$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: SF3XXRaceyyNFYGFj/J8oihqFshofGQKxMfzVCcbEnk= Subject key identifier: 14:F8:5A:2C:7B:FD:2E:F0:25:E1:6C:A5:B4:7C:C2:14:38:D8:22:A2 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 7CC1EA810B90FD504558DA789818CB1CB848C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 04FB Signing time: Wed 25 Mar 2026 05:50:47 +0000 Manifest this update: Wed 25 Mar 2026 05:45:47 +0000 Manifest next update: Sat 28 Mar 2026 07:35:47 +0000 Files and hashes: 1: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Hp5JXQrEPxCMGP++NvFxm2uvusi9TtoQlGvA7/UOH1I=) 2: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: DTVsh2XoacQGQ0M4VZPcXWe9xYvlSB7Zv3KJ/YTK1Yw=) 3: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: laLJUGonDC43HjG3ZGNawYIEQ9ln67j38UngxvM2zgQ=) 4: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: Mt5SrkBl0TnCuOW6KjiUo7KU17URT0CCUG/IFHUWPhI=) 5: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: tgghpXtMF5FCobQZXNijcYF/Z/299AfVjnWLAspPnXY=) 6: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: 5V8TdCs3cgs+nmmoF4z5Y22rIV0qGc1uTgZVGMrslKU=) 7: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: MfxGUIrhtjjGajjX90ABbBqTVuaaEFP6XuBr1Yslsx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c1:ea:81:0b:90:fd:50:45:58:da:78:98:18:cb:1c:b8:48:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Mar 25 05:45:47 2026 GMT Not After : Mar 28 07:35:47 2026 GMT Subject: CN=14F85A2C7BFD2EF025E16CA5B47CC21438D822A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:e4:db:cb:be:33:63:48:c1:a3:4b:e8:8d: 1c:b3:c6:e5:56:82:58:10:4b:85:72:8d:7f:97:ac: 97:5e:3d:bf:af:0f:3c:70:cb:5d:d0:f9:03:d5:9a: 49:22:16:4f:42:9c:1b:c7:8e:1e:ed:38:94:f4:8a: eb:45:b8:e5:11:3a:0b:4c:9e:5a:23:44:a4:9a:12: 9e:59:91:8d:6d:95:18:5d:78:e1:99:1e:77:65:3e: f6:40:ea:1b:37:af:dc:39:0c:9e:57:12:fb:90:9f: 6c:7c:81:e2:c3:5d:df:a8:a1:79:74:76:f6:48:b6: 11:42:42:c9:f4:52:54:3c:b5:de:16:c7:0c:60:1e: 0a:86:27:c2:81:ec:92:97:38:4f:25:c9:c0:5e:ee: 55:0e:08:9c:80:76:01:67:96:3b:f9:99:ce:e8:a5: 69:6d:a3:d1:4f:03:91:f7:07:53:2f:e4:6b:89:f6: 59:b9:12:1d:d7:fe:76:85:86:ac:c0:49:d8:c8:e4: b4:c5:af:a1:c7:01:74:11:6b:5a:61:ac:e5:7e:88: 45:ff:6b:4f:d0:bf:d5:9e:48:e8:c9:3a:52:a2:a3: f7:0a:46:84:6c:e4:d6:9a:18:9f:19:15:0c:42:ef: 95:1e:9b:cb:f8:2f:05:da:e9:dd:a4:bf:70:4f:73: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F8:5A:2C:7B:FD:2E:F0:25:E1:6C:A5:B4:7C:C2:14:38:D8:22:A2 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9f:84:2f:c5:60:29:5b:d0:88:5c:cd:45:ca:65:04:33:fe: 