$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: k/NZ1RE8rveAZ2+TDdt/p/uDwzFaR44EkCAdjS9kdOE= Subject key identifier: 4E:85:47:9C:33:CD:5B:32:C9:F9:87:93:D3:94:B4:E1:99:34:83:C0 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 4241AB97C8AEB5D2890952C7D891213A95F0DE6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: C9 Signing time: Mon 02 Mar 2026 06:11:33 +0000 Manifest this update: Mon 02 Mar 2026 06:06:33 +0000 Manifest next update: Thu 05 Mar 2026 16:25:33 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: 0jInRTgf6PPA+Aar6NAT35Q/CnotgNNHC7SX2nEKANY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:41:ab:97:c8:ae:b5:d2:89:09:52:c7:d8:91:21:3a:95:f0:de:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Mar 2 06:06:33 2026 GMT Not After : Mar 5 16:25:33 2026 GMT Subject: CN=4E85479C33CD5B32C9F98793D394B4E1993483C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:91:b6:45:c4:57:d5:de:3a:0f:86:16:17: 0c:73:1a:bf:82:24:0e:dc:b9:ea:7c:a5:42:2c:5f: d1:02:c4:90:b4:4f:c3:51:c4:5a:d4:15:b1:07:c6: 6b:ad:81:c1:0c:ea:cc:09:d4:b0:52:9d:93:ba:d0: 5c:d3:b9:b2:f7:89:ff:6d:ac:bb:0e:b7:a5:91:fc: 29:53:e5:17:25:41:02:ce:6e:4b:48:4a:56:bf:a8: 4f:2d:aa:e7:0f:9b:e3:c9:b1:04:88:ba:93:41:5a: 67:b2:78:87:f9:a0:ab:55:e4:67:cf:c1:ac:06:91: cc:70:6b:9a:88:67:55:4b:b8:fc:40:f6:ca:43:6e: 8c:d3:39:9b:8c:af:6d:67:ea:d8:58:ed:56:1d:7f: b7:d4:85:12:fd:e4:a0:ec:50:d9:22:5f:d4:41:92: 0b:83:d7:16:1a:f5:8d:19:f1:6f:38:0e:0c:1e:c3: 38:1d:e8:fb:71:df:da:34:25:80:d1:98:0a:d6:71: 49:02:53:16:5b:97:36:a3:01:41:0b:93:e1:4f:da: 1b:87:88:19:7d:24:57:6b:af:f4:50:05:a4:bd:4d: 4e:52:30:37:c3:1d:23:ba:a4:a9:cb:ab:1b:7a:2e: d3:98:f4:f2:fc:be:9f:87:ee:59:9e:c7:a6:48:58: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:47:9C:33:CD:5B:32:C9:F9:87:93:D3:94:B4:E1:99:34:83:C0 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2e:f7:93:fc:4a:b2:99:b5:2c:ee:a9:0d:db:63:88:0b:0c: b2:56:c2:45:88:83:d7:df:13:61:a5:22:87:97:6c:fa:14:08: d2:b5:42:9f:e5:79:e7:58:41:39:80:43:93:7b:48:1d:b4:29: 07:28:bd:9e:66:7c:0e:f7:25:c5:9e:5e:a3:6c:ce:6e:36:8b: af:02:24:83:b1:4b:4c:35:85:cb:c0:88:49:3c:9e:a4:c4:b6: 69:51:31:c6:e4:cf:e4:5d:a5:3a:e2:11:d6:ad:55:35:59:c5: 51:37:a7:38:01:8e:23:32:1c:ec:f9:7c:a3:6a:d6:23:69:1e: 5d:44:a2:49:13:da:87:bd:ff:03:7e:b8:8f:73:92:c1:02:3d: 23:c0:07:11:46:71:1f:87:3b:b9:72:8c:7f:f8:d7:b7:be:76: ed:f9:69:cc:ce:fd:a9:b7:5b:2a:7e:5e:60:6e:b4:60:7d:c4: b1:5e:58:c9:17:a2:39:28:58:b9:f1:9f:e6:77:02:a3:77:be: 54:d7:f5:fd:f7:df:47:ce:19:3c:2a:62:00:54:56:80:98:3d: a2:58:0e:fd:b2:a8:b9:40:0c:13:7b:32:bc:ee:c9:0a:4c:83: 6b:f7:6b:99:80:cb:be:27:fd:d8:9a:2a:13:52:1b:4d:54:ab: 4a:50:28:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkGrl8iutdKJCVLH2JEhOpXw3m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNjAzMDIwNjA2MzNaFw0yNjAzMDUxNjI1MzNaMDMxMTAvBgNV BAMTKDRFODU0NzlDMzNDRDVCMzJDOUY5ODc5M0QzOTRCNEUxOTkzNDgzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPZG2RcRX1d46D4YWFwxzGr+C JA7cuep8pUIsX9ECxJC0T8NRxFrUFbEHxmutgcEM6swJ1LBSnZO60FzTubL3if9t rLsOt6WR/ClT5RclQQLObktISla/qE8tqucPm+PJsQSIupNBWmeyeIf5oKtV5GfP wawGkcxwa5qIZ1VLuPxA9spDbozTOZuMr21n6thY7VYdf7fUhRL95KDsUNkiX9RB kguD1xYa9Y0Z8W84Dgwewzgd6Ptx39o0JYDRmArWcUkCUxZblzajAUELk+FP2huH iBl9JFdrr/RQBaS9TU5SMDfDHSO6pKnLqxt6LtOY9PL8vp+H7lmex6ZIWA+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToVHnDPNWzLJ+YeT05S04Zk0g8AwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8u95P8SrKZtSzuqQ3bY4gLDLJWwkWIg9ff E2GlIoeXbPoUCNK1Qp/leedYQTmAQ5N7SB20KQcovZ5mfA73JcWeXqNszm42i68C JIOxS0w1hcvAiEk8nqTEtmlRMcbkz+RdpTriEdatVTVZxVE3pzgBjiMyHOz5fKNq 1iNpHl1EokkT2oe9/wN+uI9zksECPSPABxFGcR+HO7lyjH/417e+du35aczO/am3 Wyp+XmButGB9xLFeWMkXojkoWLnxn+Z3AqN3vlTX9f3330fOGTwqYgBUVoCYPaJY Dv2yqLlADBN7MrzuyQpMg2v3a5mAy74n/diaKhNSG01Uq0pQKEM= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:32 2026 by rpki-client