$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: go7szVOHL9k0luR4dhWDjvgU15cyo5d2RiQdMkqRYLA= Subject key identifier: A1:39:0E:2F:0C:28:F2:69:01:04:BB:95:49:F1:B9:E5:B4:FA:FB:33 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 3A0DEABEC72D010211419042F5622EE695B207F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04E6 Signing time: Sat 28 Jun 2025 20:31:51 +0000 Manifest this update: Sat 28 Jun 2025 20:26:51 +0000 Manifest next update: Wed 02 Jul 2025 00:26:51 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: MAlNJ2rHkAjtcLgsZxhYkxMzIQko6mhXKI6WI85LKS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0d:ea:be:c7:2d:01:02:11:41:90:42:f5:62:2e:e6:95:b2:07:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Jun 28 20:26:51 2025 GMT Not After : Jul 2 00:26:51 2025 GMT Subject: CN=A1390E2F0C28F2690104BB9549F1B9E5B4FAFB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:2a:89:79:05:75:64:7d:34:cd:32:18:11: c0:ed:c8:87:f8:e8:46:60:b4:10:52:0c:01:c3:e7: 5c:be:34:1b:34:98:23:52:a9:e8:e9:bb:ae:29:ee: c8:16:c3:ff:56:83:76:f5:ed:21:80:9c:26:6e:d9: 5f:03:4f:a2:11:81:44:c5:88:9c:d3:10:44:17:59: 42:0b:1e:5c:e8:c3:6d:c0:f0:63:6f:fd:0e:20:be: a3:4d:3a:ef:80:c4:d1:12:91:21:dd:c5:d9:82:2f: d2:6d:44:05:28:cd:97:06:34:28:2e:62:f3:14:0e: 9b:e4:df:79:ab:a2:94:d6:07:ac:0c:fc:80:b8:c0: 40:f3:5f:84:3b:09:37:7c:de:15:4f:03:b9:59:79: 31:39:4b:b7:ca:c0:b3:85:70:29:94:ad:4d:b3:e5: ac:56:a7:77:c7:2b:71:25:3e:bc:c7:b6:ad:d4:be: 54:36:d8:42:b4:b4:a6:85:ee:71:f0:6b:37:db:23: 33:5b:12:66:1a:b1:22:7e:10:32:5b:05:2f:8f:80: 76:3c:39:86:fb:1d:e0:8d:71:e8:31:c7:52:9b:8a: c6:17:c6:d7:61:17:63:28:ce:2f:56:4f:17:70:c9: cc:b8:7f:36:18:02:3e:52:9b:85:03:e8:17:39:87: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:39:0E:2F:0C:28:F2:69:01:04:BB:95:49:F1:B9:E5:B4:FA:FB:33 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:33:de:29:ac:96:64:87:21:74:44:8b:dc:49:a8:ce:69:36: f2:35:94:bd:23:93:15:03:8d:2a:fd:d8:bc:2d:d0:9f:53:f8: c1:12:c6:a7:18:a5:4d:ad:f6:40:2d:66:ba:30:75:07:67:eb: 2a:c9:7b:1c:30:dc:bc:cf:7d:e6:f1:6a:f7:18:36:57:2d:56: 97:a0:d2:4a:63:2d:f9:aa:0b:11:96:da:e1:b3:2a:d5:fd:71: 60:af:d3:72:15:37:4a:ed:8f:e2:53:a9:f6:27:eb:18:9f:07: 69:e9:7e:59:ab:7d:78:b3:b0:41:02:61:f3:cd:fb:42:1f:21: 50:a9:c8:5a:f5:d0:2b:64:d5:b1:a8:ce:e5:c3:83:50:b7:71: 27:af:51:31:6b:ed:a3:24:21:fa:be:8e:52:69:b4:12:a0:6d: a3:0f:ff:21:3f:b6:5a:38:b9:34:d6:8f:f8:61:38:f9:cd:5d: 5a:b9:1e:4f:aa:6f:3b:7f:e8:86:b7:a2:bc:12:2f:fa:db:10: 20:7f:9f:59:0c:62:dc:f3:e9:e5:26:d9:dd:29:50:cf:d3:be: f0:4e:0f:3a:ba:f4:4e:06:83:65:b8:13:88:47:ee:d1:2d:52: a7:86:c7:e9:2c:3f:dc:a0:1d:eb:0d:73:51:13:35:65:50:d4: 6d:ed:b9:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOg3qvsctAQIRQZBC9WIu5pWyB/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA2MjgyMDI2NTFaFw0yNTA3MDIwMDI2NTFaMDMxMTAvBgNV BAMTKEExMzkwRTJGMEMyOEYyNjkwMTA0QkI5NTQ5RjFCOUU1QjRGQUZCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5iqJeQV1ZH00zTIYEcDtyIf4 6EZgtBBSDAHD51y+NBs0mCNSqejpu64p7sgWw/9Wg3b17SGAnCZu2V8DT6IRgUTF iJzTEEQXWUILHlzow23A8GNv/Q4gvqNNOu+AxNESkSHdxdmCL9JtRAUozZcGNCgu YvMUDpvk33mropTWB6wM/IC4wEDzX4Q7CTd83hVPA7lZeTE5S7fKwLOFcCmUrU2z 5axWp3fHK3ElPrzHtq3UvlQ22EK0tKaF7nHwazfbIzNbEmYasSJ+EDJbBS+PgHY8 OYb7HeCNcegxx1KbisYXxtdhF2Mozi9WTxdwycy4fzYYAj5Sm4UD6Bc5h3lBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTkOLwwo8mkBBLuVSfG55bT6+zMwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcz3imslmSHIXREi9xJqM5pNvI1lL0jkxUD jSr92Lwt0J9T+MESxqcYpU2t9kAtZrowdQdn6yrJexww3LzPfebxavcYNlctVpeg 0kpjLfmqCxGW2uGzKtX9cWCv03IVN0rtj+JTqfYn6xifB2npflmrfXizsEECYfPN +0IfIVCpyFr10Ctk1bGozuXDg1C3cSevUTFr7aMkIfq+jlJptBKgbaMP/yE/tlo4 uTTWj/hhOPnNXVq5Hk+qbzt/6Ia3orwSL/rbECB/n1kMYtzz6eUm2d0pUM/TvvBO Dzq69E4Gg2W4E4hH7tEtUqeGx+ksP9ygHesNc1ETNWVQ1G3tuQU= -----END CERTIFICATE-----Generated at Mon Jun 30 01:45:09 2025 by rpki-client