$ rpki-client -vvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: fdwLhEmt7d/g0dcGvBDABckdongLbzEQpALe+4xbTNE= Subject key identifier: D8:28:3D:92:ED:89:3E:1E:88:6A:19:C8:83:E2:B9:7B:DB:92:DF:D7 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 6D8817BFF1F2BA4C6D7449C8F59C01B8FD476C85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:42:48 +0000 Manifest this update: Tue 12 May 2026 20:37:48 +0000 Manifest next update: Wed 13 May 2026 22:51:48 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) 2: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: ZKkNM0qp8qi5MmWqFEbl7HQwYJqmWEOa4p1r97Gb+Ow=) 3: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 5: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:88:17:bf:f1:f2:ba:4c:6d:74:49:c8:f5:9c:01:b8:fd:47:6c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: May 12 20:37:48 2026 GMT Not After : May 13 22:51:48 2026 GMT Subject: CN=D8283D92ED893E1E886A19C883E2B97BDB92DFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:76:32:5a:c6:75:00:f9:5d:bd:6f:49:76:0d: 44:6d:17:1b:80:43:1e:3f:f0:13:43:4b:63:0f:b7: 0d:a7:ce:82:b7:0b:d7:4f:6c:ea:ae:94:00:bd:b1: 9c:b5:dc:cf:3d:5c:87:d1:27:a2:08:0a:7f:9d:2f: 3d:56:2d:04:83:c3:0e:6e:8d:8d:22:b3:5d:a4:b6: 3b:bd:a4:80:a2:69:43:75:cc:d1:32:34:c8:a3:99: 47:ad:cb:d5:af:fb:f6:94:7c:7e:fd:2c:76:a8:19: 73:71:35:09:20:45:96:9f:ce:d1:ac:ff:48:de:3b: 21:71:b8:25:a8:80:69:f9:be:67:71:ed:6c:24:71: aa:84:a4:ae:9a:54:d5:1f:10:60:cf:1a:9d:a3:90: 0f:9c:dd:22:98:30:f7:83:de:71:38:50:90:cd:0a: 49:33:21:e8:54:6b:d0:4c:51:d9:03:9e:5a:24:da: bd:cd:51:14:03:88:26:93:04:f7:cf:69:42:37:a8: ad:de:d0:e7:45:aa:32:85:bf:60:eb:60:4d:e7:1d: d4:b7:34:7e:80:cb:95:cd:79:30:d4:9e:53:4d:e0: b4:99:28:f5:1d:8a:9c:9d:90:8a:c1:ca:77:85:98: a2:63:d9:53:cd:e4:82:b5:b2:02:1e:2a:4f:32:a2: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:28:3D:92:ED:89:3E:1E:88:6A:19:C8:83:E2:B9:7B:DB:92:DF:D7 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:58:33:e2:af:53:27:1a:84:bd:19:08:a0:45:a1:01:90:95: de:d9:8e:1d:f5:5f:a1:b0:ed:5b:f8:51:98:84:ba:72:1b:bd: a6:14:79:49:f6:4f:f1:cc:b0:99:2e:0a:b4:43:16:4c:71:25: 60:c9:94:37:5e:f2:d7:4a:96:c9:aa:cd:d0:a7:0a:e5:4c:07: 88:2a:51:d2:34:48:78:76:60:8d:48:48:bc:bc:30:ed:e7:98: d0:e5:64:38:bf:64:a0:15:04:a1:96:77:58:78:19:a7:61:a0: 91:3f:3d:fc:4f:81:e4:92:e4:52:61:8f:2e:77:a9:b0:a4:04: 5d:ed:40:51:7e:97:5a:e6:28:c8:a2:b7:61:73:c1:48:ff:3f: 8c:8c:ae:32:bd:91:3c:94:c8:3b:34:07:64:13:40:1a:ca:48: fa:82:e4:f7:85:12:d4:63:8e:cb:3d:d4:94:e9:fe:7c:68:b6: 84:37:23:b2:b7:1e:82:2b:fc:40:65:d3:96:e6:f9:45:df:7b: cb:62:d3:a7:ce:3f:72:81:04:10:5e:18:80:f6:b0:5a:bc:d9: 0c:be:73:9c:0b:de:01:b6:c9:6f:72:f4:5f:61:d8:d0:af:f3: 6e:30:2f:1f:7a:1e:27:41:1e:04:6d:1d:f5:27:ab:70:9d:33: 6d:99:dd:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYgXv/HyukxtdEnI9ZwBuP1HbIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA1MTIyMDM3NDhaFw0yNjA1MTMyMjUxNDhaMDMxMTAvBgNV BAMTKEQ4MjgzRDkyRUQ4OTNFMUU4ODZBMTlDODgzRTJCOTdCREI5MkRGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYdjJaxnUA+V29b0l2DURtFxuA Qx4/8BNDS2MPtw2nzoK3C9dPbOqulAC9sZy13M89XIfRJ6IICn+dLz1WLQSDww5u jY0is12ktju9pICiaUN1zNEyNMijmUety9Wv+/aUfH79LHaoGXNxNQkgRZafztGs /0jeOyFxuCWogGn5vmdx7WwkcaqEpK6aVNUfEGDPGp2jkA+c3SKYMPeD3nE4UJDN CkkzIehUa9BMUdkDnlok2r3NURQDiCaTBPfPaUI3qK3e0OdFqjKFv2DrYE3nHdS3 NH6Ay5XNeTDUnlNN4LSZKPUdipydkIrByneFmKJj2VPN5IK1sgIeKk8yovwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Cg9ku2JPh6IahnIg+K5e9uS39cwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlYM+KvUycahL0ZCKBFoQGQld7Zjh31X6Gw 7Vv4UZiEunIbvaYUeUn2T/HMsJkuCrRDFkxxJWDJlDde8tdKlsmqzdCnCuVMB4gq UdI0SHh2YI1ISLy8MO3nmNDlZDi/ZKAVBKGWd1h4GadhoJE/PfxPgeSS5FJhjy53 qbCkBF3tQFF+l1rmKMiit2FzwUj/P4yMrjK9kTyUyDs0B2QTQBrKSPqC5PeFEtRj jss91JTp/nxotoQ3I7K3HoIr/EBl05bm+UXfe8ti06fOP3KBBBBeGID2sFq82Qy+ c5wL3gG2yW9y9F9h2NCv824wLx96HidBHgRtHfUnq3CdM22Z3fM= -----END CERTIFICATE-----Generated at Wed May 13 04:19:00 2026 by rpki-client