$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: +Rj2NDJyBYtIUmUmg4kdS/SbKtw5YoExv53tvZkoyiI= Subject key identifier: 97:74:8F:FF:6A:92:52:16:B3:4F:1E:F1:41:EB:0E:77:04:BB:BB:AD Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 4EFCCC1C2571253346C798E1BBBE39F6520F88A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0253 Signing time: Tue 24 Mar 2026 23:12:06 +0000 Manifest this update: Tue 24 Mar 2026 23:07:06 +0000 Manifest next update: Fri 27 Mar 2026 23:23:06 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: OvpONTq8QT0KrgB9jUi7nAsHjettWbcQfwAIvqjW1Gk=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fc:cc:1c:25:71:25:33:46:c7:98:e1:bb:be:39:f6:52:0f:88:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Mar 24 23:07:06 2026 GMT Not After : Mar 27 23:23:06 2026 GMT Subject: CN=97748FFF6A925216B34F1EF141EB0E7704BBBBAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:6a:0a:4c:b1:a4:1d:e0:a2:94:ea:67:0c: e0:d8:ba:21:1c:62:2e:dd:a1:bf:e2:65:92:41:fa: 8f:4f:fc:51:b0:2a:8f:b8:d9:ec:7c:52:a7:65:7b: a6:10:e9:6a:f2:d0:11:20:9f:37:50:f5:b0:39:16: 85:ea:63:61:90:7c:e2:86:05:df:ba:00:5c:8f:4f: 9c:2b:f5:2a:d8:26:e4:94:bf:23:c7:fd:88:df:aa: d2:9e:ac:2a:7c:35:75:d0:7c:fa:7a:a0:c1:4b:23: 0f:7f:0b:00:b4:6c:51:fa:5b:26:ce:21:b5:52:82: 4d:94:e3:1c:6a:21:d8:90:46:22:02:e8:b0:6a:41: a5:ab:41:a3:33:df:29:f8:f7:71:ec:49:43:1f:bc: 3b:33:6a:d8:6d:57:8a:39:9a:64:0c:6e:64:b5:28: 1b:76:bd:38:fd:05:22:cf:48:98:7c:a8:ad:2e:7e: 50:26:34:de:70:03:89:d6:0c:24:a7:ca:80:87:d3: 12:2f:21:2c:4b:48:1a:60:d3:24:85:3c:8b:ae:a5: 54:c0:3e:3f:50:8c:25:09:0c:d5:5b:a5:d1:ed:fe: 89:c9:89:3c:ad:c3:02:67:ff:96:36:d7:e8:b0:0d: ec:08:74:85:aa:cf:b0:5f:fb:ff:7f:d6:9d:55:58: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:8F:FF:6A:92:52:16:B3:4F:1E:F1:41:EB:0E:77:04:BB:BB:AD X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:98:1b:68:b4:7a:1f:ab:eb:23:89:f5:d2:f2:00:00:d4:9a: a1:94:a9:4e:89:26:11:66:4e:d3:e5:5b:59:d3:bd:85:f5:bb: e6:bf:68:a3:a2:99:f6:f3:4e:d7:95:32:a0:0b:de:61:56:0a: 42:97:e1:8d:52:16:90:b4:e7:f7:66:f3:12:0e:39:5d:05:e5: 61:fd:e3:82:4c:64:54:46:a2:8c:f5:b7:dd:f4:f5:07:6c:6a: 39:39:59:9c:ce:9b:1b:72:b7:4a:a3:87:5c:95:0b:8d:05:58: ed:6b:e0:6b:8b:75:6e:9c:af:be:24:62:03:bd:85:93:a6:89: 7d:7d:01:00:9c:00:6a:38:68:73:02:d2:42:a0:e3:95:a9:8b: f4:2f:10:ca:c5:c9:fb:2d:14:fc:fc:63:1a:88:70:6b:2d:03: 71:b6:36:67:1a:fd:c5:52:31:7e:78:68:9b:79:4c:53:06:c2: 07:27:37:0f:58:d1:4f:63:50:dd:95:2b:06:4e:b9:0f:3b:6b: 8a:9e:ac:53:60:cc:66:0e:40:1f:2f:df:60:36:68:d4:6a:af: f0:a0:62:54:81:64:78:45:81:f1:2a:87:ec:67:b6:ce:32:5e: 1d:cd:dc:81:c8:ff:ce:43:b7:ff:af:d3:af:88:4c:18:0e:44: 4f:27:f3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvzMHCVxJTNGx5jhu7459lIPiKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNjAzMjQyMzA3MDZaFw0yNjAzMjcyMzIzMDZaMDMxMTAvBgNV BAMTKDk3NzQ4RkZGNkE5MjUyMTZCMzRGMUVGMTQxRUIwRTc3MDRCQkJCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZGoKTLGkHeCilOpnDODYuiEc Yi7dob/iZZJB+o9P/FGwKo+42ex8Uqdle6YQ6Wry0BEgnzdQ9bA5FoXqY2GQfOKG Bd+6AFyPT5wr9SrYJuSUvyPH/YjfqtKerCp8NXXQfPp6oMFLIw9/CwC0bFH6WybO IbVSgk2U4xxqIdiQRiIC6LBqQaWrQaMz3yn493HsSUMfvDszathtV4o5mmQMbmS1 KBt2vTj9BSLPSJh8qK0uflAmNN5wA4nWDCSnyoCH0xIvISxLSBpg0ySFPIuupVTA Pj9QjCUJDNVbpdHt/onJiTytwwJn/5Y21+iwDewIdIWqz7Bf+/9/1p1VWPWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3SP/2qSUhazTx7xQesOdwS7u60wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCYG2i0eh+r6yOJ9dLyAADUmqGUqU6JJhFm TtPlW1nTvYX1u+a/aKOimfbzTteVMqAL3mFWCkKX4Y1SFpC05/dm8xIOOV0F5WH9 44JMZFRGooz1t9309Qdsajk5WZzOmxtyt0qjh1yVC40FWO1r4GuLdW6cr74kYgO9 hZOmiX19AQCcAGo4aHMC0kKg45Wpi/QvEMrFyfstFPz8YxqIcGstA3G2Nmca/cVS MX54aJt5TFMGwgcnNw9Y0U9jUN2VKwZOuQ87a4qerFNgzGYOQB8v32A2aNRqr/Cg YlSBZHhFgfEqh+xnts4yXh3N3IHI/85Dt/+v06+ITBgORE8n86o= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:08 2026 by rpki-client