$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: legpq/2Aj7Xn4qHJvsTw5z0qZoHvtP88ip9VLWA0UGo= Subject key identifier: ED:C8:9B:54:72:54:7A:43:C9:AE:EC:60:EA:37:05:46:4A:CD:12:0E Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 50F2D78A9EA28F00A01040082B9671B200350948 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 74 Signing time: Thu 21 Aug 2025 05:41:25 +0000 Manifest this update: Thu 21 Aug 2025 05:36:25 +0000 Manifest next update: Sun 24 Aug 2025 14:27:25 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: oPcFLnYRnyUrp9Q58LbFpaVpkqmrZdAX4lfYc603Aiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f2:d7:8a:9e:a2:8f:00:a0:10:40:08:2b:96:71:b2:00:35:09:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Aug 21 05:36:25 2025 GMT Not After : Aug 24 14:27:25 2025 GMT Subject: CN=EDC89B5472547A43C9AEEC60EA3705464ACD120E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:87:ae:65:63:4d:7c:38:94:3e:fa:c8:50: 6a:34:9b:98:7c:13:9e:07:76:1c:9c:36:fb:7d:74: 49:0e:fa:fb:fb:19:89:fe:a9:58:0a:0a:52:b4:89: b5:98:1e:fd:1b:20:5f:aa:7b:e8:44:56:f5:1c:54: bd:f8:70:da:30:62:65:4d:d7:0b:cd:21:7d:17:22: 5b:7f:8f:cf:79:b7:b9:dd:e5:f4:7c:ad:0b:76:75: fa:ae:a3:af:9c:21:48:e9:6d:57:a6:78:b5:e2:44: 49:e0:be:bb:ee:53:f9:17:21:6e:25:f8:d1:ad:96: 30:84:41:87:79:6e:fa:7d:48:f2:98:41:0b:90:bb: 80:a6:23:ed:8a:f1:25:22:94:c2:3d:fe:e8:a9:1f: 6d:38:bd:09:e6:d6:be:1a:b3:4d:72:02:c6:3c:8d: b9:7e:ed:d7:f3:0c:2b:ea:c9:95:94:e3:9f:4a:69: d5:c0:e0:f3:38:3d:da:bf:ba:85:5d:44:12:38:1e: ad:89:c2:68:1d:da:60:51:40:b6:db:5f:94:29:8a: 70:9e:01:1d:3b:34:53:33:d7:82:e4:b2:8d:5a:3d: 03:42:6b:2e:4d:49:10:78:51:53:de:59:83:98:82: b8:dc:da:9f:6e:b0:4f:0b:fa:d4:70:ed:7f:11:af: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C8:9B:54:72:54:7A:43:C9:AE:EC:60:EA:37:05:46:4A:CD:12:0E X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5e:90:85:09:98:d7:fc:6e:a8:82:6a:22:5e:d2:eb:66:c7: 07:15:a2:29:6c:8c:d3:71:42:94:fb:84:dc:45:46:9c:ad:6a: 77:21:24:b2:80:a7:c5:60:dd:8d:5d:71:d5:33:1c:a8:87:7b: f5:04:c5:72:83:38:73:f8:31:be:56:66:63:df:4e:32:d0:2b: 98:33:ad:7c:e2:84:67:f6:16:bc:49:72:7c:66:16:ca:fd:79: 1e:4a:22:24:bf:86:93:37:0e:8c:b6:95:23:01:d0:85:f5:2e: ad:74:88:3e:f8:57:d6:b7:0f:5f:6a:35:30:81:a6:09:b7:f9: af:0e:29:4e:6f:fb:4e:a0:58:ab:27:98:11:ca:35:51:eb:18: 17:96:76:40:2f:58:4f:4f:87:cc:c2:7e:6a:d9:5b:e3:19:15: 70:ee:a1:aa:8e:8d:cf:e0:e0:1c:77:76:55:07:71:4e:ed:b8: b9:fd:e1:11:02:30:52:a9:cb:30:cc:0b:83:02:76:dd:48:45: 8e:72:47:b8:85:a5:42:0c:3f:6f:50:ae:e3:50:44:9a:2b:af: f4:90:ec:0b:ee:3f:72:a8:70:a8:49:7b:82:e1:d2:db:5d:3b: 27:20:6a:c5:db:2a:5c:5e:e1:3c:4f:4d:57:85:b9:d9:d9:a1: d2:fa:5f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPLXip6ijwCgEEAIK5ZxsgA1CUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTA4MjEwNTM2MjVaFw0yNTA4MjQxNDI3MjVaMDMxMTAvBgNV BAMTKEVEQzg5QjU0NzI1NDdBNDNDOUFFRUM2MEVBMzcwNTQ2NEFDRDEyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedoeuZWNNfDiUPvrIUGo0m5h8 E54HdhycNvt9dEkO+vv7GYn+qVgKClK0ibWYHv0bIF+qe+hEVvUcVL34cNowYmVN 1wvNIX0XIlt/j895t7nd5fR8rQt2dfquo6+cIUjpbVemeLXiREngvrvuU/kXIW4l +NGtljCEQYd5bvp9SPKYQQuQu4CmI+2K8SUilMI9/uipH204vQnm1r4as01yAsY8 jbl+7dfzDCvqyZWU459KadXA4PM4Pdq/uoVdRBI4Hq2Jwmgd2mBRQLbbX5QpinCe AR07NFMz14Lkso1aPQNCay5NSRB4UVPeWYOYgrjc2p9usE8L+tRw7X8Rr3j5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cibVHJUekPJruxg6jcFRkrNEg4wHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpekIUJmNf8bqiCaiJe0utmxwcVoilsjNNx QpT7hNxFRpytanchJLKAp8Vg3Y1dcdUzHKiHe/UExXKDOHP4Mb5WZmPfTjLQK5gz rXzihGf2FrxJcnxmFsr9eR5KIiS/hpM3Doy2lSMB0IX1Lq10iD74V9a3D19qNTCB pgm3+a8OKU5v+06gWKsnmBHKNVHrGBeWdkAvWE9Ph8zCfmrZW+MZFXDuoaqOjc/g 4Bx3dlUHcU7tuLn94RECMFKpyzDMC4MCdt1IRY5yR7iFpUIMP29QruNQRJorr/SQ 7AvuP3KocKhJe4Lh0ttdOycgasXbKlxe4TxPTVeFudnZodL6X50= -----END CERTIFICATE-----Generated at Sat Aug 23 13:29:52 2025 by rpki-client