$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: rHMas7LS2Nq6BPMfi5TGK+5m+TZNGYsgYKZPzQ/Mkq0= Subject key identifier: 99:79:20:88:01:50:51:8E:1D:42:C4:8B:DA:D6:B9:8B:56:4D:08:35 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 5E871B6D003C1943A63D1967BA9BD0C1DC99B50B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 017F Signing time: Thu 21 Aug 2025 20:31:42 +0000 Manifest this update: Thu 21 Aug 2025 20:26:42 +0000 Manifest next update: Mon 25 Aug 2025 05:07:42 +0000 Files and hashes: 1: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: 0O4Aixm26DlqN/b9BBy3E6HmjmQluztGpZHw3/B2cYE=) 2: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 3: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:87:1b:6d:00:3c:19:43:a6:3d:19:67:ba:9b:d0:c1:dc:99:b5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Aug 21 20:26:42 2025 GMT Not After : Aug 25 05:07:42 2025 GMT Subject: CN=997920880150518E1D42C48BDAD6B98B564D0835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:62:ed:50:d0:48:ac:40:a9:d0:9a:5e:6d: 55:12:98:1d:02:9d:84:a6:1e:1c:0f:78:61:16:13: a2:f2:a1:37:ea:4f:65:04:b7:92:5a:db:83:93:be: ff:10:bb:74:d8:fa:60:12:86:b2:33:22:cf:4e:ee: cd:fb:d2:b5:b0:a9:38:13:22:e9:66:37:14:44:9e: 8e:e6:d2:71:d5:a6:42:cd:92:93:e2:a4:64:ad:9a: a1:0a:ef:c0:a8:17:32:8a:36:15:dc:6e:0b:21:5c: 53:13:19:73:32:4a:54:46:b3:55:89:ff:9e:ec:12: 62:0c:97:17:02:8e:51:89:70:8c:e5:87:1e:eb:8a: 31:40:78:38:61:23:66:b7:6a:27:6f:36:a0:9d:a1: 6f:f6:65:ce:33:53:16:cd:02:03:71:a4:ca:1e:45: 2e:c5:36:da:9d:9e:50:7c:20:46:68:40:73:61:8c: 69:70:16:98:ff:62:f9:56:9d:42:01:ce:fc:e3:f6: 96:76:7f:f1:55:c0:67:88:74:70:51:3d:23:30:bb: 70:00:8a:92:1b:05:e1:1e:41:1a:2a:94:56:76:eb: 4f:31:2e:1c:16:12:d3:f4:4f:c4:76:8a:e0:65:4d: b6:94:7d:4f:31:7c:47:26:b2:3f:56:4f:5d:f1:53: e4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:79:20:88:01:50:51:8E:1D:42:C4:8B:DA:D6:B9:8B:56:4D:08:35 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:88:7b:d9:ad:ed:30:8d:84:5f:c7:a6:6b:d8:00:7d:e3:92: 20:7d:de:aa:9f:10:18:29:2e:11:bf:2a:68:68:30:02:1d:c3: a3:49:c8:d2:3f:f8:a2:b0:4f:75:cd:42:68:5b:0e:ab:12:37: 58:63:8d:93:aa:87:5f:5c:1c:b5:72:18:7b:a4:2b:1f:2c:8b: b0:1e:7b:b6:cd:63:54:df:c5:77:50:88:ff:52:17:bc:03:9f: 69:1a:ff:aa:c0:6a:be:c5:0b:ec:6f:fa:bc:fc:1d:b5:bb:e0: f5:44:80:70:4e:8c:b4:82:3c:5c:53:50:2e:5f:f9:e0:b3:86: 17:80:01:0e:9b:35:d8:31:17:a7:3f:86:65:f0:05:26:ca:db: af:d9:e3:2d:23:87:da:73:4e:8b:dd:77:1b:0d:d1:b6:d9:dd: 1d:0e:c9:18:d8:3e:01:e4:5e:a5:20:04:1a:cd:e0:0a:dd:2f: 96:27:b7:32:8b:e6:27:ed:95:58:69:df:1e:5d:6b:36:c9:8d: 1c:90:72:7e:3c:72:35:1b:17:9b:85:49:08:23:b1:70:e6:02: 70:09:8a:96:d5:41:15:6a:97:96:55:bb:9d:66:b6:74:d4:d2: db:36:8b:52:71:a8:5f:31:11:17:74:19:51:f4:b7:3d:39:21: 43:67:bb:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXocbbQA8GUOmPRlnupvQwdyZtQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTA4MjEyMDI2NDJaFw0yNTA4MjUwNTA3NDJaMDMxMTAvBgNV BAMTKDk5NzkyMDg4MDE1MDUxOEUxRDQyQzQ4QkRBRDZCOThCNTY0RDA4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59GLtUNBIrECp0JpebVUSmB0C nYSmHhwPeGEWE6LyoTfqT2UEt5Ja24OTvv8Qu3TY+mAShrIzIs9O7s370rWwqTgT IulmNxREno7m0nHVpkLNkpPipGStmqEK78CoFzKKNhXcbgshXFMTGXMySlRGs1WJ /57sEmIMlxcCjlGJcIzlhx7rijFAeDhhI2a3aidvNqCdoW/2Zc4zUxbNAgNxpMoe RS7FNtqdnlB8IEZoQHNhjGlwFpj/YvlWnUIBzvzj9pZ2f/FVwGeIdHBRPSMwu3AA ipIbBeEeQRoqlFZ2608xLhwWEtP0T8R2iuBlTbaUfU8xfEcmsj9WT13xU+SNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXkgiAFQUY4dQsSL2ta5i1ZNCDUwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCIe9mt7TCNhF/HpmvYAH3jkiB93qqfEBgp LhG/KmhoMAIdw6NJyNI/+KKwT3XNQmhbDqsSN1hjjZOqh19cHLVyGHukKx8si7Ae e7bNY1TfxXdQiP9SF7wDn2ka/6rAar7FC+xv+rz8HbW74PVEgHBOjLSCPFxTUC5f +eCzhheAAQ6bNdgxF6c/hmXwBSbK26/Z4y0jh9pzTovddxsN0bbZ3R0OyRjYPgHk XqUgBBrN4ArdL5YntzKL5iftlVhp3x5dazbJjRyQcn48cjUbF5uFSQgjsXDmAnAJ ipbVQRVql5ZVu51mtnTU0ts2i1JxqF8xERd0GVH0tz05IUNnu/s= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:45 2025 by rpki-client