$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: 3gA5Jg8zOaMaR0fgeS37Aof2Y9ZWGHljiLl/b7i7JGg= Subject key identifier: 61:64:8E:81:47:63:82:0A:36:98:EE:3D:27:32:15:C2:6F:58:4F:F4 Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 1B13EFE97B4FD3EBD68A7D176C095760F0741469 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:23 +0000 Manifest this update: Tue 12 May 2026 18:44:23 +0000 Manifest next update: Wed 13 May 2026 19:34:23 +0000 Files and hashes: 1: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 2: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 3: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 4: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 5: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 6: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 7: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 8: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 9: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: v8Gt0FiFcstxCVrkRour8sCIDRXtN4WVPKKMC33PqUc=) 10: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 11: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:13:ef:e9:7b:4f:d3:eb:d6:8a:7d:17:6c:09:57:60:f0:74:14:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: May 12 18:44:23 2026 GMT Not After : May 13 19:34:23 2026 GMT Subject: CN=61648E814763820A3698EE3D273215C26F584FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:8f:fb:99:2d:bb:b4:0f:5c:0a:0e:01:75: 91:d7:d0:d4:dc:bc:c2:20:7c:e5:42:a3:d9:20:0c: 80:b7:b8:8e:bf:58:26:9d:a2:02:35:c8:50:cf:c7: 83:42:e9:44:ee:88:30:e1:6d:34:9f:3f:18:d0:6a: 91:2f:46:29:29:94:97:5d:a9:4d:0c:3b:e6:6b:ea: 3a:4d:bf:54:32:90:11:ca:64:e6:8d:c5:a3:bc:d8: 0a:07:cf:2c:82:e4:d2:02:c9:0a:a6:65:5f:48:75: ec:c4:99:bc:d7:48:90:ab:f2:df:4e:d4:8e:0f:4a: e0:c5:65:cf:8e:e4:3b:6d:18:3d:80:85:47:a2:f9: fb:d3:6f:00:61:58:b7:bf:0e:31:ea:b8:d7:c1:75: 82:ab:60:5b:8c:22:45:51:30:19:8f:1a:79:d7:72: 28:e0:08:14:5e:bd:0b:dc:74:3a:85:15:a0:82:f9: 01:13:e2:93:ae:05:22:80:ff:af:db:26:58:e8:af: 96:f1:37:f8:14:4b:56:90:0e:04:0e:81:ab:26:06: c9:61:57:1d:0c:04:38:5a:fb:b6:9a:45:13:65:03: 25:43:01:6b:37:e6:53:c5:a6:28:5c:2d:33:80:14: 5d:8d:ec:da:c0:cb:11:0e:87:4e:9b:ac:0c:9a:be: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:64:8E:81:47:63:82:0A:36:98:EE:3D:27:32:15:C2:6F:58:4F:F4 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:1e:97:ed:f7:c9:02:36:b7:c3:a9:e4:a7:bd:8f:21:ac:d9: af:35:82:37:7a:ef:e1:38:00:2a:44:82:a2:ef:12:b4:4d:60: 73:e4:9a:d4:5a:63:7f:50:7b:b4:71:b8:e8:04:03:12:4c:d0: b2:97:86:23:96:0f:b2:c8:62:cc:51:33:b3:27:a9:fb:51:a4: e0:59:9a:9a:74:9d:f8:cc:76:0b:fd:35:6c:43:9a:a8:fd:de: d2:ce:56:41:c4:d8:b3:4c:d7:be:4c:73:a5:36:28:fd:95:cb: 80:a0:a0:0e:d1:5d:a3:4c:94:67:d2:ca:c7:ea:f6:9a:cd:01: 7a:70:00:5a:5e:94:88:a9:50:e0:0b:57:f2:da:24:ce:d7:41: 87:31:1f:c9:1c:23:60:f1:7a:0d:2e:42:16:1e:93:af:3f:99: c3:94:d7:04:25:b8:01:27:61:18:45:e7:d4:93:a3:59:71:79: 2a:66:bb:e3:25:4c:29:71:e7:30:6f:be:98:69:32:17:cd:0e: 50:62:0f:2d:5c:2c:2b:ad:e5:ad:d0:6e:7b:7b:d5:9e:79:b6: 74:a9:10:bf:77:79:4e:7b:12:70:74:b0:23:76:b1:9c:9d:a9: b9:d9:bf:34:95:0d:79:5a:bd:52:d2:9b:71:85:88:5a:18:9d: c8:a7:96:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxPv6XtP0+vWin0XbAlXYPB0FGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA1MTIxODQ0MjNaFw0yNjA1MTMxOTM0MjNaMDMxMTAvBgNV BAMTKDYxNjQ4RTgxNDc2MzgyMEEzNjk4RUUzRDI3MzIxNUMyNkY1ODRGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQzo/7mS27tA9cCg4BdZHX0NTc vMIgfOVCo9kgDIC3uI6/WCadogI1yFDPx4NC6UTuiDDhbTSfPxjQapEvRikplJdd qU0MO+Zr6jpNv1QykBHKZOaNxaO82AoHzyyC5NICyQqmZV9IdezEmbzXSJCr8t9O 1I4PSuDFZc+O5DttGD2AhUei+fvTbwBhWLe/DjHquNfBdYKrYFuMIkVRMBmPGnnX cijgCBRevQvcdDqFFaCC+QET4pOuBSKA/6/bJljor5bxN/gUS1aQDgQOgasmBslh Vx0MBDha+7aaRRNlAyVDAWs35lPFpihcLTOAFF2N7NrAyxEOh06brAyavk93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWSOgUdjggo2mO49JzIVwm9YT/QwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsel+33yQI2t8Op5Ke9jyGs2a81gjd67+E4 ACpEgqLvErRNYHPkmtRaY39Qe7RxuOgEAxJM0LKXhiOWD7LIYsxRM7MnqftRpOBZ mpp0nfjMdgv9NWxDmqj93tLOVkHE2LNM175Mc6U2KP2Vy4CgoA7RXaNMlGfSysfq 9prNAXpwAFpelIipUOALV/LaJM7XQYcxH8kcI2Dxeg0uQhYek68/mcOU1wQluAEn YRhF59STo1lxeSpmu+MlTClx5zBvvphpMhfNDlBiDy1cLCut5a3Qbnt71Z55tnSp EL93eU57EnB0sCN2sZydqbnZvzSVDXlavVLSm3GFiFoYncinlmM= -----END CERTIFICATE-----Generated at Wed May 13 03:51:18 2026 by rpki-client