$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: LGqu7AvIGCS9uPFYTp6tIveprwPJEcQUr9ta0Q4antE= Subject key identifier: E3:58:9E:C4:FE:A0:F5:B6:00:D2:1D:8C:2B:11:B3:75:AA:D4:C1:CF Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 1D1560C5A582CDF3A5FC6244CDEC8BA3C5942ED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0227 Signing time: Fri 22 Aug 2025 09:53:42 +0000 Manifest this update: Fri 22 Aug 2025 09:48:42 +0000 Manifest next update: Mon 25 Aug 2025 10:16:42 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: +/dEwvmWBifJ/v2kFGC9N6Qb8OnhXZ5uCJ4CFqQghjM=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:15:60:c5:a5:82:cd:f3:a5:fc:62:44:cd:ec:8b:a3:c5:94:2e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Aug 22 09:48:42 2025 GMT Not After : Aug 25 10:16:42 2025 GMT Subject: CN=E3589EC4FEA0F5B600D21D8C2B11B375AAD4C1CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:eb:e1:86:b8:55:75:6b:d4:8e:ef:d5:1f: b8:1e:04:5a:29:6f:70:54:ef:a8:5a:92:85:7b:04: 6c:af:30:49:96:0b:5d:ef:b4:83:4c:cb:ec:4d:38: 0c:ad:1f:19:49:3d:2b:a6:ed:35:13:fd:cc:28:86: 7c:4d:94:a4:87:c9:8f:22:56:73:f1:f1:dd:db:fd: 2f:03:e1:9f:2c:ff:32:1d:da:73:5e:95:a1:75:31: 87:f7:a8:f2:2d:a0:93:5b:e0:4e:d8:2e:fc:8a:5a: 40:8f:1d:21:f6:a0:48:54:e1:97:a6:2d:03:b7:59: 81:2f:c7:f9:82:82:ec:8c:aa:bb:78:c8:f8:be:da: bb:84:ed:83:94:36:e7:52:90:1c:c6:54:b0:40:3d: 02:25:83:ce:a0:af:8c:75:1d:f1:47:4f:3d:11:02: 8b:4e:ed:85:e5:8c:e5:65:c8:87:45:e5:cf:61:4c: 0d:33:d1:80:dd:dd:08:32:71:5f:f9:b7:29:57:96: ae:a2:66:3b:cf:11:62:bc:de:91:71:62:14:03:41: 14:1c:06:ed:a1:60:db:95:ed:90:f4:34:8e:3a:5e: 1f:18:6f:5d:2b:a8:57:d5:f1:16:30:0e:73:ed:f0: 17:95:c2:a0:1d:8c:aa:8b:22:79:e8:18:ed:e4:5c: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:58:9E:C4:FE:A0:F5:B6:00:D2:1D:8C:2B:11:B3:75:AA:D4:C1:CF X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d9:7b:c2:6d:c2:ab:77:1e:16:8d:6c:5d:c3:66:a1:1e:61: f5:88:e1:fb:49:f2:07:76:1e:7f:c2:14:57:c2:b4:4d:bc:52: 8f:06:2c:6b:f9:7b:cc:e5:84:55:5d:f8:c8:b9:cf:8e:72:20: 35:46:ca:2b:ab:ed:1b:79:68:d6:97:06:9b:7b:2c:d5:b1:b1: a0:cc:72:0e:6e:0c:e3:d6:f3:8a:a4:5e:e7:5a:30:be:0f:53: cd:1d:54:5e:63:38:8c:48:b2:72:c6:50:0d:d2:1f:2a:02:aa: 3d:6b:7b:0f:2f:88:b4:57:87:19:0c:15:0b:89:f5:a5:30:b6: cf:2d:1a:0b:8a:c8:8a:61:d1:77:de:9d:e4:90:08:e3:7e:20: 59:56:60:5f:c3:d4:a8:10:29:60:cf:7c:a8:4f:c8:52:f2:cf: 0b:2e:73:14:da:d4:3c:cc:1c:61:bd:9a:69:e5:95:25:f0:3f: 86:d0:02:6f:22:7e:48:d1:12:ef:da:7d:ae:03:c5:2d:f2:9a: 21:44:22:d2:83:b6:b3:46:59:a1:35:32:50:7b:8d:b4:eb:b8: 9b:ff:bb:13:bd:c6:1a:ca:02:3d:d6:c2:3b:50:0e:b0:c7:bc: 63:e6:3f:80:3f:1a:09:89:35:12:b2:c0:35:67:a2:33:ca:4f: a5:91:f7:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRVgxaWCzfOl/GJEzeyLo8WULtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTA4MjIwOTQ4NDJaFw0yNTA4MjUxMDE2NDJaMDMxMTAvBgNV BAMTKEUzNTg5RUM0RkVBMEY1QjYwMEQyMUQ4QzJCMTFCMzc1QUFENEMxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EevhhrhVdWvUju/VH7geBFop b3BU76hakoV7BGyvMEmWC13vtINMy+xNOAytHxlJPSum7TUT/cwohnxNlKSHyY8i VnPx8d3b/S8D4Z8s/zId2nNelaF1MYf3qPItoJNb4E7YLvyKWkCPHSH2oEhU4Zem LQO3WYEvx/mCguyMqrt4yPi+2ruE7YOUNudSkBzGVLBAPQIlg86gr4x1HfFHTz0R AotO7YXljOVlyIdF5c9hTA0z0YDd3QgycV/5tylXlq6iZjvPEWK83pFxYhQDQRQc Bu2hYNuV7ZD0NI46Xh8Yb10rqFfV8RYwDnPt8BeVwqAdjKqLInnoGO3kXIrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41iexP6g9bYA0h2MKxGzdarUwc8wHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvZe8Jtwqt3HhaNbF3DZqEeYfWI4ftJ8gd2 Hn/CFFfCtE28Uo8GLGv5e8zlhFVd+Mi5z45yIDVGyiur7Rt5aNaXBpt7LNWxsaDM cg5uDOPW84qkXudaML4PU80dVF5jOIxIsnLGUA3SHyoCqj1rew8viLRXhxkMFQuJ 9aUwts8tGguKyIph0XfeneSQCON+IFlWYF/D1KgQKWDPfKhPyFLyzwsucxTa1DzM HGG9mmnllSXwP4bQAm8ifkjREu/afa4DxS3ymiFEItKDtrNGWaE1MlB7jbTruJv/ uxO9xhrKAj3WwjtQDrDHvGPmP4A/GgmJNRKywDVnojPKT6WR92E= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:58 2025 by rpki-client