$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: 5PHfUwqe3CsUvVkAIwQa/ZryvKGBUUliyNdwsytJPAI= Subject key identifier: 7C:69:1E:1B:8A:EE:E0:EF:4A:4C:0D:2E:77:03:2D:CE:F8:AB:3D:21 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 10B2F1C0D00BBBC0887F9BA4FD06D0B7E9CCBD29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 025D Signing time: Wed 15 Apr 2026 08:02:07 +0000 Manifest this update: Wed 15 Apr 2026 07:57:07 +0000 Manifest next update: Sat 18 Apr 2026 18:08:07 +0000 Files and hashes: 1: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: Tv/HtEdI/qxXmqMcvFn7TRW42CYB2Xaf6KBnLis/Xas=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: SF7Qxz8OHHAWbXwxGs4xjFqYr7zVtEdFChzyzk5rmsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b2:f1:c0:d0:0b:bb:c0:88:7f:9b:a4:fd:06:d0:b7:e9:cc:bd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Apr 15 07:57:07 2026 GMT Not After : Apr 18 18:08:07 2026 GMT Subject: CN=7C691E1B8AEEE0EF4A4C0D2E77032DCEF8AB3D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:11:fd:51:f8:82:80:c9:15:83:52:d7:e8: 81:a2:cd:00:d5:1e:04:3b:49:2f:ed:69:82:d8:2e: 19:26:15:5f:43:c6:83:f8:ab:b0:9a:ab:e6:6c:67: 55:3d:e5:8e:c0:3a:eb:65:ad:44:ca:53:bf:8e:db: 62:b7:03:20:23:4c:75:75:fa:01:ce:5b:22:db:cd: 47:d6:ec:cb:bc:08:32:10:97:28:e6:5b:a6:8f:c7: 3f:9f:f2:b5:8c:65:f7:31:fa:8a:cf:27:e4:8d:20: 05:72:7e:b3:c3:8c:86:43:33:60:1d:e7:21:15:02: ef:b0:ae:3c:27:04:f6:ab:2d:87:4a:59:15:38:65: 45:b2:07:7b:fd:0b:29:3d:3f:f4:89:4e:7a:f3:69: fc:1a:88:8d:17:bb:a8:59:65:ce:96:a7:77:26:56: 4f:fe:a5:ac:64:49:a6:05:e0:cc:99:4f:8f:b7:fe: 32:66:f6:1e:64:1a:bb:62:f1:78:61:e6:80:e4:54: 82:39:b8:ee:1b:a9:2e:f9:cd:79:39:f8:1b:c5:66: 17:91:85:3b:2a:84:00:c4:c6:43:a1:2f:a5:4b:d1: 86:cd:9b:07:e3:80:23:7c:a4:4f:7a:2b:dd:2f:2d: 5e:ae:39:44:95:45:91:9a:55:97:bd:0d:2d:48:e0: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:1E:1B:8A:EE:E0:EF:4A:4C:0D:2E:77:03:2D:CE:F8:AB:3D:21 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:2a:88:dc:d9:7b:db:48:b5:0b:3b:93:55:df:16:84:25: 77:a6:7a:b4:87:9e:e9:f1:40:c1:53:e3:0f:d2:7c:68:f7:df: 16:8d:c3:10:2b:c0:d6:81:21:44:21:c5:de:b5:cc:3e:82:10: 8f:00:1e:32:84:75:49:ff:d7:48:fa:73:04:c1:18:30:b2:d8: f4:79:61:da:c4:65:9e:a3:d3:79:c8:ac:46:c8:15:cd:c7:b3: 2c:d6:19:54:33:bd:85:d9:04:18:2a:12:0b:de:a3:7e:96:dd: af:f6:fe:67:9b:6a:88:6e:8a:a9:22:ed:87:1f:9c:13:bd:94: 6d:26:73:cb:96:d1:64:37:46:d4:e8:09:b6:4e:ac:8a:32:aa: df:e3:6f:47:eb:a8:63:ab:e8:42:86:e9:c2:3b:32:99:21:f0: f6:26:42:e8:93:a5:fb:fd:2f:73:62:d8:00:be:37:c1:e8:bc: f2:84:f9:3d:56:53:28:49:ff:1b:e7:24:1e:9b:c7:a5:eb:04: e8:73:d3:69:47:5f:c2:5c:c2:4e:66:43:03:29:c9:45:9f:d4: ed:6d:df:06:20:0b:2f:eb:f8:7d:c6:2b:4b:07:25:d9:d0:4e: c2:cb:f1:2d:20:ab:62:79:fb:2f:96:a8:84:c8:b4:89:6e:00: 61:66:5f:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELLxwNALu8CIf5uk/QbQt+nMvSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNjA0MTUwNzU3MDdaFw0yNjA0MTgxODA4MDdaMDMxMTAvBgNV BAMTKDdDNjkxRTFCOEFFRUUwRUY0QTRDMEQyRTc3MDMyRENFRjhBQjNEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXhH9UfiCgMkVg1LX6IGizQDV HgQ7SS/taYLYLhkmFV9DxoP4q7Caq+ZsZ1U95Y7AOutlrUTKU7+O22K3AyAjTHV1 +gHOWyLbzUfW7Mu8CDIQlyjmW6aPxz+f8rWMZfcx+orPJ+SNIAVyfrPDjIZDM2Ad 5yEVAu+wrjwnBParLYdKWRU4ZUWyB3v9Cyk9P/SJTnrzafwaiI0Xu6hZZc6Wp3cm Vk/+paxkSaYF4MyZT4+3/jJm9h5kGrti8Xhh5oDkVII5uO4bqS75zXk5+BvFZheR hTsqhADExkOhL6VL0YbNmwfjgCN8pE96K90vLV6uOUSVRZGaVZe9DS1I4O1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGkeG4ru4O9KTA0udwMtzvirPSEwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISIKojc2XvbSLULO5NV3xaEJXemerSHnunx QMFT4w/SfGj33xaNwxArwNaBIUQhxd61zD6CEI8AHjKEdUn/10j6cwTBGDCy2PR5 YdrEZZ6j03nIrEbIFc3HsyzWGVQzvYXZBBgqEgveo36W3a/2/mebaohuiqki7Ycf nBO9lG0mc8uW0WQ3RtToCbZOrIoyqt/jb0frqGOr6EKG6cI7Mpkh8PYmQuiTpfv9 L3Ni2AC+N8HovPKE+T1WUyhJ/xvnJB6bx6XrBOhz02lHX8Jcwk5mQwMpyUWf1O1t 3wYgCy/r+H3GK0sHJdnQTsLL8S0gq2J5+y+WqITItIluAGFmX1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:49 2026 by rpki-client