$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: CxmIft77YRyRpxq2RtJcpiOYy6zIvkaoJtN0p9HUrWA= Subject key identifier: A9:6B:D7:E8:6E:D0:63:4A:73:2E:32:67:D6:EA:B9:D6:21:B1:55:D5 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 5D4AB1627E0594853CDDDEE3C8974E89150F14BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: A3 Signing time: Thu 26 Mar 2026 10:41:38 +0000 Manifest this update: Thu 26 Mar 2026 10:36:38 +0000 Manifest next update: Sun 29 Mar 2026 21:12:38 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: VidmqV5KOOIREROYSPySP7eHkVc3r+Gz/C3O6lmsJ00=) 2: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: 8bDIb4z8LFd7NHPOdE3+fUlKruC+GYaLErGSQPtNqLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:b1:62:7e:05:94:85:3c:dd:de:e3:c8:97:4e:89:15:0f:14:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Mar 26 10:36:38 2026 GMT Not After : Mar 29 21:12:38 2026 GMT Subject: CN=A96BD7E86ED0634A732E3267D6EAB9D621B155D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:9c:77:00:de:3c:21:f9:c2:b0:c9:97:59: ff:27:d6:45:f8:53:19:3d:1e:1a:c1:8c:46:89:6b: 43:1c:50:9e:ec:1b:25:ae:cf:9a:59:b5:97:74:95: da:d9:93:0c:9f:bf:ff:28:39:1f:63:f8:20:6b:f1: 09:78:46:07:14:9e:cd:7c:17:e1:52:9d:6b:03:f9: 4f:c0:b4:b5:9a:d1:f0:fa:75:b7:0e:ae:ba:6b:6e: be:65:81:b6:16:aa:1e:7d:b9:b3:da:19:ae:9a:47: d9:f5:0b:3c:26:7c:50:ab:01:96:87:f7:8c:fb:18: 90:35:07:af:b7:8d:97:de:38:74:1a:99:b5:1f:04: cb:29:aa:4f:35:69:2b:21:c6:ca:ee:15:66:f0:44: 43:c9:22:af:98:f7:3e:93:cd:d2:ab:b2:1b:63:52: 17:1b:e9:1c:a9:a5:7a:a1:b3:03:a4:d8:ac:92:5c: 69:df:65:b9:9b:59:74:46:40:12:02:3a:ac:48:f0: bc:0f:2c:d2:ce:62:29:6b:ca:67:a9:73:c3:4b:26: d7:50:e9:8a:84:d6:50:85:e5:84:40:16:d5:50:72: fd:31:3b:c1:b1:68:dc:cb:09:60:0e:30:54:7d:10: c3:53:93:e9:ce:9d:15:cd:34:2f:b7:23:56:3e:51: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6B:D7:E8:6E:D0:63:4A:73:2E:32:67:D6:EA:B9:D6:21:B1:55:D5 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cf:c1:14:59:14:ff:87:b0:3a:73:72:07:89:27:05:20:18: ff:23:7f:16:a3:ec:28:ea:fe:a2:2f:10:77:5e:f1:54:18:50: f1:29:10:31:5f:ce:2f:dc:96:a5:1f:85:a1:19:b2:80:ee:26: 30:c3:f5:76:02:ee:88:ee:a7:f9:12:22:94:b4:64:67:9d:c9: 49:8b:c1:c0:6f:5d:43:6a:4b:a1:b5:93:8f:c2:85:fd:3a:8c: 9a:7a:b4:d1:f2:5b:35:51:32:ef:74:e6:dd:ea:5a:4e:e1:a0: 61:b6:57:6a:ab:35:ff:e4:69:d5:19:78:eb:ab:85:da:d5:3b: 3a:30:1c:b1:68:39:c6:da:84:31:45:d1:a3:e1:b0:72:77:23: d7:fb:06:37:dd:5a:19:68:53:67:dc:f6:92:93:aa:2a:ea:1c: 00:a2:15:64:eb:e8:8e:c8:56:55:03:c5:27:e9:11:27:42:6c: ee:8d:d4:59:86:01:bf:66:db:6c:c3:8f:b2:e3:09:d4:44:62: 8e:6a:b5:89:5b:49:b3:97:79:b3:d3:1a:8e:8e:92:48:cf:da: 41:61:fd:71:f5:3d:09:30:9f:e6:bc:8b:f1:30:72:e5:ca:cb: e6:b8:d1:0d:30:bb:1f:ad:c1:09:d0:1d:b4:fd:b1:8e:c5:8c: 45:1c:8c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUqxYn4FlIU83d7jyJdOiRUPFLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNjAzMjYxMDM2MzhaFw0yNjAzMjkyMTEyMzhaMDMxMTAvBgNV BAMTKEE5NkJEN0U4NkVEMDYzNEE3MzJFMzI2N0Q2RUFCOUQ2MjFCMTU1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aZx3AN48IfnCsMmXWf8n1kX4 Uxk9HhrBjEaJa0McUJ7sGyWuz5pZtZd0ldrZkwyfv/8oOR9j+CBr8Ql4RgcUns18 F+FSnWsD+U/AtLWa0fD6dbcOrrprbr5lgbYWqh59ubPaGa6aR9n1CzwmfFCrAZaH 94z7GJA1B6+3jZfeOHQambUfBMspqk81aSshxsruFWbwREPJIq+Y9z6TzdKrshtj Uhcb6RyppXqhswOk2KySXGnfZbmbWXRGQBICOqxI8LwPLNLOYilrymepc8NLJtdQ 6YqE1lCF5YRAFtVQcv0xO8GxaNzLCWAOMFR9EMNTk+nOnRXNNC+3I1Y+UYLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWvX6G7QY0pzLjJn1uq51iGxVdUwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrPwRRZFP+HsDpzcgeJJwUgGP8jfxaj7Cjq /qIvEHde8VQYUPEpEDFfzi/clqUfhaEZsoDuJjDD9XYC7ojup/kSIpS0ZGedyUmL wcBvXUNqS6G1k4/Chf06jJp6tNHyWzVRMu905t3qWk7hoGG2V2qrNf/kadUZeOur hdrVOzowHLFoOcbahDFF0aPhsHJ3I9f7BjfdWhloU2fc9pKTqirqHACiFWTr6I7I VlUDxSfpESdCbO6N1FmGAb9m22zDj7LjCdREYo5qtYlbSbOXebPTGo6OkkjP2kFh /XH1PQkwn+a8i/EwcuXKy+a40Q0wux+twQnQHbT9sY7FjEUcjHQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:33 2026 by rpki-client