$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: Y461F87g46lP15MSktTS7+bbAWqGQMpz5cWTB7uBHEY= Subject key identifier: 0D:6B:AA:74:EA:56:30:75:F2:C7:22:DB:06:6D:A0:58:6C:7E:44:DD Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 27EADD0348D5749D951FB6984E785FCCF048B920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 5E Signing time: Tue 01 Jul 2025 17:11:21 +0000 Manifest this update: Tue 01 Jul 2025 17:06:21 +0000 Manifest next update: Sat 05 Jul 2025 04:04:21 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: uk+GFOMVO3Ojni6+7lQQiw9KOo4yyDiWp/1DVjMebVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ea:dd:03:48:d5:74:9d:95:1f:b6:98:4e:78:5f:cc:f0:48:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Jul 1 17:06:21 2025 GMT Not After : Jul 5 04:04:21 2025 GMT Subject: CN=0D6BAA74EA563075F2C722DB066DA0586C7E44DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:39:19:ad:fa:f7:6a:95:85:67:cb:01:7c: 72:92:75:aa:9f:dc:70:71:e3:5d:22:bf:42:c6:4f: f8:74:a7:22:dd:38:ae:f1:90:26:73:86:a8:fa:43: 13:76:f8:47:c5:cf:cc:ac:ad:1c:70:32:95:e1:26: 6c:40:a1:f8:be:ee:62:92:34:36:72:11:c2:b3:2e: 9f:f5:1d:32:60:03:be:79:07:af:27:ab:d9:51:93: 55:12:7b:18:88:b4:ca:da:4e:f1:9d:28:c7:74:bb: 49:93:c3:fa:3a:30:72:0e:15:de:17:93:54:d4:f3: 61:7b:48:7d:f5:07:e3:26:5e:3b:14:99:9c:77:17: d5:09:62:e0:ab:e9:ee:74:6f:59:cc:24:cc:cc:39: 64:35:26:53:53:72:d2:42:b9:70:70:76:08:08:c3: ab:7b:a5:8f:65:61:df:d9:e3:f0:eb:2b:a5:6b:96: f9:d4:67:f6:a6:cd:f4:13:47:f3:b9:e6:cf:15:6d: 74:dd:77:2d:21:83:24:25:b8:bb:d9:83:ba:51:22: e8:6d:df:5c:06:b4:04:a3:86:39:33:b1:fe:7b:4a: 24:cb:bb:ce:b5:e1:12:2c:bb:92:59:5d:0d:97:f7: b1:f7:9f:01:d8:f5:b8:09:20:d1:19:fb:ad:e6:e9: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:AA:74:EA:56:30:75:F2:C7:22:DB:06:6D:A0:58:6C:7E:44:DD X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:8f:7a:c6:0e:bc:09:89:0e:16:72:43:b1:fa:a0:ba:60:bd: ba:0e:c7:f0:98:47:66:ac:1f:3e:df:b0:fd:c5:9b:34:fd:22: e4:5a:f5:0a:fe:d5:b8:41:57:7e:42:ad:49:18:dd:0c:87:d0: 76:0f:ad:2b:1d:ea:fe:08:b4:46:05:1a:47:ac:93:53:26:12: 1c:04:bc:76:0d:ee:75:b8:98:9d:5b:5a:04:4d:00:e5:64:ee: 45:bd:1f:43:fa:72:4f:d1:58:e1:6e:c8:f6:92:fc:59:b0:16: 20:3c:a8:0e:1c:03:09:f7:58:47:95:97:c7:4f:18:2d:89:ff: 29:41:4d:b9:45:3d:64:55:65:19:26:be:a8:cf:b7:e5:9e:d6: bd:e7:cb:9f:15:4e:2a:6e:c7:65:00:f6:2c:d7:a1:3d:78:f3: 69:bc:bf:4a:b3:f1:fc:96:78:b2:d4:18:15:5c:81:b3:63:84: 08:ce:15:1b:57:65:87:4b:e1:3e:41:2e:46:56:4e:8a:ab:0d: 2f:d5:89:ec:b2:78:4d:37:cb:17:07:05:c9:46:3e:55:76:be: 9a:c5:79:0a:4b:e1:38:08:45:8e:e4:05:8f:cf:75:d7:3e:e5: 6a:2e:92:e0:bd:a5:13:55:cb:44:04:2c:b0:7f:45:b4:9e:39: e1:93:83:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+rdA0jVdJ2VH7aYTnhfzPBIuSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTA3MDExNzA2MjFaFw0yNTA3MDUwNDA0MjFaMDMxMTAvBgNV BAMTKDBENkJBQTc0RUE1NjMwNzVGMkM3MjJEQjA2NkRBMDU4NkM3RTQ0REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mTkZrfr3apWFZ8sBfHKSdaqf 3HBx410iv0LGT/h0pyLdOK7xkCZzhqj6QxN2+EfFz8ysrRxwMpXhJmxAofi+7mKS NDZyEcKzLp/1HTJgA755B68nq9lRk1USexiItMraTvGdKMd0u0mTw/o6MHIOFd4X k1TU82F7SH31B+MmXjsUmZx3F9UJYuCr6e50b1nMJMzMOWQ1JlNTctJCuXBwdggI w6t7pY9lYd/Z4/DrK6VrlvnUZ/amzfQTR/O55s8VbXTddy0hgyQluLvZg7pRIuht 31wGtASjhjkzsf57SiTLu8614RIsu5JZXQ2X97H3nwHY9bgJINEZ+63m6aV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWuqdOpWMHXyxyLbBm2gWGx+RN0wHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaPesYOvAmJDhZyQ7H6oLpgvboOx/CYR2as Hz7fsP3FmzT9IuRa9Qr+1bhBV35CrUkY3QyH0HYPrSsd6v4ItEYFGkesk1MmEhwE vHYN7nW4mJ1bWgRNAOVk7kW9H0P6ck/RWOFuyPaS/FmwFiA8qA4cAwn3WEeVl8dP GC2J/ylBTblFPWRVZRkmvqjPt+We1r3ny58VTipux2UA9izXoT1482m8v0qz8fyW eLLUGBVcgbNjhAjOFRtXZYdL4T5BLkZWToqrDS/VieyyeE03yxcHBclGPlV2vprF eQpL4TgIRY7kBY/Pddc+5WoukuC9pRNVy0QELLB/RbSeOeGTgzU= -----END CERTIFICATE-----Generated at Tue Jul 1 23:22:56 2025 by rpki-client