$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: R6tIVUHi/FAkQxaoh4ldbdJKCEDmDcv4Gb4t4cua3WA= Subject key identifier: 0B:8E:B0:2F:E7:28:93:57:A1:D0:8E:C7:B0:FB:64:90:CD:B4:E4:EF Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 734DD09780A442853313311D4DC6F06FECDDEA0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 0104 Signing time: Sat 19 Jul 2025 13:21:32 +0000 Manifest this update: Sat 19 Jul 2025 13:16:32 +0000 Manifest next update: Wed 23 Jul 2025 00:47:32 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: nuo6V6I/zhxHsrENgHwnPEAb3T/fdkwxbCHs8mld4Ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4d:d0:97:80:a4:42:85:33:13:31:1d:4d:c6:f0:6f:ec:dd:ea:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Jul 19 13:16:32 2025 GMT Not After : Jul 23 00:47:32 2025 GMT Subject: CN=0B8EB02FE7289357A1D08EC7B0FB6490CDB4E4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:99:b2:40:72:21:80:00:28:eb:24:41:83:83: db:39:a8:33:94:d3:fb:f8:d0:24:1f:0f:c2:be:25: 56:6b:b8:13:3c:43:31:5d:11:10:1d:6e:9a:e4:ce: 95:2b:6f:41:c7:83:b4:a4:d6:f0:87:fd:82:15:e2: 41:8a:c6:81:ac:5f:12:89:7e:8a:30:8e:4a:86:c4: 34:8d:b9:16:36:83:4c:23:ef:64:9b:9f:d7:47:40: 94:7b:89:04:ca:ee:e7:df:1b:cd:53:19:29:b9:9e: a0:ec:61:3e:06:51:e1:4a:45:64:7b:57:10:ad:7f: fd:73:e5:b7:5d:aa:f0:64:4f:0e:22:c7:1a:8e:3d: a5:2c:e9:96:29:20:fd:a8:dd:dd:96:f5:c4:01:92: d7:81:0a:d4:fb:a8:4a:b4:b2:5e:21:89:1f:36:da: 0a:db:b3:18:4b:cf:39:72:91:41:90:84:07:4d:22: 2c:f6:eb:9d:03:85:ae:5d:26:ef:60:1d:e7:5c:d3: 75:bd:60:cf:e3:ad:3c:7e:04:99:be:a0:29:6a:f0: 80:10:e1:30:14:1f:e9:dd:85:93:2d:8a:28:04:31: 04:c3:3e:0f:b9:67:25:be:98:a8:4d:33:db:5a:cf: 39:01:66:10:ae:ee:33:98:67:dc:27:89:4f:04:de: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:B0:2F:E7:28:93:57:A1:D0:8E:C7:B0:FB:64:90:CD:B4:E4:EF X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6b:42:d6:02:a0:5d:8c:ba:9f:3e:8b:e4:83:a2:fd:6e:59: 35:d6:80:09:49:e6:66:0a:56:ac:73:1a:7c:78:cb:0c:0b:d6: c2:84:93:e1:04:66:ad:12:3c:c2:8f:62:50:ec:52:f1:48:33: 54:77:db:5c:58:ca:cd:9d:e2:c2:92:7d:ae:b3:1f:78:39:f6: 01:79:82:e4:5e:7c:de:33:73:90:c8:f5:fa:a7:00:fd:6b:15: a2:99:d5:72:77:be:c3:54:28:08:1a:ee:bc:8c:75:71:d3:0f: 7b:41:01:12:51:ea:89:f4:60:dd:6a:02:c7:03:9a:7f:ee:fa: 6c:39:06:b4:cd:8c:20:49:f0:96:f0:cd:21:e4:12:60:02:a4: 3e:f2:25:86:bb:98:93:19:96:ce:d8:1f:1b:a0:85:9f:31:a4: dd:4b:5d:5a:f8:15:5e:62:9a:72:4e:d2:2e:3a:dd:69:67:e1: de:c2:9f:bf:3c:49:d4:0e:40:5a:10:a3:77:d1:09:b3:0d:34: 91:47:44:7b:f5:9e:db:2c:c3:02:e9:31:ed:5c:8f:80:ac:56: 94:17:93:a2:cd:86:9f:ad:65:8f:79:2c:2d:e0:d0:53:b1:4a: 47:21:1c:20:dc:8c:e3:8d:17:59:be:11:81:11:6f:64:e3:17: 4e:bf:3a:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc03Ql4CkQoUzEzEdTcbwb+zd6gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTA3MTkxMzE2MzJaFw0yNTA3MjMwMDQ3MzJaMDMxMTAvBgNV BAMTKDBCOEVCMDJGRTcyODkzNTdBMUQwOEVDN0IwRkI2NDkwQ0RCNEU0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmbJAciGAACjrJEGDg9s5qDOU 0/v40CQfD8K+JVZruBM8QzFdERAdbprkzpUrb0HHg7Sk1vCH/YIV4kGKxoGsXxKJ foowjkqGxDSNuRY2g0wj72Sbn9dHQJR7iQTK7uffG81TGSm5nqDsYT4GUeFKRWR7 VxCtf/1z5bddqvBkTw4ixxqOPaUs6ZYpIP2o3d2W9cQBkteBCtT7qEq0sl4hiR82 2grbsxhLzzlykUGQhAdNIiz2650Dha5dJu9gHedc03W9YM/jrTx+BJm+oClq8IAQ 4TAUH+ndhZMtiigEMQTDPg+5ZyW+mKhNM9tazzkBZhCu7jOYZ9wniU8E3pHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC46wL+cok1eh0I7HsPtkkM205O8wHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJrQtYCoF2Mup8+i+SDov1uWTXWgAlJ5mYK VqxzGnx4ywwL1sKEk+EEZq0SPMKPYlDsUvFIM1R321xYys2d4sKSfa6zH3g59gF5 guRefN4zc5DI9fqnAP1rFaKZ1XJ3vsNUKAga7ryMdXHTD3tBARJR6on0YN1qAscD mn/u+mw5BrTNjCBJ8JbwzSHkEmACpD7yJYa7mJMZls7YHxughZ8xpN1LXVr4FV5i mnJO0i463Wln4d7Cn788SdQOQFoQo3fRCbMNNJFHRHv1ntsswwLpMe1cj4CsVpQX k6LNhp+tZY95LC3g0FOxSkchHCDcjOONF1m+EYERb2TjF06/OpE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:40 2025 by rpki-client