$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: DM7QajrCbjVbWtMf9vYUJcrF+dRBVKLxpFLVBEr22pE= Subject key identifier: 04:05:1F:22:2E:84:5B:B6:6A:B0:BC:81:D0:15:0B:7C:E8:BA:30:E4 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 39FEAD434818A3F5DD1353FFED0AC1C578E489E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 010F Signing time: Thu 26 Mar 2026 02:42:44 +0000 Manifest this update: Thu 26 Mar 2026 02:37:44 +0000 Manifest next update: Sun 29 Mar 2026 11:55:44 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: Zv4P0kaCV7U4lAw6XZb+aPrTBsPIRK8z3KIy9hzMKP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fe:ad:43:48:18:a3:f5:dd:13:53:ff:ed:0a:c1:c5:78:e4:89:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Mar 26 02:37:44 2026 GMT Not After : Mar 29 11:55:44 2026 GMT Subject: CN=04051F222E845BB66AB0BC81D0150B7CE8BA30E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:fd:d5:b5:9a:73:9a:fd:40:e3:c1:9f:65: f2:8a:64:10:64:ef:bc:f3:8c:aa:80:52:7b:b7:68: 89:c4:5a:4d:6c:d3:82:e9:4b:11:0e:d5:77:80:d3: f1:ec:64:85:45:e4:d8:9a:16:fd:9d:77:96:c4:a5: 50:19:65:a8:ba:b6:0a:db:cc:2a:6e:99:20:f4:0c: f4:74:0e:5a:fa:60:04:87:67:e7:0c:70:82:74:89: 4e:76:73:4e:3c:8a:87:b6:6b:3d:f5:a7:63:ee:70: 24:16:da:8d:91:64:ca:1b:8c:97:4a:f4:bf:42:d0: 19:7b:dd:93:f7:e3:1f:85:bd:b1:32:70:1a:aa:89: 66:08:bc:ef:e8:b0:61:79:57:3c:12:25:92:fe:24: 91:c2:09:19:89:a9:10:4c:59:df:b1:f9:34:ce:1f: b7:5a:08:20:cd:ec:fb:09:f4:87:e9:6d:5f:b1:0f: 96:2f:ec:eb:9c:82:bc:08:81:b0:d3:6c:37:5e:91: 76:41:a8:94:fc:33:b3:88:42:fd:98:3f:15:a3:f2: 2a:75:99:0e:84:60:73:1c:35:db:1e:c7:15:d9:0b: 7f:43:3e:a3:1d:e1:b8:ff:8f:be:fe:ea:af:22:37: e9:c9:47:39:44:22:61:d6:8c:06:55:41:82:23:03: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:05:1F:22:2E:84:5B:B6:6A:B0:BC:81:D0:15:0B:7C:E8:BA:30:E4 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d2:43:4c:b0:8e:f2:d1:54:b7:34:68:65:49:ad:1e:68:70: 38:9d:8e:cf:3e:e2:ac:88:7c:27:b5:d7:20:0b:3c:60:d7:6d: 98:bc:a9:1b:f1:0a:09:3e:26:3c:ab:43:c3:b8:bd:49:fd:3d: 09:50:ae:db:50:13:56:e8:89:57:0e:7d:89:a9:86:12:44:b7: 5a:c3:37:07:03:66:9c:b5:64:08:41:bd:59:ea:f5:b9:1f:dd: 86:6b:d1:51:b3:4a:c2:e8:d8:e7:08:63:dc:12:05:dc:92:69: 63:19:b8:94:31:04:ab:60:8c:51:ba:39:8c:0d:36:45:6c:c7: 22:ab:ad:15:fe:30:0c:25:b8:bc:0a:17:2d:bd:d6:49:d1:01: 6e:93:00:34:f6:85:c4:6e:a0:94:7a:6d:ef:8b:fb:2e:14:2c: f0:24:be:f3:2b:6f:a9:a4:4b:52:de:6c:f3:76:49:f9:7c:ce: 4c:8e:ae:a5:ee:f0:aa:ac:c6:d6:8c:f2:97:00:46:b3:bd:b4: f2:b6:bf:96:78:b0:00:a2:24:8d:41:69:9a:68:63:35:d5:6a: 40:f8:9f:39:92:a7:de:0d:d1:91:30:9c:ae:2f:af:5a:2d:b7: a2:74:71:10:f9:c9:ed:3e:1e:8e:6f:36:8c:e9:10:33:f8:35: 7a:df:ad:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOf6tQ0gYo/XdE1P/7QrBxXjkiegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNjAzMjYwMjM3NDRaFw0yNjAzMjkxMTU1NDRaMDMxMTAvBgNV BAMTKDA0MDUxRjIyMkU4NDVCQjY2QUIwQkM4MUQwMTUwQjdDRThCQTMwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqD/3VtZpzmv1A48GfZfKKZBBk 77zzjKqAUnu3aInEWk1s04LpSxEO1XeA0/HsZIVF5NiaFv2dd5bEpVAZZai6tgrb zCpumSD0DPR0Dlr6YASHZ+cMcIJ0iU52c048ioe2az31p2PucCQW2o2RZMobjJdK 9L9C0Bl73ZP34x+FvbEycBqqiWYIvO/osGF5VzwSJZL+JJHCCRmJqRBMWd+x+TTO H7daCCDN7PsJ9IfpbV+xD5Yv7OucgrwIgbDTbDdekXZBqJT8M7OIQv2YPxWj8ip1 mQ6EYHMcNdsexxXZC39DPqMd4bj/j77+6q8iN+nJRzlEImHWjAZVQYIjAwqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBAUfIi6EW7ZqsLyB0BULfOi6MOQwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXSQ0ywjvLRVLc0aGVJrR5ocDidjs8+4qyI fCe11yALPGDXbZi8qRvxCgk+JjyrQ8O4vUn9PQlQrttQE1boiVcOfYmphhJEt1rD NwcDZpy1ZAhBvVnq9bkf3YZr0VGzSsLo2OcIY9wSBdySaWMZuJQxBKtgjFG6OYwN NkVsxyKrrRX+MAwluLwKFy291knRAW6TADT2hcRuoJR6be+L+y4ULPAkvvMrb6mk S1LebPN2Sfl8zkyOrqXu8KqsxtaM8pcARrO9tPK2v5Z4sACiJI1BaZpoYzXVakD4 nzmSp94N0ZEwnK4vr1ott6J0cRD5ye0+Ho5vNozpEDP4NXrfrUE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:06 2026 by rpki-client