$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: IcExJRzstJDvZPfbpqKc05KP7nBB32zyZpt4JADA9zo= Subject key identifier: 35:C8:01:85:2D:D0:D1:05:6B:1E:16:16:48:B3:B7:71:F7:B8:0E:6E Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 635CC61962477B53E8432C5CB7EF0B6DD41970C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 07:03:38 +0000 Manifest this update: Thu 23 Jul 2026 06:58:38 +0000 Manifest next update: Fri 24 Jul 2026 08:46:38 +0000 Files and hashes: 1: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 2: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 3: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 4: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 5: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 6: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 7: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 8: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: r++ziTnUZDsWE7Vnk1GIx0JtRB19c4TmBQ4zKvTnvbw=) 9: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 10: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) 11: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5c:c6:19:62:47:7b:53:e8:43:2c:5c:b7:ef:0b:6d:d4:19:70:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Jul 23 06:58:38 2026 GMT Not After : Jul 24 08:46:38 2026 GMT Subject: CN=35C801852DD0D1056B1E161648B3B771F7B80E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ae:72:a2:14:a1:9b:59:aa:6a:d6:67:bd:cb: c5:b7:29:b1:68:ca:3d:1d:54:36:ba:10:e6:6c:fc: fa:02:2d:b4:ff:c0:61:c9:c4:87:aa:06:36:c3:cf: 24:a3:c1:c9:0b:5c:06:a5:68:7b:4b:8c:05:6d:ad: 55:93:fe:51:87:6d:fc:8a:dc:48:6a:08:9a:16:cf: 01:b7:79:09:0c:ec:77:84:89:16:8c:2a:14:65:de: 91:0e:21:93:d0:b2:6c:e4:59:89:93:6d:a6:43:ca: 8b:0d:b5:26:f0:3a:a6:d4:f1:36:e1:8c:17:73:6e: 9d:d0:1f:ee:f5:33:9b:61:2c:61:66:9a:b3:5c:7b: 06:88:7c:a2:22:73:d1:16:c1:87:8c:89:c0:03:41: b4:32:09:4a:90:38:25:d7:06:16:0b:1a:0f:f3:cb: dc:83:79:37:6d:98:d2:74:77:8d:55:a0:12:36:ef: 29:9c:70:75:91:ce:06:76:f2:b4:43:76:64:71:56: 7c:84:cb:ea:38:9e:e0:fe:21:5d:a1:30:bc:58:8f: 9a:c6:c3:01:45:8c:8a:2e:35:1b:43:fe:94:ed:c3: 0e:2a:93:34:96:78:df:9b:c8:73:4e:1a:7e:1b:b1: 8f:e4:35:be:50:c5:12:1e:cf:cb:ef:7c:9f:ce:66: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:01:85:2D:D0:D1:05:6B:1E:16:16:48:B3:B7:71:F7:B8:0E:6E X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:e3:01:79:f5:aa:b1:7d:ac:37:fc:60:13:2f:e3:11:c3: 4c:69:19:2c:cb:af:e9:d3:25:69:27:75:86:fc:b9:29:97:7d: ae:c0:25:7f:a2:92:29:30:a6:1f:dc:d4:02:fa:c8:83:8d:fa: 60:d0:c5:ee:ef:2d:a2:86:9e:ee:29:ad:17:3c:3d:20:58:bf: d9:fd:b0:62:59:55:b7:19:1a:63:4c:94:b9:1f:23:62:1e:a1: 39:e9:cd:0e:0d:8b:24:71:f3:71:ed:11:4c:f7:eb:05:19:67: 54:bc:e1:e5:0b:83:ce:b4:3c:2c:26:96:a5:8a:16:e3:3e:26: aa:51:e4:c5:b3:0d:2f:d5:eb:ec:dc:ad:85:36:4f:3d:f1:52: b7:d2:36:4f:91:32:a3:1b:8d:33:f1:a3:2f:62:55:c0:a8:68: cb:b1:77:52:ed:d8:44:52:c4:59:29:22:da:d3:1e:47:d1:8a: ff:48:1f:00:cc:5f:a4:7e:a1:e0:2b:d8:81:f2:c3:61:16:90: 1b:ab:35:65:e7:0e:09:ae:e8:9c:9a:f5:05:e3:46:cd:4c:c9: fb:cb:9f:44:e1:dc:70:16:a5:9b:e7:83:c2:59:cc:c5:73:f9: 79:c4:f7:8f:4a:1a:e3:ac:4a:08:59:2f:b3:42:29:fd:a1:89: e7:89:2a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1zGGWJHe1PoQyxct+8LbdQZcMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA3MjMwNjU4MzhaFw0yNjA3MjQwODQ2MzhaMDMxMTAvBgNV BAMTKDM1QzgwMTg1MkREMEQxMDU2QjFFMTYxNjQ4QjNCNzcxRjdCODBFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrnKiFKGbWapq1me9y8W3KbFo yj0dVDa6EOZs/PoCLbT/wGHJxIeqBjbDzySjwckLXAalaHtLjAVtrVWT/lGHbfyK 3EhqCJoWzwG3eQkM7HeEiRaMKhRl3pEOIZPQsmzkWYmTbaZDyosNtSbwOqbU8Tbh jBdzbp3QH+71M5thLGFmmrNcewaIfKIic9EWwYeMicADQbQyCUqQOCXXBhYLGg/z y9yDeTdtmNJ0d41VoBI27ymccHWRzgZ28rRDdmRxVnyEy+o4nuD+IV2hMLxYj5rG wwFFjIouNRtD/pTtww4qkzSWeN+byHNOGn4bsY/kNb5QxRIez8vvfJ/OZlVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcgBhS3Q0QVrHhYWSLO3cfe4Dm4wHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc84wF59aqxfaw3/GATL+MRw0xpGSzLr+nT JWkndYb8uSmXfa7AJX+ikikwph/c1AL6yION+mDQxe7vLaKGnu4prRc8PSBYv9n9 sGJZVbcZGmNMlLkfI2IeoTnpzQ4NiyRx83HtEUz36wUZZ1S84eULg860PCwmlqWK FuM+JqpR5MWzDS/V6+zcrYU2Tz3xUrfSNk+RMqMbjTPxoy9iVcCoaMuxd1Lt2ERS xFkpItrTHkfRiv9IHwDMX6R+oeAr2IHyw2EWkBurNWXnDgmu6Jya9QXjRs1MyfvL n0Th3HAWpZvng8JZzMVz+XnE949KGuOsSghZL7NCKf2hieeJKsc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:44:42 2026 by rpki-client