$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: LTqcxW+x/YFMcaAaRK0gAuAkdoZ5H4AE7h8MI70aqMQ= Subject key identifier: 93:95:70:84:58:65:86:FB:74:41:BF:4B:E5:2A:47:DA:7B:4C:08:94 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 790AC163A0B3E23DB4DDE6897AB544166AE1E145 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 2B Signing time: Sat 28 Jun 2025 23:51:25 +0000 Manifest this update: Sat 28 Jun 2025 23:46:25 +0000 Manifest next update: Wed 02 Jul 2025 09:35:25 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) 2: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: Hqu7lwTozVejIQzbYPDKtU8S774KbgxloMKrcPRfycI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0a:c1:63:a0:b3:e2:3d:b4:dd:e6:89:7a:b5:44:16:6a:e1:e1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Jun 28 23:46:25 2025 GMT Not After : Jul 2 09:35:25 2025 GMT Subject: CN=93957084586586FB7441BF4BE52A47DA7B4C0894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:73:b9:a4:26:4d:09:74:d2:fc:1e:67:35: 05:4a:69:27:4c:eb:41:5a:35:55:92:ec:01:68:d3: a4:9b:53:ab:28:d5:91:49:cb:b4:e2:64:a1:53:59: 37:c6:af:da:5b:f7:b0:9c:52:40:62:3a:57:45:b6: 1e:cf:e8:be:eb:ba:a2:b6:76:b4:a0:a4:18:12:64: 79:c2:21:9c:22:97:bb:d9:f6:d1:7d:61:09:09:d2: e0:e7:93:ca:52:98:b2:7b:5a:6f:af:e6:b1:b7:f6: 70:c2:ee:56:98:4a:bb:25:40:fd:69:51:3c:06:cb: 95:ba:15:78:ef:59:e8:c4:08:8e:99:d7:c0:be:e9: 60:b3:9c:ef:53:28:9b:49:a5:b5:00:5b:c0:7c:6a: be:fa:11:8a:d7:58:94:b7:ce:1e:9c:e6:f2:77:0c: 52:27:a5:13:81:a4:a8:8c:fc:4e:4f:55:b5:11:bf: d0:b7:13:32:d6:e3:cf:75:da:51:fe:f5:2e:68:7a: 47:6a:bd:3a:67:fd:70:66:63:11:bf:c0:14:8d:ac: b9:87:23:5a:cb:95:f0:22:2b:cd:cc:df:8b:69:43: db:04:a7:ac:f0:3a:b0:e5:00:30:94:16:bd:f3:5f: a6:63:8e:57:96:3d:32:e1:87:48:de:97:31:e2:45: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:95:70:84:58:65:86:FB:74:41:BF:4B:E5:2A:47:DA:7B:4C:08:94 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8d:05:5e:0a:79:ad:64:04:b7:8d:2c:5b:28:6f:4a:ef:b1: 28:4e:4b:4d:69:2d:94:11:bf:62:76:25:10:05:5a:3f:50:c3: cc:6d:63:0d:64:e2:2f:2c:6d:25:c9:6c:f6:a2:d4:af:6f:01: f5:76:52:6c:f8:0f:0b:1d:8d:e1:98:9a:50:71:43:aa:c2:08: 0e:f6:1d:9d:83:cf:a8:96:03:a7:1d:b2:cf:43:61:83:5b:02: da:b3:8b:92:d0:2f:cf:e3:b8:6a:22:b9:cd:e6:e3:7b:55:fc: d3:c7:67:9e:a0:f4:f0:7f:0d:75:d7:fe:21:9d:96:b2:d9:8e: c2:e5:5f:87:bf:70:d6:21:c8:9b:35:7b:3a:94:f5:fa:a2:50: 3c:05:56:15:65:2d:e8:1b:de:82:4d:c0:93:76:b8:5f:53:27: 4d:48:4e:10:b8:83:fd:d0:fd:66:8b:a6:b8:85:5f:a6:1b:c4: 70:fa:d3:e5:d4:a7:f9:c7:0b:69:f9:32:c9:c3:13:6d:ab:2f: cd:4f:01:88:f2:b5:5c:97:b3:72:dd:8c:c3:0b:82:d7:34:12: c4:3c:a2:8f:66:0a:97:47:6e:9a:08:99:fb:0b:2f:0b:b5:8d: 33:66:4f:e8:32:8d:a1:b5:7f:72:d7:14:ca:b6:84:73:b0:b8: 07:02:e8:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQrBY6Cz4j203eaJerVEFmrh4UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA2MjgyMzQ2MjVaFw0yNTA3MDIwOTM1MjVaMDMxMTAvBgNV BAMTKDkzOTU3MDg0NTg2NTg2RkI3NDQxQkY0QkU1MkE0N0RBN0I0QzA4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWHO5pCZNCXTS/B5nNQVKaSdM 60FaNVWS7AFo06SbU6so1ZFJy7TiZKFTWTfGr9pb97CcUkBiOldFth7P6L7ruqK2 drSgpBgSZHnCIZwil7vZ9tF9YQkJ0uDnk8pSmLJ7Wm+v5rG39nDC7laYSrslQP1p UTwGy5W6FXjvWejECI6Z18C+6WCznO9TKJtJpbUAW8B8ar76EYrXWJS3zh6c5vJ3 DFInpROBpKiM/E5PVbURv9C3EzLW48912lH+9S5oekdqvTpn/XBmYxG/wBSNrLmH I1rLlfAiK83M34tpQ9sEp6zwOrDlADCUFr3zX6ZjjleWPTLhh0jelzHiRZqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5VwhFhlhvt0Qb9L5SpH2ntMCJQwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2NBV4Kea1kBLeNLFsob0rvsShOS01pLZQR v2J2JRAFWj9Qw8xtYw1k4i8sbSXJbPai1K9vAfV2Umz4DwsdjeGYmlBxQ6rCCA72 HZ2Dz6iWA6cdss9DYYNbAtqzi5LQL8/juGoiuc3m43tV/NPHZ56g9PB/DXXX/iGd lrLZjsLlX4e/cNYhyJs1ezqU9fqiUDwFVhVlLegb3oJNwJN2uF9TJ01IThC4g/3Q /WaLpriFX6YbxHD60+XUp/nHC2n5MsnDE22rL81PAYjytVyXs3LdjMMLgtc0EsQ8 oo9mCpdHbpoImfsLLwu1jTNmT+gyjaG1f3LXFMq2hHOwuAcC6Ko= -----END CERTIFICATE-----Generated at Mon Jun 30 01:10:38 2025 by rpki-client