$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: iRUduGxXmvOeoO2G9k7MjqQwafs/zV3IdZ2ljhISVzA= Subject key identifier: 7C:E1:05:C7:F9:3C:0A:81:6A:D3:F7:19:FF:FA:B6:C3:5A:1B:DB:3D Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 24E46715E018E23EBC2B7FA03C5804F1B0A74053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:50:04 +0000 Manifest this update: Fri 24 Jul 2026 00:45:04 +0000 Manifest next update: Sat 25 Jul 2026 03:09:04 +0000 Files and hashes: 1: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 2: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) 3: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: C1elmsxMF+55h+J8nYFKwWJ+Ar+Qx6FOgMpux8ZofsA=) 4: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) 5: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e4:67:15:e0:18:e2:3e:bc:2b:7f:a0:3c:58:04:f1:b0:a7:40:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Jul 24 00:45:04 2026 GMT Not After : Jul 25 03:09:04 2026 GMT Subject: CN=7CE105C7F93C0A816AD3F719FFFAB6C35A1BDB3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:68:f2:cc:b4:74:c0:f9:52:06:71:51:cc: 81:c8:28:38:c3:92:b4:b5:c3:d5:52:bf:c9:32:26: 60:30:fa:88:07:de:62:7e:79:72:90:17:63:89:14: 20:39:9c:1c:42:ae:b0:73:c9:1c:dc:20:90:32:23: 58:50:be:d1:2f:f6:bb:37:bf:43:b0:f9:52:14:36: 8e:11:95:e9:93:93:04:fa:85:e5:05:20:5d:35:bd: d8:a9:2b:7b:85:3c:a5:f2:35:31:9a:83:0f:c9:03: 81:d9:f5:2e:f9:e8:c1:f8:98:87:5f:cd:9c:0d:ba: d4:32:87:cb:96:4e:97:6e:44:81:ac:04:69:f3:3f: 13:86:d9:b1:cd:62:26:3b:58:1a:6f:cd:67:fb:6b: d7:a2:43:33:31:12:58:f8:d9:f1:92:72:be:83:de: b7:b5:e3:86:53:ce:ca:a2:f2:cd:b5:63:b8:5c:16: 5c:3e:99:e6:10:70:2d:d4:53:7e:bd:43:04:b4:72: f5:4d:c0:b2:97:f3:23:c9:9c:58:ff:ec:ee:24:c8: 07:13:26:8d:d0:a0:22:21:50:25:66:11:8c:98:62: 14:43:8f:64:6b:86:44:aa:e3:0a:22:15:e6:e3:a0: fa:e7:71:9b:90:1d:a6:29:76:83:6f:dd:17:64:4b: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E1:05:C7:F9:3C:0A:81:6A:D3:F7:19:FF:FA:B6:C3:5A:1B:DB:3D X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3b:c0:e9:b6:ee:5f:4e:d3:9e:21:a6:3c:f5:d2:db:b1:4c: 74:fd:3d:e0:80:d7:4b:ee:ee:96:ea:d5:69:4e:72:b6:e1:b7: 42:1e:18:98:22:86:c2:bf:02:26:50:9f:fa:7c:64:12:83:cd: 17:03:d9:f6:7a:96:77:5a:99:00:31:f3:04:9e:ce:3a:7d:00: 73:9f:7e:40:f9:47:66:5a:39:4d:09:89:6b:ba:f2:8b:10:4b: 5c:f2:31:dc:71:72:1e:5a:7e:72:1f:19:dd:a5:65:c8:c8:00: 5e:f5:23:34:1f:ff:82:7e:93:9c:47:57:2f:65:43:60:18:dd: 8b:e2:09:19:c5:86:25:2a:b8:96:b7:d5:ee:f1:bf:b5:20:c2: 14:7f:1b:30:17:f4:e4:07:3d:78:0f:e2:06:86:4f:84:6f:b4: 84:fd:76:7c:a6:85:f2:16:51:6d:9c:99:ab:24:8b:a3:94:59: a5:d4:bd:49:67:a9:14:db:12:99:fd:0c:73:1c:55:5b:91:e2: 79:d1:67:aa:31:0b:b3:98:6a:b0:44:57:b9:22:28:93:35:d6: 54:4c:ae:c5:c2:e7:72:72:e6:0b:2b:9d:22:ae:c5:1a:b5:a0: b6:87:d9:db:41:de:bb:07:7d:04:f4:f8:4b:80:70:37:93:a7: ee:ad:30:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJORnFeAY4j68K3+gPFgE8bCnQFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjA3MjQwMDQ1MDRaFw0yNjA3MjUwMzA5MDRaMDMxMTAvBgNV BAMTKDdDRTEwNUM3RjkzQzBBODE2QUQzRjcxOUZGRkFCNkMzNUExQkRCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Q2jyzLR0wPlSBnFRzIHIKDjD krS1w9VSv8kyJmAw+ogH3mJ+eXKQF2OJFCA5nBxCrrBzyRzcIJAyI1hQvtEv9rs3 v0Ow+VIUNo4RlemTkwT6heUFIF01vdipK3uFPKXyNTGagw/JA4HZ9S756MH4mIdf zZwNutQyh8uWTpduRIGsBGnzPxOG2bHNYiY7WBpvzWf7a9eiQzMxElj42fGScr6D 3re144ZTzsqi8s21Y7hcFlw+meYQcC3UU369QwS0cvVNwLKX8yPJnFj/7O4kyAcT Jo3QoCIhUCVmEYyYYhRDj2RrhkSq4woiFebjoPrncZuQHaYpdoNv3RdkSxp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfOEFx/k8CoFq0/cZ//q2w1ob2z0wHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG87wOm27l9O054hpjz10tuxTHT9PeCA10vu 7pbq1WlOcrbht0IeGJgihsK/AiZQn/p8ZBKDzRcD2fZ6lndamQAx8wSezjp9AHOf fkD5R2ZaOU0JiWu68osQS1zyMdxxch5afnIfGd2lZcjIAF71IzQf/4J+k5xHVy9l Q2AY3YviCRnFhiUquJa31e7xv7UgwhR/GzAX9OQHPXgP4gaGT4RvtIT9dnymhfIW UW2cmaski6OUWaXUvUlnqRTbEpn9DHMcVVuR4nnRZ6oxC7OYarBEV7kiKJM11lRM rsXC53Jy5gsrnSKuxRq1oLaH2dtB3rsHfQT0+EuAcDeTp+6tMLE= -----END CERTIFICATE-----Generated at Fri Jul 24 06:45:36 2026 by rpki-client