: ff:16:d6:98:23:6b:95:e7:0f:ef:8e:a0:92:ab:10: 87:52:e6:cb:d8:b3:bd:7b:78:9a:f2:03:91:09:3a: 30:25:50:04:11:8b:4a:1b:59:e1:6c:01:d4:bd:04: 66:da:6a:72:6a:f8:e8:03:18:9e:c0:bf:2c:2f:f4: 9e:6e:ec:69:c1:c1:24:a3:4a:95:86:9b:d7:04:94: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EF:A2:6C:A0:F6:19:B9:07:52:D7:FF:F6:67:20:8F:C0:6D:BC:0E X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:57:d8:16:58:5c:d6:fd:17:f4:da:03:eb:f5:80:4f:15: f3:86:d1:43:d9:b9:96:b4:a2:7a:bc:c8:2d:67:39:f4:ec:14: e6:d1:d0:43:75:08:01:82:04:28:57:8e:72:09:0a:a9:e8:e4: 16:bc:e3:b1:96:9c:c0:f3:12:3b:48:2d:32:d3:91:75:e8:41: 81:61:8d:6e:f7:ac:f0:65:ef:7c:d2:97:86:7e:01:7e:e8:78: 3c:be:a1:52:36:68:63:7c:4f:ce:b3:9b:46:ec:85:1a:34:74: 3b:74:05:1c:40:27:f5:e6:d6:2a:fb:94:d1:7b:35:7d:53:73: 2f:f8:9f:7c:ab:57:09:79:cf:ed:d7:e0:65:b5:7e:3c:0f:53: a5:f0:34:49:31:df:bb:d5:f8:12:59:1d:2e:b5:f0:eb:cc:f7: d2:f0:b7:37:48:4f:fb:28:68:11:7b:cd:c4:67:d7:f8:c8:9b: 73:ba:c6:b7:0b:e5:d0:76:0f:a7:2b:26:6d:3b:ae:1e:cf:38: b1:14:91:e3:6e:0d:09:53:c4:9c:32:7b:30:23:d8:2b:a4:a5: 00:86:e2:2a:43:ec:34:2f:a5:a5:ff:bc:68:7f:80:88:e1:d7: 20:be:46:d2:b9:f2:e1:50:86:8c:a9:d8:3d:b9:a7:29:39:65: ab:2d:f3:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZw4S5uGd+DAdEcS7DtanHmYeLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA2MjkxMTM1NDBaFw0yNTA3MDIyMDI2NDBaMDMxMTAvBgNV BAMTKEFCRUZBMjZDQTBGNjE5QjkwNzUyRDdGRkY2NjcyMDhGQzA2REJDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXu68h40WKzRUejIEUNXnaO0DW KsE6ULrne0EDPR+KOkuc+QxglwM1Vvc3UW8DgJOL4Isd7sQK8aBLbx1wLBY35+Ai T/exYAmtsdCw2vObyVcThiWJXGmm/lEYLvdqlde7c37ECfaOn+/cDnN37jCUenPJ Ng33m3f1i7FUbfzWzdE+9hVRDIeWallsy64H2sOL2OfsqfhJx3v88BQcy7y+CLQh sNtAFfiNf57fUbnsTnWCZP8W1pgja5XnD++OoJKrEIdS5svYs717eJryA5EJOjAl UAQRi0obWeFsAdS9BGbaanJq+OgDGJ7Avywv9J5u7GnBwSSjSpWGm9cElLcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq++ibKD2GbkHUtf/9mcgj8BtvA4wHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU9V9gWWFzW/Rf02gPr9YBPFfOG0UPZuZa0 onq8yC1nOfTsFObR0EN1CAGCBChXjnIJCqno5Ba847GWnMDzEjtILTLTkXXoQYFh jW73rPBl73zSl4Z+AX7oeDy+oVI2aGN8T86zm0bshRo0dDt0BRxAJ/Xm1ir7lNF7 NX1Tcy/4n3yrVwl5z+3X4GW1fjwPU6XwNEkx37vV+BJZHS618OvM99LwtzdIT/so aBF7zcRn1/jIm3O6xrcL5dB2D6crJm07rh7POLEUkeNuDQlTxJwyezAj2CukpQCG 4ipD7DQvpaX/vGh/gIjh1yC+RtK58uFQhoyp2D25pyk5Zast86c= -----END CERTIFICATE-----Generated at Mon Jun 30 13:15:12 2025 by rpki-client