$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: 0vQHyQIIHvsMs7IaBR353A+RntYcfqR7nReFbaUkgZw= Subject key identifier: EB:33:20:8F:AC:1B:11:B2:94:5A:95:68:D1:D4:98:ED:22:7B:00:18 Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 618A0E674AD9BBA0287118B49FDE41769EA90079 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:56:52 +0000 Manifest this update: Tue 12 May 2026 10:51:52 +0000 Manifest next update: Wed 13 May 2026 12:04:52 +0000 Files and hashes: 1: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 2: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 3: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) 4: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 5: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 6: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 7: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: IXKDJ/NPFZvq1A11laQ7RsyvIxW8M1gBevKnEfBiub8=) 8: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8a:0e:67:4a:d9:bb:a0:28:71:18:b4:9f:de:41:76:9e:a9:00:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: May 12 10:51:52 2026 GMT Not After : May 13 12:04:52 2026 GMT Subject: CN=EB33208FAC1B11B2945A9568D1D498ED227B0018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:ef:d2:6e:27:56:05:21:93:5f:55:49:d6: 2d:c0:d3:8a:47:55:12:6f:c9:35:bb:c1:0a:e3:58: e1:22:a1:14:d6:37:7c:57:95:15:ca:b4:6f:d4:fa: aa:b7:25:7e:0c:3b:28:84:86:0d:2d:25:ac:aa:eb: fe:6a:ab:0c:22:e9:3b:8b:68:b7:e7:08:27:a0:98: 54:35:c2:32:c8:d5:1b:9e:e8:b6:59:97:4c:c1:98: 29:04:06:7d:ad:b4:1e:8f:1d:0c:df:cc:72:ec:f1: 47:e4:dc:c0:93:7e:30:4f:b6:c1:0d:5f:75:9c:33: ab:82:d2:92:1b:d9:98:84:f0:a9:16:cb:9d:81:45: ed:69:ab:9c:a3:da:71:42:86:f6:ae:52:f7:b0:bd: 29:e5:ae:9c:4e:30:cf:98:87:17:68:c1:35:3e:ce: e5:78:21:2c:b5:96:82:90:79:8c:74:e7:f9:49:e8: 61:08:96:af:2a:d1:2f:e9:28:d8:78:dc:ba:ee:ab: 42:c3:7f:31:11:b8:69:c1:41:70:e8:f3:4a:94:a8: 3d:0b:7e:84:5e:10:90:66:d2:12:bc:ad:9b:3b:19: 04:f7:e3:c7:06:f5:42:66:8d:18:43:72:64:46:87: 98:4d:43:ab:de:0b:45:49:27:a3:f2:b3:5b:53:6c: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:33:20:8F:AC:1B:11:B2:94:5A:95:68:D1:D4:98:ED:22:7B:00:18 X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9f:9b:c8:1c:68:cf:10:cd:66:a5:fe:b6:2d:c8:1e:f5:eb: 3f:3f:ad:49:9c:70:cc:d0:f1:57:0c:0f:10:c7:33:6d:db:3e: 95:56:a1:23:1b:3f:75:ea:b5:77:24:1a:67:2e:3a:5e:8b:7e: d8:70:bc:e6:70:11:44:da:d6:28:bc:ec:95:c2:7c:b6:e9:5e: f3:e0:28:13:a9:38:dc:03:db:2f:8c:a3:89:3c:c5:70:4c:f3: bc:0c:54:6d:67:39:3c:c8:95:00:aa:90:8d:27:97:74:ac:db: ad:98:be:42:d8:1e:f5:54:24:7e:82:a4:75:c7:40:96:31:40: b1:0f:7b:07:b1:2a:37:98:99:dc:26:31:10:24:93:70:5a:af: c8:0e:31:37:9f:64:dc:a1:d0:e0:b7:c0:52:95:32:b9:8a:83: 7d:60:4e:2c:e6:25:f4:5f:7b:94:2d:eb:0e:50:b3:5f:58:c4: d1:df:97:5e:d2:b8:21:d8:99:7e:64:d8:46:49:96:b9:e1:c6: 0c:32:5c:31:46:54:83:d9:bb:c1:66:c0:3f:e1:c4:61:88:a1: f7:6c:75:67:c3:6f:d2:52:b6:b8:7b:b6:a3:46:73:4f:97:14: f0:f1:5b:b7:a7:80:a4:86:1f:43:53:07:d6:88:2d:4f:51:15: e7:c1:b5:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYoOZ0rZu6AocRi0n95Bdp6pAHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA1MTIxMDUxNTJaFw0yNjA1MTMxMjA0NTJaMDMxMTAvBgNV BAMTKEVCMzMyMDhGQUMxQjExQjI5NDVBOTU2OEQxRDQ5OEVEMjI3QjAwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClue/SbidWBSGTX1VJ1i3A04pH VRJvyTW7wQrjWOEioRTWN3xXlRXKtG/U+qq3JX4MOyiEhg0tJayq6/5qqwwi6TuL aLfnCCegmFQ1wjLI1Rue6LZZl0zBmCkEBn2ttB6PHQzfzHLs8Ufk3MCTfjBPtsEN X3WcM6uC0pIb2ZiE8KkWy52BRe1pq5yj2nFChvauUvewvSnlrpxOMM+YhxdowTU+ zuV4ISy1loKQeYx05/lJ6GEIlq8q0S/pKNh43Lruq0LDfzERuGnBQXDo80qUqD0L foReEJBm0hK8rZs7GQT348cG9UJmjRhDcmRGh5hNQ6veC0VJJ6Pys1tTbMHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6zMgj6wbEbKUWpVo0dSY7SJ7ABgwHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHafm8gcaM8QzWal/rYtyB716z8/rUmccMzQ 8VcMDxDHM23bPpVWoSMbP3XqtXckGmcuOl6LfthwvOZwEUTa1ii87JXCfLbpXvPg KBOpONwD2y+Mo4k8xXBM87wMVG1nOTzIlQCqkI0nl3Ss262YvkLYHvVUJH6CpHXH QJYxQLEPewexKjeYmdwmMRAkk3Bar8gOMTefZNyh0OC3wFKVMrmKg31gTizmJfRf e5Qt6w5Qs19YxNHfl17SuCHYmX5k2EZJlrnhxgwyXDFGVIPZu8FmwD/hxGGIofds dWfDb9JStrh7tqNGc0+XFPDxW7engKSGH0NTB9aILU9RFefBtcc= -----END CERTIFICATE-----Generated at Wed May 13 05:35:53 2026 by rpki-client