$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: gta/9QzE/TegYz/1UrSFtUfiqiWo/Y4iwiSBIeWL+Cs= Subject key identifier: 29:A7:14:6A:26:A8:E6:29:77:D3:FA:C7:20:9A:1A:1F:65:3A:77:AC Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 659282C6BCF49BEAC814D357B9D953A1E0ABADC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: FB Signing time: Sun 29 Jun 2025 14:31:32 +0000 Manifest this update: Sun 29 Jun 2025 14:26:32 +0000 Manifest next update: Wed 02 Jul 2025 19:56:32 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: W8G0UI303GcAW+wUDBPd2mFrNCo7+yWdJBcsorIJhfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:92:82:c6:bc:f4:9b:ea:c8:14:d3:57:b9:d9:53:a1:e0:ab:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Jun 29 14:26:32 2025 GMT Not After : Jul 2 19:56:32 2025 GMT Subject: CN=29A7146A26A8E62977D3FAC7209A1A1F653A77AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:a6:86:6b:0e:55:6c:a4:a9:29:7d:0a:ac: 59:05:14:a9:dd:da:5d:49:96:2a:df:bf:9b:f8:d0: da:5f:a0:55:e6:3d:e5:71:bf:ab:b0:e8:1e:9d:5e: f3:ed:ea:d8:8a:81:ee:04:16:35:9a:a2:d1:be:43: 98:fa:6c:5f:03:b6:60:59:5a:a6:8c:ed:4e:bd:2c: 5d:50:c9:b1:2c:09:8a:51:bc:31:5f:79:b1:89:05: a1:02:b5:58:d2:73:21:50:9b:00:e7:7c:32:30:25: 7d:7e:bb:d6:8b:6a:a0:57:54:bc:1f:e3:b2:02:15: 80:18:e0:af:28:6b:b0:66:68:b1:b6:6d:27:31:fb: b2:d7:25:8b:92:8e:59:60:d4:2c:fc:2b:48:2f:42: 75:c8:f0:28:a8:9f:57:19:71:a6:8c:1f:22:68:2a: 4b:89:46:ef:e2:d4:f8:8b:1a:3a:87:39:05:62:99: 7b:d4:31:3f:31:cd:3e:a6:fa:03:12:3d:59:0a:7d: 70:5b:19:d2:11:e0:b4:d9:a9:99:6f:60:27:cc:95: 03:e0:47:93:14:a0:a7:c8:ea:8b:2d:37:59:0f:1a: 38:f7:50:97:38:c1:86:b9:31:ee:6a:e3:fc:46:15: f5:ce:de:d4:cb:7d:66:5a:cb:88:2d:c0:01:2c:48: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A7:14:6A:26:A8:E6:29:77:D3:FA:C7:20:9A:1A:1F:65:3A:77:AC X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:be:ec:10:86:bd:9d:c4:4c:25:11:9a:db:49:b7:14:62:0c: c6:08:f5:b6:6b:1a:08:3d:8d:9b:46:e2:af:41:b9:e6:f4:79: 4d:c5:d4:3f:b3:9c:af:2c:88:cf:08:05:43:10:45:e8:35:12: 0c:c0:df:1d:ea:98:fc:36:f1:89:99:ca:ae:fc:d3:38:1c:26: 83:cb:e7:62:c6:5d:e3:03:f0:43:09:5a:55:d6:bc:c7:04:05: 29:d2:9f:ad:ed:bb:82:0c:43:44:73:da:6f:eb:da:31:ab:4e: 58:2f:ce:77:70:ff:37:1d:ab:fb:12:46:c2:75:72:4f:69:d5: 96:eb:16:d1:9c:14:eb:6c:6d:ea:9b:eb:89:75:12:c6:c2:93: f0:46:1d:b6:a1:bb:c4:44:8f:8d:e5:d5:84:31:c4:d4:ac:66: c1:b6:44:7f:d2:ac:6b:61:6c:6c:dd:25:f6:23:a9:1f:4a:61: fa:18:f5:0d:12:1f:78:27:e8:e1:f3:db:a8:e0:bd:2f:69:e4: cc:95:bd:a2:8c:53:e7:a1:16:8d:d2:a2:b0:10:36:92:65:21: 52:c1:98:e9:c5:b5:11:e5:2c:ce:b2:76:7b:03:6b:06:81:c8: 01:1f:2b:29:d0:6b:36:29:aa:d7:22:e2:00:55:68:c1:12:6f: f9:af:0a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZKCxrz0m+rIFNNXudlToeCrrcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTA2MjkxNDI2MzJaFw0yNTA3MDIxOTU2MzJaMDMxMTAvBgNV BAMTKDI5QTcxNDZBMjZBOEU2Mjk3N0QzRkFDNzIwOUExQTFGNjUzQTc3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZqaGaw5VbKSpKX0KrFkFFKnd 2l1Jlirfv5v40NpfoFXmPeVxv6uw6B6dXvPt6tiKge4EFjWaotG+Q5j6bF8DtmBZ WqaM7U69LF1QybEsCYpRvDFfebGJBaECtVjScyFQmwDnfDIwJX1+u9aLaqBXVLwf 47ICFYAY4K8oa7BmaLG2bScx+7LXJYuSjllg1Cz8K0gvQnXI8Cion1cZcaaMHyJo KkuJRu/i1PiLGjqHOQVimXvUMT8xzT6m+gMSPVkKfXBbGdIR4LTZqZlvYCfMlQPg R5MUoKfI6ostN1kPGjj3UJc4wYa5Me5q4/xGFfXO3tTLfWZay4gtwAEsSL8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKacUaiao5il30/rHIJoaH2U6d6wwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa+7BCGvZ3ETCURmttJtxRiDMYI9bZrGgg9 jZtG4q9Bueb0eU3F1D+znK8siM8IBUMQReg1EgzA3x3qmPw28YmZyq780zgcJoPL 52LGXeMD8EMJWlXWvMcEBSnSn63tu4IMQ0Rz2m/r2jGrTlgvzndw/zcdq/sSRsJ1 ck9p1ZbrFtGcFOtsbeqb64l1EsbCk/BGHbahu8REj43l1YQxxNSsZsG2RH/SrGth bGzdJfYjqR9KYfoY9Q0SH3gn6OHz26jgvS9p5MyVvaKMU+ehFo3SorAQNpJlIVLB mOnFtRHlLM6ydnsDawaByAEfKynQazYpqtci4gBVaMESb/mvCgU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:43:18 2025 by rpki-client