$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: bjLeTrNf3c+lAwo0TryhlWvrPAvffA0x3nUkxt3cDu8= Subject key identifier: 44:81:2D:A1:71:B4:03:B6:4D:E2:67:D5:26:22:7A:C7:0F:7A:F9:10 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 7D5E62E0E9A81B6520EB64E0F96E1B289ACEF1CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 5D Signing time: Mon 20 Oct 2025 02:11:27 +0000 Manifest this update: Mon 20 Oct 2025 02:06:27 +0000 Manifest next update: Thu 23 Oct 2025 02:58:27 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: JpE7oARHlaadatEP3diCJfefJMxkzylFmHGNSOJNIyI=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5e:62:e0:e9:a8:1b:65:20:eb:64:e0:f9:6e:1b:28:9a:ce:f1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Oct 20 02:06:27 2025 GMT Not After : Oct 23 02:58:27 2025 GMT Subject: CN=44812DA171B403B64DE267D526227AC70F7AF910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:c2:6e:7d:65:1f:19:35:11:76:68:25:82: 79:60:91:fd:1b:12:b6:65:d7:b1:b9:42:c9:f1:5c: f9:67:9d:c5:68:86:2b:54:38:b8:00:11:6e:65:ed: b2:9c:83:87:d2:2a:e3:1d:16:af:38:ba:9a:db:cf: ee:2d:83:75:04:1a:60:ef:fc:fe:32:af:97:f9:8a: 7b:da:ac:c7:3f:16:1a:72:55:d3:7e:1a:0b:1a:1a: c3:90:b2:09:fc:f5:6b:71:13:0d:87:8e:31:53:1c: 43:19:45:71:d6:de:98:6f:1a:2b:6d:59:72:f4:3f: d4:e4:37:1f:d1:6a:68:6a:3d:f1:50:cd:58:1e:5d: 13:18:c0:1e:ca:db:73:f9:19:e8:19:4f:42:f5:ec: 1d:ea:e2:d4:45:9b:7c:df:05:4e:cb:21:f0:6a:d2: 77:46:e9:42:81:b0:93:ab:b7:9f:88:75:89:e2:6f: b4:2e:97:8f:cf:f4:0e:49:8d:28:f8:34:14:d4:5b: 8d:ff:a8:a1:e0:40:29:38:43:75:00:71:e3:84:7b: e6:75:a0:0d:18:51:b3:15:ea:c5:c8:af:e2:8b:a4: 45:57:a7:f7:7a:ef:1d:5f:29:5e:54:ca:df:e1:db: ae:4e:6f:12:66:31:93:a3:05:e7:77:09:40:47:29: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:81:2D:A1:71:B4:03:B6:4D:E2:67:D5:26:22:7A:C7:0F:7A:F9:10 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:08:fc:1e:de:39:c8:0b:a9:b2:02:5d:13:9a:8e:e6:78:fd: dc:b9:e6:c7:cf:21:e0:07:5c:34:c6:bc:a4:ef:1e:0e:ba:8f: ea:9f:18:c0:08:9f:d8:25:6a:03:4a:5b:5c:67:3e:34:a2:01: 6f:15:27:17:12:8b:25:8e:1f:23:5b:97:8a:cd:fe:b3:f2:7e: f3:5f:a6:9e:d3:6a:90:31:13:76:26:0e:a3:f4:d0:93:f4:02: 79:a7:38:af:6f:ce:0f:a1:49:40:e2:a0:f5:ae:49:a5:c6:bb: fd:85:9a:c2:ce:5d:85:3f:fc:2a:84:28:85:c3:0f:27:60:97: 70:e8:63:59:a7:5c:bd:af:98:02:15:b1:10:5a:ca:04:2f:ff: d5:98:00:ee:4d:c1:60:9c:60:c3:fa:4a:8e:9e:5b:d9:9e:c2: 07:54:9e:36:60:73:ca:92:d8:c8:25:dd:5c:be:5d:a0:63:32: b0:bd:86:1b:ba:41:72:23:0f:4b:b7:d4:4f:20:1e:77:32:57: d5:37:d9:a7:a8:7b:c3:e6:13:26:ae:6d:14:fa:d8:ca:49:42: 79:6a:e4:ce:99:7b:ee:1b:0f:6b:3f:ec:fa:6b:0d:7a:fb:31: 77:ec:ef:44:4d:43:2c:4b:d9:4e:19:37:c2:88:e9:68:11:9d: f9:b2:8b:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfV5i4OmoG2Ug62Tg+W4bKJrO8c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTEwMjAwMjA2MjdaFw0yNTEwMjMwMjU4MjdaMDMxMTAvBgNV BAMTKDQ0ODEyREExNzFCNDAzQjY0REUyNjdENTI2MjI3QUM3MEY3QUY5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/sJufWUfGTURdmglgnlgkf0b ErZl17G5QsnxXPlnncVohitUOLgAEW5l7bKcg4fSKuMdFq84uprbz+4tg3UEGmDv /P4yr5f5invarMc/FhpyVdN+GgsaGsOQsgn89WtxEw2HjjFTHEMZRXHW3phvGitt WXL0P9TkNx/RamhqPfFQzVgeXRMYwB7K23P5GegZT0L17B3q4tRFm3zfBU7LIfBq 0ndG6UKBsJOrt5+IdYnib7Qul4/P9A5JjSj4NBTUW43/qKHgQCk4Q3UAceOEe+Z1 oA0YUbMV6sXIr+KLpEVXp/d67x1fKV5Uyt/h265ObxJmMZOjBed3CUBHKX4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIEtoXG0A7ZN4mfVJiJ6xw96+RAwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8I/B7eOcgLqbICXROajuZ4/dy55sfPIeAH XDTGvKTvHg66j+qfGMAIn9glagNKW1xnPjSiAW8VJxcSiyWOHyNbl4rN/rPyfvNf pp7TapAxE3YmDqP00JP0AnmnOK9vzg+hSUDioPWuSaXGu/2FmsLOXYU//CqEKIXD Dydgl3DoY1mnXL2vmAIVsRBaygQv/9WYAO5NwWCcYMP6So6eW9mewgdUnjZgc8qS 2Mgl3Vy+XaBjMrC9hhu6QXIjD0u31E8gHncyV9U32aeoe8PmEyaubRT62MpJQnlq 5M6Ze+4bD2s/7PprDXr7MXfs70RNQyxL2U4ZN8KI6WgRnfmyi5s= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:17 2025 by rpki-client