$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: wLR16GlLwMblosIY2w3oqIAAAsi559VzXxSdiif1Jr4= Subject key identifier: 35:62:6B:68:82:D3:28:40:7F:C6:CD:06:E6:19:BC:E6:DF:EC:1B:96 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 131EF0224EB166A7A9CB38AE4B7407A62F1036A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 8E Signing time: Sun 19 Oct 2025 23:41:23 +0000 Manifest this update: Sun 19 Oct 2025 23:36:23 +0000 Manifest next update: Thu 23 Oct 2025 09:06:23 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: bU5jBkR+jy7btQNnO3Ra7B+fGzmcQ5rK798YSm/VjmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1e:f0:22:4e:b1:66:a7:a9:cb:38:ae:4b:74:07:a6:2f:10:36:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Oct 19 23:36:23 2025 GMT Not After : Oct 23 09:06:23 2025 GMT Subject: CN=35626B6882D328407FC6CD06E619BCE6DFEC1B96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:1c:a5:12:71:4a:e1:23:ed:7c:00:aa:f5: 9c:1e:98:6b:a9:5e:c7:92:0d:3c:78:62:a9:47:8a: a9:05:b0:63:b4:df:ae:25:48:b1:11:f8:39:b9:24: da:1f:a7:78:55:ac:59:e6:ae:61:65:f3:a9:ab:71: 28:6a:5f:65:b9:b0:fa:f8:b2:d2:ea:4a:ed:ae:1c: 02:3e:1f:79:ea:5e:0e:1d:f5:9f:f0:74:2f:b8:50: 74:5b:61:7c:5b:f7:10:c2:81:10:e0:82:04:61:47: c7:40:d4:5a:a9:36:c7:10:08:55:d1:27:4c:ad:49: 9e:f2:ef:04:e0:1a:2c:df:40:14:48:03:0a:61:90: 7a:fa:3e:a4:22:81:42:b4:1c:e8:3d:d9:25:e6:9b: 0f:85:56:d2:a9:6b:a5:bf:e6:fc:3d:9e:cc:9d:50: 42:e8:42:45:15:bc:d6:d6:41:90:6f:68:19:66:d5: 09:60:8d:3f:6b:76:3e:d4:11:e2:d2:6d:ce:0c:fe: 98:41:2f:66:66:9e:83:86:8b:cb:80:e7:78:42:06: 49:0e:75:a0:86:94:0e:c6:70:c9:19:92:e1:ea:73: 9b:89:0c:12:ab:a7:c2:a4:98:85:20:29:a6:08:8e: 68:56:4a:36:7a:bf:a3:92:e3:e1:75:c1:9e:8f:88: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:6B:68:82:D3:28:40:7F:C6:CD:06:E6:19:BC:E6:DF:EC:1B:96 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:29:6c:1a:77:67:16:d3:64:34:7a:5b:68:b1:ae:06:ab:cf: 06:20:54:f0:3f:e0:3e:8f:26:2e:b6:43:87:23:d6:ed:13:f7: b7:09:b1:dc:59:09:ee:95:7b:7a:d9:15:7d:e0:21:86:89:66: fe:a8:a9:26:29:27:f3:e8:2f:4c:9a:df:fc:39:c2:8e:27:9a: 33:98:30:af:82:89:c9:fc:1c:a1:bf:79:a3:2f:03:0d:fd:55: 3e:d0:c5:35:7f:7e:25:e8:cb:3c:90:24:5a:fa:43:55:d1:4d: bd:b1:40:fa:7c:3e:20:8c:f3:53:67:c4:48:d1:62:71:78:29: 50:4a:5b:8b:3f:85:72:b1:cf:ef:72:1f:80:1b:3b:5a:2c:23: 29:09:68:6f:8d:50:65:ca:1e:d1:3d:88:00:37:13:ab:67:1f: 02:ee:55:ed:98:25:e6:47:d9:e5:21:b3:e4:4b:41:ba:b4:e0: f9:f4:8f:bd:a7:ea:d1:2b:43:c1:b8:6e:99:16:08:72:db:f4: fd:e3:dd:cd:2a:78:fa:ea:5a:df:84:53:34:b2:56:eb:fb:3e: 64:29:61:66:26:75:12:78:85:14:14:db:08:60:c2:ca:fe:cb: 98:e8:03:2a:49:c9:b4:a0:c2:f6:06:99:fd:83:43:a4:c4:0e: 24:c0:5a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEx7wIk6xZqepyziuS3QHpi8QNqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTEwMTkyMzM2MjNaFw0yNTEwMjMwOTA2MjNaMDMxMTAvBgNV BAMTKDM1NjI2QjY4ODJEMzI4NDA3RkM2Q0QwNkU2MTlCQ0U2REZFQzFCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdBylEnFK4SPtfACq9ZwemGup XseSDTx4YqlHiqkFsGO0364lSLER+Dm5JNofp3hVrFnmrmFl86mrcShqX2W5sPr4 stLqSu2uHAI+H3nqXg4d9Z/wdC+4UHRbYXxb9xDCgRDgggRhR8dA1FqpNscQCFXR J0ytSZ7y7wTgGizfQBRIAwphkHr6PqQigUK0HOg92SXmmw+FVtKpa6W/5vw9nsyd UELoQkUVvNbWQZBvaBlm1QlgjT9rdj7UEeLSbc4M/phBL2ZmnoOGi8uA53hCBkkO daCGlA7GcMkZkuHqc5uJDBKrp8KkmIUgKaYIjmhWSjZ6v6OS4+F1wZ6PiLUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWJraILTKEB/xs0G5hm85t/sG5YwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0pbBp3ZxbTZDR6W2ixrgarzwYgVPA/4D6P Ji62Q4cj1u0T97cJsdxZCe6Ve3rZFX3gIYaJZv6oqSYpJ/PoL0ya3/w5wo4nmjOY MK+Cicn8HKG/eaMvAw39VT7QxTV/fiXoyzyQJFr6Q1XRTb2xQPp8PiCM81NnxEjR YnF4KVBKW4s/hXKxz+9yH4AbO1osIykJaG+NUGXKHtE9iAA3E6tnHwLuVe2YJeZH 2eUhs+RLQbq04Pn0j72n6tErQ8G4bpkWCHLb9P3j3c0qePrqWt+EUzSyVuv7PmQp YWYmdRJ4hRQU2whgwsr+y5joAypJybSgwvYGmf2DQ6TEDiTAWg8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:32:16 2025 by rpki-client