$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: 8zS/jdSHkGG2GMiiqLs6n0wZtizSwpeCHDixzWVSncI= Subject key identifier: D5:F6:F0:7F:7E:0D:7F:B6:CA:6A:C6:4B:D9:A7:AA:0C:06:39:74:90 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 31D35D3861772903DE3AEAFED03A63A490B8E798 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 0464 Signing time: Wed 23 Apr 2025 13:50:38 +0000 Manifest this update: Wed 23 Apr 2025 13:45:38 +0000 Manifest next update: Sat 26 Apr 2025 21:22:38 +0000 Files and hashes: 1: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: BkyUAjLFhkYTF0Hnp1FC4HAWxyi30SojTHwp3GdzR9c=) 2: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: OJRRTWPMmrOaPtCLRrFDVFaSiYmj3l4rR9ClzjJa+24=) 3: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: p+rm7vbA5ngIqMZr32PI/RSnvPiqpzUUqSs4LwHOSfI=) 4: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: 3Mmpn/Dag2AKulQ+C8mVDMduU1Rnc8mOjy91rhhCe8M=) 5: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: pKFoVOoiItolTGtLap7s0eMyZl8Vx6K/oquv5l8Ldss=) 6: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: EejqxQaLe95fpqkSYRlHTxb70l60dtmnNQ1/4qfd494=) 7: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: CnfRbobaPk9MDY310cd2407p48KXM88AEI8ZWvg/uB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d3:5d:38:61:77:29:03:de:3a:ea:fe:d0:3a:63:a4:90:b8:e7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Apr 23 13:45:38 2025 GMT Not After : Apr 26 21:22:38 2025 GMT Subject: CN=D5F6F07F7E0D7FB6CA6AC64BD9A7AA0C06397490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:14:cc:80:c6:69:9e:e8:ba:71:7a:43:0e: be:1e:82:83:9e:7c:78:55:f4:9d:eb:dc:17:cc:0f: 17:83:12:55:19:71:e2:dc:24:45:90:b1:7a:57:4f: d3:02:a5:25:37:51:15:10:79:c9:92:dd:92:28:1b: 79:0e:d4:58:f5:9b:d9:18:36:dc:26:9e:ae:bd:d0: e9:17:92:a1:db:20:4f:4b:16:52:6a:7a:cc:ea:a0: e2:d9:35:7f:95:08:4e:75:16:a8:38:20:a6:90:bd: e6:56:65:10:21:6a:32:1f:3c:b8:01:de:79:ea:21: 8b:e2:6b:92:45:5b:b7:a5:74:03:2e:21:d1:8f:3a: e2:73:f5:9d:f4:d5:6f:4b:c4:52:30:98:d7:78:66: 56:76:91:27:b6:be:a1:1d:42:09:72:94:2c:84:5c: 7f:d9:6c:95:4e:15:2f:c1:32:24:ed:bf:9e:c7:ff: 48:11:55:cf:b3:c2:93:b6:c3:93:ad:c9:94:21:63: 06:56:66:93:6c:54:2b:79:5e:a4:fa:a9:0a:59:e2: 78:de:d3:df:15:6e:17:a0:77:61:4b:26:7d:86:61: fb:b8:7d:c5:10:ca:6c:ee:bf:98:aa:9c:bc:6a:23: bf:cf:5a:a6:90:df:23:49:c8:33:8c:c6:94:14:68: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:F0:7F:7E:0D:7F:B6:CA:6A:C6:4B:D9:A7:AA:0C:06:39:74:90 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:be:a8:1f:d4:a2:b7:d5:5e:40:87:b5:ff:e0:17:90:f5:b5: 59:16:0f:a0:8e:37:80:49:c3:ea:16:96:7e:a9:68:d2:8d:08: a8:d3:80:ff:1e:7c:08:9a:8e:6c:27:a3:db:ca:b7:ac:ca:ae: 47:fb:7b:2d:b9:f3:d2:48:3c:5d:ae:89:f5:b4:c0:78:6b:f1: 73:85:49:7c:33:a4:df:e9:37:3a:27:c1:34:07:63:e0:24:1d: 2c:72:b5:6e:b1:7d:e8:82:8a:2a:09:db:cb:1e:6c:7d:e5:bc: da:7a:49:b6:23:64:48:2d:ff:6a:9c:1a:fa:a5:62:b3:f3:1f: 93:e7:bf:89:98:38:05:07:df:99:a5:5b:65:19:01:9a:0e:fa: ac:2e:59:a6:e5:08:d1:fc:97:d4:5b:87:d9:7a:e1:14:02:6b: a2:ed:14:13:e0:d4:da:dd:48:07:df:97:1e:9a:de:93:7f:6d: c1:f9:ce:ff:15:fe:26:7c:83:68:59:f9:ef:65:50:21:45:c7: 47:61:0f:7b:de:2d:da:e2:65:dc:ff:23:cd:0b:9b:d4:df:cf: 23:29:58:09:3e:16:b8:52:73:d3:72:e8:b1:9d:75:43:d7:73: 04:fa:be:d9:33:9d:11:1f:64:b9:a2:65:e4:69:4c:84:3a:e0: 13:aa:ba:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdNdOGF3KQPeOur+0DpjpJC455gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTA0MjMxMzQ1MzhaFw0yNTA0MjYyMTIyMzhaMDMxMTAvBgNV BAMTKEQ1RjZGMDdGN0UwRDdGQjZDQTZBQzY0QkQ5QTdBQTBDMDYzOTc0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMRTMgMZpnui6cXpDDr4egoOe fHhV9J3r3BfMDxeDElUZceLcJEWQsXpXT9MCpSU3URUQecmS3ZIoG3kO1Fj1m9kY Ntwmnq690OkXkqHbIE9LFlJqeszqoOLZNX+VCE51Fqg4IKaQveZWZRAhajIfPLgB 3nnqIYvia5JFW7eldAMuIdGPOuJz9Z301W9LxFIwmNd4ZlZ2kSe2vqEdQglylCyE XH/ZbJVOFS/BMiTtv57H/0gRVc+zwpO2w5OtyZQhYwZWZpNsVCt5XqT6qQpZ4nje 098Vbhegd2FLJn2GYfu4fcUQymzuv5iqnLxqI7/PWqaQ3yNJyDOMxpQUaPXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fbwf34Nf7bKasZL2aeqDAY5dJAwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG+qB/UorfVXkCHtf/gF5D1tVkWD6CON4BJ w+oWln6paNKNCKjTgP8efAiajmwno9vKt6zKrkf7ey2589JIPF2uifW0wHhr8XOF SXwzpN/pNzonwTQHY+AkHSxytW6xfeiCiioJ28sebH3lvNp6SbYjZEgt/2qcGvql YrPzH5Pnv4mYOAUH35mlW2UZAZoO+qwuWablCNH8l9Rbh9l64RQCa6LtFBPg1Nrd SAfflx6a3pN/bcH5zv8V/iZ8g2hZ+e9lUCFFx0dhD3veLdriZdz/I80Lm9TfzyMp WAk+FrhSc9Ny6LGddUPXcwT6vtkznREfZLmiZeRpTIQ64BOqunk= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net