$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: noitb3Ca7gY500m0J9dJ4URafCLvs56olbg0J6oTgfg= Subject key identifier: E5:7C:26:32:73:D3:46:A9:17:7F:3E:48:20:E6:D6:D2:34:F9:05:E6 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 41CD34D3F7F67351820C46DFF343B45335D97C9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 6E Signing time: Thu 07 Aug 2025 13:21:25 +0000 Manifest this update: Thu 07 Aug 2025 13:16:25 +0000 Manifest next update: Mon 11 Aug 2025 01:04:25 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: pDhikUcUY+2xgPaEX3yV4SRYlarjQUEMoA9hAzp/ync=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cd:34:d3:f7:f6:73:51:82:0c:46:df:f3:43:b4:53:35:d9:7c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Aug 7 13:16:25 2025 GMT Not After : Aug 11 01:04:25 2025 GMT Subject: CN=E57C263273D346A9177F3E4820E6D6D234F905E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:09:9e:28:5f:74:75:b1:29:29:80:9d:ca: 4b:0f:82:0f:81:fc:e7:c1:77:24:60:c9:ea:95:1b: 9a:59:94:e8:62:1c:98:4a:14:18:df:96:58:1c:11: 83:eb:99:32:8e:ab:f9:2b:da:f9:be:00:a4:c1:22: 69:62:c3:c6:d3:86:f4:57:f6:ea:b4:32:2f:a8:c4: 94:98:93:a4:64:a5:de:33:96:09:06:e4:d4:7a:57: 2a:77:5a:58:85:42:51:79:98:15:ba:d2:99:ae:b4: ae:af:c2:7e:26:23:3c:18:98:c2:7e:df:5b:c8:1b: d4:4e:aa:e4:1e:9b:39:ad:2b:d6:53:06:1b:1f:08: 54:99:b9:c3:4a:2c:84:f3:62:fc:da:f3:88:82:45: c2:d4:20:bc:0c:9c:52:1e:a9:bc:67:95:85:51:6a: 5e:33:aa:00:69:e3:63:f4:25:34:62:73:6b:ca:68: 18:1c:a4:58:b1:e4:38:62:a9:fe:fc:85:d5:ba:e5: 92:08:32:bf:e3:76:50:4a:c2:0a:cc:f9:6c:19:7c: ed:81:df:eb:34:95:2b:a9:bc:76:24:ab:5c:68:a8: 5f:03:6f:1d:ae:43:0c:3b:fa:24:2e:3f:d3:bd:e9: 2b:fa:3d:9d:db:b6:dc:27:a6:29:1c:84:c5:a6:71: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7C:26:32:73:D3:46:A9:17:7F:3E:48:20:E6:D6:D2:34:F9:05:E6 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5b:1b:db:cc:a2:3a:ed:ed:c0:e7:41:e0:ca:25:98:33:c8: 47:96:7d:56:fa:e8:56:9b:46:1a:56:30:df:c1:86:e6:55:eb: 7f:6e:59:92:13:ab:8c:e6:2e:39:ed:a2:38:d5:f1:ab:aa:33: 3e:f0:b3:19:98:09:9f:14:e8:b7:32:2b:df:62:19:75:81:76: 3b:08:5a:e2:24:53:7a:48:03:3e:d3:83:b1:5e:dd:98:3f:a0: 69:2f:33:50:39:6b:fd:5d:c4:6f:91:76:4f:b9:bb:cf:a1:60: d0:0d:2f:1c:50:b5:92:d1:26:1e:57:e5:c2:b9:8c:31:bc:df: 64:9e:4e:4d:46:48:9d:49:23:b0:f3:25:1f:a5:9b:8b:74:e6: 89:d2:74:d8:8f:cf:00:b3:83:aa:91:d0:e1:2b:ab:b1:a0:8c: 0e:dd:27:f0:20:ff:43:a5:b7:e3:d2:02:ef:5d:26:03:73:4f: fe:a9:43:80:27:91:94:04:91:51:05:6c:35:f5:7d:87:a5:22: 0d:94:6b:7a:2c:63:5e:e3:f8:8e:51:78:60:ac:fe:dc:df:92: d1:95:c5:76:51:67:88:a3:96:64:8b:20:06:ef:56:32:88:a9: 1b:eb:9c:a3:67:a2:96:6f:4b:a5:af:44:18:af:0e:ec:09:b0: 6e:ff:10:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQc000/f2c1GCDEbf80O0UzXZfJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTA4MDcxMzE2MjVaFw0yNTA4MTEwMTA0MjVaMDMxMTAvBgNV BAMTKEU1N0MyNjMyNzNEMzQ2QTkxNzdGM0U0ODIwRTZENkQyMzRGOTA1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGQmeKF90dbEpKYCdyksPgg+B /OfBdyRgyeqVG5pZlOhiHJhKFBjfllgcEYPrmTKOq/kr2vm+AKTBImliw8bThvRX 9uq0Mi+oxJSYk6Rkpd4zlgkG5NR6Vyp3WliFQlF5mBW60pmutK6vwn4mIzwYmMJ+ 31vIG9ROquQemzmtK9ZTBhsfCFSZucNKLITzYvza84iCRcLUILwMnFIeqbxnlYVR al4zqgBp42P0JTRic2vKaBgcpFix5Dhiqf78hdW65ZIIMr/jdlBKwgrM+WwZfO2B 3+s0lSupvHYkq1xoqF8Dbx2uQww7+iQuP9O96Sv6PZ3bttwnpikchMWmcZ8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5XwmMnPTRqkXfz5IIObW0jT5BeYwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9bG9vMojrt7cDnQeDKJZgzyEeWfVb66Fab RhpWMN/BhuZV639uWZITq4zmLjntojjV8auqMz7wsxmYCZ8U6LcyK99iGXWBdjsI WuIkU3pIAz7Tg7Fe3Zg/oGkvM1A5a/1dxG+Rdk+5u8+hYNANLxxQtZLRJh5X5cK5 jDG832SeTk1GSJ1JI7DzJR+lm4t05onSdNiPzwCzg6qR0OErq7GgjA7dJ/Ag/0Ol t+PSAu9dJgNzT/6pQ4AnkZQEkVEFbDX1fYelIg2Ua3osY17j+I5ReGCs/tzfktGV xXZRZ4ijlmSLIAbvVjKIqRvrnKNnopZvS6WvRBivDuwJsG7/EKM= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:32 2025 by rpki-client