$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: +8gPzHcodEP9jGBBtpBvWoSvD76TWE6oCPNJbtuiljw= Subject key identifier: 3B:29:3F:05:16:13:4E:9D:0B:EA:58:8D:51:8D:4D:92:5F:A8:E0:F4 Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 4D5959C846C29C6CA0304C307D117E522D23275F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:54:38 +0000 Manifest this update: Thu 23 Jul 2026 11:49:38 +0000 Manifest next update: Fri 24 Jul 2026 15:53:38 +0000 Files and hashes: 1: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) 2: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: DN0byAM5D+l5Q5dVC+GrnZDySeBkH+0DGMSZuOtoHbI=) 3: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 4: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 5: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:59:59:c8:46:c2:9c:6c:a0:30:4c:30:7d:11:7e:52:2d:23:27:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: Jul 23 11:49:38 2026 GMT Not After : Jul 24 15:53:38 2026 GMT Subject: CN=3B293F0516134E9D0BEA588D518D4D925FA8E0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:ed:04:5e:9c:90:8f:5b:46:61:52:e8:ad: a8:c1:d9:50:28:8a:96:ea:8d:f5:e7:4b:05:35:13: 1c:f7:31:4a:d4:aa:e2:fb:3f:38:58:22:6f:cb:ff: 92:ec:3b:01:3d:b6:8a:bc:3a:cb:19:6b:86:77:c5: e4:97:ba:c4:51:e0:32:2e:06:f4:a8:59:bc:ba:68: ce:e7:70:a1:51:10:59:f4:00:0f:f6:2f:20:47:93: 71:38:3c:52:a9:2e:c3:38:e9:58:4f:7d:c8:ed:df: 98:08:70:52:9b:8a:52:34:d8:39:17:2f:d9:39:4c: 4b:f9:ca:72:7f:60:c2:b8:e2:5b:ec:de:e1:ae:92: bb:8f:fe:91:88:6d:a5:e7:89:bb:cc:e1:fe:98:e0: 8c:99:ed:a2:08:6f:f5:1c:d1:2c:f3:96:38:34:24: de:27:02:9c:23:dd:fc:7c:2f:d1:10:fa:ca:51:40: 6c:24:39:e9:6d:30:e3:42:22:c5:eb:b7:07:e7:42: b8:eb:34:8b:02:53:e4:82:08:bc:2c:f4:d5:0b:1d: 25:58:ce:84:04:de:8e:1e:70:28:96:b1:19:20:32: dc:07:89:72:16:b3:ed:f2:55:07:8c:d3:e0:94:0a: 19:f0:c7:99:61:f8:e8:bb:69:99:cc:37:69:55:f8: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:29:3F:05:16:13:4E:9D:0B:EA:58:8D:51:8D:4D:92:5F:A8:E0:F4 X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b4:3b:36:3a:ec:6d:6f:ac:cb:1f:da:8f:0a:7e:78:0d:13: 2d:89:96:dc:b0:fe:6c:cb:1b:8f:94:8e:13:dc:49:f6:b0:88: 46:55:22:51:6d:8c:d7:b4:0c:59:73:24:0a:d2:4c:b9:7e:87: de:48:19:a6:52:82:77:88:80:32:36:50:af:2b:31:3d:ad:70: 0c:95:4e:90:9f:3d:e1:76:65:18:18:36:84:d2:10:f5:1f:29: 1e:ca:44:22:73:b5:b0:0d:19:a1:86:38:85:0e:ff:62:63:26: 4b:0f:18:ae:94:e1:31:28:b9:5b:82:2e:a8:d1:87:6f:ac:0b: 41:63:db:2a:9e:44:f2:c3:ce:a1:68:83:75:9f:46:94:aa:76: 64:4b:64:8f:22:b4:a7:16:b0:5a:db:09:c5:ec:00:4b:c3:49: fa:57:ee:f7:1a:40:6d:ec:3c:7f:97:7a:d5:d8:b8:0f:24:db: 37:60:c6:62:1e:13:3b:c0:ac:ee:2b:06:61:32:ee:0c:13:f6: f9:d8:97:fb:97:07:4d:bb:fa:b9:bc:51:2a:46:8c:99:44:51: 2f:26:5b:b9:aa:b1:7c:7b:00:9e:79:0f:e1:ff:7b:9d:71:86: 47:ec:c1:e9:75:11:45:6f:f4:f4:d8:df:37:88:b7:db:5c:20: 2a:51:79:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVlZyEbCnGygMEwwfRF+Ui0jJ18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjA3MjMxMTQ5MzhaFw0yNjA3MjQxNTUzMzhaMDMxMTAvBgNV BAMTKDNCMjkzRjA1MTYxMzRFOUQwQkVBNTg4RDUxOEQ0RDkyNUZBOEUwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08+0EXpyQj1tGYVLorajB2VAo ipbqjfXnSwU1Exz3MUrUquL7PzhYIm/L/5LsOwE9toq8OssZa4Z3xeSXusRR4DIu BvSoWby6aM7ncKFREFn0AA/2LyBHk3E4PFKpLsM46VhPfcjt35gIcFKbilI02DkX L9k5TEv5ynJ/YMK44lvs3uGukruP/pGIbaXnibvM4f6Y4IyZ7aIIb/Uc0Szzljg0 JN4nApwj3fx8L9EQ+spRQGwkOeltMONCIsXrtwfnQrjrNIsCU+SCCLws9NULHSVY zoQE3o4ecCiWsRkgMtwHiXIWs+3yVQeM0+CUChnwx5lh+Oi7aZnMN2lV+MWXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyk/BRYTTp0L6liNUY1Nkl+o4PQwHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC60OzY67G1vrMsf2o8KfngNEy2Jltyw/mzL G4+UjhPcSfawiEZVIlFtjNe0DFlzJArSTLl+h95IGaZSgneIgDI2UK8rMT2tcAyV TpCfPeF2ZRgYNoTSEPUfKR7KRCJztbANGaGGOIUO/2JjJksPGK6U4TEouVuCLqjR h2+sC0Fj2yqeRPLDzqFog3WfRpSqdmRLZI8itKcWsFrbCcXsAEvDSfpX7vcaQG3s PH+XetXYuA8k2zdgxmIeEzvArO4rBmEy7gwT9vnYl/uXB027+rm8USpGjJlEUS8m W7mqsXx7AJ55D+H/e51xhkfswel1EUVv9PTY3zeIt9tcICpReRA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:13 2026 by rpki-client