$ rpki-client -vvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: rjVQa8j4JanlFD/AKiVdVIVYgPPxNFTxUg4xmNck1e4= Subject key identifier: E2:AC:FD:DE:EF:C6:FE:FC:1B:6D:7D:B6:9E:20:05:2D:2D:46:D3:55 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 47F5B67F84C7DCEA7BE2A5432EA54DD85AA006EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:13:38 +0000 Manifest this update: Thu 23 Jul 2026 19:08:38 +0000 Manifest next update: Fri 24 Jul 2026 20:26:38 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) 2: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: NHwuQ7K8VUn/2MEBw9HET/aBnqi7MulH5O9gKXawhgs=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 4: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) 5: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f5:b6:7f:84:c7:dc:ea:7b:e2:a5:43:2e:a5:4d:d8:5a:a0:06:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: Jul 23 19:08:38 2026 GMT Not After : Jul 24 20:26:38 2026 GMT Subject: CN=E2ACFDDEEFC6FEFC1B6D7DB69E20052D2D46D355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:f9:2b:d7:f4:b0:1a:e1:e0:6a:d0:1a:05: fa:77:67:22:d9:59:2e:13:bb:be:06:04:32:08:e3: 30:fa:7f:46:23:a5:91:b7:9e:7a:1f:87:ec:b2:96: 8d:34:cd:f4:50:20:51:b0:d8:be:60:7c:75:75:18: 9e:af:13:75:99:11:69:df:e2:a6:d8:74:c8:54:22: bd:62:16:9a:5e:9d:68:b0:16:5a:d2:cf:48:95:b9: e2:56:ed:69:b7:40:d2:6b:ed:10:48:d1:1c:0c:7b: 54:6c:d5:e1:7b:e6:6b:dd:37:39:71:b2:14:48:ea: 4a:97:ba:29:f7:4c:71:23:04:d6:41:7f:de:8d:39: d3:da:ee:49:2a:70:bd:17:3f:d6:41:ec:57:a2:16: fe:14:91:60:0d:28:70:a0:62:7f:e3:39:b0:71:7a: 50:fa:b3:b2:db:fd:5d:a7:21:3d:1d:db:7a:4c:ab: 9e:c6:b4:c8:d0:74:1f:d3:7a:5e:ad:78:e0:86:24: 10:ec:f8:cc:73:ab:2f:c3:47:08:fe:30:30:76:b4: 05:ae:f2:3a:42:75:fa:6a:35:d6:33:c8:07:77:bf: d5:41:ef:12:c2:f1:a1:4b:76:0f:94:06:8a:28:7d: 7a:90:db:84:93:1f:1a:f8:6d:8e:ee:5d:9c:a6:e3: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AC:FD:DE:EF:C6:FE:FC:1B:6D:7D:B6:9E:20:05:2D:2D:46:D3:55 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1a:85:9c:a4:79:57:9a:06:ee:79:e2:c8:7e:1e:9a:af:3d: 4f:db:e8:bc:e0:01:bb:fb:b1:42:f9:fb:e2:d4:0c:59:63:4b: 0b:e8:cb:2d:a9:49:f8:9d:dc:45:1d:d2:ea:6d:c8:ae:40:73: e6:5c:9c:07:0d:e4:58:4f:99:d1:e9:e9:78:26:f2:36:8b:3f: 0c:e2:be:0e:1d:09:1e:57:b3:db:66:b1:ad:92:d3:66:e2:c8: ff:7a:18:31:3b:b3:23:0b:91:f8:91:f5:f1:7b:96:91:78:78: 2d:4f:7f:6b:e3:4c:bb:3c:15:a7:4a:7c:77:bb:44:15:71:3e: 4c:bd:c4:ff:2b:97:2d:e4:7b:e2:b7:ef:0c:66:b8:26:36:78: e1:be:0d:df:b9:38:ee:f7:7f:8d:22:02:cb:12:37:de:42:c1: ce:74:b6:d0:e5:35:d3:41:c0:f5:bf:3b:0b:07:03:31:24:43: be:82:39:79:32:74:6e:71:cc:5b:03:ef:76:5a:0e:83:c2:b5: 4e:12:3b:5a:6b:af:e8:79:39:42:43:89:33:cc:30:2c:b9:9e: 4e:76:b2:36:0e:d3:2c:9c:6a:81:17:da:d6:2a:1c:d3:79:9a: 27:8b:36:58:8e:de:20:a9:43:4e:02:81:8e:9d:72:f0:30:02: 65:99:77:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/W2f4TH3Op74qVDLqVN2FqgBuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA3MjMxOTA4MzhaFw0yNjA3MjQyMDI2MzhaMDMxMTAvBgNV BAMTKEUyQUNGRERFRUZDNkZFRkMxQjZEN0RCNjlFMjAwNTJEMkQ0NkQzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUPkr1/SwGuHgatAaBfp3ZyLZ WS4Tu74GBDII4zD6f0YjpZG3nnofh+yylo00zfRQIFGw2L5gfHV1GJ6vE3WZEWnf 4qbYdMhUIr1iFppenWiwFlrSz0iVueJW7Wm3QNJr7RBI0RwMe1Rs1eF75mvdNzlx shRI6kqXuin3THEjBNZBf96NOdPa7kkqcL0XP9ZB7FeiFv4UkWANKHCgYn/jObBx elD6s7Lb/V2nIT0d23pMq57GtMjQdB/Tel6teOCGJBDs+Mxzqy/DRwj+MDB2tAWu 8jpCdfpqNdYzyAd3v9VB7xLC8aFLdg+UBooofXqQ24STHxr4bY7uXZym46+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4qz93u/G/vwbbX22niAFLS1G01UwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoahZykeVeaBu554sh+HpqvPU/b6LzgAbv7 sUL5++LUDFljSwvoyy2pSfid3EUd0uptyK5Ac+ZcnAcN5FhPmdHp6Xgm8jaLPwzi vg4dCR5Xs9tmsa2S02biyP96GDE7syMLkfiR9fF7lpF4eC1Pf2vjTLs8FadKfHe7 RBVxPky9xP8rly3ke+K37wxmuCY2eOG+Dd+5OO73f40iAssSN95Cwc50ttDlNdNB wPW/OwsHAzEkQ76COXkydG5xzFsD73ZaDoPCtU4SO1prr+h5OUJDiTPMMCy5nk52 sjYO0yycaoEX2tYqHNN5mieLNliO3iCpQ04CgY6dcvAwAmWZd6g= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:42 2026 by rpki-client