$ rpki-client -vvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json) Hash identifier: lJLmWPLnpQnl/c9fur0MQhppRb3rc4+uZy5my4+L/Lk= Subject key identifier: 0B:88:63:54:A2:E9:63:76:26:99:3D:8D:35:A8:F5:F9:D9:CB:DD:81 Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29 Certificate serial: 22B39CE21EE4F40AA15778681C1EE1E0F37BEB6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:25 +0000 Manifest this update: Tue 12 May 2026 22:05:25 +0000 Manifest next update: Wed 13 May 2026 23:13:25 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=) 2: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: yozm27frWCIstTsYsBjANlWqHOTdshkNRAUTz/qULds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b3:9c:e2:1e:e4:f4:0a:a1:57:78:68:1c:1e:e1:e0:f3:7b:eb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29 Validity Not Before: May 12 22:05:25 2026 GMT Not After : May 13 23:13:25 2026 GMT Subject: CN=0B886354A2E9637626993D8D35A8F5F9D9CBDD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:f4:a7:51:97:4c:6b:b5:bb:d5:b8:5e:ad: 29:ab:9e:90:97:c3:3f:30:f1:d4:c5:d1:87:4c:58: 39:66:01:15:b3:4f:66:81:a5:5a:30:2a:2e:a5:77: fd:84:27:24:6a:b8:9a:fc:d8:8c:33:6e:49:b9:1c: 21:b7:ea:c7:66:75:7f:d2:e8:c4:55:e0:c8:b0:e0: c3:37:71:d8:27:58:a6:1b:27:b3:b0:4c:d9:ce:eb: 0b:e1:cd:70:ce:62:30:c2:a3:87:26:ae:f9:e5:6a: 3d:43:1c:ee:2e:14:49:ed:3b:c3:5f:78:cc:ac:34: ea:0c:1b:7d:5b:4f:f0:33:8e:ed:54:16:c4:f6:51: b0:22:ca:a8:3b:65:90:ba:6f:02:8e:2c:57:0f:1c: 2c:68:0b:41:50:f8:43:a0:c4:35:d8:af:21:6e:09: 35:73:cf:8a:05:5a:6d:d2:f0:99:10:dd:39:fc:f0: 7c:21:fa:28:f6:6c:f8:e2:2e:5f:a5:06:83:80:18: cc:4d:a0:ac:a1:cc:e5:55:6f:d6:3b:64:9a:c8:4f: a3:ad:2e:9a:7c:db:0b:81:ac:b1:3f:61:d6:a8:17: da:2a:55:4f:50:81:ee:86:7c:b0:8b:4f:a5:69:81: 3d:a7:40:00:30:fd:3e:ae:95:c8:37:07:0a:64:27: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:88:63:54:A2:E9:63:76:26:99:3D:8D:35:A8:F5:F9:D9:CB:DD:81 X509v3 Authority Key Identifier: keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b1:2b:23:9d:67:55:e4:5c:9e:74:88:d7:76:01:d8:30:cb: ca:16:d9:4f:e7:01:de:32:4b:f7:8a:ac:ce:7c:7a:3b:d8:d4: 67:8a:ba:f4:8b:ce:35:93:78:2a:21:16:48:6c:52:24:b7:68: a3:1f:e1:d1:48:9b:14:95:9b:73:f5:2d:1e:4d:a2:7b:e2:5c: 1f:fb:83:04:58:33:1a:63:91:d2:fa:63:ed:53:54:da:a5:3c: 2f:17:f0:80:1e:6f:ed:0b:14:13:36:cf:48:1a:85:0a:57:cc: 8f:37:99:d0:ad:98:3e:68:4e:4a:63:14:4c:42:a0:0b:86:ad: eb:ab:12:76:c0:68:f0:81:07:21:1e:a5:4c:c7:a9:d8:b0:fe: 7d:1e:9f:c4:77:b2:77:6e:18:56:ac:62:73:8e:d6:38:1c:fc: 40:e1:11:2f:48:f2:6f:fa:52:06:11:f6:6d:be:41:c0:4e:75: f4:3d:b0:b9:e8:0e:80:c7:10:2a:e8:a7:ed:ee:82:06:28:41: cf:45:1a:bc:ae:9e:50:58:16:3f:57:e2:34:54:ef:5d:12:25: 4d:c4:29:db:1a:7c:d9:31:5a:f3:50:39:e6:f0:2d:43:d4:33: 51:c7:7a:ca:0b:63:1a:66:cd:3f:27:c4:82:67:ed:3e:b8:66: 26:b8:d8:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrOc4h7k9AqhV3hoHB7h4PN7620wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JD MUI0OUYyOTAeFw0yNjA1MTIyMjA1MjVaFw0yNjA1MTMyMzEzMjVaMDMxMTAvBgNV BAMTKDBCODg2MzU0QTJFOTYzNzYyNjk5M0Q4RDM1QThGNUY5RDlDQkREODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhX/SnUZdMa7W71bherSmrnpCX wz8w8dTF0YdMWDlmARWzT2aBpVowKi6ld/2EJyRquJr82Iwzbkm5HCG36sdmdX/S 6MRV4Miw4MM3cdgnWKYbJ7OwTNnO6wvhzXDOYjDCo4cmrvnlaj1DHO4uFEntO8Nf eMysNOoMG31bT/Azju1UFsT2UbAiyqg7ZZC6bwKOLFcPHCxoC0FQ+EOgxDXYryFu CTVzz4oFWm3S8JkQ3Tn88Hwh+ij2bPjiLl+lBoOAGMxNoKyhzOVVb9Y7ZJrIT6Ot Lpp82wuBrLE/YdaoF9oqVU9Qge6GfLCLT6VpgT2nQAAw/T6ulcg3BwpkJ8MfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4hjVKLpY3YmmT2NNaj1+dnL3YEwHwYDVR0j BBgwFoAUMygJIHNAFDNqAknJCaOOe8G0nykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmZTQyNTUtMWQ5MS00ZmNjLWJjZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3 MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JDMUI0OUYyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzI4MDkyMDczNDAxNDMzNkEwMjQ5QzkwOUEzOEU3QkMxQjQ5 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhF N0JDMUI0OUYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqxKyOdZ1XkXJ50iNd2Adgwy8oW2U/nAd4y S/eKrM58ejvY1GeKuvSLzjWTeCohFkhsUiS3aKMf4dFImxSVm3P1LR5NonviXB/7 gwRYMxpjkdL6Y+1TVNqlPC8X8IAeb+0LFBM2z0gahQpXzI83mdCtmD5oTkpjFExC oAuGreurEnbAaPCBByEepUzHqdiw/n0en8R3snduGFasYnOO1jgc/EDhES9I8m/6 UgYR9m2+QcBOdfQ9sLnoDoDHECrop+3uggYoQc9FGryunlBYFj9X4jRU710SJU3E KdsafNkxWvNQOebwLUPUM1HHesoLYxpmzT8nxIJn7T64Zia42CU= -----END CERTIFICATE-----Generated at Wed May 13 01:36:30 2026 by rpki-client