$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: IWWDEY9UruUEhrdm19JJIm9BefRoHZD6ncM2fMqWipQ= Subject key identifier: 2F:0F:55:7F:63:14:A2:13:23:19:53:E5:A7:F3:48:86:3B:AF:2F:18 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 41594FBF095D464F4505979D47B6EF8F48CEA876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 014D Signing time: Sat 18 Oct 2025 13:01:40 +0000 Manifest this update: Sat 18 Oct 2025 12:56:40 +0000 Manifest next update: Tue 21 Oct 2025 14:47:40 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 2: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 4: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: CVi4E5M5lpQPEGDunpi/8ZEKdMKf/MAd7criblY8Prc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:59:4f:bf:09:5d:46:4f:45:05:97:9d:47:b6:ef:8f:48:ce:a8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Oct 18 12:56:40 2025 GMT Not After : Oct 21 14:47:40 2025 GMT Subject: CN=2F0F557F6314A213231953E5A7F348863BAF2F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:5b:e3:56:20:18:55:df:ae:98:30:5e:7b: 8f:b3:b7:da:20:41:2d:41:47:19:4b:a1:51:00:a8: f7:89:36:97:ea:ab:15:bb:59:10:b2:b1:c5:dd:6c: 29:d1:21:c3:6d:f7:13:cf:e9:7b:ed:b8:76:2d:1c: 9b:f8:f6:ce:88:1d:88:95:6c:8c:00:11:be:84:29: cf:83:5a:18:1f:2f:76:f5:73:70:c6:8a:19:76:08: ff:f0:46:d9:fb:2b:7a:75:73:96:74:a2:4e:be:a6: af:89:9b:38:27:88:fb:da:f3:5d:02:f6:06:69:97: ac:4e:af:33:93:99:76:f4:7e:2d:59:1f:23:d6:c8: f2:db:a3:1d:1a:7e:0e:c2:46:b7:95:5a:03:24:d3: 99:6a:5e:fa:e0:37:58:1a:45:74:b7:94:14:29:25: 09:aa:4c:33:81:17:5c:f2:66:29:69:40:9d:22:dc: 33:0d:67:6d:03:fa:19:fb:8a:66:31:7e:ca:07:3b: 04:d4:06:39:57:ed:c1:e2:31:89:5e:c6:99:07:e3: 51:93:fa:14:dd:bc:be:ed:8f:db:48:41:a7:19:4f: df:a9:34:b9:d0:5c:25:24:06:0a:d8:06:a3:5f:86: ac:5a:02:89:e5:7b:88:87:67:53:75:ef:d4:17:5e: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:55:7F:63:14:A2:13:23:19:53:E5:A7:F3:48:86:3B:AF:2F:18 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:68:46:3b:36:ca:14:9d:21:1b:5e:df:1e:00:59:01:36:ab: 17:9d:d9:f8:66:94:88:8b:54:92:db:44:df:6f:58:8e:59:32: 5e:58:da:b1:04:18:3e:f6:63:85:48:45:06:69:33:e1:51:35: ae:98:3c:41:64:80:c4:83:ee:15:cf:98:a2:73:da:4e:43:3b: 84:12:00:49:95:be:d4:f5:6c:e3:5c:64:47:05:21:a1:b6:7b: 27:bd:7a:e9:c4:f3:ba:3a:c4:f6:4b:ba:61:75:6d:db:89:ee: 7b:a2:b7:9f:ef:0d:9b:0c:28:f2:ac:46:1e:f6:e6:dd:0b:9e: f0:f0:a1:95:da:52:7c:8f:a0:33:26:6f:ec:4e:6e:39:56:98: c9:73:02:6d:95:3a:5f:e5:61:f6:47:5d:cf:e9:07:39:e2:ba: 89:13:55:02:8b:9d:8d:78:e8:16:cb:25:e0:37:db:9c:f3:db: c4:67:87:6e:8b:27:51:4d:0f:ef:e1:ac:02:4b:03:e9:eb:91: bb:ac:c5:f5:da:6d:df:f5:a7:3b:e0:d4:15:48:2f:0b:78:01: 89:8c:95:09:54:71:f0:0f:0a:e6:af:1d:5b:3a:e5:0c:b3:29: bd:0c:37:2b:30:37:23:d3:06:d1:f7:56:59:9f:80:fa:99:ce: 0a:1b:83:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVlPvwldRk9FBZedR7bvj0jOqHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTEwMTgxMjU2NDBaFw0yNTEwMjExNDQ3NDBaMDMxMTAvBgNV BAMTKDJGMEY1NTdGNjMxNEEyMTMyMzE5NTNFNUE3RjM0ODg2M0JBRjJGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRlvjViAYVd+umDBee4+zt9og QS1BRxlLoVEAqPeJNpfqqxW7WRCyscXdbCnRIcNt9xPP6XvtuHYtHJv49s6IHYiV bIwAEb6EKc+DWhgfL3b1c3DGihl2CP/wRtn7K3p1c5Z0ok6+pq+JmzgniPva810C 9gZpl6xOrzOTmXb0fi1ZHyPWyPLbox0afg7CRreVWgMk05lqXvrgN1gaRXS3lBQp JQmqTDOBF1zyZilpQJ0i3DMNZ20D+hn7imYxfsoHOwTUBjlX7cHiMYlexpkH41GT +hTdvL7tj9tIQacZT9+pNLnQXCUkBgrYBqNfhqxaAonle4iHZ1N179QXXq1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULw9Vf2MUohMjGVPlp/NIhjuvLxgwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVoRjs2yhSdIRte3x4AWQE2qxed2fhmlIiL VJLbRN9vWI5ZMl5Y2rEEGD72Y4VIRQZpM+FRNa6YPEFkgMSD7hXPmKJz2k5DO4QS AEmVvtT1bONcZEcFIaG2eye9eunE87o6xPZLumF1bduJ7nuit5/vDZsMKPKsRh72 5t0LnvDwoZXaUnyPoDMmb+xObjlWmMlzAm2VOl/lYfZHXc/pBzniuokTVQKLnY14 6BbLJeA325zz28Rnh26LJ1FND+/hrAJLA+nrkbusxfXabd/1pzvg1BVILwt4AYmM lQlUcfAPCuavHVs65QyzKb0MNyswNyPTBtH3VlmfgPqZzgobg28= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:46 2025 by rpki-client