$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: y/TyM5SK7klUvBFFkEWSslIbQovvDay4kWrQuNDRSnI= Subject key identifier: 7C:82:37:BE:98:94:56:40:89:BF:47:96:58:32:37:BA:32:80:ED:DE Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 0D72FEF889BEE47DA5E829FA59F3D0C2EA38C567 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: D1 Signing time: Mon 05 Oct 2026 11:48:15 +0000 Manifest this update: Mon 05 Oct 2026 11:43:15 +0000 Manifest next update: Tue 06 Oct 2026 15:37:15 +0000 Files and hashes: 1: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 2: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 3: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) 4: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 5: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 6: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 7: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: YRdEkmhWybDm1IkprOdXAS9cYV81GZfhXamZ2WsAuFw=) 8: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 15:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:72:fe:f8:89:be:e4:7d:a5:e8:29:fa:59:f3:d0:c2:ea:38:c5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Oct 5 11:43:15 2026 GMT Not After : Oct 6 15:37:15 2026 GMT Subject: CN=7C8237BE9894564089BF4796583237BA3280EDDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:d5:da:df:49:cf:59:ad:ba:f3:6b:1c:8a: 87:27:87:d7:bd:0e:d7:4d:b7:62:d0:52:5a:ed:9e: 7a:99:35:c4:8c:e1:30:21:7e:79:11:3d:9a:d1:65: 80:5c:76:04:e0:1a:bd:f8:a6:c6:d3:7c:89:86:31: df:01:bf:53:f9:ad:ff:e0:ce:8b:84:a3:f7:59:64: 63:2b:61:0d:f4:7a:c9:c2:2c:99:5b:58:2f:8a:fd: 80:4a:dd:6f:75:52:05:a2:b0:6d:3e:74:29:b9:66: a6:b7:8a:94:75:9b:a4:5a:fc:f2:34:f5:17:35:58: af:69:aa:9f:1b:17:4b:e0:c7:b5:46:ec:89:fe:00: ee:b1:c4:44:91:f2:4d:fe:4d:ba:d8:aa:27:38:30: c0:69:14:3d:3d:49:c3:70:bf:e1:9b:07:98:5c:9d: 1c:6d:c2:47:d6:6e:bf:31:d4:05:60:11:64:41:49: 1e:67:0a:20:d1:01:85:72:33:56:23:8b:7e:dd:d0: 4a:3c:bb:84:e6:3a:67:d1:16:dc:0b:5d:2d:64:60: 67:87:87:ce:12:18:74:fd:38:a3:9e:4b:6d:5f:2a: 7b:3f:d5:b1:8b:69:3c:2e:3f:b2:b1:1b:28:28:bb: cf:46:a9:cb:b5:4d:c1:ed:7e:b3:14:25:83:e2:40: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:82:37:BE:98:94:56:40:89:BF:47:96:58:32:37:BA:32:80:ED:DE X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:fb:98:4d:e9:12:5a:00:a4:9c:88:c1:e6:8e:ad:79:8c: 96:51:e2:7d:f6:48:21:c6:b6:80:58:df:74:2a:be:cc:39:ce: d9:7d:6b:ba:48:d9:ca:c5:cf:fc:75:28:38:b1:37:fd:f7:b3: b2:8f:79:df:e6:e7:b2:05:92:7d:01:e1:a6:d4:b9:83:f5:67: b2:2d:83:34:a6:5d:e1:cd:76:ec:97:73:b6:b6:1a:47:06:2b: 3a:57:17:ae:8a:a3:5e:9a:33:2e:a7:7d:90:80:6f:4a:ae:5f: 5f:49:e8:69:3e:87:4e:7d:37:78:a9:2c:4c:d3:95:58:09:f3: e8:bd:0b:c0:75:b1:ad:58:6c:06:b1:66:a8:3a:f9:ad:c3:fc: da:65:74:c5:6e:bb:b4:5b:f7:bd:9c:d5:7e:b2:be:1b:47:56: f2:f9:3e:db:dc:79:24:86:3c:5f:41:5a:55:84:7d:4f:4f:43: cf:f0:23:0b:87:cb:ff:bd:d6:16:91:1e:cd:9b:b3:0c:06:45: 19:e3:22:f2:4b:17:23:83:66:1f:2e:b4:8f:77:cd:77:46:0c: 56:cc:8c:c1:2c:7f:39:3b:de:17:e2:8b:03:40:76:e3:ad:06: 03:f9:38:e1:37:71:d9:a7:68:0f:db:fb:2d:03:89:72:32:d5: c3:b7:08:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXL++Im+5H2l6Cn6WfPQwuo4xWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjEwMDUxMTQzMTVaFw0yNjEwMDYxNTM3MTVaMDMxMTAvBgNV BAMTKDdDODIzN0JFOTg5NDU2NDA4OUJGNDc5NjU4MzIzN0JBMzI4MEVEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqdXa30nPWa2682sciocnh9e9 DtdNt2LQUlrtnnqZNcSM4TAhfnkRPZrRZYBcdgTgGr34psbTfImGMd8Bv1P5rf/g zouEo/dZZGMrYQ30esnCLJlbWC+K/YBK3W91UgWisG0+dCm5Zqa3ipR1m6Ra/PI0 9Rc1WK9pqp8bF0vgx7VG7In+AO6xxESR8k3+TbrYqic4MMBpFD09ScNwv+GbB5hc nRxtwkfWbr8x1AVgEWRBSR5nCiDRAYVyM1Yji37d0Eo8u4TmOmfRFtwLXS1kYGeH h84SGHT9OKOeS21fKns/1bGLaTwuP7KxGygou89Gqcu1TcHtfrMUJYPiQN7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfII3vpiUVkCJv0eWWDI3ujKA7d4wHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp8+5hN6RJaAKSciMHmjq15jJZR4n32SCHG toBY33Qqvsw5ztl9a7pI2crFz/x1KDixN/33s7KPed/m57IFkn0B4abUuYP1Z7It gzSmXeHNduyXc7a2GkcGKzpXF66Ko16aMy6nfZCAb0quX19J6Gk+h059N3ipLEzT lVgJ8+i9C8B1sa1YbAaxZqg6+a3D/NpldMVuu7Rb972c1X6yvhtHVvL5PtvceSSG PF9BWlWEfU9PQ8/wIwuHy/+91haRHs2bswwGRRnjIvJLFyODZh8utI93zXdGDFbM jMEsfzk73hfiiwNAduOtBgP5OOE3cdmnaA/b+y0DiXIy1cO3CG8= -----END CERTIFICATE-----Generated at Tue Oct 6 08:47:36 2026 by rpki-client