$ rpki-client -vvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: OfvOFkP7MTa6rdDqMSEd4hkZz2LvGPIhFlNSEGwBHbo= Subject key identifier: 8B:D8:65:1B:EC:C1:42:1E:20:46:E1:47:C5:60:42:F8:A9:42:B5:02 Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 142D931C8028BB37A1D75AE8CF01CB17619FAFCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:16:13 +0000 Manifest this update: Thu 23 Jul 2026 17:11:13 +0000 Manifest next update: Fri 24 Jul 2026 19:12:13 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 2: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: mVEqCTn96zaEI5Q6CPxROsFQvIjJz488ktviU9/PNGo=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2d:93:1c:80:28:bb:37:a1:d7:5a:e8:cf:01:cb:17:61:9f:af:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Jul 23 17:11:13 2026 GMT Not After : Jul 24 19:12:13 2026 GMT Subject: CN=8BD8651BECC1421E2046E147C56042F8A942B502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:f3:e9:ae:ef:07:fc:a2:1c:23:17:d5:97: bb:f5:65:49:a7:76:06:60:ec:44:7c:c7:e9:43:73: 6f:9a:0b:ba:84:a6:2e:da:33:f4:3c:db:dc:83:6e: c6:13:78:21:b2:00:81:4e:0b:29:e6:a0:3a:dc:44: 04:0b:25:d0:54:b7:36:4a:a1:81:30:83:2b:ae:5d: b2:bb:cc:3b:53:8e:55:b4:b3:86:74:8e:7e:0b:a4: 43:76:49:6c:93:66:df:ed:fb:35:7e:4c:26:2f:56: 37:8a:41:81:e9:0f:88:4a:a8:86:69:99:0e:51:0a: 3c:2a:43:09:9b:6f:ed:31:f4:8e:6e:87:ae:f4:e2: 3d:dc:1b:88:1c:88:3e:77:7c:0a:ec:5c:2c:16:8f: 01:49:38:e3:6c:c0:cb:d8:0b:1c:50:14:9c:fa:88: 1c:8f:c9:ae:03:2e:d4:7d:c8:78:fa:ba:af:9a:a6: 45:12:c0:94:63:db:67:e5:ea:ca:0b:8d:96:62:3a: 30:26:dd:ea:07:bc:48:60:47:76:dc:a3:a7:09:d2: 54:a0:17:4a:fd:b1:58:50:c1:8f:b3:a8:e1:bb:9b: 9c:e8:4a:3b:03:ef:28:10:37:b9:b8:e5:7c:85:6c: 14:79:4a:d8:6b:9d:57:f7:63:77:6b:d7:08:59:cd: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D8:65:1B:EC:C1:42:1E:20:46:E1:47:C5:60:42:F8:A9:42:B5:02 X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:00:2f:c1:4d:0e:ec:76:a5:9e:19:cb:17:c5:c1:2a:60:fe: 09:7e:45:0f:8c:99:fd:ae:b0:d6:1c:48:d0:bd:39:ed:d0:66: 4f:ef:67:6f:25:04:58:6e:48:2f:42:c4:eb:f8:f7:f5:74:4d: 6a:ad:de:17:bb:4e:59:df:fa:0e:37:b5:3a:22:c7:b7:0b:4b: c1:18:45:ba:ab:6d:6d:d5:2d:d1:30:d4:4b:bb:9e:31:a8:c7: 2c:c7:a6:75:1b:0e:3a:ac:44:0e:79:c3:0d:29:7b:cf:5c:8e: d9:58:3c:89:99:72:08:c4:c5:d5:00:26:69:ea:c4:f2:a3:49: e8:29:fe:a7:14:81:fb:bd:0e:60:44:c6:42:48:f5:e9:97:b4: 0b:2d:4f:da:44:13:88:c9:2f:d8:45:40:f9:e9:d3:c0:92:4f: 17:4b:53:ce:9b:d3:92:d6:ed:d2:98:08:38:bc:b2:f1:1f:60: 16:1b:73:b7:a4:7b:04:fd:3d:00:eb:0c:2f:b8:9c:b7:8b:3e: 4a:d6:db:90:f9:77:b2:49:98:cd:52:be:ad:90:f8:3e:7b:b4: ba:99:ac:21:dd:f4:8f:f3:63:a2:33:5f:96:80:de:79:c8:b9: 02:a5:dd:84:b7:a1:49:08:ae:72:64:26:9f:ef:73:b9:fc:7f: 94:74:af:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFC2THIAouzeh11rozwHLF2Gfr88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA3MjMxNzExMTNaFw0yNjA3MjQxOTEyMTNaMDMxMTAvBgNV BAMTKDhCRDg2NTFCRUNDMTQyMUUyMDQ2RTE0N0M1NjA0MkY4QTk0MkI1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45/Ppru8H/KIcIxfVl7v1ZUmn dgZg7ER8x+lDc2+aC7qEpi7aM/Q829yDbsYTeCGyAIFOCynmoDrcRAQLJdBUtzZK oYEwgyuuXbK7zDtTjlW0s4Z0jn4LpEN2SWyTZt/t+zV+TCYvVjeKQYHpD4hKqIZp mQ5RCjwqQwmbb+0x9I5uh6704j3cG4gciD53fArsXCwWjwFJOONswMvYCxxQFJz6 iByPya4DLtR9yHj6uq+apkUSwJRj22fl6soLjZZiOjAm3eoHvEhgR3bco6cJ0lSg F0r9sVhQwY+zqOG7m5zoSjsD7ygQN7m45XyFbBR5SthrnVf3Y3dr1whZzboDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9hlG+zBQh4gRuFHxWBC+KlCtQIwHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEAL8FNDux2pZ4ZyxfFwSpg/gl+RQ+Mmf2u sNYcSNC9Oe3QZk/vZ28lBFhuSC9CxOv49/V0TWqt3he7Tlnf+g43tToix7cLS8EY RbqrbW3VLdEw1Eu7njGoxyzHpnUbDjqsRA55ww0pe89cjtlYPImZcgjExdUAJmnq xPKjSegp/qcUgfu9DmBExkJI9emXtAstT9pEE4jJL9hFQPnp08CSTxdLU86b05LW 7dKYCDi8svEfYBYbc7ekewT9PQDrDC+4nLeLPkrW25D5d7JJmM1Svq2Q+D57tLqZ rCHd9I/zY6IzX5aA3nnIuQKl3YS3oUkIrnJkJp/vc7n8f5R0r5g= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:19 2026 by rpki-client