6a:02:92:c0:0e:36:cd:9d:2c:af:11:9b:e6:a0:8f:a5:47:58: 40:43:d7:a8:e4:2a:36:4b:fd:af:7e:d3:65:5d:b1:9d:b3:11: 7b:9a:95:ef:04:36:1c:1f:65:e0:7d:f8:71:f6:0f:d3:ac:63: 4d:39:65:61:3f:10:65:e2:15:8f:94:9c:3f:8d:b7:df:e0:47: 27:dd:19:af:7d:d0:4c:f8:34:a7:44:b3:69:91:96:b8:ca:e5: fc:40:46:64:8e:29:bb:2b:0d:f3:1a:78:8d:a7:74:a7:50:78: 14:91:24:12:9c:7c:42:1a:95:e2:e4:19:0c:8d:9e:9d:cc:3b: ac:d0:1b:fb:c5:bc:0a:7c:9e:9c:ba:31:dd:e2:bd:da:f7:b8: cc:bd:85:62:e0:6c:c7:3a:5a:45:29:50:86:6b:c4:54:e8:29: d3:19:4a:5e:8d:ac:55:c6:ea:58:35:99:44:56:88:e4:15:f6: 6c:a2:5b:0f:6d:db:aa:77:e5:73:12:80:54:0c:20:09:0d:f8: e1:29:7b:64:2c:68:1f:5e:ba:66:1b:84:08:d1:9f:b5:92:0f: 76:f0:49:05:69:e7:17:09:8a:ea:35:29:d8:f8:9c:3e:1e:8d: 08:35:0f:9e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfMHqgQuQ/VBFWNp4mBjLHLhIwjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzM0ZEMzEyNzdENzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3 OUNBQUQ5MB4XDTI2MDMyNTA1NDU0N1oXDTI2MDMyODA3MzU0N1owMzExMC8GA1UE AxMoMTRGODVBMkM3QkZEMkVGMDI1RTE2Q0E1QjQ3Q0MyMTQzOEQ4MjJBMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN0x5NvLvjNjSMGjS+iNHLPG5VaC WBBLhXKNf5esl149v68PPHDLXdD5A9WaSSIWT0KcG8eOHu04lPSK60W45RE6C0ye WiNEpJoSnlmRjW2VGF144Zked2U+9kDqGzev3DkMnlcS+5CfbHyB4sNd36iheXR2 9ki2EUJCyfRSVDy13hbHDGAeCoYnwoHskpc4TyXJwF7uVQ4InIB2AWeWO/mZzuil aW2j0U8DkfcHUy/ka4n2WbkSHdf+doWGrMBJ2MjktMWvoccBdBFrWmGs5X6IRf9r T9C/1Z5I6Mk6UqKj9wpGhGzk1poYnxkVDELvlR6by/gvBdrp3aS/cE9zcLECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQU+Fose/0u8CXhbKW0fMIUONgiojAfBgNVHSME GDAWgBQz/TEnfXKMamcVuRPVpHlcp5yq2TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0 OTAzNDVlLTJkNTctNDM0OS1iNzhmLWM4YjE4YTQ0MjQ0NS8wLzMzRkQzMTI3N0Q3 MjhDNkE2NzE1QjkxM0Q1QTQ3OTVDQTc5Q0FBRDkuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zM0ZEMzEyNzdENzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNB QUQ5LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8yNDkwMzQ1ZS0yZDU3LTQzNDktYjc4 Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdENzI4QzZBNjcxNUI5MTNENUE0Nzk1 Q0E3OUNBQUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAnJ+EL8VgKVvQiFzNRcplBDP+agKSwA42zZ0s rxGb5qCPpUdYQEPXqOQqNkv9r37TZV2xnbMRe5qV7wQ2HB9l4H34cfYP06xjTTll YT8QZeIVj5ScP4233+BHJ90Zr33QTPg0p0SzaZGWuMrl/EBGZI4puysN8xp4jad0 p1B4FJEkEpx8QhqV4uQZDI2encw7rNAb+8W8CnyenLox3eK92ve4zL2FYuBsxzpa RSlQhmvEVOgp0xlKXo2sVcbqWDWZRFaI5BX2bKJbD23bqnflcxKAVAwgCQ344Sl7 ZCxoH166ZhuECNGftZIPdvBJBWnnFwmK6jUp2PicPh6NCDUPng== -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:18 2026 by rpki-client