$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: AHTpl5qqzTr3hhOOQT73fi077wuimHnpBKrMgoK3gzk= Subject key identifier: AC:A3:0E:68:3E:8E:53:C7:BA:DA:E6:05:BD:41:19:52:0E:65:BF:F0 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 292744382DA9DC07FCD19B940A3397D7607B6EB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: E4 Signing time: Fri 09 May 2025 08:51:30 +0000 Manifest this update: Fri 09 May 2025 08:46:30 +0000 Manifest next update: Mon 12 May 2025 12:54:30 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: nh3nPZyMoD3Zv1EZ/b/4UYi/2g4qXA/byTYMaahZM18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 12:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:27:44:38:2d:a9:dc:07:fc:d1:9b:94:0a:33:97:d7:60:7b:6e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: May 9 08:46:30 2025 GMT Not After : May 12 12:54:30 2025 GMT Subject: CN=ACA30E683E8E53C7BADAE605BD4119520E65BFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:8e:20:6a:68:75:92:94:64:5a:dc:67:5d: 59:38:a1:aa:88:d6:8d:ca:a2:3a:bf:54:2b:e8:1f: 44:8d:96:04:82:2a:bc:42:59:7c:80:23:b9:36:f9: 62:47:cb:7d:ee:6b:be:0b:bb:c9:5a:8e:fc:5e:b5: 37:4d:0a:38:66:3d:1d:a7:f5:bc:48:39:1e:e8:2a: dc:96:14:87:23:16:5f:e9:d5:84:b5:54:9a:fd:0a: bd:34:9b:10:db:33:af:b1:20:99:df:d4:e3:ec:49: af:d5:90:20:b6:3c:c6:10:07:dc:87:0c:d3:37:bf: 51:48:49:4b:a7:c4:e1:97:60:76:1a:5d:ff:14:7f: 12:dc:fe:c1:a9:9b:77:16:58:60:d3:62:c1:4c:04: 5a:fb:b4:d2:e2:c9:74:dc:32:e4:40:05:32:33:44: 40:14:36:49:3c:d7:28:ae:53:1b:15:15:63:c7:9a: be:d6:f7:50:e0:66:b8:96:e5:4c:b8:35:1f:74:2e: e1:02:e4:e9:31:46:d1:e0:3d:00:ec:be:d3:af:c4: 6c:38:9b:cb:a3:89:a6:aa:79:75:56:ce:5b:d0:47: a2:78:b1:bf:dd:67:64:0d:ca:88:39:4d:4e:a7:4b: 85:6a:0b:1a:6f:f0:04:44:07:a0:b5:23:a0:e3:61: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A3:0E:68:3E:8E:53:C7:BA:DA:E6:05:BD:41:19:52:0E:65:BF:F0 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:3a:f4:95:e8:fc:c4:0e:7f:38:7e:7d:9d:76:4d:da:b7: 27:f4:0f:85:ec:98:84:e2:af:f9:d0:24:6d:3c:84:6d:cd:99: 21:da:40:41:5c:9c:7b:90:9a:37:c8:a6:96:91:6d:fc:ae:02: 82:74:a4:86:e9:1a:97:42:73:30:2f:1b:ba:36:fd:5b:f7:56: f2:c3:41:47:51:b1:8f:c4:8b:f0:13:d3:88:44:af:8d:09:2f: f2:f2:53:41:2a:47:8e:b4:57:f1:d4:ef:ee:93:24:ce:55:de: ae:87:48:75:c2:02:6d:26:1c:8e:0e:3d:e0:bb:7b:a9:c3:ae: 4a:32:b8:67:64:82:95:18:e3:63:0e:e7:97:75:89:c0:d6:ef: d9:9a:01:57:a9:8c:ea:ae:fe:a4:0c:85:83:ec:24:67:64:09: 67:2d:da:f6:1c:36:a7:8b:7d:ed:31:91:fa:44:25:90:e6:a8: 38:84:a6:e9:14:01:79:24:d3:e1:65:24:f3:0a:80:7f:6c:0e: c8:cd:81:5f:ba:96:c3:c6:f9:3b:c0:78:3f:f0:f9:eb:44:80: bb:40:94:55:3b:e6:58:37:0d:30:f9:a1:26:78:b2:6f:53:74: 2a:ea:65:45:39:99:1f:98:07:f2:7d:36:19:56:aa:ce:1d:a8: ed:1a:76:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSdEOC2p3Af80ZuUCjOX12B7brkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTA1MDkwODQ2MzBaFw0yNTA1MTIxMjU0MzBaMDMxMTAvBgNV BAMTKEFDQTMwRTY4M0U4RTUzQzdCQURBRTYwNUJENDExOTUyMEU2NUJGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEY4gamh1kpRkWtxnXVk4oaqI 1o3Kojq/VCvoH0SNlgSCKrxCWXyAI7k2+WJHy33ua74Lu8lajvxetTdNCjhmPR2n 9bxIOR7oKtyWFIcjFl/p1YS1VJr9Cr00mxDbM6+xIJnf1OPsSa/VkCC2PMYQB9yH DNM3v1FISUunxOGXYHYaXf8UfxLc/sGpm3cWWGDTYsFMBFr7tNLiyXTcMuRABTIz REAUNkk81yiuUxsVFWPHmr7W91DgZriW5Uy4NR90LuEC5OkxRtHgPQDsvtOvxGw4 m8ujiaaqeXVWzlvQR6J4sb/dZ2QNyog5TU6nS4VqCxpv8AREB6C1I6DjYXDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrKMOaD6OU8e62uYFvUEZUg5lv/AwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrxOvSV6PzEDn84fn2ddk3atyf0D4XsmITi r/nQJG08hG3NmSHaQEFcnHuQmjfIppaRbfyuAoJ0pIbpGpdCczAvG7o2/Vv3VvLD QUdRsY/Ei/AT04hEr40JL/LyU0EqR460V/HU7+6TJM5V3q6HSHXCAm0mHI4OPeC7 e6nDrkoyuGdkgpUY42MO55d1icDW79maAVepjOqu/qQMhYPsJGdkCWct2vYcNqeL fe0xkfpEJZDmqDiEpukUAXkk0+FlJPMKgH9sDsjNgV+6lsPG+TvAeD/w+etEgLtA lFU75lg3DTD5oSZ4sm9TdCrqZUU5mR+YB/J9NhlWqs4dqO0aduQ= -----END CERTIFICATE-----Generated at Sun May 11 05:33:34 2025 by rpki-client