$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: fWMYQ73wiM21OvwyUyBFva8cTDX1xiTzwbaDdCBocvU= Subject key identifier: 5E:5B:68:11:51:D7:F1:7D:A7:A1:95:9F:26:C8:DB:67:48:C1:DA:BB Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 55BAE555FD26AE78009D3B5B086EBB1B3E4F5FB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: D3 Signing time: Wed 25 Mar 2026 05:01:36 +0000 Manifest this update: Wed 25 Mar 2026 04:56:36 +0000 Manifest next update: Sat 28 Mar 2026 15:10:36 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: KtZF8fiJGk2bS5qGohPrVuSEpXK53ZJQEFphZg1F0Us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ba:e5:55:fd:26:ae:78:00:9d:3b:5b:08:6e:bb:1b:3e:4f:5f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Mar 25 04:56:36 2026 GMT Not After : Mar 28 15:10:36 2026 GMT Subject: CN=5E5B681151D7F17DA7A1959F26C8DB6748C1DABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:7a:fc:eb:78:72:29:c0:8f:57:27:f4:5b: e5:e6:10:c4:a2:70:25:2f:7c:40:1e:13:20:9e:2d: 3d:55:4f:ac:23:1a:1e:0a:7c:f9:4e:3d:32:cd:4f: 8b:21:8b:15:55:92:94:96:63:bd:c0:52:c2:d3:77: dc:8b:86:60:88:e0:88:e4:2f:c4:cc:40:41:e1:ee: 75:e4:33:56:2f:4b:57:30:4a:56:57:55:93:7f:54: f0:54:cc:af:3e:d4:0e:5a:b6:9e:64:73:e0:31:14: 72:04:c2:20:63:e1:b5:ac:30:e7:d3:af:41:d7:e5: 93:77:87:5d:f5:06:e9:f6:1f:33:e9:6c:2e:4e:fc: f0:bf:3c:25:b9:42:78:7b:5f:18:ab:fb:80:aa:59: f6:fb:29:c1:2d:2e:55:19:70:65:f6:06:84:f2:b6: 74:e0:13:f8:57:17:d1:9e:d2:46:85:13:7a:4b:37: 66:fd:90:01:00:26:b4:6a:1b:7f:3f:f4:f8:4b:2a: 34:c5:95:ab:87:e9:cb:b2:c6:4a:b8:50:f3:9c:6e: a7:91:05:4e:93:33:78:f9:e2:77:ef:12:02:a9:bf: 42:f2:05:5d:7c:5f:0d:c8:59:79:be:44:03:f8:9c: e0:75:81:d9:aa:69:1d:60:52:90:d4:a2:f0:69:07: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:68:11:51:D7:F1:7D:A7:A1:95:9F:26:C8:DB:67:48:C1:DA:BB X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:44:b2:07:c0:ed:a7:4c:1b:d5:3a:af:b1:a3:3b:5c:62:34: 77:31:01:39:f4:24:75:70:22:80:82:e5:b9:e4:8c:be:4e:fd: 90:06:2c:69:c8:c5:d2:ab:bf:fc:8d:92:e7:df:a8:dc:f7:5d: 0d:3a:3d:8c:22:69:27:06:ad:a5:31:36:3a:75:2d:ff:4e:cb: e2:47:98:62:b2:2a:01:d8:53:57:72:e2:c7:4c:b9:91:ad:40: 2e:35:91:a4:3a:3b:16:5a:30:4d:7d:1a:f8:b9:78:9f:6f:7d: ae:d0:f4:a9:14:63:c5:dd:2b:ca:bf:36:b8:82:93:66:16:77: 0c:72:ef:b8:68:d2:3f:97:58:db:02:78:c3:8c:cd:89:c2:1f: b9:c9:d9:a0:7f:89:33:7f:c1:39:93:c2:40:f7:d2:09:bd:d3: 2e:57:58:39:f4:b0:ee:70:d2:26:95:75:0a:2c:7f:55:4e:82: 13:f2:93:23:a6:9d:f4:f1:fd:e4:b3:9f:51:5e:a7:07:ad:1d: 1f:92:e3:a6:73:4f:c2:36:49:73:ec:3d:11:67:2f:55:15:86: 70:19:f8:4a:96:dc:d0:a7:88:80:79:a1:64:98:e7:d4:a8:99: f9:75:da:84:2c:27:20:7d:7d:59:57:1a:45:f9:e5:6d:b8:8d: 04:90:7c:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbrlVf0mrngAnTtbCG67Gz5PX7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNjAzMjUwNDU2MzZaFw0yNjAzMjgxNTEwMzZaMDMxMTAvBgNV BAMTKDVFNUI2ODExNTFEN0YxN0RBN0ExOTU5RjI2QzhEQjY3NDhDMURBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7Xr863hyKcCPVyf0W+XmEMSi cCUvfEAeEyCeLT1VT6wjGh4KfPlOPTLNT4shixVVkpSWY73AUsLTd9yLhmCI4Ijk L8TMQEHh7nXkM1YvS1cwSlZXVZN/VPBUzK8+1A5atp5kc+AxFHIEwiBj4bWsMOfT r0HX5ZN3h131Bun2HzPpbC5O/PC/PCW5Qnh7Xxir+4CqWfb7KcEtLlUZcGX2BoTy tnTgE/hXF9Ge0kaFE3pLN2b9kAEAJrRqG38/9PhLKjTFlauH6cuyxkq4UPOcbqeR BU6TM3j54nfvEgKpv0LyBV18Xw3IWXm+RAP4nOB1gdmqaR1gUpDUovBpByO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXltoEVHX8X2noZWfJsjbZ0jB2rswHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdEsgfA7adMG9U6r7GjO1xiNHcxATn0JHVw IoCC5bnkjL5O/ZAGLGnIxdKrv/yNkuffqNz3XQ06PYwiaScGraUxNjp1Lf9Oy+JH mGKyKgHYU1dy4sdMuZGtQC41kaQ6OxZaME19Gvi5eJ9vfa7Q9KkUY8XdK8q/NriC k2YWdwxy77ho0j+XWNsCeMOMzYnCH7nJ2aB/iTN/wTmTwkD30gm90y5XWDn0sO5w 0iaVdQosf1VOghPykyOmnfTx/eSzn1FepwetHR+S46ZzT8I2SXPsPRFnL1UVhnAZ +EqW3NCniIB5oWSY59Somfl12oQsJyB9fVlXGkX55W24jQSQfD0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:18:42 2026 by rpki-client