$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: NSKHPU+lRgDrNG2Cp0dCH1wOrFxa2Ad6AJ6aX60h5sk= Subject key identifier: CA:C8:DF:7D:20:98:30:B5:CE:F0:6A:08:05:69:1B:FC:F4:BF:0A:42 Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 48839626BEC2A9552FB34222314B7C6D350309D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:42:41 +0000 Manifest this update: Fri 24 Jul 2026 02:37:41 +0000 Manifest next update: Sat 25 Jul 2026 03:44:41 +0000 Files and hashes: 1: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 2: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: kzHVMcxAuoHg8OiioTfFq2NflEeZUYTinhXPSfBN33Q=) 3: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 4: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) 5: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:83:96:26:be:c2:a9:55:2f:b3:42:22:31:4b:7c:6d:35:03:09:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Jul 24 02:37:41 2026 GMT Not After : Jul 25 03:44:41 2026 GMT Subject: CN=CAC8DF7D209830B5CEF06A0805691BFCF4BF0A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:de:77:36:d6:5b:5d:de:56:08:8a:07:2a: a2:96:65:a5:fd:4a:e9:39:2b:fb:99:ed:6f:8b:6c: d0:21:c4:90:d9:03:3d:8e:cc:8b:85:24:64:29:62: b1:41:4c:a2:94:26:86:62:90:53:d4:18:51:d5:f9: 6f:5a:77:7f:42:2b:f2:91:42:5c:fa:2e:c4:c1:33: 8c:0d:7b:c0:03:2e:eb:3d:73:f7:53:00:43:66:1e: 8c:a1:94:56:88:6a:e6:92:13:a5:8c:82:0c:6e:b2: 08:ab:9b:b3:8c:dc:93:28:f9:e8:67:b7:8c:f4:fc: 70:73:00:72:b6:4c:f3:a9:ea:db:2d:82:15:1b:e7: 1b:86:98:d0:d4:65:ea:a3:bd:ea:4f:38:45:28:7a: 1f:f9:f8:f2:3e:b6:65:0b:38:42:05:70:b3:e2:c4: 44:36:c1:d5:b8:10:0a:cc:6e:f3:a2:a6:be:17:0a: 8c:3a:e4:78:f0:43:f5:1c:e7:54:6e:4b:51:38:95: 29:8a:df:98:38:0e:6d:4b:94:26:0f:83:e2:35:5a: 2e:95:54:d6:14:f8:22:46:f7:e5:b4:d8:24:26:ca: 9e:fe:0c:41:de:71:eb:f7:0e:48:98:bd:79:9a:a5: ae:84:9c:ef:9e:e4:51:c6:81:b2:82:a2:84:bc:00: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C8:DF:7D:20:98:30:B5:CE:F0:6A:08:05:69:1B:FC:F4:BF:0A:42 X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5e:4b:ef:e5:21:4c:fd:b0:ea:05:bf:fe:f5:6b:ae:47:0d: 48:14:43:b4:1e:86:05:05:8c:f6:32:f4:a1:b8:1f:4e:77:0f: ef:be:61:b9:58:12:24:95:92:8e:78:4f:f7:b5:f9:e4:44:f3: 1c:c9:d4:b0:cf:59:ce:1d:62:3a:56:42:14:96:fa:ea:45:06: ae:cd:29:32:37:b3:f2:27:d7:1c:13:f6:73:c5:ed:93:ea:bf: 4a:eb:21:c8:58:5e:8f:ba:93:38:2f:84:45:10:0f:1b:75:55: e5:9a:67:9e:98:dc:2a:a3:64:ba:d8:b2:b6:cb:a4:ed:e1:29: 80:05:f7:74:cb:5c:f4:5e:09:ed:87:48:05:6d:72:21:95:28: 60:11:a8:9e:bf:c3:af:a4:17:9b:bc:22:19:67:d0:1c:f5:4b: dc:e6:d5:91:87:72:cf:3c:f3:c6:fe:12:02:11:2f:3a:ae:c3: da:f8:ca:4e:66:78:9d:16:7e:97:2f:5b:c9:d4:91:2d:43:b0: 29:38:69:eb:65:23:3d:b6:2d:6b:77:eb:e2:50:dd:e8:45:e3: c7:d0:4c:17:e4:5a:dc:bc:30:af:ea:be:7c:89:cd:b7:3b:0f: 6d:d4:72:54:7b:aa:38:0c:1e:ee:41:c9:2c:94:f8:e8:53:b7: 78:a3:2c:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIOWJr7CqVUvs0IiMUt8bTUDCdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA3MjQwMjM3NDFaFw0yNjA3MjUwMzQ0NDFaMDMxMTAvBgNV BAMTKENBQzhERjdEMjA5ODMwQjVDRUYwNkEwODA1NjkxQkZDRjRCRjBBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBt53NtZbXd5WCIoHKqKWZaX9 Suk5K/uZ7W+LbNAhxJDZAz2OzIuFJGQpYrFBTKKUJoZikFPUGFHV+W9ad39CK/KR Qlz6LsTBM4wNe8ADLus9c/dTAENmHoyhlFaIauaSE6WMggxusgirm7OM3JMo+ehn t4z0/HBzAHK2TPOp6tstghUb5xuGmNDUZeqjvepPOEUoeh/5+PI+tmULOEIFcLPi xEQ2wdW4EArMbvOipr4XCow65HjwQ/Uc51RuS1E4lSmK35g4Dm1LlCYPg+I1Wi6V VNYU+CJG9+W02CQmyp7+DEHecev3DkiYvXmapa6EnO+e5FHGgbKCooS8AIufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysjffSCYMLXO8GoIBWkb/PS/CkIwHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpeS+/lIUz9sOoFv/71a65HDUgUQ7QehgUF jPYy9KG4H053D+++YblYEiSVko54T/e1+eRE8xzJ1LDPWc4dYjpWQhSW+upFBq7N KTI3s/In1xwT9nPF7ZPqv0rrIchYXo+6kzgvhEUQDxt1VeWaZ56Y3CqjZLrYsrbL pO3hKYAF93TLXPReCe2HSAVtciGVKGARqJ6/w6+kF5u8Ihln0Bz1S9zm1ZGHcs88 88b+EgIRLzquw9r4yk5meJ0WfpcvW8nUkS1DsCk4aetlIz22LWt36+JQ3ehF48fQ TBfkWty8MK/qvnyJzbc7D23UclR7qjgMHu5BySyU+OhTt3ijLAU= -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:53 2026 by rpki-client