$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: +IQ06tD5FB+pc1vdHJidlDg9wOJUqtj1MYyDkbSvJUo= Subject key identifier: 1F:10:16:6B:01:3F:B8:B9:39:A7:96:18:36:DE:29:B5:2A:B3:38:84 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 31A99FD289506A75ABD62519D3356ED5F65E14A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 0134 Signing time: Mon 03 Nov 2025 23:31:35 +0000 Manifest this update: Mon 03 Nov 2025 23:26:35 +0000 Manifest next update: Fri 07 Nov 2025 01:14:35 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: GpgsR8ZR1gnxP+6L2Fr2MK+uMjGP0Ov/0IqKBGnM92I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a9:9f:d2:89:50:6a:75:ab:d6:25:19:d3:35:6e:d5:f6:5e:14:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Nov 3 23:26:35 2025 GMT Not After : Nov 7 01:14:35 2025 GMT Subject: CN=1F10166B013FB8B939A7961836DE29B52AB33884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:f9:54:16:93:63:85:3e:ad:0f:0e:5c:00: fc:0e:3f:da:88:1f:57:67:93:71:3b:eb:5f:b2:ab: e8:f0:3c:29:eb:bc:67:e6:fe:a0:4c:d3:17:89:8e: 50:bb:fe:59:79:7d:7a:39:e1:f3:40:1e:62:b6:1b: ea:03:cd:21:96:a2:6e:1c:9b:6b:1a:a0:5a:0c:34: 58:7e:25:bd:fa:d3:a3:9c:ef:1b:72:1b:6b:bc:08: 22:7d:c2:3a:81:41:f9:f6:02:54:37:70:33:86:93: 68:05:eb:54:00:29:27:c0:30:a0:fb:f1:04:32:2e: 1e:bd:6f:50:96:63:0e:53:68:cb:91:12:57:04:79: 6a:8c:56:0e:0f:ef:de:49:2b:9b:10:2c:70:57:8b: cc:b6:d1:ac:ac:c0:ec:e0:0e:c3:06:d9:11:39:ae: 9d:50:de:68:dc:a4:51:a5:8c:21:86:d3:76:80:0b: a7:ca:f1:1b:7c:05:ea:c8:28:f9:b9:e3:58:9a:dd: 1b:93:de:b0:4f:c5:8b:09:ee:e4:5d:3e:be:c4:9f: b0:c4:5f:c1:57:62:b2:0e:e4:46:02:a5:3f:c9:43: 60:67:b9:8a:1c:33:3a:e7:c1:ff:8d:2e:d6:51:0c: b8:1a:53:29:a3:16:d6:dd:c3:5a:95:2b:cb:01:d1: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:10:16:6B:01:3F:B8:B9:39:A7:96:18:36:DE:29:B5:2A:B3:38:84 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b5:34:d5:05:cf:6b:7b:59:96:f8:7a:44:e9:30:de:7d:cf: 80:a6:d6:23:a3:93:78:26:03:d0:de:5b:8b:5a:12:2e:32:1c: 0a:3a:c0:6c:23:c8:ca:12:a2:0e:e8:0f:80:91:e7:d5:8f:ed: d6:d0:57:d9:8d:17:46:c0:7a:c1:30:cf:97:28:06:60:be:6d: 1e:70:3c:e9:f2:68:84:59:f5:a1:90:9d:d1:3c:60:b0:bb:35: cc:0f:71:49:bb:58:f9:0c:38:84:77:12:11:1b:9b:58:c8:5c: d4:7c:cf:f8:b2:8a:4d:20:36:e0:24:76:78:d7:10:03:b6:c3: 4b:2d:90:87:e0:22:4b:63:4f:c4:5d:b7:96:11:30:56:60:e0: 0f:a5:47:0e:0c:9c:e5:a2:ba:02:43:71:55:05:d2:8c:78:03: 32:86:17:f8:7b:f2:d0:0b:a6:35:2e:2a:ba:28:8c:d7:eb:f4: 77:a3:cc:82:d5:59:5e:00:38:8b:b3:71:c5:8f:2f:b6:53:47: f5:04:61:95:d2:62:95:cb:46:10:cc:82:28:29:33:b2:8d:72: 1f:a8:80:49:fc:60:a9:58:c5:15:6c:75:8b:c0:f2:43:0a:19: 1e:a1:01:31:e4:ad:4d:d1:39:ec:a7:9a:a1:31:b4:ae:c0:6b: 1d:75:9b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMamf0olQanWr1iUZ0zVu1fZeFKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTExMDMyMzI2MzVaFw0yNTExMDcwMTE0MzVaMDMxMTAvBgNV BAMTKDFGMTAxNjZCMDEzRkI4QjkzOUE3OTYxODM2REUyOUI1MkFCMzM4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtvlUFpNjhT6tDw5cAPwOP9qI H1dnk3E761+yq+jwPCnrvGfm/qBM0xeJjlC7/ll5fXo54fNAHmK2G+oDzSGWom4c m2saoFoMNFh+Jb3606Oc7xtyG2u8CCJ9wjqBQfn2AlQ3cDOGk2gF61QAKSfAMKD7 8QQyLh69b1CWYw5TaMuRElcEeWqMVg4P795JK5sQLHBXi8y20ayswOzgDsMG2RE5 rp1Q3mjcpFGljCGG03aAC6fK8Rt8BerIKPm541ia3RuT3rBPxYsJ7uRdPr7En7DE X8FXYrIO5EYCpT/JQ2BnuYocMzrnwf+NLtZRDLgaUymjFtbdw1qVK8sB0RnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHxAWawE/uLk5p5YYNt4ptSqzOIQwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG1NNUFz2t7WZb4ekTpMN59z4Cm1iOjk3gm A9DeW4taEi4yHAo6wGwjyMoSog7oD4CR59WP7dbQV9mNF0bAesEwz5coBmC+bR5w POnyaIRZ9aGQndE8YLC7NcwPcUm7WPkMOIR3EhEbm1jIXNR8z/iyik0gNuAkdnjX EAO2w0stkIfgIktjT8Rdt5YRMFZg4A+lRw4MnOWiugJDcVUF0ox4AzKGF/h78tAL pjUuKroojNfr9HejzILVWV4AOIuzccWPL7ZTR/UEYZXSYpXLRhDMgigpM7KNch+o gEn8YKlYxRVsdYvA8kMKGR6hATHkrU3ROeynmqExtK7Aax11m8A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:12 2025 by rpki-client