$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: 4Hd3r9CaoUvtph33G655yHhwKV4HK3dxzvSxPMigW6s= Subject key identifier: EB:37:87:25:D1:76:63:E7:08:8B:0A:BF:8F:F1:F0:13:21:D0:01:AC Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 02C7D732838F07612ECD73AE00ED958762B8F9BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:08:19 +0000 Manifest this update: Thu 24 Sep 2026 06:03:19 +0000 Manifest next update: Fri 25 Sep 2026 06:50:19 +0000 Files and hashes: 1: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 2: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 3: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 4: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: 8uXY+A/TKwpqaMk+xaUUlLSAcDPazr0KdcOQeZGrW+c=) 5: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) 6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c7:d7:32:83:8f:07:61:2e:cd:73:ae:00:ed:95:87:62:b8:f9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: Sep 24 06:03:19 2026 GMT Not After : Sep 25 06:50:19 2026 GMT Subject: CN=EB378725D17663E7088B0ABF8FF1F01321D001AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:6f:a6:85:c4:1e:be:5b:e7:64:a1:bc:c2: e4:79:de:9d:d5:7a:45:f8:ef:67:9e:71:f8:ba:8f: 18:45:d7:28:3b:7f:82:df:e5:f7:b6:c0:40:3f:9b: e0:3b:01:a2:27:30:08:59:9d:30:8d:a4:0d:34:4b: 39:cf:99:08:be:89:af:4e:33:73:f6:07:d2:85:6a: cb:95:83:52:4f:2c:81:2a:3c:be:8f:36:6a:9a:47: 3f:f2:7b:e1:85:c9:87:1f:ac:cc:c7:e7:82:ec:c4: 46:09:e0:32:55:35:78:4c:58:bc:42:77:ec:b9:f7: c6:e8:db:25:c8:fb:c8:cc:65:80:92:5d:19:a4:6e: e8:9e:36:0f:db:b4:ac:37:26:d6:56:48:e0:13:63: 39:aa:7d:ca:64:b9:0d:23:7d:df:26:05:6f:71:99: d9:39:3e:d2:e9:91:5b:b7:e6:57:5d:c5:7c:a6:7b: bb:d6:77:95:2c:18:5b:27:07:bd:30:f0:a4:71:ac: 2c:a2:e0:46:71:cb:b8:56:28:33:ed:99:ac:e7:54: e3:13:b8:c4:e1:bf:d1:19:66:35:70:aa:04:98:a5: 88:3b:cb:c6:be:d1:16:49:31:ed:be:db:c5:c9:32: 1e:f2:9e:ff:19:58:69:38:54:b6:e3:ce:35:b1:6e: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:87:25:D1:76:63:E7:08:8B:0A:BF:8F:F1:F0:13:21:D0:01:AC X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:65:a6:db:7b:b6:77:57:64:9f:fc:b5:8b:da:d5:23:de:e7: 51:65:d1:3c:ba:5c:8c:1a:25:de:16:62:ef:f7:12:6b:7b:3e: 06:fd:8b:18:7f:2b:e6:6b:32:05:8c:d1:e9:fa:0a:aa:f5:f5: 08:b0:f5:af:ea:fd:12:3f:a3:b9:52:a4:58:58:d1:aa:c8:7d: e1:d5:74:f2:b1:4e:1b:d2:93:db:5d:ab:94:1f:3f:4b:a7:46: e6:bb:f6:99:b8:8f:ad:5e:88:8c:f8:62:9d:ad:23:8c:ef:55: f2:7f:95:51:18:11:31:f0:e0:8d:1e:d3:d5:a7:6a:53:9b:77: ef:35:f3:06:68:78:28:11:8b:e5:17:d1:af:05:5e:4e:d0:27: fc:70:39:90:12:9f:55:98:dd:61:09:01:fd:b8:fd:b8:6e:56: 86:f5:cf:d1:06:65:1b:0d:12:9f:ae:5f:b7:33:86:42:3c:dc: 8a:c0:fb:30:92:aa:6c:d7:c2:ad:37:27:ab:83:c4:0b:fe:b4: a3:71:d5:cd:c6:a3:6d:3f:9e:e9:dc:3b:af:fb:f8:69:2b:7d: 6b:14:36:5a:ab:0c:68:32:ec:f6:ae:69:75:9c:99:c3:2d:9c: 34:b4:81:f7:92:30:a6:63:82:86:4b:32:77:65:63:30:cc:08: 40:53:b4:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAsfXMoOPB2EuzXOuAO2Vh2K4+b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjA5MjQwNjAzMTlaFw0yNjA5MjUwNjUwMTlaMDMxMTAvBgNV BAMTKEVCMzc4NzI1RDE3NjYzRTcwODhCMEFCRjhGRjFGMDEzMjFEMDAxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Fm+mhcQevlvnZKG8wuR53p3V ekX472eecfi6jxhF1yg7f4Lf5fe2wEA/m+A7AaInMAhZnTCNpA00SznPmQi+ia9O M3P2B9KFasuVg1JPLIEqPL6PNmqaRz/ye+GFyYcfrMzH54LsxEYJ4DJVNXhMWLxC d+y598bo2yXI+8jMZYCSXRmkbuieNg/btKw3JtZWSOATYzmqfcpkuQ0jfd8mBW9x mdk5PtLpkVu35lddxXyme7vWd5UsGFsnB70w8KRxrCyi4EZxy7hWKDPtmaznVOMT uMThv9EZZjVwqgSYpYg7y8a+0RZJMe2+28XJMh7ynv8ZWGk4VLbjzjWxbgTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6zeHJdF2Y+cIiwq/j/HwEyHQAawwHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFlptt7tndXZJ/8tYva1SPe51Fl0Ty6XIwa Jd4WYu/3Emt7Pgb9ixh/K+ZrMgWM0en6Cqr19Qiw9a/q/RI/o7lSpFhY0arIfeHV dPKxThvSk9tdq5QfP0unRua79pm4j61eiIz4Yp2tI4zvVfJ/lVEYETHw4I0e09Wn alObd+818wZoeCgRi+UX0a8FXk7QJ/xwOZASn1WY3WEJAf24/bhuVob1z9EGZRsN Ep+uX7czhkI83IrA+zCSqmzXwq03J6uDxAv+tKNx1c3Go20/nuncO6/7+GkrfWsU NlqrDGgy7PauaXWcmcMtnDS0gfeSMKZjgoZLMndlYzDMCEBTtNY= -----END CERTIFICATE-----Generated at Thu Sep 24 13:13:58 2026 by rpki-client