$ rpki-client -vvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: sdzg8gRALumgY8Yl36KIiZx0tFCweAx3pALv7C3K+VY= Subject key identifier: D2:BE:E9:46:21:DB:69:B2:23:F2:87:58:22:90:55:B1:86:C2:1C:26 Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 41AD77967A7474AB2E44CEF2A543761A1147D457 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 20:19:54 +0000 Manifest this update: Thu 23 Jul 2026 20:14:54 +0000 Manifest next update: Fri 24 Jul 2026 23:38:54 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: BCNeWh7gqzz4Uzu68v2CuAgwvfJ/qfuuhALl+ozjcJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ad:77:96:7a:74:74:ab:2e:44:ce:f2:a5:43:76:1a:11:47:d4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: Jul 23 20:14:54 2026 GMT Not After : Jul 24 23:38:54 2026 GMT Subject: CN=D2BEE94621DB69B223F28758229055B186C21C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:82:d9:84:86:65:dd:6b:2c:94:61:ef:63: b4:87:74:71:12:80:c2:1f:81:08:62:65:69:59:dc: 00:36:5f:ae:fa:68:ca:a3:f9:bf:2d:67:a6:70:e7: 50:f9:83:f2:30:5b:d6:b2:af:dd:da:15:a1:85:60: 64:89:63:95:20:2e:16:6f:ab:91:e6:f9:3f:1d:85: 7a:eb:b0:73:de:70:32:89:56:b3:a9:73:fe:36:3b: eb:49:5a:85:a1:76:c0:4d:ac:7d:f5:8d:91:d4:84: a5:c9:0e:92:d2:fb:b1:99:94:07:4d:7c:36:06:65: f5:12:e7:12:a8:53:df:42:98:0e:25:4e:52:94:90: 4a:2b:47:d7:1b:a7:cc:5d:94:1c:c8:03:eb:d5:46: ce:d5:d0:e7:a9:10:a9:f4:92:11:b3:5d:63:af:be: d3:76:c4:c8:b3:47:c1:f5:78:98:19:6c:1a:6f:b5: f3:6f:6f:f4:d4:15:71:ad:f4:3d:ee:f4:73:13:7a: 2b:cd:9d:72:d9:d4:b8:78:44:dc:4b:d4:95:c4:f6: fd:cc:35:a3:fb:8a:b2:da:24:29:03:04:db:f2:c1: fa:0d:79:ce:6b:49:18:13:46:dd:d9:83:2b:46:4d: 80:cb:ef:7f:76:c0:af:bb:25:f6:bb:34:c2:93:22: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:E9:46:21:DB:69:B2:23:F2:87:58:22:90:55:B1:86:C2:1C:26 X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:4c:8b:4c:30:38:93:ae:1f:fc:f0:4a:e7:b0:92:2b:28: 28:25:92:6e:24:92:05:4a:c0:a4:22:62:b2:35:e6:ce:6e:cf: cc:19:5f:80:cb:d2:30:d8:3f:65:24:61:6c:93:6a:8d:18:5d: be:d6:bb:9d:25:5a:cc:03:fc:e4:fc:49:96:8e:67:fa:fb:f0: 40:39:37:af:95:9d:02:07:93:25:48:4d:99:ca:fd:72:88:c6: ff:fd:af:6b:e8:0f:0e:84:5b:1e:4e:7e:72:1b:3f:03:34:e2: 45:de:d7:26:3e:76:66:56:70:00:37:c9:80:9c:b4:2e:5c:0c: 0e:dc:ca:38:0c:9a:16:1e:2b:17:83:5e:ab:3e:2c:7d:00:03: f7:bb:c0:0e:04:a3:e0:9b:4f:1e:2f:f8:d4:7b:a6:91:06:8e: 8f:d0:73:52:29:8a:64:d9:ce:52:93:ae:69:fe:f1:06:3c:0f: 29:05:3a:2a:35:b8:ef:57:55:28:78:a0:c6:02:a2:4a:53:c9: 85:bb:d7:6f:6c:c0:ca:b2:ad:9e:ca:4a:3d:61:9e:70:0a:b5: 77:7d:8d:01:b2:b0:a8:65:b5:5e:ca:7e:53:d5:38:9c:c8:8b: d8:f2:dd:00:d2:1e:92:0d:80:cf:17:72:61:21:4b:66:06:d1: 1b:15:d7:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQa13lnp0dKsuRM7ypUN2GhFH1FcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA3MjMyMDE0NTRaFw0yNjA3MjQyMzM4NTRaMDMxMTAvBgNV BAMTKEQyQkVFOTQ2MjFEQjY5QjIyM0YyODc1ODIyOTA1NUIxODZDMjFDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfILZhIZl3WsslGHvY7SHdHES gMIfgQhiZWlZ3AA2X676aMqj+b8tZ6Zw51D5g/IwW9ayr93aFaGFYGSJY5UgLhZv q5Hm+T8dhXrrsHPecDKJVrOpc/42O+tJWoWhdsBNrH31jZHUhKXJDpLS+7GZlAdN fDYGZfUS5xKoU99CmA4lTlKUkEorR9cbp8xdlBzIA+vVRs7V0OepEKn0khGzXWOv vtN2xMizR8H1eJgZbBpvtfNvb/TUFXGt9D3u9HMTeivNnXLZ1Lh4RNxL1JXE9v3M NaP7irLaJCkDBNvywfoNec5rSRgTRt3ZgytGTYDL7392wK+7Jfa7NMKTIovFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0r7pRiHbabIj8odYIpBVsYbCHCYwHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG7TItMMDiTrh/88ErnsJIrKCglkm4kkgVK wKQiYrI15s5uz8wZX4DL0jDYP2UkYWyTao0YXb7Wu50lWswD/OT8SZaOZ/r78EA5 N6+VnQIHkyVITZnK/XKIxv/9r2voDw6EWx5OfnIbPwM04kXe1yY+dmZWcAA3yYCc tC5cDA7cyjgMmhYeKxeDXqs+LH0AA/e7wA4Eo+CbTx4v+NR7ppEGjo/Qc1IpimTZ zlKTrmn+8QY8DykFOio1uO9XVSh4oMYCokpTyYW7129swMqyrZ7KSj1hnnAKtXd9 jQGysKhltV7KflPVOJzIi9jy3QDSHpINgM8XcmEhS2YG0RsV1w8= -----END CERTIFICATE-----Generated at Fri Jul 24 08:23:32 2026 by rpki-client