$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: 3d0EK0KCMIArIMfknfC450vXvXwouiqFOzI5rODhuAw= Subject key identifier: 49:51:8B:E7:FD:BB:B1:F8:94:A7:88:35:B2:92:25:E5:E9:CC:7A:11 Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 5D4D5A8A6FA4F5183DB0EE5FF4209A773DC8B31C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:02:08 +0000 Manifest this update: Thu 24 Sep 2026 00:57:08 +0000 Manifest next update: Fri 25 Sep 2026 04:27:08 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 2: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: +vyX9RSn1vaO/U8yZAUTdRiiU5eyeENviO4lNgluwyc=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4d:5a:8a:6f:a4:f5:18:3d:b0:ee:5f:f4:20:9a:77:3d:c8:b3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Sep 24 00:57:08 2026 GMT Not After : Sep 25 04:27:08 2026 GMT Subject: CN=49518BE7FDBBB1F894A78835B29225E5E9CC7A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:dd:76:5b:c0:37:c7:77:99:a1:a3:f9:9c: 27:7a:c1:a9:87:62:a1:79:ea:37:81:94:bd:11:66: ef:c9:98:65:89:bd:5a:dc:66:2a:2a:a5:52:77:08: 78:b5:ef:20:5e:97:dd:b2:e2:be:1f:49:42:65:3a: 8a:44:dd:0a:d9:15:17:27:42:6a:cd:7c:3a:5c:9e: 7b:f9:52:d6:4a:32:24:ea:af:07:75:38:9e:d2:7c: 43:9d:6a:84:65:06:d5:66:ea:8d:ac:43:37:2f:82: 18:d7:9d:33:80:64:5b:1b:d0:8e:08:76:81:e2:b3: ea:89:0f:0e:57:24:f1:31:e6:b6:54:bc:ac:6a:d0: 80:45:f0:43:94:c9:96:2a:9c:61:c2:88:e7:31:40: b2:7c:87:fb:b1:6e:48:6c:08:72:f8:bc:df:a9:31: 8e:53:b6:8a:3b:98:c6:b0:28:9b:de:d6:f4:5f:6d: 84:e1:d1:a9:fb:9a:31:d4:7e:41:3f:50:1a:dd:10: 4f:12:15:4f:33:0f:eb:a0:e0:6d:b2:b1:71:d6:be: 15:a6:0d:d5:f1:ce:96:d4:30:4f:7f:1f:a6:4d:c1: fe:5a:f2:e1:26:4b:5b:50:60:64:98:bd:ee:83:59: 31:81:05:ff:03:76:21:27:12:24:91:93:91:61:95: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:8B:E7:FD:BB:B1:F8:94:A7:88:35:B2:92:25:E5:E9:CC:7A:11 X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:69:42:a5:27:46:a5:03:a0:dd:33:3b:00:3d:f1:1f:3a: 5c:76:de:8b:98:e1:59:33:66:2f:fb:6d:34:b9:d5:42:7f:69: a5:8a:57:94:4c:7d:7d:bf:43:0f:36:8b:16:00:09:16:ba:1e: de:4d:b4:bf:d5:e9:90:1e:04:8f:a4:e3:7e:b2:2f:00:f7:a7: 7c:84:96:0f:14:6d:36:a9:6c:34:f2:33:e4:7a:20:fc:53:89: 28:43:90:4e:25:c7:4e:62:bb:62:97:43:bf:e6:bd:70:5a:6e: ae:15:f9:db:07:06:df:04:68:84:33:2f:2a:22:c5:5d:ff:5a: f4:3c:dd:f4:09:7a:58:ff:83:f0:46:70:84:dc:e8:99:07:03: 49:b2:f7:8b:a7:1b:8f:cc:91:8c:b5:2f:a7:dc:0e:9f:2c:46: 30:a8:42:b0:45:2d:5e:f8:a5:f7:fa:0b:df:0f:53:0e:32:bc: 3c:0b:d2:65:1b:c2:5c:07:1b:52:58:75:d6:c9:a9:03:67:96: 98:17:5d:33:5d:2a:ff:3a:30:c3:59:a5:31:6e:72:1b:2b:18: 95:54:fd:63:6e:de:7f:f2:a0:14:fa:fb:51:b8:9a:57:fc:65: 7e:4c:c8:2e:52:43:f3:2a:7a:e9:5c:eb:c9:b3:9b:d8:f2:c0: 71:4c:51:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXU1aim+k9Rg9sO5f9CCadz3IsxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA5MjQwMDU3MDhaFw0yNjA5MjUwNDI3MDhaMDMxMTAvBgNV BAMTKDQ5NTE4QkU3RkRCQkIxRjg5NEE3ODgzNUIyOTIyNUU1RTlDQzdBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UN12W8A3x3eZoaP5nCd6wamH YqF56jeBlL0RZu/JmGWJvVrcZioqpVJ3CHi17yBel92y4r4fSUJlOopE3QrZFRcn QmrNfDpcnnv5UtZKMiTqrwd1OJ7SfEOdaoRlBtVm6o2sQzcvghjXnTOAZFsb0I4I doHis+qJDw5XJPEx5rZUvKxq0IBF8EOUyZYqnGHCiOcxQLJ8h/uxbkhsCHL4vN+p MY5Ttoo7mMawKJve1vRfbYTh0an7mjHUfkE/UBrdEE8SFU8zD+ug4G2ysXHWvhWm DdXxzpbUME9/H6ZNwf5a8uEmS1tQYGSYve6DWTGBBf8DdiEnEiSRk5FhlfwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVGL5/27sfiUp4g1spIl5enMehEwHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbgaUKlJ0alA6DdMzsAPfEfOlx23ouY4Vkz Zi/7bTS51UJ/aaWKV5RMfX2/Qw82ixYACRa6Ht5NtL/V6ZAeBI+k436yLwD3p3yE lg8UbTapbDTyM+R6IPxTiShDkE4lx05iu2KXQ7/mvXBabq4V+dsHBt8EaIQzLyoi xV3/WvQ83fQJelj/g/BGcITc6JkHA0my94unG4/MkYy1L6fcDp8sRjCoQrBFLV74 pff6C98PUw4yvDwL0mUbwlwHG1JYddbJqQNnlpgXXTNdKv86MMNZpTFuchsrGJVU /WNu3n/yoBT6+1G4mlf8ZX5MyC5SQ/Mqeulc68mzm9jywHFMUTE= -----END CERTIFICATE-----Generated at Thu Sep 24 04:33:54 2026 by rpki-client