$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: mrJz041ElN5z/Yy9PDGUTX7A8RED7/+gN6438aOW6lw= Subject key identifier: C4:8E:CE:42:9B:16:56:74:6D:6B:3C:B1:E1:D1:86:51:AF:64:DA:37 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 418D4B47D66A45613FE7F6D2E87C39BA6A6F8ECF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 011B Signing time: Mon 30 Jun 2025 09:31:37 +0000 Manifest this update: Mon 30 Jun 2025 09:26:37 +0000 Manifest next update: Thu 03 Jul 2025 10:37:37 +0000 Files and hashes: 1: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=) 2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: vE4SZBbfTVed2iczzNzHcUlBplY1hXFqrb1Ia6jR60c=) 3: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=) 4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:4b:47:d6:6a:45:61:3f:e7:f6:d2:e8:7c:39:ba:6a:6f:8e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Jun 30 09:26:37 2025 GMT Not After : Jul 3 10:37:37 2025 GMT Subject: CN=C48ECE429B1656746D6B3CB1E1D18651AF64DA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:d2:fc:e0:1c:f4:ea:42:0e:a8:b3:a7:db: 79:48:a9:9f:dd:8e:03:40:9d:17:92:b1:87:21:59: a2:af:cf:66:0a:23:d0:55:2d:54:2f:a3:80:07:d0: 46:26:4b:14:ff:03:8f:a5:05:7f:29:25:5b:9f:d5: e0:50:1b:dd:ce:83:06:24:e7:40:23:19:a8:b0:0d: 8b:29:8e:32:29:19:24:a1:a9:55:c6:72:b9:29:1a: e7:d5:73:c5:bb:4d:66:bd:83:ce:b6:10:a1:41:e5: 93:15:d7:0d:9a:4a:07:75:4a:65:f3:ca:24:94:74: cb:92:d0:c8:dc:6a:ec:b1:11:ce:67:40:24:29:93: 59:93:6a:a6:2b:1b:44:79:ce:0f:1c:10:30:10:dd: d0:ec:f6:6c:b5:d8:11:d8:d2:10:5d:a9:0f:75:46: d9:1a:6d:79:22:37:9b:a9:73:fa:08:95:7a:c1:ad: cb:83:05:b5:69:76:31:29:6c:7e:5f:af:c7:11:9b: 93:a9:5f:4b:14:54:8e:c5:c5:90:dc:9a:19:23:a6: 00:c6:8e:47:47:2f:cf:f4:d1:6b:b2:2d:e3:97:88: 55:d2:c6:b0:6b:e6:09:16:f2:4b:28:8c:1d:1b:b8: d4:b1:1c:91:b5:43:1e:f4:17:7f:9e:82:87:73:db: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8E:CE:42:9B:16:56:74:6D:6B:3C:B1:E1:D1:86:51:AF:64:DA:37 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:54:70:b2:49:60:25:aa:be:fd:10:32:3d:de:87:2e:97:2b: 31:6e:12:ad:3d:ee:8a:a2:03:2b:11:42:77:55:b1:e8:22:1f: 26:54:f0:b0:48:3f:22:91:e7:d9:ee:7c:86:e7:df:87:97:43: 07:21:49:9d:24:cb:4d:67:aa:9c:2e:29:df:f4:f4:bc:7d:20: 3f:fb:4b:66:53:93:58:82:7e:91:f8:fb:51:05:d2:a3:35:18: bf:20:0e:af:6d:8d:3a:22:53:51:6d:dd:f2:2d:2c:f7:3a:3a: 79:88:5e:e3:ed:23:7e:92:11:b9:90:d7:85:5c:3f:a7:0f:de: 5b:01:a9:0f:c4:46:7a:ac:6e:a9:67:c9:90:cf:6e:67:93:f7: cf:5e:f2:0f:f6:1f:0e:59:04:56:44:ae:86:fb:90:ef:1e:e9: fe:14:55:57:ec:54:f7:39:f5:5d:59:f9:51:e6:e1:f6:b9:b4: dd:59:31:bb:17:b1:41:ae:bd:04:b3:f9:e0:7d:b0:e0:b7:14: c6:69:de:16:f1:3d:fb:0c:b1:29:8a:4e:8e:1f:ee:da:f0:d0: 30:8b:3f:b9:c9:65:44:5c:41:e8:de:b0:ba:e5:2d:36:f8:61: ae:92:d3:07:bc:19:81:26:ff:33:be:17:b7:af:c4:df:e5:a0: 7a:5e:03:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQY1LR9ZqRWE/5/bS6Hw5umpvjs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA2MzAwOTI2MzdaFw0yNTA3MDMxMDM3MzdaMDMxMTAvBgNV BAMTKEM0OEVDRTQyOUIxNjU2NzQ2RDZCM0NCMUUxRDE4NjUxQUY2NERBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpztL84Bz06kIOqLOn23lIqZ/d jgNAnReSsYchWaKvz2YKI9BVLVQvo4AH0EYmSxT/A4+lBX8pJVuf1eBQG93OgwYk 50AjGaiwDYspjjIpGSShqVXGcrkpGufVc8W7TWa9g862EKFB5ZMV1w2aSgd1SmXz yiSUdMuS0MjcauyxEc5nQCQpk1mTaqYrG0R5zg8cEDAQ3dDs9my12BHY0hBdqQ91 RtkabXkiN5upc/oIlXrBrcuDBbVpdjEpbH5fr8cRm5OpX0sUVI7FxZDcmhkjpgDG jkdHL8/00WuyLeOXiFXSxrBr5gkW8ksojB0buNSxHJG1Qx70F3+egodz25S5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxI7OQpsWVnRtazyx4dGGUa9k2jcwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABUcLJJYCWqvv0QMj3ehy6XKzFuEq097oqi AysRQndVsegiHyZU8LBIPyKR59nufIbn34eXQwchSZ0ky01nqpwuKd/09Lx9ID/7 S2ZTk1iCfpH4+1EF0qM1GL8gDq9tjToiU1Ft3fItLPc6OnmIXuPtI36SEbmQ14Vc P6cP3lsBqQ/ERnqsbqlnyZDPbmeT989e8g/2Hw5ZBFZErob7kO8e6f4UVVfsVPc5 9V1Z+VHm4fa5tN1ZMbsXsUGuvQSz+eB9sOC3FMZp3hbxPfsMsSmKTo4f7trw0DCL P7nJZURcQejesLrlLTb4Ya6S0we8GYEm/zO+F7evxN/loHpeA6A= -----END CERTIFICATE-----Generated at Mon Jun 30 11:53:02 2025 by rpki-client