$ rpki-client -vvvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: rc1NegTW05/nMMgdujDDN7bEJzjIE8NTIAsNnaGWD14= Subject key identifier: 1F:1F:3B:2B:DC:1C:32:6A:12:D2:90:B8:D0:AE:08:BA:15:EE:23:F4 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 72A1D681BBCE2A79F8388A4ACCCBBF07E93F586E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:48:37 +0000 Manifest this update: Fri 25 Sep 2026 14:43:37 +0000 Manifest next update: Sat 26 Sep 2026 16:59:37 +0000 Files and hashes: 1: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) 3: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: xKew8IBmsYZ4AYni4RWbZm3u7M6/xhL8zOaJW9qrw0A=) 4: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a1:d6:81:bb:ce:2a:79:f8:38:8a:4a:cc:cb:bf:07:e9:3f:58:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Sep 25 14:43:37 2026 GMT Not After : Sep 26 16:59:37 2026 GMT Subject: CN=1F1F3B2BDC1C326A12D290B8D0AE08BA15EE23F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:4c:2f:b5:e1:bd:3e:2c:00:8c:c0:8c:41: 3d:70:ac:82:ac:8b:fc:53:41:73:1e:91:c8:7e:ce: 07:0b:b5:89:66:ba:b8:b9:4a:48:b6:70:48:4d:4e: 6e:fc:33:ba:49:b9:fd:5d:9c:f8:4b:00:9b:b3:d5: 99:00:ad:8d:e2:e4:f2:f8:59:9f:1f:99:04:d5:31: c0:53:93:1a:72:a1:df:94:a2:2a:60:8c:5f:3a:e9: df:95:7b:f3:09:ba:16:d8:c8:ad:99:8a:b3:db:c5: 7c:b5:84:45:e7:a8:cf:e2:ca:9d:51:a0:e3:75:2a: 4a:86:cb:d8:e5:9f:89:02:3e:e7:e7:c3:9c:22:2f: 5b:7b:11:73:de:c5:b2:a5:a3:d7:04:c1:78:8e:0b: d4:b4:38:f9:c8:59:c5:40:33:b0:1d:fe:15:41:53: 7d:54:b3:88:4c:ae:ce:d8:62:b9:47:6e:a2:73:fd: 50:46:a1:07:ad:ac:a9:dd:14:5d:00:ce:3b:41:77: 78:1d:cc:d3:30:b7:8c:31:fc:21:50:69:56:3e:6a: 3e:a7:67:60:26:45:09:56:c8:2d:fc:c7:6a:d2:bc: 5b:a9:3b:18:3e:18:92:f6:4d:39:de:f3:09:57:80: 7f:ec:ff:6c:27:ca:d4:02:15:0e:0d:6b:2f:99:81: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:3B:2B:DC:1C:32:6A:12:D2:90:B8:D0:AE:08:BA:15:EE:23:F4 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e9:c5:ed:f9:e6:7c:00:fb:33:e1:fa:87:01:6a:84:42:41: 82:f4:a5:52:8f:ae:95:09:2e:9a:86:8c:2b:54:23:ad:6c:86: fe:6d:d3:9c:51:ff:2c:a2:c3:3c:61:3a:9f:ee:c9:47:95:30: 87:3b:87:8b:19:e6:12:a2:f6:72:67:66:6c:b2:1b:fc:e1:06: 1a:6a:8d:97:3a:7c:21:25:37:49:81:46:48:84:ef:6e:db:f4: 92:28:34:e0:06:57:2b:15:14:a5:b0:ec:4c:75:b4:cb:1d:3d: 2b:5b:d9:56:ad:26:5b:7c:e7:3c:b1:2e:00:f5:a7:a0:af:f5: fd:82:c6:40:ad:8f:29:46:d2:77:23:da:03:d5:97:a5:70:78: 01:24:37:ec:c3:ed:c6:6a:9b:fe:8f:f5:ff:fa:eb:50:da:97: 13:f5:ef:23:1a:e6:d1:5e:fa:0e:9e:a7:a1:a7:1a:ee:5e:d9: 1d:c2:24:5c:d4:76:9a:ab:37:b8:3d:cf:50:d2:2d:b8:af:88: 03:71:e6:ac:e5:eb:eb:f9:46:a6:76:a3:4b:96:45:b3:4d:7f: 30:e7:72:7b:dd:e1:f4:19:a6:b4:17:2c:54:c1:91:7d:31:96: 44:8c:4a:f4:dc:a8:77:00:85:0c:68:d3:c6:25:00:06:b4:5b: f6:ef:37:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqHWgbvOKnn4OIpKzMu/B+k/WG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA5MjUxNDQzMzdaFw0yNjA5MjYxNjU5MzdaMDMxMTAvBgNV BAMTKDFGMUYzQjJCREMxQzMyNkExMkQyOTBCOEQwQUUwOEJBMTVFRTIzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HkwvteG9PiwAjMCMQT1wrIKs i/xTQXMekch+zgcLtYlmuri5Ski2cEhNTm78M7pJuf1dnPhLAJuz1ZkArY3i5PL4 WZ8fmQTVMcBTkxpyod+UoipgjF866d+Ve/MJuhbYyK2ZirPbxXy1hEXnqM/iyp1R oON1KkqGy9jln4kCPufnw5wiL1t7EXPexbKlo9cEwXiOC9S0OPnIWcVAM7Ad/hVB U31Us4hMrs7YYrlHbqJz/VBGoQetrKndFF0AzjtBd3gdzNMwt4wx/CFQaVY+aj6n Z2AmRQlWyC38x2rSvFupOxg+GJL2TTne8wlXgH/s/2wnytQCFQ4Nay+ZgR2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHx87K9wcMmoS0pC40K4IuhXuI/QwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATpxe355nwA+zPh+ocBaoRCQYL0pVKPrpUJ LpqGjCtUI61shv5t05xR/yyiwzxhOp/uyUeVMIc7h4sZ5hKi9nJnZmyyG/zhBhpq jZc6fCElN0mBRkiE727b9JIoNOAGVysVFKWw7Ex1tMsdPStb2VatJlt85zyxLgD1 p6Cv9f2CxkCtjylG0ncj2gPVl6VweAEkN+zD7cZqm/6P9f/661DalxP17yMa5tFe +g6ep6GnGu5e2R3CJFzUdpqrN7g9z1DSLbiviANx5qzl6+v5RqZ2o0uWRbNNfzDn cnvd4fQZprQXLFTBkX0xlkSMSvTcqHcAhQxo08YlAAa0W/bvN9Y= -----END CERTIFICATE-----Generated at Fri Sep 25 21:28:13 2026 by rpki-client