$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: ulclKUigAZOIMWvYSNEA8Vf5DS8s4G6qOdL+Fj5v3N0= Subject key identifier: 51:13:28:FF:DA:3D:C2:A5:47:7A:43:EB:8D:1C:86:58:4C:30:A0:85 Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 5B6129B677EFCB57BF15F9446F6A67B5D9263786 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 23:33:59 +0000 Manifest this update: Sat 26 Sep 2026 23:28:59 +0000 Manifest next update: Mon 28 Sep 2026 01:42:59 +0000 Files and hashes: 1: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: yZ64L2Es6Fo5h+cgU6taBqG2/6aMMNH8bGCqnC9Iym4=) 2: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 3: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) 4: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) 5: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:61:29:b6:77:ef:cb:57:bf:15:f9:44:6f:6a:67:b5:d9:26:37:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Sep 26 23:28:59 2026 GMT Not After : Sep 28 01:42:59 2026 GMT Subject: CN=511328FFDA3DC2A5477A43EB8D1C86584C30A085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:de:9c:c6:c6:fa:c8:cb:5f:b4:4b:d8:3d: 68:57:c9:6f:bb:ce:ee:c2:5c:00:b9:0a:ad:02:b6: ab:37:eb:dd:5e:df:79:d4:ce:b8:66:f9:33:08:62: b6:c2:94:1c:03:f3:db:1a:f1:92:2d:1f:47:90:de: 11:8e:71:9f:9e:a7:cb:50:fa:fa:9b:d0:b1:0a:d1: 15:e0:95:71:b8:fb:7a:e2:90:cd:78:f8:4d:ae:b0: 8c:7c:8e:bc:d4:b0:5c:6b:1e:dc:16:8f:44:b4:eb: 04:17:18:4f:e6:96:16:67:d8:44:d4:f9:a7:4f:18: 1e:fd:82:75:04:2f:9e:59:8f:1a:17:9f:b2:11:2e: 7b:59:ab:6f:dd:5e:43:4b:85:b9:55:aa:4c:1b:92: 25:09:04:a6:c4:3d:f8:f1:58:3f:1e:c5:6d:f7:bd: a4:17:58:18:54:57:0f:ff:59:30:09:aa:54:ff:fc: 72:21:ea:2a:ce:3d:0c:44:6b:4f:da:60:32:ab:44: 51:09:c7:8c:65:5c:13:d7:fc:78:58:a2:49:93:46: eb:27:61:cf:1e:1c:b1:de:4e:06:3a:b0:ad:01:38: 32:5f:4b:b1:3d:86:3c:97:52:58:02:02:0d:52:ce: 06:83:9b:82:7d:77:a6:22:91:11:2a:14:f2:20:9f: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:28:FF:DA:3D:C2:A5:47:7A:43:EB:8D:1C:86:58:4C:30:A0:85 X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:ce:1d:b1:40:ea:e6:33:66:69:23:09:6a:1b:c7:e9:ad:e1: 27:3f:2f:ec:12:bd:ff:eb:3e:98:cb:6a:ef:37:fb:a9:78:f1: 28:e2:cf:95:b6:f6:65:76:6b:57:d0:54:b6:ac:6a:31:57:33: be:28:51:06:2b:b7:df:47:5b:29:c8:51:f0:9b:7e:bf:7f:ae: c6:bf:a8:90:78:63:66:08:6c:85:91:98:cf:b3:9f:b5:c9:c4: e4:32:8e:88:09:d5:03:39:bf:70:5c:b2:ea:a3:d9:dc:d9:fb: b5:92:75:a0:7d:28:20:8b:4e:15:94:ef:fa:68:f8:6f:ba:f3: 08:9d:b4:42:65:b5:6e:75:ac:df:6c:69:56:51:61:11:ae:ae: d3:f5:3a:b8:a4:0f:66:05:e9:ce:6b:c5:fe:fc:6b:75:bf:94: fe:21:bd:78:72:86:2a:e5:d6:77:d9:d5:2f:11:d9:8a:01:4d: b2:ef:83:be:d4:e5:7f:84:2d:91:db:7f:88:e3:6b:50:29:69: a9:3f:ee:65:e0:7b:e0:22:48:c3:d1:75:f3:64:50:11:3d:2d: a6:6c:7a:b4:79:81:9c:60:5b:fa:7a:86:20:4c:4f:cb:79:0d: 7d:1c:59:31:bd:0e:19:ff:08:78:8a:40:41:78:68:1c:87:55: d6:67:5d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2Eptnfvy1e/FflEb2pntdkmN4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjA5MjYyMzI4NTlaFw0yNjA5MjgwMTQyNTlaMDMxMTAvBgNV BAMTKDUxMTMyOEZGREEzREMyQTU0NzdBNDNFQjhEMUM4NjU4NEMzMEEwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbN6cxsb6yMtftEvYPWhXyW+7 zu7CXAC5Cq0Ctqs3691e33nUzrhm+TMIYrbClBwD89sa8ZItH0eQ3hGOcZ+ep8tQ +vqb0LEK0RXglXG4+3rikM14+E2usIx8jrzUsFxrHtwWj0S06wQXGE/mlhZn2ETU +adPGB79gnUEL55ZjxoXn7IRLntZq2/dXkNLhblVqkwbkiUJBKbEPfjxWD8exW33 vaQXWBhUVw//WTAJqlT//HIh6irOPQxEa0/aYDKrRFEJx4xlXBPX/HhYokmTRusn Yc8eHLHeTgY6sK0BODJfS7E9hjyXUlgCAg1SzgaDm4J9d6YikREqFPIgn475AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURMo/9o9wqVHekPrjRyGWEwwoIUwHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMvOHbFA6uYzZmkjCWobx+mt4Sc/L+wSvf/r PpjLau83+6l48Sjiz5W29mV2a1fQVLasajFXM74oUQYrt99HWynIUfCbfr9/rsa/ qJB4Y2YIbIWRmM+zn7XJxOQyjogJ1QM5v3Bcsuqj2dzZ+7WSdaB9KCCLThWU7/po +G+68widtEJltW51rN9saVZRYRGurtP1OrikD2YF6c5rxf78a3W/lP4hvXhyhirl 1nfZ1S8R2YoBTbLvg77U5X+ELZHbf4jja1Apaak/7mXge+AiSMPRdfNkUBE9LaZs erR5gZxgW/p6hiBMT8t5DX0cWTG9Dhn/CHiKQEF4aByHVdZnXVM= -----END CERTIFICATE-----Generated at Sun Sep 27 03:01:41 2026 by rpki-client