$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: rJ94KFS1I9WkT+Ckw2zSNCMlU7ZluOXNbubLmiZxM+I= Subject key identifier: 0D:0A:A1:20:D3:D1:3F:31:A7:40:1B:93:45:88:77:9D:F3:D6:FE:98 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 62DB04104617AD3BF46CD06BCB0FC13F20E630F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:36:13 +0000 Manifest this update: Fri 24 Jul 2026 01:31:13 +0000 Manifest next update: Sat 25 Jul 2026 04:55:13 +0000 Files and hashes: 1: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) 2: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 3: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) 4: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: 9xnA3b0mTDl7CczVvSMwUX6YrQ11SUkeF4jiaFL05QY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:db:04:10:46:17:ad:3b:f4:6c:d0:6b:cb:0f:c1:3f:20:e6:30:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Jul 24 01:31:13 2026 GMT Not After : Jul 25 04:55:13 2026 GMT Subject: CN=0D0AA120D3D13F31A7401B934588779DF3D6FE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:75:08:c2:a8:86:1a:1a:d0:c1:15:56:3f: 50:62:f3:39:51:67:0c:29:b9:23:d3:1e:80:aa:6a: 0e:60:80:42:be:e8:91:02:20:73:f8:6f:17:0d:a7: d6:45:db:fd:77:df:a2:be:d8:f6:ad:25:42:e2:27: 6d:e6:b6:18:e8:07:c0:40:92:0b:6d:b1:73:fb:96: 16:61:f1:a2:15:20:9f:6b:58:f0:a3:5f:83:0b:cf: ec:c5:87:7d:b2:ec:6a:cc:9b:3c:21:44:17:33:65: 24:5e:1d:0f:97:df:a6:8b:72:da:7d:c9:fc:57:0e: 6d:2d:6c:67:86:f9:89:6a:51:9e:7a:3d:c3:43:b0: 39:03:bd:83:32:6c:a5:64:aa:a9:64:c9:8b:ed:a8: fd:b4:42:3d:44:46:d8:e8:81:1a:cb:46:31:03:bf: 07:77:6c:9c:b0:b7:24:d1:03:67:1a:eb:3c:36:78: c1:0a:56:25:de:28:29:64:10:23:c2:a1:93:8d:18: ce:0e:4f:d0:83:33:c7:22:e6:37:d0:bc:c4:8d:c6: 1b:c1:93:c9:bf:ba:8b:c5:b0:41:27:91:26:a1:50: 53:c8:6b:d0:7d:c3:0a:79:52:71:a8:1d:3f:a1:1c: 50:b3:6c:ff:16:5c:85:2f:9b:76:d6:8a:8f:73:7a: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:A1:20:D3:D1:3F:31:A7:40:1B:93:45:88:77:9D:F3:D6:FE:98 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:03:44:67:32:58:c6:1c:59:c9:57:b1:fe:ea:bc:b3:ea:3f: f7:c8:3c:ef:7d:12:05:3f:bd:38:a9:2b:46:29:7e:a3:12:fa: 0a:19:6c:c7:6e:2c:23:48:d8:0c:c7:99:91:95:fa:fc:b6:95: 96:70:8c:3f:1c:3c:37:67:ab:34:78:1e:f9:71:3b:98:ff:5b: 98:3f:57:fe:19:88:90:e9:4c:f2:00:c2:94:51:41:8c:29:d0: 7c:88:06:50:3e:a2:fe:b2:87:78:02:ad:d5:f3:23:06:0a:b1: 57:e4:04:9b:49:83:33:75:95:f2:b7:6c:bf:58:16:8a:56:17: ab:d2:b1:59:b2:0e:f0:57:1d:0b:3d:bb:be:5e:64:12:6d:1c: ef:35:e6:8b:fc:cd:0a:da:2f:db:d4:df:dd:82:27:a2:1b:f8: b4:27:34:7e:20:a1:ee:cb:be:52:ca:2f:41:31:f8:c4:86:98: 4f:07:e3:35:c9:11:75:b4:72:f4:3a:6a:2c:bc:ea:4f:1c:a6: 46:be:2c:98:c5:51:f1:29:43:a5:1a:35:54:80:26:fd:2f:3d: 21:84:70:d6:99:86:c5:d4:63:53:38:29:f1:0b:0e:b6:9f:3b: 90:bf:9a:77:24:89:b1:69:07:1e:60:8c:33:aa:78:a6:97:ea: 0e:52:40:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtsEEEYXrTv0bNBryw/BPyDmMPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA3MjQwMTMxMTNaFw0yNjA3MjUwNDU1MTNaMDMxMTAvBgNV BAMTKDBEMEFBMTIwRDNEMTNGMzFBNzQwMUI5MzQ1ODg3NzlERjNENkZFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMnUIwqiGGhrQwRVWP1Bi8zlR ZwwpuSPTHoCqag5ggEK+6JECIHP4bxcNp9ZF2/1336K+2PatJULiJ23mthjoB8BA kgttsXP7lhZh8aIVIJ9rWPCjX4MLz+zFh32y7GrMmzwhRBczZSReHQ+X36aLctp9 yfxXDm0tbGeG+YlqUZ56PcNDsDkDvYMybKVkqqlkyYvtqP20Qj1ERtjogRrLRjED vwd3bJywtyTRA2ca6zw2eMEKViXeKClkECPCoZONGM4OT9CDM8ci5jfQvMSNxhvB k8m/uovFsEEnkSahUFPIa9B9wwp5UnGoHT+hHFCzbP8WXIUvm3bWio9zemYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQqhINPRPzGnQBuTRYh3nfPW/pgwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsDRGcyWMYcWclXsf7qvLPqP/fIPO99EgU/ vTipK0YpfqMS+goZbMduLCNI2AzHmZGV+vy2lZZwjD8cPDdnqzR4HvlxO5j/W5g/ V/4ZiJDpTPIAwpRRQYwp0HyIBlA+ov6yh3gCrdXzIwYKsVfkBJtJgzN1lfK3bL9Y FopWF6vSsVmyDvBXHQs9u75eZBJtHO815ov8zQraL9vU392CJ6Ib+LQnNH4goe7L vlLKL0Ex+MSGmE8H4zXJEXW0cvQ6aiy86k8cpka+LJjFUfEpQ6UaNVSAJv0vPSGE cNaZhsXUY1M4KfELDrafO5C/mnckibFpBx5gjDOqeKaX6g5SQCU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:30 2026 by rpki-client