$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: QBie5vsijlw5fWWObuZq25Z8JK5OV6tusMYQvGnt7UY= Subject key identifier: F6:2A:E9:36:9E:23:50:1A:EA:9A:61:6D:57:4E:DB:88:C9:DC:21:70 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 67A6238134C04C0AA0390793E82F825BD9DC4611 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:52:58 +0000 Manifest this update: Tue 12 May 2026 06:47:58 +0000 Manifest next update: Wed 13 May 2026 10:38:58 +0000 Files and hashes: 1: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: Q+kx55Zx+W1DZ6BPhwLqLR7rDiSkyUdF3tfvS/PFqSM=) 2: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 3: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) 4: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a6:23:81:34:c0:4c:0a:a0:39:07:93:e8:2f:82:5b:d9:dc:46:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: May 12 06:47:58 2026 GMT Not After : May 13 10:38:58 2026 GMT Subject: CN=F62AE9369E23501AEA9A616D574EDB88C9DC2170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ae:02:c6:ef:0e:fc:ae:fc:f6:84:d7:30:b5: 47:c6:e3:78:07:09:d3:e7:b0:4e:20:a0:84:8a:e9: 07:70:b3:ca:a8:84:67:da:e8:1f:1a:8d:7d:d0:4c: 45:78:ee:1c:db:54:35:18:c5:6b:8e:ab:a4:3e:4b: 2b:c1:c4:ea:41:95:db:37:0a:97:32:45:f5:76:26: dc:61:d8:cf:d7:df:82:89:cf:cd:84:6f:4e:f0:80: 6f:d6:92:fb:84:01:61:a9:54:76:b9:83:a1:39:5b: c3:74:42:0d:ff:35:1f:88:75:84:45:78:ce:09:ac: 5c:4f:d5:29:13:a8:d2:0e:eb:b3:ce:1d:c4:85:d1: 00:42:21:08:e0:86:13:d7:38:d6:15:cf:dc:12:d1: cf:7e:a5:59:4e:cd:11:f0:83:44:ff:87:e1:5b:9a: b7:9c:d8:57:00:7b:b5:cb:e0:fe:d7:cc:e4:21:13: 5b:e6:e5:8e:6e:b9:bf:b4:80:fd:21:d1:63:ca:ed: 3f:ff:e8:9a:a9:db:98:d3:f0:b4:8a:20:6d:b2:d8: 60:08:08:4a:0f:93:27:c9:9c:c6:ed:86:a4:b2:e7: 81:ce:81:7c:c5:ec:6d:21:d5:60:66:9d:c6:a7:16: 84:3a:36:ea:e3:0b:d6:9d:e5:a4:a7:5a:c8:b8:e0: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:E9:36:9E:23:50:1A:EA:9A:61:6D:57:4E:DB:88:C9:DC:21:70 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e4:08:1e:1f:69:ff:47:8e:f8:95:fa:f7:58:de:96:2c:92: 0a:1e:be:87:66:8f:26:37:97:27:80:fe:a0:aa:41:f6:88:c1: 07:6a:85:c7:ad:a3:12:0e:01:70:37:ad:cb:f8:8c:20:13:5f: f6:dc:12:2b:0d:14:d1:d9:83:bd:3b:9e:af:c7:3b:c5:93:cd: 5c:86:29:be:6e:1b:a9:e8:bb:1a:07:75:6a:b7:ed:22:c1:f7: 05:d9:02:4a:4d:e5:67:fc:82:8e:3a:5d:ca:40:0d:ae:ea:7b: 6f:be:35:cc:2a:bc:2f:18:e5:19:e8:f3:7d:c0:fd:d1:16:af: 7b:4f:9f:aa:b3:00:51:be:6a:00:5e:3e:5b:44:7b:df:88:a7: e2:b0:b7:16:51:55:2d:6f:5d:33:2b:9d:bd:cd:1f:8f:89:25: cb:58:ce:1e:12:b6:95:b0:84:60:16:bc:53:5d:c5:01:9a:31: f8:d5:a1:e4:59:78:2c:64:58:ea:73:46:37:be:22:46:6a:8e: 16:a4:a3:a6:d6:25:09:0e:61:86:2b:03:e7:a9:3c:2e:d6:d1: 1c:cd:d8:8e:45:7a:34:b2:06:d2:84:40:b4:c1:b9:64:eb:c5: 5b:65:93:b7:b7:b5:e5:fd:c1:49:ed:86:db:7c:07:aa:68:bf: 0d:86:ca:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6YjgTTATAqgOQeT6C+CW9ncRhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA1MTIwNjQ3NThaFw0yNjA1MTMxMDM4NThaMDMxMTAvBgNV BAMTKEY2MkFFOTM2OUUyMzUwMUFFQTlBNjE2RDU3NEVEQjg4QzlEQzIxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrgLG7w78rvz2hNcwtUfG43gH CdPnsE4goISK6Qdws8qohGfa6B8ajX3QTEV47hzbVDUYxWuOq6Q+SyvBxOpBlds3 CpcyRfV2Jtxh2M/X34KJz82Eb07wgG/WkvuEAWGpVHa5g6E5W8N0Qg3/NR+IdYRF eM4JrFxP1SkTqNIO67POHcSF0QBCIQjghhPXONYVz9wS0c9+pVlOzRHwg0T/h+Fb mrec2FcAe7XL4P7XzOQhE1vm5Y5uub+0gP0h0WPK7T//6Jqp25jT8LSKIG2y2GAI CEoPkyfJnMbthqSy54HOgXzF7G0h1WBmncanFoQ6NurjC9ad5aSnWsi44MavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9irpNp4jUBrqmmFtV07biMncIXAwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDkCB4faf9HjviV+vdY3pYskgoevodmjyY3 lyeA/qCqQfaIwQdqhcetoxIOAXA3rcv4jCATX/bcEisNFNHZg707nq/HO8WTzVyG Kb5uG6nouxoHdWq37SLB9wXZAkpN5Wf8go46XcpADa7qe2++NcwqvC8Y5Rno833A /dEWr3tPn6qzAFG+agBePltEe9+Ip+KwtxZRVS1vXTMrnb3NH4+JJctYzh4StpWw hGAWvFNdxQGaMfjVoeRZeCxkWOpzRje+IkZqjhako6bWJQkOYYYrA+epPC7W0RzN 2I5FejSyBtKEQLTBuWTrxVtlk7e3teX9wUnthtt8B6povw2GymQ= -----END CERTIFICATE-----Generated at Wed May 13 02:50:35 2026 by rpki-client