$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: DilmZSJuVqk2e9BuNgxwOSLG2MubC2jaF1ZNfE/iFYU= Subject key identifier: D9:73:40:2A:C2:46:2F:DC:3F:EC:5A:C2:7F:FA:8B:A9:27:14:3A:71 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 763542B9E9E152FF14BE86EC331240DE1AB61B96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 0113 Signing time: Thu 21 Aug 2025 23:41:38 +0000 Manifest this update: Thu 21 Aug 2025 23:36:38 +0000 Manifest next update: Mon 25 Aug 2025 09:31:38 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: VgT6JoK2/xCjdn3Hw74aEXM5Flk98osydHD25ml56IA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:35:42:b9:e9:e1:52:ff:14:be:86:ec:33:12:40:de:1a:b6:1b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Aug 21 23:36:38 2025 GMT Not After : Aug 25 09:31:38 2025 GMT Subject: CN=D973402AC2462FDC3FEC5AC27FFA8BA927143A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:ea:35:40:21:ab:e5:76:87:a8:8d:a6:71: 0b:ab:bf:30:ac:68:fd:e5:d5:35:60:c1:a9:2d:7b: 1d:f9:7f:e0:b1:bf:a9:27:ed:ad:4c:8f:84:5c:48: 0c:b4:46:99:62:75:1b:f1:60:cb:75:ea:81:70:b0: f0:80:f7:bc:c4:29:53:f8:8e:24:af:c9:5e:4c:ac: a8:8b:c0:93:05:0f:71:0b:cf:2b:4b:ea:9c:2e:68: 40:e4:9f:35:74:6a:0d:ba:a4:2a:6c:ef:fb:00:f0: e1:16:2f:8c:42:e9:24:fd:26:4b:37:90:3e:04:04: 69:1d:f3:6b:52:44:e9:93:30:6d:22:62:eb:77:96: 2a:ea:f8:dd:c1:89:1a:55:c8:a5:64:5e:48:20:6c: 7e:2c:dc:b2:02:c0:28:52:aa:ad:d4:3d:5a:e5:ce: 8a:ef:9f:23:2e:8f:f3:21:a7:cc:18:b6:0b:b2:60: f3:33:59:d4:c8:d0:e2:28:e9:5f:33:d2:9b:c9:3a: f8:52:11:3e:f1:c6:c7:f6:b2:3e:e0:91:79:ad:6b: 4c:6f:9c:2a:a0:7b:c0:55:ef:7a:db:92:ec:66:83: 4a:d2:b6:6d:e3:f7:ce:1b:65:5a:d1:cd:56:48:c8: b3:2f:32:df:2d:46:ef:09:76:3f:68:07:69:4b:1e: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:73:40:2A:C2:46:2F:DC:3F:EC:5A:C2:7F:FA:8B:A9:27:14:3A:71 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c0:4e:33:b4:2f:04:67:10:2c:b6:c4:45:4a:69:d7:27:84: a4:db:ce:1b:d0:c2:f6:ab:e7:16:4e:2b:66:e9:98:3a:4f:56: bf:df:43:08:2c:f7:01:7a:1c:9a:49:30:b9:99:31:ce:ce:01: 7a:68:1f:db:a8:27:07:0e:3a:70:36:89:de:59:50:51:e4:46: 2d:76:58:3d:c8:51:a6:92:c9:d5:19:db:fc:a9:e0:fe:fb:08: b8:a8:77:c1:86:39:d4:1b:1e:56:4c:71:4c:41:46:36:df:d1: 96:fa:3c:79:8d:c7:92:bf:df:2b:bf:73:2f:d9:39:12:ec:d4: 5b:78:da:72:f6:52:af:89:e2:31:02:47:69:ea:d7:6a:82:4e: c0:68:39:c1:55:64:3d:78:52:fb:2f:81:79:ce:ad:b8:3c:ed: 57:12:08:8f:21:13:bd:09:d5:29:2a:71:70:dd:c9:4a:10:9a: 97:9c:97:25:54:e3:b6:f2:00:6f:e6:18:ff:90:94:ef:a0:31: fa:a9:fa:b0:40:ab:73:45:cd:2a:83:35:ea:6f:f7:11:a6:ec: 4c:3c:7f:c8:e4:29:01:0d:8c:2b:fa:76:c8:00:02:5b:8f:06: 9f:55:1c:b7:4c:61:13:7f:f0:a4:a4:0a:a6:f7:e2:10:68:25: 47:7d:2e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjVCuenhUv8UvobsMxJA3hq2G5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTA4MjEyMzM2MzhaFw0yNTA4MjUwOTMxMzhaMDMxMTAvBgNV BAMTKEQ5NzM0MDJBQzI0NjJGREMzRkVDNUFDMjdGRkE4QkE5MjcxNDNBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3+o1QCGr5XaHqI2mcQurvzCs aP3l1TVgwaktex35f+Cxv6kn7a1Mj4RcSAy0RplidRvxYMt16oFwsPCA97zEKVP4 jiSvyV5MrKiLwJMFD3ELzytL6pwuaEDknzV0ag26pCps7/sA8OEWL4xC6ST9Jks3 kD4EBGkd82tSROmTMG0iYut3lirq+N3BiRpVyKVkXkggbH4s3LICwChSqq3UPVrl zorvnyMuj/Mhp8wYtguyYPMzWdTI0OIo6V8z0pvJOvhSET7xxsf2sj7gkXmta0xv nCqge8BV73rbkuxmg0rStm3j984bZVrRzVZIyLMvMt8tRu8Jdj9oB2lLHiTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XNAKsJGL9w/7FrCf/qLqScUOnEwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnATjO0LwRnECy2xEVKadcnhKTbzhvQwvar 5xZOK2bpmDpPVr/fQwgs9wF6HJpJMLmZMc7OAXpoH9uoJwcOOnA2id5ZUFHkRi12 WD3IUaaSydUZ2/yp4P77CLiod8GGOdQbHlZMcUxBRjbf0Zb6PHmNx5K/3yu/cy/Z ORLs1Ft42nL2Uq+J4jECR2nq12qCTsBoOcFVZD14UvsvgXnOrbg87VcSCI8hE70J 1SkqcXDdyUoQmpeclyVU47byAG/mGP+QlO+gMfqp+rBAq3NFzSqDNepv9xGm7Ew8 f8jkKQENjCv6dsgAAluPBp9VHLdMYRN/8KSkCqb34hBoJUd9Lv4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:15 2025 by rpki-client