$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: jQ/0SlWGv7vgxplVg8x+zYfCV/3WtJ8v5Keak0+9UZk= Subject key identifier: 61:4A:3A:10:7F:2D:A7:FC:6F:69:4C:0C:AA:FE:29:46:EB:9C:D3:90 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 5A3A7EB272F8BE8B38DF2CE4939E09F2A31389C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 57 Signing time: Sun 15 Jun 2025 16:51:22 +0000 Manifest this update: Sun 15 Jun 2025 16:46:22 +0000 Manifest next update: Thu 19 Jun 2025 01:56:22 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: F5mI6YIo0j9p2rtuUYSKZaTr6nmTAsy92LiPdVhjeg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3a:7e:b2:72:f8:be:8b:38:df:2c:e4:93:9e:09:f2:a3:13:89:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Jun 15 16:46:22 2025 GMT Not After : Jun 19 01:56:22 2025 GMT Subject: CN=614A3A107F2DA7FC6F694C0CAAFE2946EB9CD390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:7c:8f:4a:29:99:b2:02:c4:08:d9:78:4a: 69:25:be:6c:c3:73:17:c0:49:b3:ed:8a:c3:d5:d7: 95:53:69:40:55:ef:e0:fb:48:5a:c5:f3:7b:51:c0: 73:87:43:94:9f:00:ca:f6:e3:78:18:f4:2e:db:ab: a0:59:2f:50:1e:4b:d5:dd:02:66:99:29:c9:5d:06: 29:89:0d:e0:4a:d0:21:7d:ab:f5:22:92:cf:c3:d8: 9e:7a:53:fd:cb:3c:62:d4:33:74:a0:99:37:7f:18: 30:0b:0d:db:80:e5:84:d8:45:e4:08:13:ac:0e:18: 23:84:8f:20:f9:13:b8:9b:d3:7f:a0:0e:f7:95:c8: 38:75:00:62:e9:db:05:7f:47:bc:fc:be:4a:f6:69: 2d:4a:dd:a1:be:a7:1b:b0:93:a1:38:78:e3:56:91: dc:d0:d8:e6:cc:2a:49:74:c1:c4:ec:22:72:fd:80: 00:33:db:8b:96:81:4f:3a:f2:ce:6a:fc:85:88:68: 7a:31:9e:e0:e9:4c:f5:4b:61:0a:24:00:70:cf:32: 02:1e:88:ef:0b:e0:45:f6:80:fc:12:3a:74:15:c0: e9:e1:a5:4d:95:1d:3b:e0:68:dc:3b:b2:4d:82:90: 43:97:48:62:85:e4:e7:f0:61:cb:c4:a8:98:ff:06: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4A:3A:10:7F:2D:A7:FC:6F:69:4C:0C:AA:FE:29:46:EB:9C:D3:90 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e4:1b:2e:9c:6b:f2:43:0f:91:5f:5d:34:2b:c9:72:5c:22: 1d:6f:1c:0c:f6:1d:bc:79:31:98:dc:ea:aa:61:a1:58:f9:a1: 2d:dc:a8:38:8c:08:1e:c2:89:c6:7f:6c:bc:6a:98:b4:51:f5: a4:30:e6:57:77:b6:62:c2:89:a6:66:bc:80:0b:10:3c:8f:1a: 59:3e:87:70:1f:d7:9d:a4:27:a0:ce:c4:e4:68:7c:c5:20:81: a1:50:36:b1:65:d9:48:38:56:7e:c8:ac:ca:68:66:e8:fd:b4: f5:25:ee:60:4c:8f:80:14:74:1f:11:74:3e:49:9d:14:e6:95: e4:95:86:1b:05:e0:c1:eb:ec:98:3d:ac:8b:f9:c8:d6:72:88: 6b:57:96:b0:f3:92:b0:96:bf:58:37:c7:58:ac:8f:b0:8d:d7: b6:ed:02:5e:1c:c4:e1:15:ef:bd:e0:83:96:90:e6:69:4d:38: f6:58:ed:64:9c:fd:0f:1e:3d:bc:91:60:c8:b9:52:f9:59:fb: 19:46:dd:c1:6e:da:12:f3:bd:42:b4:af:b9:3d:d8:29:84:20: f5:70:31:3d:a0:0a:87:f8:a6:d8:26:98:58:32:0f:2a:a4:e7: 30:a9:ad:e4:6f:ef:0f:09:0f:76:34:37:c8:a9:ab:87:57:8b: 09:fd:ce:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjp+snL4vos43yzkk54J8qMTicIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTA2MTUxNjQ2MjJaFw0yNTA2MTkwMTU2MjJaMDMxMTAvBgNV BAMTKDYxNEEzQTEwN0YyREE3RkM2RjY5NEMwQ0FBRkUyOTQ2RUI5Q0QzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nHyPSimZsgLECNl4SmklvmzD cxfASbPtisPV15VTaUBV7+D7SFrF83tRwHOHQ5SfAMr243gY9C7bq6BZL1AeS9Xd AmaZKcldBimJDeBK0CF9q/Uiks/D2J56U/3LPGLUM3SgmTd/GDALDduA5YTYReQI E6wOGCOEjyD5E7ib03+gDveVyDh1AGLp2wV/R7z8vkr2aS1K3aG+pxuwk6E4eONW kdzQ2ObMKkl0wcTsInL9gAAz24uWgU868s5q/IWIaHoxnuDpTPVLYQokAHDPMgIe iO8L4EX2gPwSOnQVwOnhpU2VHTvgaNw7sk2CkEOXSGKF5OfwYcvEqJj/BkfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUo6EH8tp/xvaUwMqv4pRuuc05AwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHkGy6ca/JDD5FfXTQryXJcIh1vHAz2Hbx5 MZjc6qphoVj5oS3cqDiMCB7CicZ/bLxqmLRR9aQw5ld3tmLCiaZmvIALEDyPGlk+ h3Af152kJ6DOxORofMUggaFQNrFl2Ug4Vn7IrMpoZuj9tPUl7mBMj4AUdB8RdD5J nRTmleSVhhsF4MHr7Jg9rIv5yNZyiGtXlrDzkrCWv1g3x1isj7CN17btAl4cxOEV 773gg5aQ5mlNOPZY7WSc/Q8ePbyRYMi5UvlZ+xlG3cFu2hLzvUK0r7k92CmEIPVw MT2gCof4ptgmmFgyDyqk5zCpreRv7w8JD3Y0N8ipq4dXiwn9zs8= -----END CERTIFICATE-----Generated at Wed Jun 18 00:10:17 2025 by rpki-client