$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: 5l6skQT+gmTH7js3qyXqCD/LhRGj7WAShPWGnOveJy8= Subject key identifier: DA:BF:7A:D6:1B:E6:90:75:88:80:DD:BB:EB:D9:1B:D6:43:49:B9:ED Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 5095280326EFA4A414E5254EC197AFB338B4FFF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: B1 Signing time: Fri 22 Aug 2025 20:12:23 +0000 Manifest this update: Fri 22 Aug 2025 20:07:23 +0000 Manifest next update: Tue 26 Aug 2025 05:07:23 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: vM7yeTtRwaoeNctpD2zdh14H07/0Njhx2j3HHJ9AZ8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:95:28:03:26:ef:a4:a4:14:e5:25:4e:c1:97:af:b3:38:b4:ff:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Aug 22 20:07:23 2025 GMT Not After : Aug 26 05:07:23 2025 GMT Subject: CN=DABF7AD61BE690758880DDBBEBD91BD64349B9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:4a:34:20:8e:59:ca:cd:06:80:2b:75:33: 97:09:1d:78:37:f6:8d:22:6c:ff:47:95:ea:71:57: 4b:4b:28:48:a1:01:9f:a9:37:d1:3d:ca:c4:57:7c: cd:92:e5:c9:0b:6b:6f:66:5c:1d:9c:f0:38:ea:5b: 1c:a1:f2:46:8b:2a:94:cf:c2:f0:cb:91:4b:f0:ac: af:ad:19:cf:7a:a9:d4:8f:f0:aa:cf:e2:68:2e:cc: 33:94:72:d7:05:94:71:4f:5f:de:6b:1c:c5:f4:25: ad:e6:bf:a3:eb:3e:6b:20:2c:67:07:36:10:87:42: 57:ac:92:2d:9e:d7:2e:a8:32:32:8a:a6:bf:02:b5: 97:3c:c0:36:a0:be:bc:21:4a:ad:72:77:c3:dd:90: 52:77:bd:0e:cf:fc:74:2b:1b:33:d7:82:fc:09:29: 48:e4:d3:97:c7:d6:33:1d:70:7f:06:56:b4:3b:55: 32:98:7f:66:c3:a6:60:dc:25:f3:0c:c4:10:82:26: 6c:32:e8:75:8a:66:ec:51:92:26:5f:e2:e5:3e:cd: bb:3e:2b:26:b7:ae:d2:6e:68:28:a8:72:ef:b3:65: 19:68:77:51:c3:7b:42:8b:5f:cc:29:db:05:82:58: dd:94:56:8f:21:24:56:2a:d8:6a:3b:dc:3b:42:13: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:7A:D6:1B:E6:90:75:88:80:DD:BB:EB:D9:1B:D6:43:49:B9:ED X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e8:96:d4:b1:61:8b:4b:b0:70:dc:f6:be:2b:d3:60:d3:b8: 20:d9:a5:b1:4c:47:7a:9e:41:99:e7:ab:fa:f5:da:4b:04:c0: e1:31:64:ac:55:7b:6f:02:88:f4:62:5c:38:f7:7c:c3:4c:d2: 2c:32:94:c1:a5:28:98:25:59:f6:39:b7:fc:13:59:eb:47:80: c5:1a:5c:aa:56:72:fd:31:42:ee:5c:87:b7:87:80:dc:a7:ec: ec:b4:66:74:99:d8:4b:97:ef:83:e9:1e:9e:7b:fe:11:8b:2d: 48:db:f2:5d:b6:ec:f3:7f:94:ae:06:02:63:29:ed:63:dd:6e: ff:71:aa:12:15:14:94:d1:83:10:78:b3:1c:7a:0a:df:d1:27: 59:55:b9:f6:83:d2:1c:dd:2f:d0:34:b6:0f:56:17:f8:80:17: dc:f5:4c:85:39:3a:80:72:b9:eb:9f:21:7d:94:1c:1b:f7:a9: f2:55:63:1a:6b:e6:46:a5:8d:79:00:89:59:be:f0:4d:99:67: 26:a6:10:c0:10:2d:15:5e:28:26:28:68:2a:7a:78:34:37:c3: 8c:02:d0:ae:7a:1b:70:f2:54:90:0d:26:eb:48:98:e8:c7:eb: 14:98:27:5f:78:35:ef:26:99:ae:68:92:d2:a8:af:94:82:6e: 86:c2:99:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJUoAybvpKQU5SVOwZevszi0//cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA4MjIyMDA3MjNaFw0yNTA4MjYwNTA3MjNaMDMxMTAvBgNV BAMTKERBQkY3QUQ2MUJFNjkwNzU4ODgwRERCQkVCRDkxQkQ2NDM0OUI5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChF0o0II5Zys0GgCt1M5cJHXg3 9o0ibP9HlepxV0tLKEihAZ+pN9E9ysRXfM2S5ckLa29mXB2c8DjqWxyh8kaLKpTP wvDLkUvwrK+tGc96qdSP8KrP4mguzDOUctcFlHFPX95rHMX0Ja3mv6PrPmsgLGcH NhCHQleski2e1y6oMjKKpr8CtZc8wDagvrwhSq1yd8PdkFJ3vQ7P/HQrGzPXgvwJ KUjk05fH1jMdcH8GVrQ7VTKYf2bDpmDcJfMMxBCCJmwy6HWKZuxRkiZf4uU+zbs+ Kya3rtJuaCiocu+zZRlod1HDe0KLX8wp2wWCWN2UVo8hJFYq2Go73DtCE1WVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2r961hvmkHWIgN2769kb1kNJue0wHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALboltSxYYtLsHDc9r4r02DTuCDZpbFMR3qe QZnnq/r12ksEwOExZKxVe28CiPRiXDj3fMNM0iwylMGlKJglWfY5t/wTWetHgMUa XKpWcv0xQu5ch7eHgNyn7Oy0ZnSZ2EuX74PpHp57/hGLLUjb8l227PN/lK4GAmMp 7WPdbv9xqhIVFJTRgxB4sxx6Ct/RJ1lVufaD0hzdL9A0tg9WF/iAF9z1TIU5OoBy ueufIX2UHBv3qfJVYxpr5kaljXkAiVm+8E2ZZyamEMAQLRVeKCYoaCp6eDQ3w4wC 0K56G3DyVJANJutImOjH6xSYJ194Ne8mma5oktKor5SCbobCmTM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:33 2025 by rpki-client