$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: DkfwA+tKqN7h/leHc4bXeMkvTVAUy4uyAt0z+0rIRFw= Subject key identifier: FC:10:17:0F:4C:3A:DD:1E:D7:B5:42:EC:65:7C:CB:48:12:13:01:C0 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 01F4F964B115A587B7172137A36FE15DB73CBA9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 18:41:46 +0000 Manifest this update: Fri 22 Aug 2025 18:36:46 +0000 Manifest next update: Mon 25 Aug 2025 20:29:46 +0000 Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: v7RaKgkBTj8xa6VFhNFjClwGOHzfAVgxLVoxDoeb174=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f4:f9:64:b1:15:a5:87:b7:17:21:37:a3:6f:e1:5d:b7:3c:ba:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Aug 22 18:36:46 2025 GMT Not After : Aug 25 20:29:46 2025 GMT Subject: CN=FC10170F4C3ADD1ED7B542EC657CCB48121301C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:5b:6a:4d:e1:32:75:d4:80:49:37:fa:e7: 66:fd:77:40:f8:41:b4:65:6d:f9:57:8f:b9:64:71: f5:d3:77:fa:22:72:e4:d7:2d:f2:36:ea:6f:54:af: 09:d9:67:71:55:ec:55:8d:85:7f:75:e7:27:91:76: 99:9f:11:03:d3:a6:e8:ea:bb:a3:b4:87:0f:a3:2b: 29:82:a9:08:67:6d:c2:86:3a:af:65:f7:38:e4:7c: 44:95:45:16:a3:6b:da:50:e4:5a:ed:d8:71:56:98: b4:2c:f0:1a:ad:be:cf:f7:ee:68:ad:32:e0:00:30: 9a:82:ed:47:51:83:66:29:94:f9:f4:71:38:bc:1e: 23:6f:65:43:41:27:e6:a8:df:87:45:90:92:01:e3: 79:53:24:a1:28:93:7e:aa:4a:e6:08:07:ca:79:84: 0d:a8:5a:4f:48:58:45:fd:22:d1:d5:5d:0e:f9:32: 74:5a:6b:6d:2f:40:d5:ea:55:3b:eb:12:82:28:84: 77:5a:1b:84:23:71:da:76:bc:e5:3e:3a:6f:09:59: 0f:66:75:a5:59:44:19:e3:1e:44:26:ac:1c:0c:fa: fd:84:fb:37:03:20:3e:ea:6d:2d:48:b4:dd:96:3f: 3d:0c:65:ba:8e:b3:36:8e:32:f0:4f:52:61:87:bf: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:10:17:0F:4C:3A:DD:1E:D7:B5:42:EC:65:7C:CB:48:12:13:01:C0 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:08:9a:e8:16:38:f5:f3:0d:38:ce:07:3b:79:75:4a:98:77: 08:22:75:3b:b8:30:9d:30:0b:83:6a:05:3f:4b:b1:e0:83:91: 84:f5:45:c6:e8:29:3d:40:82:1f:34:e8:10:f6:6e:bc:99:fb: 52:df:8c:d6:23:46:7b:f3:c9:4b:85:b2:aa:1f:cd:0e:fd:b3: d4:0b:20:b0:af:1a:48:c8:85:a0:3c:3a:8b:7f:88:ab:d2:02: a0:9e:0e:a2:d3:cb:6b:92:d4:03:7c:d3:ae:58:84:00:3f:f4: 76:0a:5f:9e:fb:e2:57:7f:c0:53:7b:9a:15:5e:74:2f:a5:4b: c0:f8:5c:1b:ad:65:d1:e1:fb:8f:14:66:a6:e3:99:04:61:41: 36:f0:8d:9f:2e:1f:e6:fb:ff:57:39:bf:2c:ff:2c:7a:ad:26: e8:ca:6b:af:ee:d0:4f:b8:cd:07:42:c4:61:c1:c7:94:5c:4d: 18:85:3e:8e:2d:dd:db:b1:81:10:59:44:89:3c:5e:a5:1c:0d: ae:46:d3:7a:7b:a3:20:50:6d:2a:f0:31:ae:ab:7c:68:23:a7: 2d:ab:82:b1:2c:99:7f:e5:81:54:db:d7:23:31:ea:06:ce:ab: 90:7f:2f:2e:24:dd:fd:3e:00:2b:0a:aa:48:4f:50:02:7c:1d: b2:b6:cc:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfT5ZLEVpYe3FyE3o2/hXbc8up0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTA4MjIxODM2NDZaFw0yNTA4MjUyMDI5NDZaMDMxMTAvBgNV BAMTKEZDMTAxNzBGNEMzQUREMUVEN0I1NDJFQzY1N0NDQjQ4MTIxMzAxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMFtqTeEyddSASTf652b9d0D4 QbRlbflXj7lkcfXTd/oicuTXLfI26m9UrwnZZ3FV7FWNhX915yeRdpmfEQPTpujq u6O0hw+jKymCqQhnbcKGOq9l9zjkfESVRRaja9pQ5Frt2HFWmLQs8Bqtvs/37mit MuAAMJqC7UdRg2YplPn0cTi8HiNvZUNBJ+ao34dFkJIB43lTJKEok36qSuYIB8p5 hA2oWk9IWEX9ItHVXQ75MnRaa20vQNXqVTvrEoIohHdaG4Qjcdp2vOU+Om8JWQ9m daVZRBnjHkQmrBwM+v2E+zcDID7qbS1ItN2WPz0MZbqOszaOMvBPUmGHv8ppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/BAXD0w63R7XtULsZXzLSBITAcAwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsImugWOPXzDTjOBzt5dUqYdwgidTu4MJ0w C4NqBT9LseCDkYT1RcboKT1Agh806BD2bryZ+1LfjNYjRnvzyUuFsqofzQ79s9QL ILCvGkjIhaA8Oot/iKvSAqCeDqLTy2uS1AN8065YhAA/9HYKX5774ld/wFN7mhVe dC+lS8D4XButZdHh+48UZqbjmQRhQTbwjZ8uH+b7/1c5vyz/LHqtJujKa6/u0E+4 zQdCxGHBx5RcTRiFPo4t3duxgRBZRIk8XqUcDa5G03p7oyBQbSrwMa6rfGgjpy2r grEsmX/lgVTb1yMx6gbOq5B/Ly4k3f0+ACsKqkhPUAJ8HbK2zOo= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:38 2025 by rpki-client