$ rpki-client -vvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: P0BorOCgRAkCtajC+at/BQLW1eTovSA6SSsTzqPFkWQ= Subject key identifier: 78:0D:B4:6A:F3:EE:FE:81:79:E5:73:B0:D5:22:6F:00:33:CD:14:5D Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 23B039440AA2CFB7476BB781D752FA10A328A33F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:42:55 +0000 Manifest this update: Tue 12 May 2026 23:37:55 +0000 Manifest next update: Thu 14 May 2026 00:28:55 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 2: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: rjxO4Gnsctf20AlHr3p3v48rq23OIr0l9omUcvTIcs8=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b0:39:44:0a:a2:cf:b7:47:6b:b7:81:d7:52:fa:10:a3:28:a3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: May 12 23:37:55 2026 GMT Not After : May 14 00:28:55 2026 GMT Subject: CN=780DB46AF3EEFE8179E573B0D5226F0033CD145D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:9a:cd:36:b5:e4:43:87:26:a2:60:72:18: ed:f1:06:87:cd:0e:79:ac:18:01:23:99:dd:07:88: 4a:76:8e:38:82:5c:03:58:e4:a1:dc:30:ab:9d:60: 6a:a1:a3:f3:2c:72:89:87:73:7e:12:c1:b8:6a:a3: 4a:67:76:a4:41:60:f7:fd:e1:80:24:1b:cf:dc:35: b7:14:fb:15:8d:60:35:85:8e:45:6d:af:73:0b:48: 85:14:a7:3a:ca:00:7d:0e:0f:4a:b9:08:55:f7:0d: fd:5d:7d:24:f2:91:6c:73:70:26:b6:f8:c5:c0:7e: 5d:b3:58:f5:91:25:e8:29:8d:df:f5:91:be:6a:d0: 4e:cd:47:3e:e7:95:c0:3f:6b:c5:56:61:84:20:b9: 04:8c:e7:6a:c0:b4:35:c8:d4:a2:46:26:cf:1d:ef: 24:8c:53:0a:8c:be:25:a7:02:69:2b:95:d7:52:94: 97:15:e2:2b:91:4c:60:0a:c8:ae:13:5c:d5:3c:67: 4e:3a:f1:ba:61:11:79:db:b0:2c:a4:12:4f:9a:e7: 24:47:5b:b1:b7:c0:1e:19:e4:46:24:34:e8:73:74: 55:7e:2d:83:ee:50:1a:ea:b4:bb:11:d0:95:26:62: 01:f0:fd:8e:f2:90:ed:6a:96:06:e5:56:8f:a3:67: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0D:B4:6A:F3:EE:FE:81:79:E5:73:B0:D5:22:6F:00:33:CD:14:5D X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b8:ff:dc:33:b6:ff:97:26:7d:3c:f6:29:6c:a3:be:d2:78: 0c:ab:be:59:b5:4c:6a:bf:0a:99:3d:d6:9f:1d:65:b7:25:f1: 63:df:af:f0:80:dd:ad:fc:ce:7c:ec:5d:78:e6:27:2a:34:19: c3:64:63:fe:41:a5:bc:de:d2:d4:5a:91:40:bf:89:9f:11:a8: 0d:82:cb:44:c6:9f:d7:2a:a7:f3:c1:93:0f:88:cf:c8:3b:61: 33:a0:66:51:48:97:ce:0a:29:d8:9b:87:0e:04:ff:c6:c0:5a: d1:81:9e:03:6e:af:1c:dc:28:33:b5:b0:17:1b:06:55:da:f5: ed:35:48:e7:58:20:d4:d8:cf:58:93:af:d7:93:83:9e:a0:e1: 9b:f6:cc:eb:c0:32:e9:85:29:dc:c2:60:ce:b8:a7:37:4c:3d: 9e:57:8e:d1:10:3c:a1:e8:ad:a5:f1:61:78:e3:84:18:f0:1f: 55:dc:1c:21:91:ac:26:e7:7d:36:7c:f2:27:89:81:00:07:59: 64:ca:f2:cf:8c:df:f4:30:81:79:1f:2a:ed:d4:6a:d4:5a:01: ed:00:e7:f3:14:36:d6:e4:c8:61:2c:7a:22:f5:e9:2f:a1:95: 02:64:19:64:b5:8c:42:5c:78:c7:ec:a3:92:bb:46:16:7d:6f: d1:d6:80:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7A5RAqiz7dHa7eB11L6EKMooz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA1MTIyMzM3NTVaFw0yNjA1MTQwMDI4NTVaMDMxMTAvBgNV BAMTKDc4MERCNDZBRjNFRUZFODE3OUU1NzNCMEQ1MjI2RjAwMzNDRDE0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG05rNNrXkQ4cmomByGO3xBofN DnmsGAEjmd0HiEp2jjiCXANY5KHcMKudYGqho/MscomHc34Swbhqo0pndqRBYPf9 4YAkG8/cNbcU+xWNYDWFjkVtr3MLSIUUpzrKAH0OD0q5CFX3Df1dfSTykWxzcCa2 +MXAfl2zWPWRJegpjd/1kb5q0E7NRz7nlcA/a8VWYYQguQSM52rAtDXI1KJGJs8d 7ySMUwqMviWnAmkrlddSlJcV4iuRTGAKyK4TXNU8Z0468bphEXnbsCykEk+a5yRH W7G3wB4Z5EYkNOhzdFV+LYPuUBrqtLsR0JUmYgHw/Y7ykO1qlgblVo+jZ80dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeA20avPu/oF55XOw1SJvADPNFF0wHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKi4/9wztv+XJn089ilso77SeAyrvlm1TGq/ Cpk91p8dZbcl8WPfr/CA3a38znzsXXjmJyo0GcNkY/5Bpbze0tRakUC/iZ8RqA2C y0TGn9cqp/PBkw+Iz8g7YTOgZlFIl84KKdibhw4E/8bAWtGBngNurxzcKDO1sBcb BlXa9e01SOdYINTYz1iTr9eTg56g4Zv2zOvAMumFKdzCYM64pzdMPZ5XjtEQPKHo raXxYXjjhBjwH1XcHCGRrCbnfTZ88ieJgQAHWWTK8s+M3/QwgXkfKu3UatRaAe0A 5/MUNtbkyGEseiL16S+hlQJkGWS1jEJceMfso5K7RhZ9b9HWgG4= -----END CERTIFICATE-----Generated at Wed May 13 02:51:21 2026 by rpki-client