$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: T4ri3CsLMRxPGV3XLAqVJAtuIzLZAf4W5KH/oHsTCKg= Subject key identifier: A7:8C:DC:AA:27:23:62:3C:2C:3D:42:82:C4:63:73:BD:E0:E2:39:9D Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 4412B234249C67CB19BB6B7637D9506561811E71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:14:44 +0000 Manifest this update: Thu 23 Jul 2026 16:09:44 +0000 Manifest next update: Fri 24 Jul 2026 18:11:44 +0000 Files and hashes: 1: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 2: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: 9CKsoFY0NcVvolrAg3NPEOOvb6/eVTwceqAcxbj30T8=) 3: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) 4: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 5: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) 6: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 7: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 8: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:12:b2:34:24:9c:67:cb:19:bb:6b:76:37:d9:50:65:61:81:1e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Jul 23 16:09:44 2026 GMT Not After : Jul 24 18:11:44 2026 GMT Subject: CN=A78CDCAA2723623C2C3D4282C46373BDE0E2399D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:2f:5c:6e:4a:63:7a:5c:af:2d:7e:9d:eb: 97:6d:e3:16:23:bb:8f:c6:b2:3d:ce:6c:28:3d:3b: 56:49:cd:4a:78:71:3b:08:09:a1:b4:68:56:dd:88: f7:4c:50:f8:39:da:e4:a0:ba:af:3a:1a:97:a0:44: 4a:e2:55:48:1e:e3:32:10:21:18:1d:10:1a:71:6b: b3:e7:ea:dc:ad:c6:6a:11:0d:47:99:fd:bf:cd:f3: 3c:c0:2d:38:eb:d7:59:e8:13:5a:cc:fc:33:a4:d7: 10:ba:11:4e:2d:21:1b:7c:c1:20:12:90:12:14:2a: 18:a9:67:2a:9e:bf:37:d6:fc:1e:57:32:b3:33:bb: e3:65:a3:f7:e9:0e:8b:2a:45:02:49:4f:88:bd:70: 5b:d2:9c:38:42:21:65:11:2b:6b:98:96:98:11:91: 6e:f0:ab:f9:97:c3:f9:52:fb:d3:50:db:e4:52:fd: 52:ce:58:8e:bb:d1:f0:15:38:4b:70:a5:80:6e:c6: 2d:38:ff:a6:d7:53:4d:67:18:0b:b5:db:ec:74:63: 0d:34:84:17:80:68:23:00:a6:f9:f5:5c:01:e4:48: e4:1a:ae:7f:16:a0:ed:6a:d1:10:28:ff:46:47:d7: d2:91:ef:cf:ec:1a:a8:ec:11:15:b8:86:b0:4e:fd: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:DC:AA:27:23:62:3C:2C:3D:42:82:C4:63:73:BD:E0:E2:39:9D X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:53:e1:4a:30:ca:d2:b2:68:77:21:f6:fa:32:b4:e6:02:23: c2:85:e3:68:e3:2e:88:d5:79:40:4d:ed:50:a6:59:b3:d5:4a: 45:06:d3:72:f4:d6:59:23:55:7c:de:c6:f3:1d:4a:3f:16:8e: 2c:5a:f2:ca:74:50:8b:7d:87:85:4c:12:a6:22:e1:9b:1c:10: ba:e4:ad:fa:9d:d8:c2:c6:62:71:99:05:d9:e5:f7:37:3d:02: 3b:06:c2:d8:cc:db:5e:bc:63:84:74:31:f8:df:16:f9:53:54: 33:17:55:2f:20:3f:17:2a:55:32:bc:18:a0:e8:45:8b:f6:2a: 8f:12:c9:86:cb:5d:17:63:b6:4e:64:d0:83:9d:3c:7c:37:4c: 24:a3:25:37:fb:64:52:e9:b4:f0:d6:3e:76:c2:69:4a:1f:d4: c3:e7:78:84:fa:fc:68:63:49:18:51:5b:cc:e4:0f:e7:d6:d9: dc:aa:b4:23:23:cf:80:a1:6d:fa:23:c6:77:b0:e3:51:a4:69: 5a:72:09:46:de:a1:90:03:e4:04:92:fe:45:4e:34:81:4e:2f: 0f:ac:bc:a7:1e:41:38:9d:0b:5c:7a:d7:25:95:4c:57:2b:d2: 5d:80:55:d5:d8:be:35:dc:a9:99:57:79:63:6e:9b:e0:c3:70: 00:51:b4:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBKyNCScZ8sZu2t2N9lQZWGBHnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA3MjMxNjA5NDRaFw0yNjA3MjQxODExNDRaMDMxMTAvBgNV BAMTKEE3OENEQ0FBMjcyMzYyM0MyQzNENDI4MkM0NjM3M0JERTBFMjM5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3y9cbkpjelyvLX6d65dt4xYj u4/Gsj3ObCg9O1ZJzUp4cTsICaG0aFbdiPdMUPg52uSguq86GpegREriVUge4zIQ IRgdEBpxa7Pn6tytxmoRDUeZ/b/N8zzALTjr11noE1rM/DOk1xC6EU4tIRt8wSAS kBIUKhipZyqevzfW/B5XMrMzu+Nlo/fpDosqRQJJT4i9cFvSnDhCIWURK2uYlpgR kW7wq/mXw/lS+9NQ2+RS/VLOWI670fAVOEtwpYBuxi04/6bXU01nGAu12+x0Yw00 hBeAaCMApvn1XAHkSOQarn8WoO1q0RAo/0ZH19KR78/sGqjsERW4hrBO/ZJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp4zcqicjYjwsPUKCxGNzveDiOZ0wHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpT4UowytKyaHch9voytOYCI8KF42jjLojV eUBN7VCmWbPVSkUG03L01lkjVXzexvMdSj8Wjixa8sp0UIt9h4VMEqYi4ZscELrk rfqd2MLGYnGZBdnl9zc9AjsGwtjM2168Y4R0MfjfFvlTVDMXVS8gPxcqVTK8GKDo RYv2Ko8SyYbLXRdjtk5k0IOdPHw3TCSjJTf7ZFLptPDWPnbCaUof1MPneIT6/Ghj SRhRW8zkD+fW2dyqtCMjz4Chbfojxnew41GkaVpyCUbeoZAD5ASS/kVONIFOLw+s vKceQTidC1x61yWVTFcr0l2AVdXYvjXcqZlXeWNum+DDcABRtGY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:53:53 2026 by rpki-client