$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: 2E7hxi9WXAlGkCWSXbJkdeYtLUpt2mAJJm+atJObOow= Subject key identifier: 70:53:3B:33:58:27:2A:24:DA:26:80:A2:BF:F1:39:97:A2:24:57:9A Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 1EF72A2B9A05AEE3280BEE8FC1BEEDEEAA475FF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0241 Signing time: Sun 19 Oct 2025 05:01:17 +0000 Manifest this update: Sun 19 Oct 2025 04:56:17 +0000 Manifest next update: Wed 22 Oct 2025 08:18:17 +0000 Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) 2: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: 1rF+UvZ97CLzI2vCaZFAX9U8WUhwOb+cysPuRHq4Lik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f7:2a:2b:9a:05:ae:e3:28:0b:ee:8f:c1:be:ed:ee:aa:47:5f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Oct 19 04:56:17 2025 GMT Not After : Oct 22 08:18:17 2025 GMT Subject: CN=70533B3358272A24DA2680A2BFF13997A224579A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:b7:e7:26:d6:87:43:22:90:6c:a4:a0:5e: aa:52:cc:49:e3:81:f8:6d:37:91:92:92:5a:02:9e: 26:03:7a:90:57:f8:92:2a:85:2e:dc:83:c1:48:c4: d8:a5:ab:34:ea:80:92:ed:17:19:02:fb:6b:94:d2: 72:11:e0:e1:03:b0:d3:24:3a:3e:d4:f5:6c:4e:ae: cc:44:30:6a:10:50:c6:9a:e2:7c:50:93:7e:10:28: a1:3d:8d:39:ca:71:78:d8:d5:de:6d:47:46:db:38: 97:09:1b:4b:b1:0e:a7:e2:ec:06:70:7f:b3:15:68: 5b:2a:a0:2f:36:e0:ba:07:e6:8e:8f:fc:74:c2:e5: d4:19:14:82:29:82:c3:ff:c8:36:61:99:68:38:f1: 17:e4:ec:fe:8a:f0:bd:b2:74:9a:4f:be:81:a5:b6: 3a:ab:39:ef:8b:50:5a:d7:47:b8:2f:c5:e9:6f:be: 30:c0:2f:62:ff:9e:59:32:99:30:c9:fc:19:7e:b6: b7:3f:9d:d6:59:6d:34:9a:1b:cc:05:ce:bf:bd:cc: f5:d6:55:bf:19:9b:26:c5:f7:3a:a8:6d:e3:65:f5: 84:04:fb:12:dd:79:90:b1:01:15:73:09:ae:bb:9a: 10:90:3b:35:de:2d:a0:4c:fa:2a:37:b5:42:e3:e0: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:3B:33:58:27:2A:24:DA:26:80:A2:BF:F1:39:97:A2:24:57:9A X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a3:9f:73:a1:eb:aa:e0:27:42:f8:55:76:5f:45:ae:bb:7e: 20:17:d6:3b:ec:4c:ff:c6:6f:9e:6a:97:37:78:4b:b1:55:9d: 1e:8c:bc:8a:f2:e6:02:5b:d7:9a:a9:7c:15:79:d2:48:c9:6c: e6:ee:cb:3b:81:89:02:6f:a8:76:00:e6:06:b2:e6:37:ba:38: 2f:7e:b9:66:18:f9:15:48:1d:ea:5d:8b:22:b7:e4:9f:9a:d6: b7:d5:5a:ed:e7:1f:45:65:ff:0a:79:83:20:b0:f9:f8:cb:cb: b8:45:a2:60:be:60:bb:ad:9c:c5:d0:87:88:8a:70:68:53:d7: 4c:04:95:b6:55:50:e1:9b:2e:f6:de:60:1b:55:b2:cc:d2:4a: 08:9c:d4:81:5a:8c:b5:18:2b:db:25:96:50:ae:dc:6a:17:76: 42:84:ee:bc:5d:5a:e4:d7:91:83:f2:b4:29:e3:8d:a9:1d:e2: 5c:98:37:7f:77:f7:09:d5:74:ae:f9:42:47:ff:a5:f4:f5:ec: 31:88:7c:b3:75:89:dc:a8:f4:22:60:2f:03:88:a5:92:f4:f9: 08:4b:52:8e:ec:3c:86:ec:d2:7b:d7:08:da:a4:70:0e:68:e5: 58:5b:2b:b0:c1:3a:80:72:9f:27:0a:44:dd:c0:cc:18:1b:0b: f6:f9:17:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvcqK5oFruMoC+6Pwb7t7qpHX/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTEwMTkwNDU2MTdaFw0yNTEwMjIwODE4MTdaMDMxMTAvBgNV BAMTKDcwNTMzQjMzNTgyNzJBMjREQTI2ODBBMkJGRjEzOTk3QTIyNDU3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8rfnJtaHQyKQbKSgXqpSzEnj gfhtN5GSkloCniYDepBX+JIqhS7cg8FIxNilqzTqgJLtFxkC+2uU0nIR4OEDsNMk Oj7U9WxOrsxEMGoQUMaa4nxQk34QKKE9jTnKcXjY1d5tR0bbOJcJG0uxDqfi7AZw f7MVaFsqoC824LoH5o6P/HTC5dQZFIIpgsP/yDZhmWg48Rfk7P6K8L2ydJpPvoGl tjqrOe+LUFrXR7gvxelvvjDAL2L/nlkymTDJ/Bl+trc/ndZZbTSaG8wFzr+9zPXW Vb8ZmybF9zqobeNl9YQE+xLdeZCxARVzCa67mhCQOzXeLaBM+io3tULj4KBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFM7M1gnKiTaJoCiv/E5l6IkV5owHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSjn3Oh66rgJ0L4VXZfRa67fiAX1jvsTP/G b55qlzd4S7FVnR6MvIry5gJb15qpfBV50kjJbObuyzuBiQJvqHYA5gay5je6OC9+ uWYY+RVIHepdiyK35J+a1rfVWu3nH0Vl/wp5gyCw+fjLy7hFomC+YLutnMXQh4iK cGhT10wElbZVUOGbLvbeYBtVsszSSgic1IFajLUYK9slllCu3GoXdkKE7rxdWuTX kYPytCnjjakd4lyYN3939wnVdK75Qkf/pfT17DGIfLN1idyo9CJgLwOIpZL0+QhL Uo7sPIbs0nvXCNqkcA5o5VhbK7DBOoBynycKRN3AzBgbC/b5FzY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:16 2025 by rpki-client