$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: ElwL7m6fMiQr8QUBYMMDSx+xLqGdVDFXBne3/+R0GlI= Subject key identifier: FD:B7:BD:FE:A1:86:18:55:E2:F3:17:D5:3C:8B:8C:2A:00:58:5C:1A Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 48456C980A67B844A0E037F46648A2F6C350957F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 00:01:34 +0000 Manifest this update: Sat 18 Oct 2025 23:56:34 +0000 Manifest next update: Wed 22 Oct 2025 11:20:34 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: F5VCZ6lHpWIFo8OFVq59th2ZOorovHBIG5kfhN8P6GU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:45:6c:98:0a:67:b8:44:a0:e0:37:f4:66:48:a2:f6:c3:50:95:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Oct 18 23:56:34 2025 GMT Not After : Oct 22 11:20:34 2025 GMT Subject: CN=FDB7BDFEA1861855E2F317D53C8B8C2A00585C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:4f:3e:94:e3:a0:8f:0d:73:6e:a4:88:e7: 7c:36:61:a0:97:59:52:88:bb:5c:27:09:89:2b:f0: 23:ab:f9:d0:64:cd:cd:20:1f:05:c0:b2:9e:53:12: 36:30:32:28:36:75:2d:ec:67:10:bd:53:f9:c7:ff: b0:99:16:6e:0f:8e:58:75:ec:72:6c:f0:0e:c7:77: dc:64:3b:84:dd:97:2e:f2:b8:f4:5d:8a:07:fd:99: fa:4c:90:15:cd:7d:20:e2:e4:47:70:78:3b:26:3c: 8d:8c:6a:9e:7e:d9:45:50:32:95:6b:c9:34:c2:8f: a5:f7:82:d5:ac:7e:00:c3:2d:17:7a:90:54:f5:90: b2:3a:d1:48:bf:84:97:76:55:53:2c:f7:f9:14:2b: f2:0c:b4:14:7c:3c:0f:f0:50:22:d0:42:45:31:ce: dd:1f:31:7c:42:c2:43:d6:e6:88:86:3c:d8:56:73: 1c:9d:bd:7b:c6:66:2a:04:50:37:d0:10:a9:bc:aa: 54:0f:20:f5:87:8c:fd:df:b2:bb:38:15:77:f1:b1: 4c:1f:93:62:dd:cd:ac:6e:06:e9:70:35:08:0f:2d: 72:3a:8a:fa:fa:67:3b:43:6a:57:91:ab:f9:15:dc: 01:a5:50:c8:42:fe:85:81:05:19:8e:63:bd:93:78: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:BD:FE:A1:86:18:55:E2:F3:17:D5:3C:8B:8C:2A:00:58:5C:1A X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:74:85:1d:d4:25:11:08:23:6c:6f:1c:5f:15:73:cb:d1:e4: e5:16:2b:22:a0:0d:d2:91:59:ed:9c:c5:fd:49:24:c2:3c:36: 81:ba:1a:df:0c:3c:cf:25:e4:dc:4a:6c:b1:73:d1:c0:3a:dd: ec:bf:c6:c3:ae:fc:f3:96:2c:26:da:01:99:97:c1:a5:4e:95: 67:46:70:7f:cf:01:c6:df:e5:78:b7:ed:32:6d:cc:c5:a9:c2: bd:25:94:0f:5d:42:2f:b0:e5:3a:13:75:a6:da:eb:2e:a5:ef: 4a:3e:7d:21:e1:6f:88:fc:6f:89:26:2f:06:4c:ca:81:53:09: 5e:29:20:d3:48:d0:5b:4f:a2:39:84:60:2e:1a:c5:e8:fb:8e: ef:87:27:f9:3b:2b:6c:00:e1:a6:19:d5:09:89:3f:d2:9d:36: 48:3f:62:bd:4f:ea:b8:7a:66:b2:c1:ca:f7:14:5e:29:eb:df: 7e:2e:8f:7c:0b:7a:2a:dd:b7:cb:a8:96:2f:f6:b2:df:f3:82: 14:2e:0e:33:8d:b5:3e:b0:28:43:9e:ec:cd:f7:12:4f:dd:37: f0:26:e8:a1:88:69:6f:a2:a1:3c:df:41:c8:d8:66:cc:39:40: 34:fe:b0:11:87:c1:33:ed:ca:e1:b2:e3:55:b5:d6:06:ef:f6: 8d:5a:1e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEVsmApnuESg4Df0Zkii9sNQlX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTEwMTgyMzU2MzRaFw0yNTEwMjIxMTIwMzRaMDMxMTAvBgNV BAMTKEZEQjdCREZFQTE4NjE4NTVFMkYzMTdENTNDOEI4QzJBMDA1ODVDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rE8+lOOgjw1zbqSI53w2YaCX WVKIu1wnCYkr8COr+dBkzc0gHwXAsp5TEjYwMig2dS3sZxC9U/nH/7CZFm4Pjlh1 7HJs8A7Hd9xkO4Tdly7yuPRdigf9mfpMkBXNfSDi5EdweDsmPI2Map5+2UVQMpVr yTTCj6X3gtWsfgDDLRd6kFT1kLI60Ui/hJd2VVMs9/kUK/IMtBR8PA/wUCLQQkUx zt0fMXxCwkPW5oiGPNhWcxydvXvGZioEUDfQEKm8qlQPIPWHjP3fsrs4FXfxsUwf k2LdzaxuBulwNQgPLXI6ivr6ZztDaleRq/kV3AGlUMhC/oWBBRmOY72TeCRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/be9/qGGGFXi8xfVPIuMKgBYXBowHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF90hR3UJREII2xvHF8Vc8vR5OUWKyKgDdKR We2cxf1JJMI8NoG6Gt8MPM8l5NxKbLFz0cA63ey/xsOu/POWLCbaAZmXwaVOlWdG cH/PAcbf5Xi37TJtzMWpwr0llA9dQi+w5ToTdaba6y6l70o+fSHhb4j8b4kmLwZM yoFTCV4pINNI0FtPojmEYC4axej7ju+HJ/k7K2wA4aYZ1QmJP9KdNkg/Yr1P6rh6 ZrLByvcUXinr334uj3wLeirdt8uoli/2st/zghQuDjONtT6wKEOe7M33Ek/dN/Am 6KGIaW+ioTzfQcjYZsw5QDT+sBGHwTPtyuGy41W11gbv9o1aHoU= -----END CERTIFICATE-----Generated at Tue Oct 21 03:54:41 2025 by rpki-client