$ rpki-client -vvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: q0PiFPIqZX5rqh2WxpA4yeDS2DXZPrYFmH+qcnR3Nyo= Subject key identifier: BE:33:0A:F5:A1:57:DB:A8:18:DD:03:5E:35:33:D2:18:65:3B:AA:95 Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 2C574831B721F7EB3EEADA49781F147E270380DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: 0E Signing time: Tue 12 May 2026 20:11:57 +0000 Manifest this update: Tue 12 May 2026 20:06:57 +0000 Manifest next update: Wed 13 May 2026 22:06:57 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: t1s6KOTRCZPGCuiqFhHpcAz7s+EaCgXp9d08CIfZuMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:57:48:31:b7:21:f7:eb:3e:ea:da:49:78:1f:14:7e:27:03:80:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: May 12 20:06:57 2026 GMT Not After : May 13 22:06:57 2026 GMT Subject: CN=BE330AF5A157DBA818DD035E3533D218653BAA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:fe:47:0b:86:8e:e9:6e:c3:a3:28:51:2b: 4c:ec:20:97:d0:a6:8d:dd:da:75:93:10:a6:cd:e2: 57:4e:88:a1:88:4c:16:f3:59:5b:0d:b7:de:f8:ee: 35:1f:03:e2:52:ac:4e:ec:91:2a:c9:49:75:16:64: 77:c4:4a:72:67:3f:95:26:15:18:fa:8c:bd:00:f8: d4:f3:91:0b:01:0f:53:04:21:5b:3f:14:d5:1a:a5: 7a:81:d3:90:94:57:98:5f:e0:3c:e8:6e:b9:bc:df: 69:ab:54:1e:b3:48:3a:be:ca:49:51:be:89:63:d8: 15:f5:f3:ca:d2:d7:79:e5:39:f8:77:37:2d:2c:6d: 64:75:50:89:1f:81:36:c5:1c:3a:75:73:59:b4:d1: ce:d2:44:01:19:c2:97:18:a8:7b:ff:c6:e9:59:25: c7:e3:2e:cc:56:5d:74:c7:2a:52:cd:95:0f:ec:48: 6d:6d:6f:75:f8:ac:69:fa:9e:87:d1:09:9f:dc:9d: bb:fe:d8:7d:09:d0:fc:7d:74:e3:51:20:ab:06:fe: cf:ec:44:81:be:90:1e:be:7b:da:bd:17:1d:c0:a0: 2f:4d:53:2b:fd:f3:b8:6c:fb:c4:de:5a:7b:4c:9a: f2:03:ee:c4:14:f7:f8:fd:89:ec:a1:f1:b8:88:c5: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:33:0A:F5:A1:57:DB:A8:18:DD:03:5E:35:33:D2:18:65:3B:AA:95 X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:32:5e:48:59:93:ac:71:94:49:29:a5:68:00:12:5f:37:64: b8:0b:60:8c:fc:43:af:09:d7:33:6c:01:f2:5f:71:94:a9:4b: 56:0e:78:99:de:95:ee:88:0f:b8:f7:85:06:e2:3d:06:be:46: ef:52:b3:a4:ad:4c:ea:a0:95:a4:8c:8c:81:14:f8:4c:ed:06: 75:64:aa:18:35:72:7d:c8:97:cd:29:9d:2d:73:ea:59:5d:83: cc:bc:93:30:b3:5d:f5:2a:0e:60:66:f4:e5:93:21:66:ad:66: 52:f5:b7:1d:fc:bd:9d:02:c1:6f:f3:6f:3b:2a:d5:c8:f1:a4: 66:db:a6:97:87:9f:e4:36:1d:49:47:c8:c6:4a:df:16:4d:36: 2d:10:82:98:cd:35:a0:f7:2d:ee:db:86:90:e0:a1:5c:07:f7: ef:d1:3c:00:9d:07:20:4d:d2:e6:cb:98:28:1c:db:df:a3:6e: 3f:53:f3:f9:7c:cd:af:de:11:56:fc:1b:e5:02:c0:ce:c9:25: 61:11:c4:b0:b0:cb:75:e8:38:ec:37:7b:de:da:c9:74:2b:a5: 12:90:18:eb:23:da:5f:be:14:05:62:8d:1e:f7:90:46:35:62: ef:1c:60:b8:c1:e1:93:5b:5d:23:52:21:a8:07:b7:ab:40:c4: d8:02:83:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFdIMbch9+s+6tpJeB8UficDgN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA1MTIyMDA2NTdaFw0yNjA1MTMyMjA2NTdaMDMxMTAvBgNV BAMTKEJFMzMwQUY1QTE1N0RCQTgxOEREMDM1RTM1MzNEMjE4NjUzQkFBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOv5HC4aO6W7DoyhRK0zsIJfQ po3d2nWTEKbN4ldOiKGITBbzWVsNt9747jUfA+JSrE7skSrJSXUWZHfESnJnP5Um FRj6jL0A+NTzkQsBD1MEIVs/FNUapXqB05CUV5hf4Dzobrm832mrVB6zSDq+yklR volj2BX188rS13nlOfh3Ny0sbWR1UIkfgTbFHDp1c1m00c7SRAEZwpcYqHv/xulZ JcfjLsxWXXTHKlLNlQ/sSG1tb3X4rGn6nofRCZ/cnbv+2H0J0Px9dONRIKsG/s/s RIG+kB6+e9q9Fx3AoC9NUyv987hs+8TeWntMmvID7sQU9/j9ieyh8biIxZS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjMK9aFX26gY3QNeNTPSGGU7qpUwHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQyXkhZk6xxlEkppWgAEl83ZLgLYIz8Q68J 1zNsAfJfcZSpS1YOeJnele6ID7j3hQbiPQa+Ru9Ss6StTOqglaSMjIEU+EztBnVk qhg1cn3Il80pnS1z6lldg8y8kzCzXfUqDmBm9OWTIWatZlL1tx38vZ0CwW/zbzsq 1cjxpGbbppeHn+Q2HUlHyMZK3xZNNi0QgpjNNaD3Le7bhpDgoVwH9+/RPACdByBN 0ubLmCgc29+jbj9T8/l8za/eEVb8G+UCwM7JJWERxLCwy3XoOOw3e97ayXQrpRKQ GOsj2l++FAVijR73kEY1Yu8cYLjB4ZNbXSNSIagHt6tAxNgCg6w= -----END CERTIFICATE-----Generated at Wed May 13 04:03:12 2026 by rpki-client