$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: m8l2Mf9msCHxo+FQv3AP/O7dRHMT0XlDdBIxUETivCQ= Subject key identifier: 95:1B:5D:80:B0:7D:46:2F:64:F8:38:BA:92:B8:BE:18:39:90:BD:58 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 16FE6C3CE7A5D1617AACB79F0A82535C6E8E7F91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 020E Signing time: Sat 28 Jun 2025 18:41:15 +0000 Manifest this update: Sat 28 Jun 2025 18:36:15 +0000 Manifest next update: Tue 01 Jul 2025 22:05:15 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: R4MH62cw2G7nCOyBrXAjScEBjAlXeDKe1clNOQZJq5k=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fe:6c:3c:e7:a5:d1:61:7a:ac:b7:9f:0a:82:53:5c:6e:8e:7f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Jun 28 18:36:15 2025 GMT Not After : Jul 1 22:05:15 2025 GMT Subject: CN=951B5D80B07D462F64F838BA92B8BE183990BD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:08:fa:8d:b2:cf:ca:fe:78:7b:92:1d:24: 58:be:ff:7a:51:81:16:98:28:a5:a0:73:c7:98:81: 80:f2:df:7f:ea:70:de:63:2a:ac:a2:2a:84:3a:8a: 98:90:8a:5c:58:d0:25:d7:5f:c5:2a:f4:74:9d:41: 54:b9:7d:16:10:a0:8a:b8:ed:5c:14:1a:e6:88:a9: ea:af:b3:54:cc:55:a0:ef:1c:ad:2d:72:90:aa:df: 4e:ca:0f:5b:b4:a3:8d:53:86:c4:eb:26:13:f6:f7: 25:01:b6:0b:09:01:81:16:e0:6b:60:3d:67:6b:da: 6d:45:03:ed:6b:2d:ef:60:92:1f:76:99:47:75:3b: be:12:86:d6:9e:46:bc:64:5e:5d:a8:f2:ce:3c:4e: 7e:46:46:ff:73:f4:2e:52:5f:9f:44:ca:be:8e:1b: 88:49:9f:00:d4:58:20:0f:c8:fe:75:ac:08:62:78: 99:03:aa:1b:c6:8f:bc:a3:76:05:27:e4:89:07:5e: 4b:09:77:52:1f:02:ab:53:a1:d7:25:b3:3c:a7:d3: 7c:0d:5a:63:35:63:26:c2:4e:6b:05:6b:22:bf:32: ee:34:c4:51:22:c5:61:5e:c1:f0:53:10:22:46:1a: da:ac:b7:7e:9b:44:81:42:0a:a5:b3:85:2c:8e:11: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:5D:80:B0:7D:46:2F:64:F8:38:BA:92:B8:BE:18:39:90:BD:58 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:66:4b:d2:86:31:86:06:06:54:fc:a8:91:c7:da:c1:bd: 8a:da:ec:55:72:51:b1:84:1e:60:df:c4:a1:fc:59:2a:e9:fe: ab:7a:e6:59:53:37:62:b7:97:30:22:ef:80:e6:ed:e5:ac:f1: 97:c1:46:5b:be:99:b8:73:ba:f4:95:91:76:fc:28:2c:1a:07: 5c:39:c1:2f:71:c7:de:3b:26:1b:48:91:74:67:e2:00:67:4c: 66:01:b8:1f:f0:13:c1:9e:32:ef:b7:32:36:80:02:98:60:71: bc:ab:8d:e0:c4:5a:31:47:33:f2:67:d5:11:e6:ef:a4:03:8d: c9:ae:a0:1a:29:96:5f:b4:ed:44:03:aa:b1:97:09:50:64:76: f7:7c:78:02:d8:a8:5a:d1:7e:e4:55:14:2b:a3:d6:ea:b8:8f: 62:9d:59:da:cf:4c:a5:47:4a:d6:d3:6d:f4:cb:19:cf:30:96: 8b:2b:87:7c:1f:f5:b4:35:58:ec:67:75:46:0b:f9:f0:70:a6: 0d:30:75:8a:7c:52:61:46:7f:72:5c:5e:0a:64:b1:fd:36:06: c4:ac:7e:f7:43:87:4f:62:94:7e:9a:7e:6d:e0:af:d6:af:8f: df:1b:40:fc:1a:42:5c:4e:af:97:28:e2:c3:33:2e:0e:ce:e7: 0a:d2:ba:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFv5sPOel0WF6rLefCoJTXG6Of5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA2MjgxODM2MTVaFw0yNTA3MDEyMjA1MTVaMDMxMTAvBgNV BAMTKDk1MUI1RDgwQjA3RDQ2MkY2NEY4MzhCQTkyQjhCRTE4Mzk5MEJENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/Qj6jbLPyv54e5IdJFi+/3pR gRaYKKWgc8eYgYDy33/qcN5jKqyiKoQ6ipiQilxY0CXXX8Uq9HSdQVS5fRYQoIq4 7VwUGuaIqeqvs1TMVaDvHK0tcpCq307KD1u0o41ThsTrJhP29yUBtgsJAYEW4Gtg PWdr2m1FA+1rLe9gkh92mUd1O74ShtaeRrxkXl2o8s48Tn5GRv9z9C5SX59Eyr6O G4hJnwDUWCAPyP51rAhieJkDqhvGj7yjdgUn5IkHXksJd1IfAqtTodclszyn03wN WmM1YybCTmsFayK/Mu40xFEixWFewfBTECJGGtqst36bRIFCCqWzhSyOEdp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRtdgLB9Ri9k+Di6kri+GDmQvVgwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7fZkvShjGGBgZU/KiRx9rBvYra7FVyUbGE HmDfxKH8WSrp/qt65llTN2K3lzAi74Dm7eWs8ZfBRlu+mbhzuvSVkXb8KCwaB1w5 wS9xx947JhtIkXRn4gBnTGYBuB/wE8GeMu+3MjaAAphgcbyrjeDEWjFHM/Jn1RHm 76QDjcmuoBopll+07UQDqrGXCVBkdvd8eALYqFrRfuRVFCuj1uq4j2KdWdrPTKVH StbTbfTLGc8wlosrh3wf9bQ1WOxndUYL+fBwpg0wdYp8UmFGf3JcXgpksf02BsSs fvdDh09ilH6afm3gr9avj98bQPwaQlxOr5co4sMzLg7O5wrSuv4= -----END CERTIFICATE-----Generated at Sun Jun 29 23:20:58 2025 by rpki-client