$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: Yo3amEMk2wNq6PpJxVVAu9sTJcVsx8WTzVOVHqOY0fQ= Subject key identifier: 73:21:E5:06:63:E9:4A:BE:28:45:56:35:BC:0E:E9:F2:E8:49:2D:EE Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 5BBCEB16B6FECC720CB99024A43465723AFA5B97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 94 Signing time: Sun 02 Nov 2025 08:41:24 +0000 Manifest this update: Sun 02 Nov 2025 08:36:24 +0000 Manifest next update: Wed 05 Nov 2025 14:36:24 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: j01eCSCymzTmRnXaT9RXzTQBOVCXZ11fqlwbI6xEdmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bc:eb:16:b6:fe:cc:72:0c:b9:90:24:a4:34:65:72:3a:fa:5b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Nov 2 08:36:24 2025 GMT Not After : Nov 5 14:36:24 2025 GMT Subject: CN=7321E50663E94ABE28455635BC0EE9F2E8492DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:43:69:b2:80:48:77:1c:f4:0e:00:21:f7:06: 10:6b:14:a5:e7:6d:b9:3c:a4:7f:7e:98:fb:96:1d: 98:ce:37:3b:5a:f8:c3:8d:7b:c9:46:2e:58:30:45: 4b:01:7f:61:73:95:d5:d7:2d:78:a6:1b:c8:bf:9e: 81:97:6d:b1:81:a6:39:7f:0e:59:73:53:cc:12:24: 49:60:54:ea:e1:ed:79:3a:4a:00:03:ec:05:a1:53: 62:d9:9d:9d:60:cb:44:fa:34:f6:11:1c:58:ad:4b: 10:78:e0:44:2b:c6:50:5b:8b:12:9d:3f:f7:0a:36: d3:db:3b:c0:6e:db:3f:dc:ac:eb:26:d3:bc:77:cc: ab:55:b2:e9:36:57:f7:87:1f:d5:87:6b:3c:05:bf: 78:93:e7:8c:0e:f1:8e:56:11:0e:bd:c5:e4:d8:86: 56:39:15:66:fd:e7:43:89:25:5d:70:f6:af:7c:b5: 49:bb:8d:f6:20:4c:8c:98:95:97:6b:0f:7a:0c:9d: be:2b:a4:f0:a6:7f:4d:63:d7:42:35:1d:4d:99:9d: 64:91:c6:0d:65:29:1d:ec:f3:fe:90:ab:77:cd:43: 95:79:e8:41:88:e5:24:b3:8b:0a:89:6a:b2:ef:d4: 25:d9:55:f4:a0:c7:12:6f:65:8d:e5:cd:6a:ea:f2: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:21:E5:06:63:E9:4A:BE:28:45:56:35:BC:0E:E9:F2:E8:49:2D:EE X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:14:43:66:ec:f8:c9:21:6b:fc:54:e8:2f:55:97:47:34:99: 9a:53:87:7f:57:34:9f:c7:5e:87:d4:6f:4f:10:f7:29:37:67: a6:55:a9:e4:3c:52:e7:2a:db:e9:24:8e:dd:f9:55:6d:5f:0b: d3:30:3c:65:a6:2e:a0:c9:fd:1a:8d:b8:2e:e9:eb:04:5f:d0: 19:2f:ec:48:98:df:a4:e7:3a:67:2f:de:be:88:9a:d6:4b:d0: 7a:c1:af:88:06:0f:be:c5:f4:2d:41:6d:17:58:c5:8f:f4:eb: d7:57:4c:6b:42:aa:df:0c:1a:71:42:5d:8f:63:ee:c3:1b:1b: c9:be:6d:c4:c8:93:e3:ae:e4:1f:20:7b:80:05:b1:b8:41:3c: cf:5e:15:1f:f6:d6:fa:d2:48:31:7c:a8:61:fa:67:9d:1d:5d: 8e:bf:1d:1a:55:ff:a8:c3:03:4e:37:39:da:b3:f1:7c:9a:c0: 6d:8b:73:03:15:b9:fa:20:db:06:24:d0:22:ac:fa:36:40:55: f3:a4:38:7e:34:b0:e2:94:b4:7e:27:66:c0:30:9a:e5:37:e1: 2b:df:b5:29:fb:d1:eb:a9:48:5e:0e:e9:35:eb:7d:e2:26:60: 57:fa:a4:2a:d8:2c:6f:96:10:90:80:bc:29:7d:50:ed:0d:72: cd:8a:40:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7zrFrb+zHIMuZAkpDRlcjr6W5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTExMDIwODM2MjRaFw0yNTExMDUxNDM2MjRaMDMxMTAvBgNV BAMTKDczMjFFNTA2NjNFOTRBQkUyODQ1NTYzNUJDMEVFOUYyRTg0OTJERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQ2mygEh3HPQOACH3BhBrFKXn bbk8pH9+mPuWHZjONzta+MONe8lGLlgwRUsBf2FzldXXLXimG8i/noGXbbGBpjl/ DllzU8wSJElgVOrh7Xk6SgAD7AWhU2LZnZ1gy0T6NPYRHFitSxB44EQrxlBbixKd P/cKNtPbO8Bu2z/crOsm07x3zKtVsuk2V/eHH9WHazwFv3iT54wO8Y5WEQ69xeTY hlY5FWb950OJJV1w9q98tUm7jfYgTIyYlZdrD3oMnb4rpPCmf01j10I1HU2ZnWSR xg1lKR3s8/6Qq3fNQ5V56EGI5SSziwqJarLv1CXZVfSgxxJvZY3lzWrq8kMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcyHlBmPpSr4oRVY1vA7p8uhJLe4wHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsUQ2bs+Mkha/xU6C9Vl0c0mZpTh39XNJ/H XofUb08Q9yk3Z6ZVqeQ8Uucq2+kkjt35VW1fC9MwPGWmLqDJ/RqNuC7p6wRf0Bkv 7EiY36TnOmcv3r6ImtZL0HrBr4gGD77F9C1BbRdYxY/069dXTGtCqt8MGnFCXY9j 7sMbG8m+bcTIk+Ou5B8ge4AFsbhBPM9eFR/21vrSSDF8qGH6Z50dXY6/HRpV/6jD A043Odqz8XyawG2LcwMVufog2wYk0CKs+jZAVfOkOH40sOKUtH4nZsAwmuU34Svf tSn70eupSF4O6TXrfeImYFf6pCrYLG+WEJCAvCl9UO0Ncs2KQPU= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:39 2025 by rpki-client