
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json)
Hash identifier: zZDmAwGRNbnQeuHYMuzv/gQyAOQoUEmjd53x81LIrBc=
Subject key identifier: 02:2C:84:F6:74:8A:65:70:C9:01:09:18:9F:3A:43:24:33:06:D0:89
Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB
Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
Certificate serial: 4A4BD0BAF1876BA54B22F6ABCD6B5417E5B71B42
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 17:27:18 +0000
Manifest this update: Thu 24 Sep 2026 17:22:18 +0000
Manifest next update: Fri 25 Sep 2026 20:19:18 +0000
Files and hashes: 1: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=)
2: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=)
3: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=)
4: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: gkB2WeysICZV9PoDCuv1tEYTcIKath1MKvQTQFoPM64=)
5: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=)
6: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=)
7: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=)
8: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=)
9: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=)
10: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=)
11: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl
rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4b:d0:ba:f1:87:6b:a5:4b:22:f6:ab:cd:6b:54:17:e5:b7:1b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB
Validity
Not Before: Sep 24 17:22:18 2026 GMT
Not After : Sep 25 20:19:18 2026 GMT
Subject: CN=022C84F6748A6570C90109189F3A43243306D089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:78:a3:70:d9:40:74:cb:25:4f:8a:ed:e0:
7e:e5:2c:e3:73:7d:68:02:be:c4:dc:4e:5d:ba:af:
5c:e2:bd:5c:26:0b:64:96:bf:59:84:cb:a5:50:6c:
e4:ff:2f:a2:9e:7f:12:a0:48:5f:b6:4d:be:40:2b:
be:bc:07:62:10:3f:f5:66:e4:a9:ab:ce:82:f7:1e:
ed:fb:14:71:99:26:84:5f:07:30:01:b4:99:eb:60:
6b:01:36:ae:9c:06:51:dd:66:00:18:a7:19:61:14:
12:aa:d3:1c:2c:ad:55:42:c9:61:0e:ff:b8:59:4f:
ea:e7:5e:48:9c:c0:b4:b5:df:92:54:29:e8:2c:1c:
3f:76:38:ef:16:1f:43:60:46:7f:40:41:74:af:c6:
dc:7c:cd:95:fb:03:36:52:41:ff:0e:4a:f2:ae:89:
29:c8:ee:54:a3:1a:25:eb:62:9a:38:a8:74:bc:62:
9c:4b:a8:b8:6d:e9:fc:15:f5:45:1a:72:50:4f:cc:
7c:d5:70:38:ff:fb:f7:9f:68:a9:83:f6:31:76:58:
ac:67:67:2b:82:70:82:26:96:ca:56:4d:61:94:57:
b6:5c:df:70:18:df:10:1b:e2:09:0f:df:90:3f:24:
13:83:4d:9d:81:23:43:74:d3:18:dd:21:c7:87:44:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2C:84:F6:74:8A:65:70:C9:01:09:18:9F:3A:43:24:33:06:D0:89
X509v3 Authority Key Identifier:
keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a6:b9:ef:50:ce:30:22:57:7e:70:c6:d6:2d:7b:07:d6:3a:
5c:aa:af:db:8b:ef:9c:3c:a3:fd:fc:fb:23:ef:6f:a6:60:ef:
6f:43:0e:ce:14:3e:7f:22:b1:9f:e4:be:07:78:dd:6d:da:10:
af:3d:9d:b2:13:9d:5e:a8:b2:73:7f:7c:84:46:25:45:fc:91:
6d:bc:ac:13:dc:a9:80:42:3f:1c:f9:b1:bc:56:15:c8:66:31:
79:c6:52:1a:1c:8f:55:38:38:f5:60:15:af:4e:d4:02:6b:a1:
ea:98:76:52:ef:92:0a:f4:57:f8:16:50:ff:56:3b:ab:d3:b8:
1d:96:79:0e:4a:01:0e:26:b1:e3:1e:e5:cb:b1:ed:c6:3f:85:
e4:85:27:61:88:3b:14:09:3d:ca:69:f9:42:e8:e1:e1:d2:d0:
fe:ac:ea:9c:33:45:89:6a:48:32:50:8c:c9:c9:9a:f5:a4:af:
e6:58:aa:67:9f:6a:f9:9b:0c:56:86:b3:1a:cb:57:9a:16:9c:
65:e5:d5:41:f2:a0:4b:2d:63:2c:6e:33:58:91:38:ab:65:38:
4c:eb:04:3a:71:59:3d:da:35:4f:91:5d:ac:9f:4d:3d:3a:23:
12:e4:c4:8e:4d:dd:6b:42:2b:33:70:87:4b:63:f0:e3:fc:2b:
ed:2c:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:39:37 2026 by rpki-client