$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: TkQEoyFSKjzw65a4LnQMtEQF8Z8RAsV2IneRFJsItz8= Subject key identifier: B1:02:A5:28:A0:74:A2:85:DC:AC:01:4F:72:E7:A8:42:D3:E6:D3:E6 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 1B4E36D470C3A791F2A5DBBE901D338977474B2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 0119 Signing time: Thu 04 Sep 2025 03:21:33 +0000 Manifest this update: Thu 04 Sep 2025 03:16:33 +0000 Manifest next update: Sun 07 Sep 2025 03:42:33 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: hbrDb4OjkZWKL8eJl2iLCiPF99DA3h5UxqSv/EyR1Jo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4e:36:d4:70:c3:a7:91:f2:a5:db:be:90:1d:33:89:77:47:4b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Sep 4 03:16:33 2025 GMT Not After : Sep 7 03:42:33 2025 GMT Subject: CN=B102A528A074A285DCAC014F72E7A842D3E6D3E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:62:ab:f3:84:a2:fb:91:d5:73:19:d6:4f: c5:a0:a1:e4:83:8c:60:79:57:37:4e:e7:b1:61:c4: 82:fd:5b:78:e3:3d:34:8d:f6:76:24:35:8c:40:62: e7:f1:9e:8d:9c:aa:2d:4a:98:e8:90:93:f4:54:c6: 80:cf:d2:8b:60:eb:84:26:36:6e:d9:dc:6c:fc:73: 7e:ec:da:13:53:bc:83:13:e8:8d:21:73:31:dd:2f: 5d:d1:ea:f3:29:59:18:7b:54:b3:32:3c:87:e1:9f: f3:c4:44:a5:41:71:a1:c1:e7:52:a5:8f:45:27:0e: 22:10:0a:40:29:5c:ed:40:81:8a:96:ef:0e:b3:92: 40:02:db:ac:fe:8f:0b:00:73:e5:2f:0a:9f:98:b1: bc:31:4a:8c:78:a0:15:d9:a4:9d:12:28:7c:f8:35: 93:e3:29:2c:7e:71:27:0e:a0:88:eb:3d:8e:1a:f2: 72:1d:ba:e6:5b:57:e0:a6:9a:2b:5f:6d:53:a7:5b: 60:18:c3:4d:d2:72:62:77:ba:11:7a:7c:b4:a9:40: 11:04:fe:c4:2a:55:40:27:24:d3:7b:c3:7e:7a:81: a4:27:9a:50:75:b9:cb:94:f9:71:58:12:f9:1e:b3: fe:25:4d:dd:f1:53:91:0b:68:de:60:88:9d:5a:3d: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:A5:28:A0:74:A2:85:DC:AC:01:4F:72:E7:A8:42:D3:E6:D3:E6 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:8e:83:bd:8c:3b:9b:f6:55:08:a9:2d:c7:7a:14:df:8d:6f: c1:c7:a4:a1:5c:b0:31:34:c7:35:37:cd:cb:53:1f:44:35:74: 1a:8f:87:b2:7f:20:22:0a:6c:4c:37:ae:fa:e4:02:08:ca:95: 57:d2:78:1a:ed:2e:de:6f:73:4f:1a:c5:42:12:80:9f:72:02: 98:ee:80:37:10:44:e7:3b:42:4d:f4:3e:75:a9:dc:5f:ea:e8: 5c:dc:e7:08:52:b1:90:e3:0e:0b:1f:ad:9c:d3:33:b0:de:e2: b2:0e:f9:b1:4f:3d:3a:c7:5f:6b:ce:ed:26:da:10:0f:d0:91: 8f:f9:62:dc:8d:e0:c6:ad:f4:28:3d:d4:fd:1d:cc:85:97:f7: fb:23:81:eb:9a:d8:38:c7:78:e6:85:eb:82:a7:7c:9c:65:56: 65:af:f4:9f:f5:92:f9:8c:1a:64:ea:9d:9e:23:d4:f9:03:68: 21:fe:f4:c3:ca:9c:4e:27:b5:be:3c:10:f3:02:39:fb:24:67: 80:83:14:5c:d2:bf:9b:97:8e:02:a6:fb:bf:a3:70:dd:4a:1e: b9:c9:9b:7f:7c:4e:bd:12:bf:2a:1c:ce:1a:3e:1d:4a:fc:43: f8:08:73:82:d3:58:09:12:96:5a:38:25:6a:c3:01:00:45:6f: f1:70:6e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0421HDDp5Hypdu+kB0ziXdHSy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTA5MDQwMzE2MzNaFw0yNTA5MDcwMzQyMzNaMDMxMTAvBgNV BAMTKEIxMDJBNTI4QTA3NEEyODVEQ0FDMDE0RjcyRTdBODQyRDNFNkQzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5mKr84Si+5HVcxnWT8WgoeSD jGB5VzdO57FhxIL9W3jjPTSN9nYkNYxAYufxno2cqi1KmOiQk/RUxoDP0otg64Qm Nm7Z3Gz8c37s2hNTvIMT6I0hczHdL13R6vMpWRh7VLMyPIfhn/PERKVBcaHB51Kl j0UnDiIQCkApXO1AgYqW7w6zkkAC26z+jwsAc+UvCp+YsbwxSox4oBXZpJ0SKHz4 NZPjKSx+cScOoIjrPY4a8nIduuZbV+CmmitfbVOnW2AYw03ScmJ3uhF6fLSpQBEE /sQqVUAnJNN7w356gaQnmlB1ucuU+XFYEvkes/4lTd3xU5ELaN5giJ1aPa4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsQKlKKB0ooXcrAFPcueoQtPm0+YwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2Og72MO5v2VQipLcd6FN+Nb8HHpKFcsDE0 xzU3zctTH0Q1dBqPh7J/ICIKbEw3rvrkAgjKlVfSeBrtLt5vc08axUISgJ9yApju gDcQROc7Qk30PnWp3F/q6Fzc5whSsZDjDgsfrZzTM7De4rIO+bFPPTrHX2vO7Sba EA/QkY/5YtyN4Mat9Cg91P0dzIWX9/sjgeua2DjHeOaF64KnfJxlVmWv9J/1kvmM GmTqnZ4j1PkDaCH+9MPKnE4ntb48EPMCOfskZ4CDFFzSv5uXjgKm+7+jcN1KHrnJ m398Tr0Svyoczho+HUr8Q/gIc4LTWAkSllo4JWrDAQBFb/FwbhM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:43 2025 by rpki-client