$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: Gfav+5xJHVGx5OO8YYIPjSWWfGJFXZD3+KQBge7JPwE= Subject key identifier: FE:51:61:74:E2:37:F2:05:4F:6C:B9:88:20:07:5F:BC:03:03:CA:85 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 26B0A3DC11B36A01ACD3FB332AF7D2374960A09C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 014E Signing time: Sun 04 May 2025 14:01:32 +0000 Manifest this update: Sun 04 May 2025 13:56:32 +0000 Manifest next update: Wed 07 May 2025 15:43:32 +0000 Files and hashes: 1: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: y6w6TH8tqfQNszsaPzkxriigN16ZvAjiCf4DZpBv2JA=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 15:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b0:a3:dc:11:b3:6a:01:ac:d3:fb:33:2a:f7:d2:37:49:60:a0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: May 4 13:56:32 2025 GMT Not After : May 7 15:43:32 2025 GMT Subject: CN=FE516174E237F2054F6CB98820075FBC0303CA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:2e:7c:be:c2:a0:74:75:0a:f3:06:cc:c1: 65:b7:39:e7:e5:ec:77:33:b1:b9:2d:08:3b:6f:b6: 3f:58:b2:18:38:3c:13:a6:18:ce:72:23:4c:b0:25: 14:f6:da:7b:61:d1:52:c9:ab:f2:3b:0b:28:22:83: 32:cd:58:0a:57:7a:dc:c4:64:48:fc:91:48:3f:e0: d7:ac:5f:f3:36:f2:a1:ee:c2:16:80:16:5a:c6:e7: c1:1c:69:6c:b7:7f:97:b6:16:8c:d0:53:fc:5e:93: 63:64:40:64:56:8c:fa:da:24:b9:90:83:36:6d:a5: f0:0a:d1:84:98:c3:96:c9:25:1c:bc:da:15:a8:10: fe:d0:97:06:bf:5d:5f:e5:a5:9e:4b:94:80:08:25: 5d:37:b4:42:95:e3:8e:41:13:74:fb:61:ab:48:26: 36:f1:6b:ec:f2:29:a6:74:19:dc:82:4d:6a:ba:5e: 8c:49:1d:5c:3b:e5:d4:69:1c:9b:60:bb:f7:59:f1: 81:38:92:07:5e:08:cc:08:22:cd:2c:72:f2:bf:e9: 1f:25:aa:e7:43:4f:3b:19:fc:74:c4:9b:0d:f7:d1: 77:43:36:27:a8:71:64:4c:fe:0b:28:86:26:5f:c8: db:b0:db:65:eb:16:77:b3:aa:c4:f4:e5:e7:a6:59: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:51:61:74:E2:37:F2:05:4F:6C:B9:88:20:07:5F:BC:03:03:CA:85 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c1:51:77:74:a4:ac:8f:e5:f9:9c:90:59:80:ee:35:c0:a2: dc:1f:fb:0d:71:dd:ee:0d:88:a1:d2:83:c9:35:7b:e3:ca:ac: 03:f9:9c:56:f7:b0:be:42:69:1f:ea:d1:1f:da:d7:b9:e9:cb: 1c:46:59:72:cb:62:d3:36:00:e8:09:c1:3a:1a:38:9a:37:3a: d0:f7:93:97:c6:c3:d5:35:fe:6b:db:c0:50:e0:57:ea:6a:1e: bb:bd:58:85:5b:be:1f:67:27:9a:ce:4a:fa:82:7c:b8:19:95: a0:4c:21:33:f5:99:0b:b8:6f:69:35:81:af:78:ee:bb:d0:13: 27:8d:e1:c1:36:45:3a:3e:86:18:8e:92:92:d5:06:2c:9b:b6: 98:8e:7d:db:b5:11:60:df:88:8f:22:23:fe:34:c9:ff:fb:da: ef:de:58:3a:5b:a7:e3:7c:79:6c:ac:fa:a3:37:c1:5f:04:f2: 46:41:a3:04:79:ad:7a:f4:40:88:9e:80:75:0f:e4:51:ae:87: 33:19:98:90:c8:b0:46:1d:ac:8b:4c:c3:10:d9:7b:e0:16:4c: e9:d4:f1:e2:eb:e5:2b:d5:8b:59:f0:7e:80:87:49:fe:1f:09: 80:87:4e:00:54:4b:78:cc:d1:d4:b4:1e:5a:5d:94:ea:8c:3d: 47:db:bf:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrCj3BGzagGs0/szKvfSN0lgoJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTA1MDQxMzU2MzJaFw0yNTA1MDcxNTQzMzJaMDMxMTAvBgNV BAMTKEZFNTE2MTc0RTIzN0YyMDU0RjZDQjk4ODIwMDc1RkJDMDMwM0NBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36C58vsKgdHUK8wbMwWW3Oefl 7HczsbktCDtvtj9Yshg4PBOmGM5yI0ywJRT22nth0VLJq/I7CygigzLNWApXetzE ZEj8kUg/4NesX/M28qHuwhaAFlrG58EcaWy3f5e2FozQU/xek2NkQGRWjPraJLmQ gzZtpfAK0YSYw5bJJRy82hWoEP7Qlwa/XV/lpZ5LlIAIJV03tEKV445BE3T7YatI Jjbxa+zyKaZ0GdyCTWq6XoxJHVw75dRpHJtgu/dZ8YE4kgdeCMwIIs0scvK/6R8l qudDTzsZ/HTEmw330XdDNieocWRM/gsohiZfyNuw22XrFnezqsT05eemWcpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lFhdOI38gVPbLmIIAdfvAMDyoUwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvBUXd0pKyP5fmckFmA7jXAotwf+w1x3e4N iKHSg8k1e+PKrAP5nFb3sL5CaR/q0R/a17npyxxGWXLLYtM2AOgJwToaOJo3OtD3 k5fGw9U1/mvbwFDgV+pqHru9WIVbvh9nJ5rOSvqCfLgZlaBMITP1mQu4b2k1ga94 7rvQEyeN4cE2RTo+hhiOkpLVBiybtpiOfdu1EWDfiI8iI/40yf/72u/eWDpbp+N8 eWys+qM3wV8E8kZBowR5rXr0QIiegHUP5FGuhzMZmJDIsEYdrItMwxDZe+AWTOnU 8eLr5SvVi1nwfoCHSf4fCYCHTgBUS3jM0dS0HlpdlOqMPUfbv3Q= -----END CERTIFICATE-----Generated at Tue May 6 00:19:53 2025 by rpki-client