$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: bSNiqpDW+Gq+fEujsh2BmDe7ZMantVnaqSLeG8vlWBA= Subject key identifier: E8:6A:1A:81:3C:99:D5:E2:B0:74:C4:40:92:74:DA:1F:55:ED:23:CF Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 3181E2A4F8CF5E53292D1C89D78ABB0FB20834C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 046A Signing time: Tue 06 May 2025 18:00:39 +0000 Manifest this update: Tue 06 May 2025 17:55:39 +0000 Manifest next update: Sat 10 May 2025 03:34:39 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 2: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 3: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) 4: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: IPFmSBan9SPD2HHN1dXhsp1GQK6lgyFaPGDbD/5Kcb8=) 5: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 6: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 7: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:81:e2:a4:f8:cf:5e:53:29:2d:1c:89:d7:8a:bb:0f:b2:08:34:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: May 6 17:55:39 2025 GMT Not After : May 10 03:34:39 2025 GMT Subject: CN=E86A1A813C99D5E2B074C4409274DA1F55ED23CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:e9:70:53:6a:ea:32:04:75:a7:aa:1e:b0: d2:89:72:ba:04:6a:5e:dd:a3:95:06:f3:81:81:4d: 31:1d:88:37:c2:af:1e:26:45:ef:f4:0d:dd:76:e9: 30:9b:5c:26:f6:f8:af:c5:af:d1:82:20:e6:6b:a4: 4a:b4:08:bb:fe:48:16:e3:8a:cb:2e:ce:f6:68:aa: 6d:61:a9:cb:5c:c8:c6:1b:8b:7c:6c:a7:8a:b3:04: d8:0e:f0:1a:e1:d5:8c:54:9a:ce:b4:f4:01:a0:23: 4b:92:f3:fa:86:8e:5c:12:0f:a3:34:46:b1:92:7f: f0:58:19:9c:9d:d6:af:f8:a1:4e:0d:d2:27:a8:56: 08:ca:79:57:00:b4:eb:e8:d1:c2:8c:5e:c0:07:16: 9a:f2:35:1d:2d:de:a3:9c:fd:d1:59:4d:3f:ba:56: 9b:98:cb:68:35:6b:30:d2:84:b3:ce:37:5a:a6:3c: ab:ec:1e:a7:02:d7:1e:f8:b5:6f:12:c9:be:ba:ac: 3d:fc:02:50:e2:9f:0e:1f:8e:fb:10:1d:ac:4f:af: 01:4a:57:f8:4e:73:c6:1d:d4:5c:89:c7:28:e4:99: 87:27:28:a7:0b:95:6a:08:bb:15:68:88:d6:ae:36: 90:0e:e9:35:3a:79:cd:fa:98:d3:9d:df:01:a8:ad: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:1A:81:3C:99:D5:E2:B0:74:C4:40:92:74:DA:1F:55:ED:23:CF X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8f:86:72:ee:7c:0f:b1:81:cd:f8:08:ed:e6:e4:d3:64:fd: de:1c:fa:28:20:b4:75:fa:a2:47:dd:36:4f:16:e1:f8:a3:d2: 76:f2:a3:2c:14:c7:df:66:4e:73:b4:2e:31:54:5c:2c:97:ed: e0:0b:9b:db:b1:2b:c6:0b:78:c5:0a:8d:43:87:67:c5:ee:b3: 42:51:8c:6b:97:09:c9:96:50:7c:31:fa:d5:ee:d9:d7:71:8b: 17:9b:cc:94:37:a0:9b:48:11:45:97:ee:52:a2:a1:c0:a1:f5: d5:3f:0f:49:27:49:8c:9a:c9:ae:6a:5c:4e:1e:a1:1b:47:09: e4:17:05:66:d5:67:c3:fd:d5:35:84:e0:aa:f0:00:fa:bb:d4: 03:d2:a5:a9:59:8d:40:35:ad:55:b8:82:f3:b7:a7:28:8f:e8: f3:0d:8e:ed:29:ef:3c:0c:87:17:a3:b8:c2:c6:60:86:b0:7f: ac:40:09:f0:fc:57:09:11:8e:89:57:57:eb:8a:fe:06:85:01: 02:a0:e6:c3:a9:41:ed:33:73:3d:f0:dd:86:bc:7a:6a:71:02: b1:87:32:75:71:53:7d:6d:f1:a6:5b:c1:23:0e:2b:f5:32:63: 4f:42:5a:e7:b1:ad:a8:6f:99:ea:a6:f1:54:01:2f:14:d5:00: c0:99:89:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYHipPjPXlMpLRyJ14q7D7IINMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA1MDYxNzU1MzlaFw0yNTA1MTAwMzM0MzlaMDMxMTAvBgNV BAMTKEU4NkExQTgxM0M5OUQ1RTJCMDc0QzQ0MDkyNzREQTFGNTVFRDIzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91OlwU2rqMgR1p6oesNKJcroE al7do5UG84GBTTEdiDfCrx4mRe/0Dd126TCbXCb2+K/Fr9GCIOZrpEq0CLv+SBbj issuzvZoqm1hqctcyMYbi3xsp4qzBNgO8Brh1YxUms609AGgI0uS8/qGjlwSD6M0 RrGSf/BYGZyd1q/4oU4N0ieoVgjKeVcAtOvo0cKMXsAHFpryNR0t3qOc/dFZTT+6 VpuYy2g1azDShLPON1qmPKvsHqcC1x74tW8Syb66rD38AlDinw4fjvsQHaxPrwFK V/hOc8Yd1FyJxyjkmYcnKKcLlWoIuxVoiNauNpAO6TU6ec36mNOd3wGorTUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GoagTyZ1eKwdMRAknTaH1XtI88wHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuPhnLufA+xgc34CO3m5NNk/d4c+iggtHX6 okfdNk8W4fij0nbyoywUx99mTnO0LjFUXCyX7eALm9uxK8YLeMUKjUOHZ8Xus0JR jGuXCcmWUHwx+tXu2ddxixebzJQ3oJtIEUWX7lKiocCh9dU/D0knSYyaya5qXE4e oRtHCeQXBWbVZ8P91TWE4KrwAPq71APSpalZjUA1rVW4gvO3pyiP6PMNju0p7zwM hxejuMLGYIawf6xACfD8VwkRjolXV+uK/gaFAQKg5sOpQe0zcz3w3Ya8empxArGH MnVxU31t8aZbwSMOK/UyY09CWuexrahvmeqm8VQBLxTVAMCZiTA= -----END CERTIFICATE-----Generated at Thu May 8 20:45:44 2025 by rpki-client