$ rpki-client -vvvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: 00t6b1ATooMZo0CR6zKqoYMbbyyZNkEbbyd97mtnt3c= Subject key identifier: 43:D6:1F:A5:83:4E:62:94:95:E4:77:C1:35:F8:1D:B6:35:2C:C3:76 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 72D87A50D85E98E2F2D01E9110D9D8DF56D426B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 16:46:29 +0000 Manifest this update: Thu 24 Sep 2026 16:41:29 +0000 Manifest next update: Fri 25 Sep 2026 19:06:29 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 4: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) 5: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: 9fTI98DmXHXnushokKwnOmLIeAT5nuY7J+qcl2OIcrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d8:7a:50:d8:5e:98:e2:f2:d0:1e:91:10:d9:d8:df:56:d4:26:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: Sep 24 16:41:29 2026 GMT Not After : Sep 25 19:06:29 2026 GMT Subject: CN=43D61FA5834E629495E477C135F81DB6352CC376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:3b:d4:90:e8:3d:42:a6:f1:c9:4c:42:e6: 2a:78:df:6e:3f:ad:11:b3:81:df:7c:bb:c0:51:52: f7:99:a1:b7:b3:73:a1:93:bf:97:3b:81:ec:d8:cd: 10:4f:2a:2a:74:80:b7:98:e8:e0:44:7d:dc:8e:f1: b8:52:33:f8:dd:dd:fb:0a:85:dd:cc:16:89:4d:0d: 95:dc:02:df:96:0f:a9:64:5b:f6:c0:6f:a4:07:d6: 89:71:49:92:21:bd:1a:f9:c8:9a:2c:08:a9:b5:1d: 9f:e5:00:2e:33:c6:e2:1a:70:ad:3c:81:e0:ab:dc: 3d:d3:6f:b5:c7:5c:f7:c2:3a:95:b9:b3:4c:59:0e: 16:c0:57:8d:fa:da:4b:55:ec:c8:53:be:55:98:34: a1:89:27:38:21:95:aa:7e:2f:d2:d5:76:b6:30:cc: 6f:1d:87:c3:6e:38:cc:e1:fa:45:32:79:9a:cd:e9: db:a9:89:bb:64:8f:da:a3:4a:6d:36:a7:e8:6a:08: 50:80:a3:2b:40:43:5b:01:fc:52:2b:93:ed:c0:1d: 07:88:a8:8d:b3:dd:84:5d:53:ed:e8:07:35:ac:56: 83:7c:f0:55:a2:57:66:53:b7:04:66:7d:be:c8:46: a9:aa:85:af:cc:96:69:da:65:5e:b2:33:d1:2c:76: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:1F:A5:83:4E:62:94:95:E4:77:C1:35:F8:1D:B6:35:2C:C3:76 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:57:d8:41:52:82:65:c2:04:36:9e:bd:3b:49:c7:90:e4:58: 77:d8:fa:3e:6a:72:37:59:14:ad:d5:59:0d:02:c0:7d:9c:10: 2e:27:04:bc:ae:66:19:0c:2e:57:10:42:32:3d:61:f0:bc:b1: b9:65:49:7a:b6:c7:0a:a8:1f:f7:42:0a:1c:33:1e:b7:1b:92: 56:a7:95:6a:61:bc:1d:8a:99:6d:40:35:59:83:67:7e:49:88: 67:25:b4:74:53:0d:48:49:3f:df:75:3c:88:36:71:b2:2b:41: fa:61:70:41:b0:f1:2b:14:80:c7:bb:87:00:3b:df:ed:98:34: 1e:8d:b9:6c:74:6c:95:3d:2d:96:41:9d:22:dc:50:ec:16:e7: 9d:5f:86:7d:e7:e3:ac:78:83:e3:55:f2:92:0f:4e:69:d4:b7: 57:db:1a:e1:34:a6:1e:69:7e:f9:c7:f3:43:04:a3:32:ed:80: 94:cd:9b:f8:6b:49:67:54:c6:52:57:ce:04:e6:c5:f2:e1:cb: 4e:48:78:f9:fd:d4:78:75:1c:a3:26:a5:69:e4:4f:be:26:e3: d1:ef:0c:75:1c:e2:9e:23:6f:a5:b0:b3:58:01:7d:23:04:52: 82:81:f8:f9:3b:b3:cf:bd:fe:7f:30:a3:0d:2d:c0:ee:ac:bf: 1e:44:a0:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcth6UNhemOLy0B6RENnY31bUJrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA5MjQxNjQxMjlaFw0yNjA5MjUxOTA2MjlaMDMxMTAvBgNV BAMTKDQzRDYxRkE1ODM0RTYyOTQ5NUU0NzdDMTM1RjgxREI2MzUyQ0MzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEjvUkOg9QqbxyUxC5ip4324/ rRGzgd98u8BRUveZobezc6GTv5c7gezYzRBPKip0gLeY6OBEfdyO8bhSM/jd3fsK hd3MFolNDZXcAt+WD6lkW/bAb6QH1olxSZIhvRr5yJosCKm1HZ/lAC4zxuIacK08 geCr3D3Tb7XHXPfCOpW5s0xZDhbAV4362ktV7MhTvlWYNKGJJzghlap+L9LVdrYw zG8dh8NuOMzh+kUyeZrN6dupibtkj9qjSm02p+hqCFCAoytAQ1sB/FIrk+3AHQeI qI2z3YRdU+3oBzWsVoN88FWiV2ZTtwRmfb7IRqmqha/MlmnaZV6yM9EsdtFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9YfpYNOYpSV5HfBNfgdtjUsw3YwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN5X2EFSgmXCBDaevTtJx5DkWHfY+j5qcjdZ FK3VWQ0CwH2cEC4nBLyuZhkMLlcQQjI9YfC8sbllSXq2xwqoH/dCChwzHrcbklan lWphvB2KmW1ANVmDZ35JiGcltHRTDUhJP991PIg2cbIrQfphcEGw8SsUgMe7hwA7 3+2YNB6NuWx0bJU9LZZBnSLcUOwW551fhn3n46x4g+NV8pIPTmnUt1fbGuE0ph5p fvnH80MEozLtgJTNm/hrSWdUxlJXzgTmxfLhy05IePn91Hh1HKMmpWnkT74m49Hv DHUc4p4jb6Wws1gBfSMEUoKB+Pk7s8+9/n8wow0twO6svx5EoGs= -----END CERTIFICATE-----Generated at Thu Sep 24 23:40:29 2026 by rpki-client