$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: iwRKDsK08qkdjnDn8WdmdAjeMJPLxOE1/UjqT8CyGQ4= Subject key identifier: AE:8A:45:CA:40:D1:E9:17:84:02:66:C6:46:8D:29:C0:7E:D2:5D:66 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 1B2B0092D21FF3619378225CE73DC38D62263639 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04CF Signing time: Fri 09 May 2025 19:01:49 +0000 Manifest this update: Fri 09 May 2025 18:56:49 +0000 Manifest next update: Tue 13 May 2025 05:22:49 +0000 Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: VKrOH94Sx4hdk0ZoUNebjwA2pLbxGrXWZu0EtIDO+Oo=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: VmRTNF6O8M+AnB/zvqxaffecroR7hC8t3eEDnSwP8hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 05:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2b:00:92:d2:1f:f3:61:93:78:22:5c:e7:3d:c3:8d:62:26:36:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: May 9 18:56:49 2025 GMT Not After : May 13 05:22:49 2025 GMT Subject: CN=AE8A45CA40D1E917840266C6468D29C07ED25D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b8:e6:ec:5b:b7:fd:f3:2a:d6:98:3a:20:3c: 83:1f:0e:73:8a:41:78:24:09:e2:35:2a:f8:d2:59: 3b:29:03:3b:cd:d2:3b:f9:6f:6a:f5:39:ee:bd:45: bb:f3:87:c4:62:6c:a2:6c:8b:4d:15:df:01:a1:59: db:de:f1:ab:e1:23:48:35:78:44:1d:cb:83:1c:e0: 32:9d:8b:15:6d:1e:35:40:6f:69:02:39:7c:6b:7d: 9e:3e:0f:4d:70:72:bf:c2:b1:ee:04:53:ef:b1:8b: f1:8d:55:82:02:e4:8b:d2:1f:72:a7:e4:79:c5:08: 2e:59:dd:b3:fc:c2:7a:66:0a:04:0f:6c:91:31:e6: fd:62:a1:d1:81:1f:8a:38:2a:30:f0:d1:b5:4a:b4: 44:46:97:98:1b:72:04:dd:d9:df:f3:ee:e9:d5:59: b8:c5:3a:3b:79:16:3f:0c:7f:46:65:75:85:a4:fe: fa:6b:24:18:f8:17:82:7e:7b:25:db:91:fa:0b:75: 2b:f5:22:e8:21:29:8e:fe:bf:0c:d6:a5:12:9c:63: 1c:4e:09:9f:ad:c2:fe:ed:73:11:a1:a3:75:50:ef: 73:5c:93:95:bc:cb:93:a3:e4:6c:f3:3d:0c:75:e0: 9f:41:73:8c:c3:af:d1:9a:96:81:fc:9c:8d:2d:ce: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8A:45:CA:40:D1:E9:17:84:02:66:C6:46:8D:29:C0:7E:D2:5D:66 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b6:64:40:8f:44:53:f9:28:6d:d3:9d:fd:8b:ab:8a:98:8c: 93:21:d3:43:e1:60:04:a1:88:c0:43:96:1d:2a:16:09:41:c7: 99:23:ea:6a:84:4b:e0:a6:a6:99:13:aa:fd:02:35:bd:79:b9: a0:b2:28:97:07:d1:16:b7:89:e2:d0:9f:f2:30:42:7d:db:85: f3:c5:f0:9a:85:67:65:07:e3:4f:f6:d9:e6:8f:ff:20:1f:16: 61:5b:66:fe:2d:ea:d0:c0:67:00:bc:ca:0f:cf:6a:94:68:34: 95:24:33:37:f0:2a:4c:a5:88:7c:44:5b:b1:8c:fc:3d:a9:a5: 2f:9c:23:cf:76:59:fc:58:b7:64:f5:ac:34:9e:36:60:ed:4f: d3:f1:2b:ad:af:59:23:62:ad:9e:58:6d:0b:8a:94:89:58:3b: 85:3a:b4:7d:8e:91:9d:52:d2:28:ad:5e:fb:72:37:a7:09:14: 4e:a2:95:fe:23:7e:2c:35:72:7b:81:ba:8e:41:04:e1:b6:b3: 93:61:6f:5c:a2:fb:b4:03:d4:8c:52:8e:69:f2:18:6e:63:92: b0:fa:0e:ea:54:e2:09:c8:0e:44:30:fb:f9:f3:88:31:cb:0a: 11:a4:74:a8:3b:b5:0e:4f:3b:83:f0:e7:cd:6a:fa:4a:21:a2: ef:31:ce:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGysAktIf82GTeCJc5z3DjWImNjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA1MDkxODU2NDlaFw0yNTA1MTMwNTIyNDlaMDMxMTAvBgNV BAMTKEFFOEE0NUNBNDBEMUU5MTc4NDAyNjZDNjQ2OEQyOUMwN0VEMjVENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuObsW7f98yrWmDogPIMfDnOK QXgkCeI1KvjSWTspAzvN0jv5b2r1Oe69Rbvzh8RibKJsi00V3wGhWdve8avhI0g1 eEQdy4Mc4DKdixVtHjVAb2kCOXxrfZ4+D01wcr/Cse4EU++xi/GNVYIC5IvSH3Kn 5HnFCC5Z3bP8wnpmCgQPbJEx5v1iodGBH4o4KjDw0bVKtERGl5gbcgTd2d/z7unV WbjFOjt5Fj8Mf0ZldYWk/vprJBj4F4J+eyXbkfoLdSv1IughKY7+vwzWpRKcYxxO CZ+twv7tcxGho3VQ73Nck5W8y5Oj5GzzPQx14J9Bc4zDr9GaloH8nI0tzpFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUropFykDR6ReEAmbGRo0pwH7SXWYwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq2ZECPRFP5KG3Tnf2Lq4qYjJMh00PhYASh iMBDlh0qFglBx5kj6mqES+CmppkTqv0CNb15uaCyKJcH0Ra3ieLQn/IwQn3bhfPF 8JqFZ2UH40/22eaP/yAfFmFbZv4t6tDAZwC8yg/PapRoNJUkMzfwKkyliHxEW7GM /D2ppS+cI892WfxYt2T1rDSeNmDtT9PxK62vWSNirZ5YbQuKlIlYO4U6tH2OkZ1S 0iitXvtyN6cJFE6ilf4jfiw1cnuBuo5BBOG2s5Nhb1yi+7QD1IxSjmnyGG5jkrD6 DupU4gnIDkQw+/nziDHLChGkdKg7tQ5PO4Pw581q+kohou8xzuY= -----END CERTIFICATE-----Generated at Sat May 10 11:30:14 2025 by rpki-client