$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: 5PvOH+ub+mZ/CGMJ2Bd6r7k0FImfEhS6GlI6seFmWRw= Subject key identifier: 0F:8E:91:14:7D:2A:A6:2E:FC:6E:40:7D:60:46:E8:CE:1B:D9:9D:89 Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 4FAFBA2FBC611D7FF32706925C62FB15EE642FFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 05:16:40 +0000 Manifest this update: Sat 26 Sep 2026 05:11:40 +0000 Manifest next update: Sun 27 Sep 2026 07:46:40 +0000 Files and hashes: 1: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 2: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: hMDGYDqo5UKd8Q9wISTu8S4FtaH8YyzjR7hRszSoKIE=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 4: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 5: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 07:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:af:ba:2f:bc:61:1d:7f:f3:27:06:92:5c:62:fb:15:ee:64:2f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Sep 26 05:11:40 2026 GMT Not After : Sep 27 07:46:40 2026 GMT Subject: CN=0F8E91147D2AA62EFC6E407D6046E8CE1BD99D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:76:00:53:59:1f:0a:6b:b7:94:c9:5e:3a: 0f:c0:12:49:90:ea:3c:9a:e7:2d:63:7d:90:f4:d8: ae:eb:fc:3b:f4:81:75:bd:73:56:11:0c:4c:ff:4b: 9a:e6:8b:1f:3f:55:8b:93:3d:7e:87:31:61:c6:e9: 17:3f:d0:31:c9:7f:51:70:9f:35:4a:f7:de:38:5b: a3:a4:f1:d4:d3:3b:8c:7e:05:45:1a:75:73:9b:7f: ed:2c:42:42:b5:1b:fd:f1:8c:e8:4a:fb:f1:c9:d9: db:a6:8b:2d:2e:70:47:94:0a:03:24:c4:24:13:b6: 9d:8c:bb:5f:50:98:bb:27:4e:d1:23:91:82:b3:ad: c5:b4:90:4b:11:11:37:8f:22:88:5e:b8:6b:d9:51: 0b:2a:98:86:5c:54:0a:57:3c:df:c2:f4:36:b7:00: 95:63:f4:0c:b2:5f:e3:8b:b9:f0:39:56:18:cc:d9: 06:b8:44:59:23:c4:d8:ba:98:64:4b:a1:b7:c4:b9: 53:12:60:c7:99:86:d9:b6:93:4f:39:c6:ba:61:bd: 38:74:da:18:d1:f7:31:1e:dd:e1:97:b3:c4:c3:6f: 26:b8:cd:e4:9a:d5:27:51:33:db:69:f2:79:40:a6: 30:be:b7:44:b3:7b:88:39:3c:23:5f:1a:d3:43:12: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:91:14:7D:2A:A6:2E:FC:6E:40:7D:60:46:E8:CE:1B:D9:9D:89 X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:39:a2:c1:f1:ac:d2:72:8e:00:4b:2c:06:a8:00:92:43:ef: 65:2b:52:7c:28:de:c2:45:69:8f:ce:32:a4:a2:38:6b:28:2d: 91:d8:d0:68:5f:51:8e:4d:86:5e:8d:e8:92:f0:36:83:8d:e6: 4b:2f:d2:e3:79:fe:f2:cf:86:6e:8c:00:e0:79:f1:c0:ae:bb: a4:5e:0f:e4:9f:86:bf:08:b9:3e:75:a4:62:6e:20:64:5c:62: af:ce:e8:ab:83:31:c5:cc:18:d3:55:d5:c3:58:dc:38:ef:e5: a5:71:ad:ee:53:84:1d:a8:4d:78:d4:ae:96:d4:2d:fa:d8:ab: 06:13:1b:0a:6f:8a:bf:dc:71:3c:bc:d0:f7:f2:ef:67:3a:71: a6:34:03:02:b4:d0:e6:23:82:02:b2:d3:9e:14:f4:7f:67:2b: a8:3a:5d:12:c8:a8:43:5b:94:e9:d1:0a:7b:d5:21:8f:1a:e6: 7b:3a:5d:80:83:92:5e:16:85:2a:76:bc:5c:bc:d6:5b:3a:4d: 90:d8:61:b4:18:76:da:6e:b0:cd:30:18:ca:17:33:15:27:48: 80:89:10:7f:13:c2:df:cc:7f:43:cc:fc:65:da:c5:e0:1d:40: 06:b1:6d:ca:bc:8b:8c:42:12:8c:92:72:18:43:b4:ca:da:dd: 02:dc:37:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6+6L7xhHX/zJwaSXGL7Fe5kL/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA5MjYwNTExNDBaFw0yNjA5MjcwNzQ2NDBaMDMxMTAvBgNV BAMTKDBGOEU5MTE0N0QyQUE2MkVGQzZFNDA3RDYwNDZFOENFMUJEOTlEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2X3YAU1kfCmu3lMleOg/AEkmQ 6jya5y1jfZD02K7r/Dv0gXW9c1YRDEz/S5rmix8/VYuTPX6HMWHG6Rc/0DHJf1Fw nzVK9944W6Ok8dTTO4x+BUUadXObf+0sQkK1G/3xjOhK+/HJ2dumiy0ucEeUCgMk xCQTtp2Mu19QmLsnTtEjkYKzrcW0kEsRETePIoheuGvZUQsqmIZcVApXPN/C9Da3 AJVj9AyyX+OLufA5VhjM2Qa4RFkjxNi6mGRLobfEuVMSYMeZhtm2k085xrphvTh0 2hjR9zEe3eGXs8TDbya4zeSa1SdRM9tp8nlApjC+t0Sze4g5PCNfGtNDEj7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD46RFH0qpi78bkB9YEbozhvZnYkwHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk5osHxrNJyjgBLLAaoAJJD72UrUnwo3sJF aY/OMqSiOGsoLZHY0GhfUY5Nhl6N6JLwNoON5ksv0uN5/vLPhm6MAOB58cCuu6Re D+Sfhr8IuT51pGJuIGRcYq/O6KuDMcXMGNNV1cNY3Djv5aVxre5ThB2oTXjUrpbU LfrYqwYTGwpvir/ccTy80Pfy72c6caY0AwK00OYjggKy054U9H9nK6g6XRLIqENb lOnRCnvVIY8a5ns6XYCDkl4WhSp2vFy81ls6TZDYYbQYdtpusM0wGMoXMxUnSICJ EH8Twt/Mf0PM/GXaxeAdQAaxbcq8i4xCEoySchhDtMra3QLcNzg= -----END CERTIFICATE-----Generated at Sat Sep 26 14:58:49 2026 by rpki-client