$ rpki-client -vvvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: WZbxEOc9HIFH08GCkRMXLMTvQvEyabfEmsIVcmakPt0= Subject key identifier: 8B:81:AE:E7:3A:EF:CC:CF:5B:C9:D1:EA:AC:34:D6:60:82:4A:79:C7 Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 74F3BBA7E4F65C6963D2A6108AF9EACD88A12609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 12:20:49 +0000 Manifest this update: Fri 25 Sep 2026 12:15:49 +0000 Manifest next update: Sat 26 Sep 2026 16:14:49 +0000 Files and hashes: 1: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 2: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 3: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 4: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 5: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 6: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: wex7nKn5DpzqVLvZj1if1FqckFgNoDtZgso0RH5o40E=) 7: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 8: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 9: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 10: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 11: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f3:bb:a7:e4:f6:5c:69:63:d2:a6:10:8a:f9:ea:cd:88:a1:26:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Sep 25 12:15:49 2026 GMT Not After : Sep 26 16:14:49 2026 GMT Subject: CN=8B81AEE73AEFCCCF5BC9D1EAAC34D660824A79C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:10:54:cb:b5:51:4b:db:ea:9a:14:e5:8f: bd:aa:bd:c2:f9:7a:09:e3:84:a6:a4:08:dd:26:f0: a3:8e:07:30:ac:b4:47:61:17:aa:0a:32:06:96:cd: 63:5c:4c:34:f9:b1:04:1a:cc:05:4a:b7:8e:d1:88: 60:e5:ef:b9:3b:43:8d:80:76:9e:01:27:58:96:78: f3:db:a1:01:f3:86:70:bc:4e:9d:ed:df:c6:72:49: 39:bb:c2:b1:88:42:34:5b:48:b5:32:aa:89:df:b5: 27:4e:8e:10:f3:de:b2:c4:94:fd:c0:19:28:dd:6d: 1f:cb:b9:c0:74:2f:e7:07:3c:79:91:bb:3e:de:46: 56:9c:62:1f:d1:d7:f6:b6:df:1a:77:46:67:44:c5: 22:e3:d9:87:83:f3:53:45:3c:33:79:25:de:8b:6b: b8:57:e2:b7:ed:0f:8e:c3:32:49:d6:84:25:bc:40: 3c:7b:d4:a5:3e:37:81:33:1f:67:72:aa:27:31:8c: f2:2d:09:37:be:fd:01:91:56:a1:50:83:37:7f:29: 2c:08:e4:30:ad:fb:51:49:9a:4b:bd:1f:a9:67:c4: c7:ee:62:09:3a:a3:17:04:14:c1:c9:03:e3:84:78: 44:bc:d3:08:14:f7:5c:4e:28:c1:2f:f7:70:c0:15: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:81:AE:E7:3A:EF:CC:CF:5B:C9:D1:EA:AC:34:D6:60:82:4A:79:C7 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:45:8c:80:5e:f2:b0:17:53:10:9d:90:f0:83:ab:5d:28:7c: 42:89:1b:bb:cb:74:7d:fc:30:55:e6:61:0a:ff:6c:5f:b3:d8: 94:95:ae:3f:c2:aa:7f:be:8c:97:c6:f5:3f:94:ed:79:1d:4a: 14:4d:41:8a:27:d4:8d:02:8b:6c:0f:38:47:01:34:1c:0f:aa: 65:34:0d:2e:4e:91:e5:f4:4e:42:af:41:d8:30:62:67:c1:03: 73:ab:c2:f0:c0:41:18:7c:11:f5:c4:ec:b7:5b:83:ee:08:50: fe:c6:bc:22:0e:f3:97:c5:ff:c6:ec:4b:1c:d7:71:57:65:f8: 79:f4:ed:bb:cd:98:b6:0d:d7:c2:6d:5a:a6:a4:97:ea:26:c8: 9e:61:b7:5b:82:21:3a:a6:9e:d8:f7:58:94:94:80:91:41:73: ff:90:a9:64:7a:d3:97:9b:96:91:e1:e4:31:9f:fa:43:86:04: 95:41:b2:f8:c6:a5:b8:97:d1:af:7b:ac:2e:c1:3c:0e:2d:ce: 7d:1f:81:39:11:84:c6:01:67:c1:c6:5d:7d:96:56:34:f8:35: f0:fd:e0:ff:b5:fa:93:55:a3:fc:9a:20:62:3f:0f:8f:05:b0: 6a:15:43:59:99:56:3c:81:ab:04:60:6d:79:7d:27:39:38:aa: 5c:b2:21:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPO7p+T2XGlj0qYQivnqzYihJgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA5MjUxMjE1NDlaFw0yNjA5MjYxNjE0NDlaMDMxMTAvBgNV BAMTKDhCODFBRUU3M0FFRkNDQ0Y1QkM5RDFFQUFDMzRENjYwODI0QTc5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rRBUy7VRS9vqmhTlj72qvcL5 egnjhKakCN0m8KOOBzCstEdhF6oKMgaWzWNcTDT5sQQazAVKt47RiGDl77k7Q42A dp4BJ1iWePPboQHzhnC8Tp3t38ZySTm7wrGIQjRbSLUyqonftSdOjhDz3rLElP3A GSjdbR/LucB0L+cHPHmRuz7eRlacYh/R1/a23xp3RmdExSLj2YeD81NFPDN5Jd6L a7hX4rftD47DMknWhCW8QDx71KU+N4EzH2dyqicxjPItCTe+/QGRVqFQgzd/KSwI 5DCt+1FJmku9H6lnxMfuYgk6oxcEFMHJA+OEeES80wgU91xOKMEv93DAFb0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4Gu5zrvzM9bydHqrDTWYIJKeccwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVFjIBe8rAXUxCdkPCDq10ofEKJG7vLdH38 MFXmYQr/bF+z2JSVrj/Cqn++jJfG9T+U7XkdShRNQYon1I0Ci2wPOEcBNBwPqmU0 DS5OkeX0TkKvQdgwYmfBA3OrwvDAQRh8EfXE7Ldbg+4IUP7GvCIO85fF/8bsSxzX cVdl+Hn07bvNmLYN18JtWqakl+omyJ5ht1uCITqmntj3WJSUgJFBc/+QqWR605eb lpHh5DGf+kOGBJVBsvjGpbiX0a97rC7BPA4tzn0fgTkRhMYBZ8HGXX2WVjT4NfD9 4P+1+pNVo/yaIGI/D48FsGoVQ1mZVjyBqwRgbXl9Jzk4qlyyIXI= -----END CERTIFICATE-----Generated at Fri Sep 25 20:39:31 2026 by rpki-client