$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: TQKuTn8aGpdnVv26kUNtRrhWPRXR3bGgkK5eSRwngO0= Subject key identifier: A4:CF:CE:BA:A3:D8:F3:BE:88:B0:37:9A:C1:12:B3:C7:55:F0:A2:47 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 08353FBD74DCD9FF7BA53BA8F26EA8A71F527F93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: EF Signing time: Tue 03 Jun 2025 04:11:56 +0000 Manifest this update: Tue 03 Jun 2025 04:06:56 +0000 Manifest next update: Fri 06 Jun 2025 05:10:56 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: RwvcPtJo43ECQlCcIixeU1AlZzUWnAyjcICp/qEHTuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 05:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:3f:bd:74:dc:d9:ff:7b:a5:3b:a8:f2:6e:a8:a7:1f:52:7f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Jun 3 04:06:56 2025 GMT Not After : Jun 6 05:10:56 2025 GMT Subject: CN=A4CFCEBAA3D8F3BE88B0379AC112B3C755F0A247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:41:60:09:79:48:49:bb:63:ee:b9:b7:63:8f: 56:ad:fb:8a:3d:1a:69:67:62:b5:5b:85:ae:5d:a1: 48:b2:22:20:cc:1b:2d:61:49:41:61:51:18:68:11: cd:e5:6e:d5:c5:1c:3b:70:97:28:52:50:35:99:9b: f5:5d:b9:cf:be:e1:b8:f8:ce:52:49:1d:6f:fd:f8: 80:68:97:0f:fc:1c:95:48:40:40:65:04:39:62:de: 2d:ce:0b:e8:5a:2b:3c:a8:6b:66:32:9a:95:0d:45: e7:51:df:f5:64:ba:fd:47:73:00:df:9f:73:35:54: a9:c2:c5:06:67:d9:f3:12:6f:17:db:9e:ca:ee:08: 5b:86:97:6f:6e:2f:d9:06:f7:7c:64:92:8a:73:e1: 2d:2f:de:64:1e:5c:9f:14:43:5c:4a:f0:90:53:a0: b6:05:e1:c9:6a:c2:af:21:5c:60:5d:d1:45:62:06: 0b:0c:e4:36:98:5d:43:ca:b1:0e:de:d4:46:56:b0: a5:41:13:a1:b5:75:0a:de:d7:d0:43:4a:88:10:91: e8:28:b5:10:40:2b:b5:ed:58:dd:11:31:cd:ba:15: 2c:8b:7a:a7:12:1e:61:0c:5e:47:03:79:5a:43:50: 9b:49:41:e7:86:7b:9c:49:21:ae:09:8a:b4:41:f5: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CF:CE:BA:A3:D8:F3:BE:88:B0:37:9A:C1:12:B3:C7:55:F0:A2:47 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b8:fc:72:30:45:bf:16:c6:98:98:e5:3a:68:8c:f7:3f:6d: 60:29:6a:5b:c5:48:78:14:04:21:94:c0:d3:16:8f:e3:f3:e2: 00:2f:09:65:10:5d:6d:ce:5f:90:b6:40:a8:5a:d0:5d:ce:0c: 4d:8d:d6:9b:e6:3c:5b:49:50:b5:f5:ce:22:09:08:36:e4:ac: 7a:a0:c3:69:8c:b0:d1:de:cc:d4:4d:76:d8:26:f0:df:46:0f: 1a:dd:f9:fd:d2:d7:d0:09:53:46:ac:3e:16:95:03:fd:a1:e5: 5d:f8:c5:77:6c:73:56:fa:7d:77:4b:49:24:8d:e8:0d:06:7a: 6c:b3:f2:3c:8f:2d:bf:13:e1:32:22:66:79:af:71:ee:27:00: cc:82:bd:3a:a4:6f:f5:86:94:f6:0c:ea:02:df:28:cb:16:d3: 57:01:a5:7b:6e:57:23:97:b2:c1:75:de:a4:d2:10:71:e1:fd: d9:74:49:ce:3a:b3:a6:51:bc:9e:e4:82:f0:df:71:71:dd:61: 8b:5a:b2:b2:c7:0f:b5:d6:39:6a:ed:69:27:e2:89:0b:84:ca: 7b:8c:3e:5a:8c:bb:4d:ad:e9:fc:b5:4d:9f:d4:a8:af:27:00: fb:e4:44:af:bd:5a:af:a8:a8:bb:4d:f3:7c:00:a5:e7:fe:57: 93:95:c7:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCDU/vXTc2f97pTuo8m6opx9Sf5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTA2MDMwNDA2NTZaFw0yNTA2MDYwNTEwNTZaMDMxMTAvBgNV BAMTKEE0Q0ZDRUJBQTNEOEYzQkU4OEIwMzc5QUMxMTJCM0M3NTVGMEEyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQWAJeUhJu2Puubdjj1at+4o9 GmlnYrVbha5doUiyIiDMGy1hSUFhURhoEc3lbtXFHDtwlyhSUDWZm/Vduc++4bj4 zlJJHW/9+IBolw/8HJVIQEBlBDli3i3OC+haKzyoa2YympUNRedR3/Vkuv1HcwDf n3M1VKnCxQZn2fMSbxfbnsruCFuGl29uL9kG93xkkopz4S0v3mQeXJ8UQ1xK8JBT oLYF4clqwq8hXGBd0UViBgsM5DaYXUPKsQ7e1EZWsKVBE6G1dQre19BDSogQkego tRBAK7XtWN0RMc26FSyLeqcSHmEMXkcDeVpDUJtJQeeGe5xJIa4JirRB9SvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpM/OuqPY876IsDeawRKzx1XwokcwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG4/HIwRb8WxpiY5TpojPc/bWApalvFSHgU BCGUwNMWj+Pz4gAvCWUQXW3OX5C2QKha0F3ODE2N1pvmPFtJULX1ziIJCDbkrHqg w2mMsNHezNRNdtgm8N9GDxrd+f3S19AJU0asPhaVA/2h5V34xXdsc1b6fXdLSSSN 6A0Gemyz8jyPLb8T4TIiZnmvce4nAMyCvTqkb/WGlPYM6gLfKMsW01cBpXtuVyOX ssF13qTSEHHh/dl0Sc46s6ZRvJ7kgvDfcXHdYYtasrLHD7XWOWrtaSfiiQuEynuM PlqMu02t6fy1TZ/UqK8nAPvkRK+9Wq+oqLtN83wApef+V5OVx/4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:08 2025 by rpki-client