$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: 9LfOgBeqWSGizA1OvemaRWdcC4Zuz5H3GMdL7p0dVHo= Subject key identifier: E0:2D:D4:E4:6D:90:93:74:CD:51:FA:96:CD:9B:1B:ED:4D:7F:8F:85 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 19FD3A601B5928B639D7C9054F2EAFAFCBB46EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 01:51:47 +0000 Manifest this update: Sun 19 Oct 2025 01:46:47 +0000 Manifest next update: Wed 22 Oct 2025 10:46:47 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: E/h2IcBMJmF8pH8GCj1VmDnyf35c4qh6CazcLMM5r0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fd:3a:60:1b:59:28:b6:39:d7:c9:05:4f:2e:af:af:cb:b4:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Oct 19 01:46:47 2025 GMT Not After : Oct 22 10:46:47 2025 GMT Subject: CN=E02DD4E46D909374CD51FA96CD9B1BED4D7F8F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:5d:ac:52:a6:db:46:64:1e:c2:af:2a:aa: 31:1a:43:71:f1:28:34:2f:d2:07:2e:fe:94:41:37: 53:08:47:ab:93:91:39:4a:18:70:5b:3d:3c:02:18: a6:9b:13:58:24:d0:52:66:e9:23:05:17:48:81:18: 1f:f2:bd:fe:e9:c7:c5:95:2b:f4:d6:20:94:80:bb: 49:0e:62:ac:e5:d4:db:82:c3:09:09:5a:6d:5c:6c: 4c:d4:1f:d5:12:de:ee:71:d8:8d:c7:a0:09:2c:96: fe:36:3e:85:36:b1:bd:61:8c:05:1d:82:28:2c:4d: 59:44:1f:f9:0b:2a:14:cc:81:48:36:1b:bb:ed:79: 3e:fe:4b:ad:f1:86:85:7f:66:f0:66:f1:67:34:5e: 55:89:67:f2:9c:55:df:d4:c1:b5:a9:d5:1f:f4:53: 0c:b4:e3:fe:7a:2d:12:5a:ef:fb:c2:33:81:82:3c: 1b:f0:f6:5d:e3:17:50:3e:f5:86:2b:2c:47:ef:20: d5:82:df:10:d2:8e:ea:4a:8c:b0:c2:85:91:b1:32: 6f:a9:bc:e6:0f:8e:93:a1:75:97:c7:00:99:f4:1e: 7c:dd:86:7e:59:46:8a:64:59:06:c0:9b:71:85:5a: cf:07:70:52:86:7f:5d:d4:9f:6e:eb:d1:c5:68:82: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2D:D4:E4:6D:90:93:74:CD:51:FA:96:CD:9B:1B:ED:4D:7F:8F:85 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ef:3a:95:6b:80:73:bb:aa:78:c6:80:9b:ea:36:c2:98:f2: 03:f1:bf:90:86:8a:73:f2:00:f3:d1:fd:43:a6:8b:f5:33:d9: 3a:82:8e:52:e0:41:08:33:c8:1f:b8:35:23:fd:29:2f:e0:99: 97:13:2c:50:22:14:59:78:42:93:e5:8e:1f:57:e2:3e:0a:5e: 09:31:bc:c1:e1:11:9f:e1:53:49:ad:e6:26:41:9f:0e:f8:18: 13:14:3e:74:0a:7a:ae:00:2c:70:9c:4d:99:c1:29:26:ef:ab: 31:1e:b6:fc:e8:b5:33:f0:c9:aa:7c:68:a9:68:54:e0:4f:55: 01:90:de:0c:bc:6a:2b:6c:ed:fe:e8:92:60:05:53:cb:1f:70: 06:98:7f:96:c1:70:18:63:7d:60:f5:5c:61:8e:5c:28:79:55: 5e:ad:84:fd:ba:88:5c:e6:84:d2:c2:e8:19:09:f6:13:5b:09: a0:47:24:b3:5b:ee:05:44:d4:ae:08:50:f8:41:99:b6:a1:96: ac:cf:16:06:21:5d:76:04:2e:3e:b9:a2:4f:8b:a7:0d:4e:7e: 38:05:2d:6d:5a:12:25:46:f1:10:fb:78:63:85:de:fe:50:cf: 8b:e4:e0:98:b0:4c:50:4a:16:16:b9:a5:36:07:ba:3d:7d:c1: f9:43:88:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGf06YBtZKLY518kFTy6vr8u0bqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTEwMTkwMTQ2NDdaFw0yNTEwMjIxMDQ2NDdaMDMxMTAvBgNV BAMTKEUwMkRENEU0NkQ5MDkzNzRDRDUxRkE5NkNEOUIxQkVENEQ3RjhGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoB12sUqbbRmQewq8qqjEaQ3Hx KDQv0gcu/pRBN1MIR6uTkTlKGHBbPTwCGKabE1gk0FJm6SMFF0iBGB/yvf7px8WV K/TWIJSAu0kOYqzl1NuCwwkJWm1cbEzUH9US3u5x2I3HoAkslv42PoU2sb1hjAUd gigsTVlEH/kLKhTMgUg2G7vteT7+S63xhoV/ZvBm8Wc0XlWJZ/KcVd/UwbWp1R/0 Uwy04/56LRJa7/vCM4GCPBvw9l3jF1A+9YYrLEfvINWC3xDSjupKjLDChZGxMm+p vOYPjpOhdZfHAJn0Hnzdhn5ZRopkWQbAm3GFWs8HcFKGf13Un27r0cVogrcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4C3U5G2Qk3TNUfqWzZsb7U1/j4UwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLvOpVrgHO7qnjGgJvqNsKY8gPxv5CGinPy APPR/UOmi/Uz2TqCjlLgQQgzyB+4NSP9KS/gmZcTLFAiFFl4QpPljh9X4j4KXgkx vMHhEZ/hU0mt5iZBnw74GBMUPnQKeq4ALHCcTZnBKSbvqzEetvzotTPwyap8aKlo VOBPVQGQ3gy8aits7f7okmAFU8sfcAaYf5bBcBhjfWD1XGGOXCh5VV6thP26iFzm hNLC6BkJ9hNbCaBHJLNb7gVE1K4IUPhBmbahlqzPFgYhXXYELj65ok+Lpw1OfjgF LW1aEiVG8RD7eGOF3v5Qz4vk4JiwTFBKFha5pTYHuj19wflDiFg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:34 2025 by rpki-client