$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: GzNK66kU9rvrhBQQCKEw48BdK7QCgiSF/72rFHHNsJ8= Subject key identifier: CC:06:71:FF:F8:C9:2A:B8:60:1E:E4:C4:3D:27:0F:FD:09:70:0E:A7 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 1560A5BB23BF9378C98B140AF033C09E4FBD89FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 049B Signing time: Sat 23 Aug 2025 02:30:41 +0000 Manifest this update: Sat 23 Aug 2025 02:25:41 +0000 Manifest next update: Tue 26 Aug 2025 04:07:41 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: laLJUGonDC43HjG3ZGNawYIEQ9ln67j38UngxvM2zgQ=) 2: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 3: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: EaUrJkmTY+ZNbbSALDHMTY9uB9PqsjuHgqm4JiL2zcA=) 4: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 5: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) 6: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Hp5JXQrEPxCMGP++NvFxm2uvusi9TtoQlGvA7/UOH1I=) 7: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: MfxGUIrhtjjGajjX90ABbBqTVuaaEFP6XuBr1Yslsx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:60:a5:bb:23:bf:93:78:c9:8b:14:0a:f0:33:c0:9e:4f:bd:89:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Aug 23 02:25:41 2025 GMT Not After : Aug 26 04:07:41 2025 GMT Subject: CN=CC0671FFF8C92AB8601EE4C43D270FFD09700EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:6b:d0:37:7d:b3:72:35:d0:ab:0d:77:d7: bc:40:1b:8f:69:22:52:19:2f:2e:70:11:3f:d4:b6: 1a:5f:61:11:b8:14:9f:67:57:bd:b2:ec:34:f8:14: f0:1a:d9:a1:72:35:8a:dd:aa:fc:39:f0:4b:c2:b3: cf:5e:6c:68:61:46:14:c9:fa:66:4a:11:fd:7d:d6: 57:e4:ed:c5:2f:f5:07:66:a0:5a:1c:ec:4d:9e:4c: a1:d7:6b:9b:6c:b5:56:bc:09:a8:2e:eb:1e:3e:b6: ae:99:66:79:7b:3c:c9:79:08:02:e4:c1:c3:d8:55: ee:f8:26:fc:a1:1e:62:25:95:9e:f9:5c:9b:9a:70: 61:7c:42:4e:5b:df:fc:bf:60:be:bc:c9:36:5e:d6: 90:59:af:7c:45:1b:1a:29:d7:9d:7a:a0:1b:56:cd: 58:50:78:e1:b5:67:8c:54:77:70:d6:0a:c8:c8:fa: 55:c8:24:44:f0:83:eb:b5:80:e2:c7:0a:44:9c:9b: 71:2e:84:ae:31:57:10:19:28:b6:27:8e:ea:fc:3d: 5e:4f:8c:65:74:1d:e2:5a:0a:0c:98:d6:71:32:c8: 69:26:ef:33:35:fb:f9:71:24:c2:a1:97:70:23:7e: d5:e1:41:10:6f:9e:fc:23:ab:b7:6e:d2:27:df:47: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:06:71:FF:F8:C9:2A:B8:60:1E:E4:C4:3D:27:0F:FD:09:70:0E:A7 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:93:1c:5e:43:08:0a:2b:98:dc:74:33:0d:89:d1:e0:ca:4c: a1:7c:a7:18:33:57:a7:6d:27:d4:b3:f4:84:6a:70:f9:28:62: a6:43:fa:99:f2:03:51:95:da:fe:ca:57:60:59:59:67:bd:eb: 3f:d2:1f:6c:92:47:66:17:65:5d:17:9c:6c:95:71:96:ee:dd: ac:92:a7:6c:4c:55:98:26:33:8b:c0:d5:48:89:e5:43:fe:e2: 3d:ed:e5:60:24:03:1a:2d:2c:fe:54:3c:00:79:9b:aa:50:ee: c0:16:7e:79:dc:22:c0:10:d4:9f:27:db:1b:ee:e4:fe:9a:1d: 82:4b:7a:4c:d3:8b:3c:92:45:29:1e:36:de:66:7a:93:6d:b6: 8d:1e:73:08:0e:2f:5e:bd:3e:7c:12:04:0f:40:96:3a:05:3d: 93:b0:01:b1:95:34:7c:78:5d:2b:8a:18:a4:40:bc:85:de:5f: 77:35:69:f9:de:ed:cc:90:f4:b4:7e:2a:6d:5a:b9:b3:98:2d: 45:96:46:c7:b8:7d:44:4d:c8:ba:cf:a9:a3:6f:a0:91:44:ab: a9:71:e5:29:14:69:a6:1a:cb:dc:bd:45:76:9f:e1:83:4c:21: 98:8b:7c:43:62:77:41:42:76:73:49:c4:02:2e:08:e4:45:82: f9:b2:fa:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWCluyO/k3jJixQK8DPAnk+9if8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA4MjMwMjI1NDFaFw0yNTA4MjYwNDA3NDFaMDMxMTAvBgNV BAMTKENDMDY3MUZGRjhDOTJBQjg2MDFFRTRDNDNEMjcwRkZEMDk3MDBFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrWvQN32zcjXQqw1317xAG49p IlIZLy5wET/UthpfYRG4FJ9nV72y7DT4FPAa2aFyNYrdqvw58EvCs89ebGhhRhTJ +mZKEf191lfk7cUv9QdmoFoc7E2eTKHXa5tstVa8Cagu6x4+tq6ZZnl7PMl5CALk wcPYVe74JvyhHmIllZ75XJuacGF8Qk5b3/y/YL68yTZe1pBZr3xFGxop1516oBtW zVhQeOG1Z4xUd3DWCsjI+lXIJETwg+u1gOLHCkScm3EuhK4xVxAZKLYnjur8PV5P jGV0HeJaCgyY1nEyyGkm7zM1+/lxJMKhl3AjftXhQRBvnvwjq7du0iffR6HnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzAZx//jJKrhgHuTEPScP/QlwDqcwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWTHF5DCAormNx0Mw2J0eDKTKF8pxgzV6dt J9Sz9IRqcPkoYqZD+pnyA1GV2v7KV2BZWWe96z/SH2ySR2YXZV0XnGyVcZbu3ayS p2xMVZgmM4vA1UiJ5UP+4j3t5WAkAxotLP5UPAB5m6pQ7sAWfnncIsAQ1J8n2xvu 5P6aHYJLekzTizySRSkeNt5mepNtto0ecwgOL169PnwSBA9AljoFPZOwAbGVNHx4 XSuKGKRAvIXeX3c1afne7cyQ9LR+Km1aubOYLUWWRse4fURNyLrPqaNvoJFEq6lx 5SkUaaYay9y9RXaf4YNMIZiLfENid0FCdnNJxAIuCORFgvmy+us= -----END CERTIFICATE-----Generated at Sat Aug 23 19:45:41 2025 by rpki-client