$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: GS3ziDP9PdDXPJ154nD0YTlqDe+JOOo8qeFEMJE0J/k= Subject key identifier: 41:5E:CB:E5:18:36:26:51:DD:7E:94:97:64:C6:CA:A8:9A:99:EE:71 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 6C89F931C07EBBEF5F561628CAC391B82561A545 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0133 Signing time: Thu 21 Aug 2025 06:21:39 +0000 Manifest this update: Thu 21 Aug 2025 06:16:39 +0000 Manifest next update: Sun 24 Aug 2025 17:00:39 +0000 Files and hashes: 1: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: WGwuTS2EJOt0oOk8cjpaJo6CeIuPtRQX1gfW5x+nd+k=) 2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:89:f9:31:c0:7e:bb:ef:5f:56:16:28:ca:c3:91:b8:25:61:a5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Aug 21 06:16:39 2025 GMT Not After : Aug 24 17:00:39 2025 GMT Subject: CN=415ECBE518362651DD7E949764C6CAA89A99EE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:12:23:8d:c1:0f:a3:7b:68:b9:05:44:d6: 4b:ba:ac:c5:1c:fe:43:ab:5f:9c:89:3e:7e:6f:df: f1:57:e7:68:4b:d6:cd:59:5a:33:f1:90:26:e4:4f: fe:ab:05:d3:00:ad:da:cc:43:a2:85:d0:30:7c:ce: 88:13:06:2c:f0:8b:15:b6:6c:bb:6b:73:67:bb:98: a8:c0:55:c5:5e:cd:9b:ce:0e:80:41:bf:28:68:4f: ba:12:72:b7:a6:ad:15:3f:31:d7:6d:86:28:dd:8e: 9b:40:bb:1d:f5:50:bb:1f:f7:e1:9b:12:50:cd:50: 35:de:21:35:57:43:39:e3:63:8a:72:fa:ba:a3:bf: 4f:37:04:eb:eb:51:0e:09:a5:36:04:c0:ef:1f:1d: bb:b7:81:b4:7d:cd:f5:b2:f9:68:81:04:07:ad:8f: d5:57:db:f6:0e:fc:f5:80:12:19:3c:08:3c:2a:6b: a0:f4:c9:79:c2:c7:9a:a0:d4:5b:ab:1c:1e:cf:d1: 72:72:b5:cd:e7:bb:f1:91:2c:d1:57:da:9b:5b:b2: dc:a6:8e:a0:21:47:36:09:5f:22:54:a8:e6:55:ec: 36:3a:ec:eb:8a:36:83:37:4d:fe:e7:1c:12:d4:f0: af:03:03:7a:60:34:0c:27:7b:68:57:46:47:a3:7c: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:CB:E5:18:36:26:51:DD:7E:94:97:64:C6:CA:A8:9A:99:EE:71 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e0:e3:32:93:53:d9:cb:61:ec:e3:10:6a:e0:76:5a:e5:53: 9e:ed:65:8f:97:51:d5:67:a4:09:1c:12:39:15:1d:6f:06:cb: e7:56:27:66:2f:de:75:f2:bc:b6:19:cf:82:70:a0:a6:c2:af: 84:e2:ce:eb:ba:27:7a:e8:da:6a:a8:9a:3a:b4:d0:a5:79:0b: 10:d4:f7:96:6d:77:28:c3:f9:8f:41:01:4a:e8:0f:dc:56:13: 8a:b9:47:6d:fd:18:ba:cc:98:0a:0b:cb:6d:16:b4:b1:ff:ca: 9b:a1:99:44:70:ba:cd:5b:3d:89:fe:a2:af:80:da:4d:30:2d: fa:ce:77:18:a2:c6:52:6d:70:3a:0e:a5:59:fd:84:8d:dd:66: da:c5:cb:be:3a:b6:4b:3e:b7:c8:09:4a:63:72:ce:e3:99:7c: e0:d4:f4:ce:ca:22:32:81:f8:0a:35:3f:4b:78:0f:bf:71:76: 86:65:1c:a0:cf:e9:a5:cd:a0:2b:fe:58:9a:11:88:5f:8e:dc: aa:ab:50:9b:11:a5:8d:b9:a5:91:2e:1a:8d:30:6d:84:07:96: cb:65:3b:d0:1c:96:c1:ed:26:c3:0e:2e:09:ad:77:00:dc:c7: e6:5d:05:99:0f:eb:4d:bb:d9:9a:6c:c9:cf:bc:4b:00:ee:f2: 27:5f:09:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIn5McB+u+9fVhYoysORuCVhpUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA4MjEwNjE2MzlaFw0yNTA4MjQxNzAwMzlaMDMxMTAvBgNV BAMTKDQxNUVDQkU1MTgzNjI2NTFERDdFOTQ5NzY0QzZDQUE4OUE5OUVFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQBIjjcEPo3touQVE1ku6rMUc /kOrX5yJPn5v3/FX52hL1s1ZWjPxkCbkT/6rBdMArdrMQ6KF0DB8zogTBizwixW2 bLtrc2e7mKjAVcVezZvODoBBvyhoT7oScremrRU/MddthijdjptAux31ULsf9+Gb ElDNUDXeITVXQznjY4py+rqjv083BOvrUQ4JpTYEwO8fHbu3gbR9zfWy+WiBBAet j9VX2/YO/PWAEhk8CDwqa6D0yXnCx5qg1FurHB7P0XJytc3nu/GRLNFX2ptbstym jqAhRzYJXyJUqOZV7DY67OuKNoM3Tf7nHBLU8K8DA3pgNAwne2hXRkejfKz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQV7L5Rg2JlHdfpSXZMbKqJqZ7nEwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPg4zKTU9nLYezjEGrgdlrlU57tZY+XUdVn pAkcEjkVHW8Gy+dWJ2Yv3nXyvLYZz4JwoKbCr4Tizuu6J3ro2mqomjq00KV5CxDU 95ZtdyjD+Y9BAUroD9xWE4q5R239GLrMmAoLy20WtLH/ypuhmURwus1bPYn+oq+A 2k0wLfrOdxiixlJtcDoOpVn9hI3dZtrFy746tks+t8gJSmNyzuOZfODU9M7KIjKB +Ao1P0t4D79xdoZlHKDP6aXNoCv+WJoRiF+O3KqrUJsRpY25pZEuGo0wbYQHlstl O9AclsHtJsMOLgmtdwDcx+ZdBZkP60272Zpsyc+8SwDu8idfCVc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:22 2025 by rpki-client