$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: cubZ+aLlw/oqqE8hQr2VWntGzXtCtNeLsWXMdCDhUT0= Subject key identifier: 87:44:1E:3B:84:27:B1:C7:13:BF:09:8E:1A:7A:74:14:4B:60:07:1E Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 75992B057CED4B281FB5950F0493935261AEC8A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0193 Signing time: Tue 24 Mar 2026 19:41:53 +0000 Manifest this update: Tue 24 Mar 2026 19:36:53 +0000 Manifest next update: Fri 27 Mar 2026 23:23:53 +0000 Files and hashes: 1: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: iNFkAevEtSK9lS0H3azQAGTZLus7Pfb6AnbCuNyir3Q=) 3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 4: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:99:2b:05:7c:ed:4b:28:1f:b5:95:0f:04:93:93:52:61:ae:c8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Mar 24 19:36:53 2026 GMT Not After : Mar 27 23:23:53 2026 GMT Subject: CN=87441E3B8427B1C713BF098E1A7A74144B60071E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5d:8a:a4:3d:71:9f:bd:4a:b8:cf:46:8e:12: f8:34:ae:75:49:86:47:5d:9e:b3:46:aa:23:0e:11: 3e:cb:38:04:44:2c:5c:59:b8:56:ed:ba:b5:be:24: 67:15:2b:ab:e3:56:9d:07:5a:b2:d0:1a:80:0d:60: 23:24:87:10:0e:8d:77:de:4e:6f:3b:98:1c:d0:bc: 02:86:ce:33:a1:e3:3e:6f:65:80:27:46:71:11:08: ed:33:77:f0:46:d4:9e:1d:7a:39:9a:36:d1:37:d4: 8b:3d:54:d4:6e:4b:5c:f5:92:5e:99:f3:a9:30:77: 28:15:74:fe:6d:20:5d:b4:b4:1a:b2:83:18:af:7b: 4c:f3:33:f6:c2:2c:34:84:90:b8:a7:29:84:66:0c: 32:c1:1f:e6:d5:95:5f:5f:84:6a:eb:7d:6e:91:64: 47:fb:20:1e:12:d0:8a:18:cf:7a:8f:52:c0:22:b8: db:2a:2d:43:9b:53:ac:29:8e:69:47:cd:b2:98:63: f5:35:02:74:46:76:86:50:9b:9a:6e:d6:04:23:27: f2:e3:c0:33:18:15:2d:66:c5:e8:68:db:e9:7f:1a: ff:f3:c4:e9:62:04:4a:3a:16:22:5c:a8:76:98:7d: 36:df:94:ac:53:3b:cb:29:a8:ff:b8:bc:49:a3:a6: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:1E:3B:84:27:B1:C7:13:BF:09:8E:1A:7A:74:14:4B:60:07:1E X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:26:26:26:04:78:78:7f:8f:cd:a1:f7:40:67:ff:d9:00:dd: 87:ee:d6:9d:f5:13:d3:b4:de:97:61:21:01:a7:c3:37:2c:67: 2b:d8:97:b6:c1:96:cd:a6:d0:fc:2c:d8:80:d0:34:cf:34:a3: 90:b3:29:3f:fc:86:a9:34:65:13:58:a8:05:24:65:f5:65:c9: f0:d7:c7:f5:b9:35:bf:3f:b4:f0:db:86:12:d3:4b:b6:91:b7: d1:ca:91:a3:ee:be:55:c6:7a:76:d4:92:9a:d1:4f:c8:1d:53: 18:cd:73:27:d3:08:b9:b3:f0:5f:a9:e2:63:28:5b:03:24:15: f6:42:83:f0:4d:64:2a:a9:ec:4a:4a:26:05:10:58:b6:c2:f9: 20:2a:70:7a:45:2e:de:07:73:7f:8c:99:c8:57:38:08:f5:f1: 3c:ef:7e:9c:08:f8:70:8d:b0:36:f8:7d:2e:d1:50:0e:d4:ca: 91:73:3c:51:de:53:68:46:42:b6:5c:18:ae:77:ed:2e:6d:cf: 94:b6:61:4a:df:c4:0b:97:db:72:11:fe:c1:7f:0b:c7:b2:e2: 06:44:6c:4e:f3:d1:bf:24:a2:7b:17:bc:24:ee:59:1a:38:61: 10:c4:8a:f2:90:b2:f0:4e:bb:32:23:3a:93:fa:2e:d4:7d:73: 39:60:9c:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZkrBXztSygftZUPBJOTUmGuyKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNjAzMjQxOTM2NTNaFw0yNjAzMjcyMzIzNTNaMDMxMTAvBgNV BAMTKDg3NDQxRTNCODQyN0IxQzcxM0JGMDk4RTFBN0E3NDE0NEI2MDA3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXYqkPXGfvUq4z0aOEvg0rnVJ hkddnrNGqiMOET7LOARELFxZuFbturW+JGcVK6vjVp0HWrLQGoANYCMkhxAOjXfe Tm87mBzQvAKGzjOh4z5vZYAnRnERCO0zd/BG1J4dejmaNtE31Is9VNRuS1z1kl6Z 86kwdygVdP5tIF20tBqygxive0zzM/bCLDSEkLinKYRmDDLBH+bVlV9fhGrrfW6R ZEf7IB4S0IoYz3qPUsAiuNsqLUObU6wpjmlHzbKYY/U1AnRGdoZQm5pu1gQjJ/Lj wDMYFS1mxeho2+l/Gv/zxOliBEo6FiJcqHaYfTbflKxTO8spqP+4vEmjpp1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh0QeO4QnsccTvwmOGnp0FEtgBx4wHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAmJiYEeHh/j82h90Bn/9kA3Yfu1p31E9O0 3pdhIQGnwzcsZyvYl7bBls2m0Pws2IDQNM80o5CzKT/8hqk0ZRNYqAUkZfVlyfDX x/W5Nb8/tPDbhhLTS7aRt9HKkaPuvlXGenbUkprRT8gdUxjNcyfTCLmz8F+p4mMo WwMkFfZCg/BNZCqp7EpKJgUQWLbC+SAqcHpFLt4Hc3+MmchXOAj18TzvfpwI+HCN sDb4fS7RUA7UypFzPFHeU2hGQrZcGK537S5tz5S2YUrfxAuX23IR/sF/C8ey4gZE bE7z0b8konsXvCTuWRo4YRDEivKQsvBOuzIjOpP6LtR9czlgnDc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:49 2026 by rpki-client