$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: DF7LPyJ/yF5qEM6rXSQrlziAp3ybksMV/SwyGeomn00= Subject key identifier: 90:4B:4B:D6:56:FE:EA:E2:84:83:60:80:98:FD:04:DC:2A:9C:A1:49 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 4B3D0DE3AFEDECAF0B67A12482B2757A6B99E2EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0248 Signing time: Sat 28 Feb 2026 13:42:03 +0000 Manifest this update: Sat 28 Feb 2026 13:37:03 +0000 Manifest next update: Tue 03 Mar 2026 21:17:03 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: ooDdzceJjX5F08AGNysnrZHKzW15/kE0ua14oNt3E9c=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3d:0d:e3:af:ed:ec:af:0b:67:a1:24:82:b2:75:7a:6b:99:e2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Feb 28 13:37:03 2026 GMT Not After : Mar 3 21:17:03 2026 GMT Subject: CN=904B4BD656FEEAE28483608098FD04DC2A9CA149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:a0:55:5a:ca:8e:ed:7f:77:f4:f1:aa:50: c1:22:4e:4a:64:e9:dd:c2:33:4e:a6:fd:40:eb:a7: 8c:1b:37:48:2c:39:db:36:a8:91:7c:d6:85:b7:58: d1:de:2c:33:60:04:e7:fa:f3:e3:59:3f:c5:1c:f5: 4a:c4:26:d8:41:94:6e:bd:89:f4:ed:c5:8e:8d:9c: 80:f0:fe:40:6f:84:4d:34:92:87:33:7f:32:be:65: 7b:a8:33:17:16:9a:bd:33:64:d3:57:00:dd:15:c0: c1:47:4a:c4:89:0c:af:54:15:6a:12:e3:1f:a2:52: 94:ab:3d:28:2f:11:46:6f:68:27:9e:d0:27:3c:28: 1d:bf:dc:e0:c0:62:0a:19:24:ce:58:a5:7a:c2:35: 6a:99:44:0a:c4:6e:39:6e:08:f0:cd:94:02:a2:99: aa:6c:06:93:a4:42:a5:66:cd:79:40:09:9d:a6:89: f2:fb:cc:5c:a3:90:cf:00:57:3a:d0:e7:72:2d:1c: 4d:f3:5c:d3:87:ff:0f:71:64:05:ad:db:e9:48:b3: ec:7f:92:b9:2b:f5:a7:a4:ec:b8:db:3f:00:7f:56: 83:a1:28:9c:f1:09:43:da:17:70:43:f8:ef:e4:ab: 09:69:9e:a8:6a:05:8c:05:a2:a4:0c:e9:14:13:74: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:4B:D6:56:FE:EA:E2:84:83:60:80:98:FD:04:DC:2A:9C:A1:49 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fb:ab:68:54:90:98:b8:06:bf:cd:54:68:ef:10:0c:5b:80: 94:9b:7b:67:ef:61:43:bf:96:59:db:fa:e0:ca:5a:13:e8:4a: 4b:e6:7c:7d:75:1e:ed:cb:66:8e:46:60:68:ec:51:6f:47:96: 63:3a:2f:a4:cd:cc:85:61:a2:f1:06:37:41:6a:b9:de:2d:05: 42:5b:67:32:f3:41:b9:4c:93:62:a9:fc:8e:a6:11:a5:a2:28: 1b:47:19:9a:a3:df:69:1f:76:33:10:f9:0d:89:9b:54:1e:4f: 75:26:c0:18:5e:5e:70:ee:cc:98:66:43:9f:ab:e1:9f:13:d7: 32:37:40:2f:0f:d4:91:34:69:ff:51:76:10:d9:f3:d2:5e:9d: 85:f5:17:e0:03:f4:45:29:bd:29:d9:0d:a6:1f:b8:93:fe:1f: 10:85:98:31:4d:c4:08:c2:29:c7:9e:79:72:4a:76:06:d1:e7: 92:11:1e:82:3c:c8:ae:54:2f:8d:32:bf:0f:a9:28:d8:aa:1b: 71:15:61:9b:18:7d:ce:63:97:62:d7:42:b9:75:ea:23:b2:a9: 89:e5:69:5b:83:57:a5:73:c0:30:06:01:68:f5:76:25:33:88: 30:3d:8d:76:20:b0:17:39:c3:6a:03:e7:02:dc:ef:59:41:04: 02:22:70:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSz0N46/t7K8LZ6EkgrJ1emuZ4u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNjAyMjgxMzM3MDNaFw0yNjAzMDMyMTE3MDNaMDMxMTAvBgNV BAMTKDkwNEI0QkQ2NTZGRUVBRTI4NDgzNjA4MDk4RkQwNERDMkE5Q0ExNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnKBVWsqO7X939PGqUMEiTkpk 6d3CM06m/UDrp4wbN0gsOds2qJF81oW3WNHeLDNgBOf68+NZP8Uc9UrEJthBlG69 ifTtxY6NnIDw/kBvhE00koczfzK+ZXuoMxcWmr0zZNNXAN0VwMFHSsSJDK9UFWoS 4x+iUpSrPSgvEUZvaCee0Cc8KB2/3ODAYgoZJM5YpXrCNWqZRArEbjluCPDNlAKi mapsBpOkQqVmzXlACZ2mifL7zFyjkM8AVzrQ53ItHE3zXNOH/w9xZAWt2+lIs+x/ krkr9aek7LjbPwB/VoOhKJzxCUPaF3BD+O/kqwlpnqhqBYwFoqQM6RQTdFKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEtL1lb+6uKEg2CAmP0E3CqcoUkwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH77q2hUkJi4Br/NVGjvEAxbgJSbe2fvYUO/ llnb+uDKWhPoSkvmfH11Hu3LZo5GYGjsUW9HlmM6L6TNzIVhovEGN0Fqud4tBUJb ZzLzQblMk2Kp/I6mEaWiKBtHGZqj32kfdjMQ+Q2Jm1QeT3UmwBheXnDuzJhmQ5+r 4Z8T1zI3QC8P1JE0af9RdhDZ89JenYX1F+AD9EUpvSnZDaYfuJP+HxCFmDFNxAjC KceeeXJKdgbR55IRHoI8yK5UL40yvw+pKNiqG3EVYZsYfc5jl2LXQrl16iOyqYnl aVuDV6VzwDAGAWj1diUziDA9jXYgsBc5w2oD5wLc71lBBAIicBE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:24 2026 by rpki-client