$ rpki-client -vvvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: zZDmAwGRNbnQeuHYMuzv/gQyAOQoUEmjd53x81LIrBc= Subject key identifier: 02:2C:84:F6:74:8A:65:70:C9:01:09:18:9F:3A:43:24:33:06:D0:89 Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 4A4BD0BAF1876BA54B22F6ABCD6B5417E5B71B42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 17:27:18 +0000 Manifest this update: Thu 24 Sep 2026 17:22:18 +0000 Manifest next update: Fri 25 Sep 2026 20:19:18 +0000 Files and hashes: 1: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 2: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 3: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 4: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: gkB2WeysICZV9PoDCuv1tEYTcIKath1MKvQTQFoPM64=) 5: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 6: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 7: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) 8: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 9: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 10: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 11: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4b:d0:ba:f1:87:6b:a5:4b:22:f6:ab:cd:6b:54:17:e5:b7:1b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Sep 24 17:22:18 2026 GMT Not After : Sep 25 20:19:18 2026 GMT Subject: CN=022C84F6748A6570C90109189F3A43243306D089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:78:a3:70:d9:40:74:cb:25:4f:8a:ed:e0: 7e:e5:2c:e3:73:7d:68:02:be:c4:dc:4e:5d:ba:af: 5c:e2:bd:5c:26:0b:64:96:bf:59:84:cb:a5:50:6c: e4:ff:2f:a2:9e:7f:12:a0:48:5f:b6:4d:be:40:2b: be:bc:07:62:10:3f:f5:66:e4:a9:ab:ce:82:f7:1e: ed:fb:14:71:99:26:84:5f:07:30:01:b4:99:eb:60: 6b:01:36:ae:9c:06:51:dd:66:00:18:a7:19:61:14: 12:aa:d3:1c:2c:ad:55:42:c9:61:0e:ff:b8:59:4f: ea:e7:5e:48:9c:c0:b4:b5:df:92:54:29:e8:2c:1c: 3f:76:38:ef:16:1f:43:60:46:7f:40:41:74:af:c6: dc:7c:cd:95:fb:03:36:52:41:ff:0e:4a:f2:ae:89: 29:c8:ee:54:a3:1a:25:eb:62:9a:38:a8:74:bc:62: 9c:4b:a8:b8:6d:e9:fc:15:f5:45:1a:72:50:4f:cc: 7c:d5:70:38:ff:fb:f7:9f:68:a9:83:f6:31:76:58: ac:67:67:2b:82:70:82:26:96:ca:56:4d:61:94:57: b6:5c:df:70:18:df:10:1b:e2:09:0f:df:90:3f:24: 13:83:4d:9d:81:23:43:74:d3:18:dd:21:c7:87:44: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2C:84:F6:74:8A:65:70:C9:01:09:18:9F:3A:43:24:33:06:D0:89 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:a6:b9:ef:50:ce:30:22:57:7e:70:c6:d6:2d:7b:07:d6:3a: 5c:aa:af:db:8b:ef:9c:3c:a3:fd:fc:fb:23:ef:6f:a6:60:ef: 6f:43:0e:ce:14:3e:7f:22:b1:9f:e4:be:07:78:dd:6d:da:10: af:3d:9d:b2:13:9d:5e:a8:b2:73:7f:7c:84:46:25:45:fc:91: 6d:bc:ac:13:dc:a9:80:42:3f:1c:f9:b1:bc:56:15:c8:66:31: 79:c6:52:1a:1c:8f:55:38:38:f5:60:15:af:4e:d4:02:6b:a1: ea:98:76:52:ef:92:0a:f4:57:f8:16:50:ff:56:3b:ab:d3:b8: 1d:96:79:0e:4a:01:0e:26:b1:e3:1e:e5:cb:b1:ed:c6:3f:85: e4:85:27:61:88:3b:14:09:3d:ca:69:f9:42:e8:e1:e1:d2:d0: fe:ac:ea:9c:33:45:89:6a:48:32:50:8c:c9:c9:9a:f5:a4:af: e6:58:aa:67:9f:6a:f9:9b:0c:56:86:b3:1a:cb:57:9a:16:9c: 65:e5:d5:41:f2:a0:4b:2d:63:2c:6e:33:58:91:38:ab:65:38: 4c:eb:04:3a:71:59:3d:da:35:4f:91:5d:ac:9f:4d:3d:3a:23: 12:e4:c4:8e:4d:dd:6b:42:2b:33:70:87:4b:63:f0:e3:fc:2b: ed:2c:20:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkvQuvGHa6VLIvarzWtUF+W3G0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA5MjQxNzIyMThaFw0yNjA5MjUyMDE5MThaMDMxMTAvBgNV BAMTKDAyMkM4NEY2NzQ4QTY1NzBDOTAxMDkxODlGM0E0MzI0MzMwNkQwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7nijcNlAdMslT4rt4H7lLONz fWgCvsTcTl26r1zivVwmC2SWv1mEy6VQbOT/L6KefxKgSF+2Tb5AK768B2IQP/Vm 5KmrzoL3Hu37FHGZJoRfBzABtJnrYGsBNq6cBlHdZgAYpxlhFBKq0xwsrVVCyWEO /7hZT+rnXkicwLS135JUKegsHD92OO8WH0NgRn9AQXSvxtx8zZX7AzZSQf8OSvKu iSnI7lSjGiXrYpo4qHS8YpxLqLht6fwV9UUaclBPzHzVcDj/+/efaKmD9jF2WKxn ZyuCcIImlspWTWGUV7Zc33AY3xAb4gkP35A/JBODTZ2BI0N00xjdIceHRDI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAiyE9nSKZXDJAQkYnzpDJDMG0IkwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqmue9QzjAiV35wxtYtewfWOlyqr9uL75w8 o/38+yPvb6Zg729DDs4UPn8isZ/kvgd43W3aEK89nbITnV6osnN/fIRGJUX8kW28 rBPcqYBCPxz5sbxWFchmMXnGUhocj1U4OPVgFa9O1AJroeqYdlLvkgr0V/gWUP9W O6vTuB2WeQ5KAQ4mseMe5cux7cY/heSFJ2GIOxQJPcpp+ULo4eHS0P6s6pwzRYlq SDJQjMnJmvWkr+ZYqmefavmbDFaGsxrLV5oWnGXl1UHyoEstYyxuM1iROKtlOEzr BDpxWT3aNU+RXayfTT06IxLkxI5N3WtCKzNwh0tj8OP8K+0sIEg= -----END CERTIFICATE-----Generated at Fri Sep 25 04:39:37 2026 by rpki-client