$ rpki-client -vvvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: K0GB3CO9bcgJJLO5Fi6KnXhkF84OqyP82bNkJxXjfjg= Subject key identifier: 81:DA:46:80:2C:31:51:0B:C4:72:F0:77:2F:9C:3F:41:06:66:75:E3 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 642990916BBF2AEB4BA456D7189645D66881DEEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 09:00:57 +0000 Manifest this update: Sat 26 Sep 2026 08:55:57 +0000 Manifest next update: Sun 27 Sep 2026 10:29:57 +0000 Files and hashes: 1: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) 2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) 3: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 4: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: fNg4sadlWvjP9mCG0sFnngl4AJp71kueJZKdCVpQeQk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:29:90:91:6b:bf:2a:eb:4b:a4:56:d7:18:96:45:d6:68:81:de:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Sep 26 08:55:57 2026 GMT Not After : Sep 27 10:29:57 2026 GMT Subject: CN=81DA46802C31510BC472F0772F9C3F41066675E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:cc:30:37:6b:16:52:ac:53:81:92:c7:3f: 6e:bc:3f:dd:3e:eb:e2:87:2b:31:ef:d1:d8:e7:8c: 63:cd:40:25:bd:e0:de:de:ff:77:7d:c6:c6:57:0b: dc:38:78:09:a8:aa:51:51:18:a0:b7:de:7e:a0:10: 60:a3:51:74:a4:f5:77:77:3e:62:a6:be:bf:ca:f6: 52:e2:22:ec:b1:69:44:c4:da:b5:48:8a:b2:da:3b: 40:62:36:18:69:65:01:2f:f0:79:18:bc:98:19:b8: 8a:f1:45:0e:77:58:dd:2c:3f:d7:1f:4c:97:c1:37: 41:24:f8:6b:d2:65:b5:00:55:52:a2:28:cd:d1:61: b0:5d:68:43:bd:00:9a:7b:5a:79:d6:83:9b:fe:69: 06:21:e9:03:18:0f:30:b9:17:71:5f:32:9d:b8:1b: 6a:a1:b9:07:35:9b:85:61:91:15:7a:d2:37:58:49: f5:dc:73:b4:b4:c4:8b:bb:b4:dc:a4:99:5d:5e:04: 2c:02:d3:25:d2:28:77:0f:a5:65:c7:b9:f9:4c:09: fa:17:a9:55:83:e1:76:d5:fe:47:eb:34:b5:b8:29: 27:7d:0a:d7:c5:47:a0:b8:da:be:7f:1b:86:d2:28: 55:99:ab:dc:36:e1:98:72:2a:b1:ee:b3:5f:02:38: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:46:80:2C:31:51:0B:C4:72:F0:77:2F:9C:3F:41:06:66:75:E3 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b7:c3:1e:73:ae:ca:f3:08:9d:cb:fd:d4:79:56:d0:0c:76: f7:f1:b9:73:a3:7f:91:58:40:42:19:28:64:46:8e:fc:07:39: 8e:6c:2d:b5:8e:73:37:b5:55:66:90:d2:ad:1d:62:ef:03:23: 63:99:b7:01:bf:ae:d9:f3:24:79:1c:d4:4c:2b:16:d3:5a:41: ad:8e:f2:21:ac:1d:dd:e2:37:3d:5c:6c:c0:6f:27:76:a5:e8: 83:04:5c:32:9d:24:37:4c:69:1a:e6:db:47:9e:36:e5:a2:6a: b7:4e:26:e3:21:23:d0:85:fa:01:87:20:eb:2e:93:8d:aa:8e: d4:16:84:13:95:0f:43:79:db:87:cd:c2:bc:ff:7e:63:76:b7: 92:e9:44:4e:9c:38:15:b3:52:a0:9c:2d:01:99:12:5f:19:71: 2f:1a:05:7a:d4:37:af:02:b8:fc:75:5d:c1:ce:67:28:2a:55: 8f:10:0b:8b:65:16:b7:d9:76:07:2d:b1:5f:02:df:ab:00:e3: ac:f6:37:23:ef:12:ac:d9:d0:c7:f4:bc:9c:d2:2b:c9:2c:f0: 6d:5d:b2:c0:e9:75:2a:3f:e8:46:05:da:40:ce:20:52:95:c3: b8:17:13:d1:fa:92:b6:a2:6c:fd:43:14:d2:53:74:68:14:f1: 2f:52:8e:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCmQkWu/KutLpFbXGJZF1miB3u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA5MjYwODU1NTdaFw0yNjA5MjcxMDI5NTdaMDMxMTAvBgNV BAMTKDgxREE0NjgwMkMzMTUxMEJDNDcyRjA3NzJGOUMzRjQxMDY2Njc1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZK8wwN2sWUqxTgZLHP268P90+ 6+KHKzHv0djnjGPNQCW94N7e/3d9xsZXC9w4eAmoqlFRGKC33n6gEGCjUXSk9Xd3 PmKmvr/K9lLiIuyxaUTE2rVIirLaO0BiNhhpZQEv8HkYvJgZuIrxRQ53WN0sP9cf TJfBN0Ek+GvSZbUAVVKiKM3RYbBdaEO9AJp7WnnWg5v+aQYh6QMYDzC5F3FfMp24 G2qhuQc1m4VhkRV60jdYSfXcc7S0xIu7tNykmV1eBCwC0yXSKHcPpWXHuflMCfoX qVWD4XbV/kfrNLW4KSd9CtfFR6C42r5/G4bSKFWZq9w24ZhyKrHus18COM9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdpGgCwxUQvEcvB3L5w/QQZmdeMwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK3wx5zrsrzCJ3L/dR5VtAMdvfxuXOjf5FY QEIZKGRGjvwHOY5sLbWOcze1VWaQ0q0dYu8DI2OZtwG/rtnzJHkc1EwrFtNaQa2O 8iGsHd3iNz1cbMBvJ3al6IMEXDKdJDdMaRrm20eeNuWiardOJuMhI9CF+gGHIOsu k42qjtQWhBOVD0N524fNwrz/fmN2t5LpRE6cOBWzUqCcLQGZEl8ZcS8aBXrUN68C uPx1XcHOZygqVY8QC4tlFrfZdgctsV8C36sA46z2NyPvEqzZ0Mf0vJzSK8ks8G1d ssDpdSo/6EYF2kDOIFKVw7gXE9H6kraibP1DFNJTdGgU8S9Sjhk= -----END CERTIFICATE-----Generated at Sat Sep 26 20:30:06 2026 by rpki-client