$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: 0w/AwaVZD05ummqlS1IqUTZukvB/SiJAvdX2/CorKdY= Subject key identifier: F5:FE:E0:F4:05:2A:E1:03:C5:AB:C4:D0:CF:B6:C1:CD:D6:38:D1:CD Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 475668F752662C1F3EC196983E9159C03B6C9417 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 21:16:54 +0000 Manifest this update: Thu 24 Sep 2026 21:11:54 +0000 Manifest next update: Fri 25 Sep 2026 21:37:54 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: pnhfBjydTHbBcy+aPo4CL330p7BjktbpirliBc2f1fE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:56:68:f7:52:66:2c:1f:3e:c1:96:98:3e:91:59:c0:3b:6c:94:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: Sep 24 21:11:54 2026 GMT Not After : Sep 25 21:37:54 2026 GMT Subject: CN=F5FEE0F4052AE103C5ABC4D0CFB6C1CDD638D1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:6d:06:cf:f1:9d:0a:57:3a:d1:ce:1c:dc: 45:c9:ba:b7:e4:de:58:17:3c:7e:a4:be:38:ae:ae: db:58:f1:76:4e:9c:ba:b9:84:f0:37:20:07:6b:8e: 7e:56:96:a3:e1:ee:dd:0f:07:a8:42:0b:ae:fa:51: 89:f8:2d:ad:04:51:ab:7d:5a:ed:fe:25:fb:1e:27: f8:c5:32:39:d0:c4:17:4a:e0:39:01:6c:13:03:4d: 67:dc:fc:93:d1:74:3e:1e:03:6e:25:91:fa:ca:df: 23:fa:63:1d:a6:40:74:a4:78:5d:86:12:b3:5a:8a: 77:34:63:08:9c:0d:db:b2:5c:6c:a0:76:23:a7:f6: 76:64:50:23:b9:c7:01:a9:59:9c:c4:06:e1:d7:34: 68:8a:db:65:5b:4e:b4:2e:2d:81:b7:8e:bc:0e:a3: 37:cd:c4:a2:93:9d:53:47:5a:ca:60:ca:ab:e8:62: 35:18:8f:68:19:bb:fe:79:b1:19:3c:43:e3:f3:81: c0:d8:f3:f9:39:41:9a:80:9f:3f:0e:cb:d7:1d:e8: 20:66:2f:b2:b4:8d:cf:3d:87:7d:2b:07:bc:d7:96: 36:fa:c1:bf:22:90:42:05:d1:f0:48:9b:9d:bf:61: d0:34:f7:fd:93:6a:d4:ff:68:c6:79:68:63:b9:ed: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:E0:F4:05:2A:E1:03:C5:AB:C4:D0:CF:B6:C1:CD:D6:38:D1:CD X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:db:f0:95:e1:ff:dc:73:1b:97:88:26:5f:c1:2d:0d:8e: b0:5e:4b:62:83:42:69:1d:86:3a:f8:0d:82:ba:10:88:b8:57: 5a:bb:1f:3c:3a:50:fa:b5:e3:ff:82:01:a5:13:d0:cd:c7:b3: f6:34:1c:13:23:f2:86:d3:88:e6:f6:ce:fa:8b:b6:e2:e3:97: 56:ba:bc:b5:20:49:db:b1:c8:c3:26:e9:c5:69:00:f5:4a:28: d7:b0:41:d9:c6:a3:49:f3:04:86:58:57:be:b1:a9:00:68:13: fb:57:8f:b7:70:7b:4c:56:0e:58:30:ac:9c:a6:55:f1:58:6f: e9:f1:f7:36:35:ba:80:86:2b:22:6c:bf:01:0e:bb:37:5c:8d: e0:18:9b:bf:cb:f6:20:40:21:f9:53:d3:84:c6:df:24:85:7c: e0:58:d1:23:fd:c1:66:97:1b:c1:cd:b4:c1:e9:22:d1:c3:83: ff:86:86:4e:90:f1:a6:20:dd:c5:dc:ed:5d:77:bb:b8:1a:a8: 06:eb:b8:dc:65:4c:62:f9:46:31:f6:be:64:3c:74:47:53:c4: 56:73:09:74:d0:ce:36:ed:09:e7:3f:14:26:76:52:7a:d5:a9: ac:a9:c3:96:6c:08:2b:3f:f9:dd:24:a9:38:32:f2:df:49:b6: 52:dd:bc:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1Zo91JmLB8+wZaYPpFZwDtslBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA5MjQyMTExNTRaFw0yNjA5MjUyMTM3NTRaMDMxMTAvBgNV BAMTKEY1RkVFMEY0MDUyQUUxMDNDNUFCQzREMENGQjZDMUNERDYzOEQxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi120Gz/GdClc60c4c3EXJurfk 3lgXPH6kvjiurttY8XZOnLq5hPA3IAdrjn5WlqPh7t0PB6hCC676UYn4La0EUat9 Wu3+JfseJ/jFMjnQxBdK4DkBbBMDTWfc/JPRdD4eA24lkfrK3yP6Yx2mQHSkeF2G ErNainc0YwicDduyXGygdiOn9nZkUCO5xwGpWZzEBuHXNGiK22VbTrQuLYG3jrwO ozfNxKKTnVNHWspgyqvoYjUYj2gZu/55sRk8Q+PzgcDY8/k5QZqAnz8Oy9cd6CBm L7K0jc89h30rB7zXljb6wb8ikEIF0fBIm52/YdA09/2TatT/aMZ5aGO57Z05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9f7g9AUq4QPFq8TQz7bBzdY40c0wHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVe2/CV4f/ccxuXiCZfwS0NjrBeS2KDQmkd hjr4DYK6EIi4V1q7Hzw6UPq14/+CAaUT0M3Hs/Y0HBMj8obTiOb2zvqLtuLjl1a6 vLUgSduxyMMm6cVpAPVKKNewQdnGo0nzBIZYV76xqQBoE/tXj7dwe0xWDlgwrJym VfFYb+nx9zY1uoCGKyJsvwEOuzdcjeAYm7/L9iBAIflT04TG3ySFfOBY0SP9wWaX G8HNtMHpItHDg/+Ghk6Q8aYg3cXc7V13u7gaqAbruNxlTGL5RjH2vmQ8dEdTxFZz CXTQzjbtCec/FCZ2UnrVqaypw5ZsCCs/+d0kqTgy8t9JtlLdvEo= -----END CERTIFICATE-----Generated at Fri Sep 25 06:54:00 2026 by rpki-client