$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: U+CNiAVqWd6jf901yz+9ftJPd3UZRaBY71NdBu4y/TY= Subject key identifier: 00:7E:E1:6F:42:06:EE:E5:38:76:0A:3E:4A:7B:46:E0:44:4C:3F:C3 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 2E0C6AACDA941BFAF8FF8DA8F2BA3D883D7B2BA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: DD Signing time: Fri 17 Apr 2026 01:11:35 +0000 Manifest this update: Fri 17 Apr 2026 01:06:35 +0000 Manifest next update: Mon 20 Apr 2026 02:46:35 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: Mc7EXyw/xEhd/4X8hS31NPyK75XZFuTQuEVkZA2iHOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0c:6a:ac:da:94:1b:fa:f8:ff:8d:a8:f2:ba:3d:88:3d:7b:2b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Apr 17 01:06:35 2026 GMT Not After : Apr 20 02:46:35 2026 GMT Subject: CN=007EE16F4206EEE538760A3E4A7B46E0444C3FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:5c:e6:8e:b1:ba:ae:0d:2c:0a:43:b5:e1: e7:ce:4f:44:4e:41:d0:a6:ad:f4:9e:81:fa:8a:15: bd:08:9f:14:a3:9c:62:4b:96:79:95:61:5c:a8:c0: 2d:81:2a:09:42:59:21:31:99:de:93:78:f0:aa:ec: 0b:72:2c:f2:2e:c7:f0:c3:8f:d1:4a:94:d1:67:00: d2:e7:c9:34:94:e9:ef:ed:51:ec:0b:00:df:e0:94: b5:6e:db:19:ff:39:12:ec:3a:d5:40:59:01:be:19: 3f:d6:fd:f1:31:cc:f9:5b:99:a1:1e:26:41:a5:77: fe:12:c6:c7:d3:fc:8e:9a:49:26:e2:e4:1c:b8:64: 36:60:37:c3:8f:be:51:ae:ff:80:94:91:65:cb:f4: c3:20:a6:5c:52:31:c4:d8:d8:dd:e4:82:0a:c2:ff: 52:ff:25:8e:2b:32:b3:5b:d4:cd:51:37:60:bf:92: b5:a2:d3:04:21:3b:fd:b0:8c:af:e0:b2:be:5b:57: 1d:db:6a:cd:3a:ac:f5:dc:33:62:05:ed:df:2b:6d: f3:70:8f:a2:5e:c2:36:80:b1:12:77:40:74:55:49: a7:a0:d6:9d:7f:55:fb:47:fa:aa:a6:9c:19:1a:db: c4:a6:12:07:c6:fc:a5:2b:c2:00:84:d0:f5:c8:6c: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7E:E1:6F:42:06:EE:E5:38:76:0A:3E:4A:7B:46:E0:44:4C:3F:C3 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:18:24:b7:43:17:d5:54:ee:1a:f2:84:dc:5f:43:43:21:6a: ac:e5:df:bf:9d:1b:2d:43:13:ed:2f:fa:a0:a9:86:b2:fb:10: 7d:dd:69:75:84:19:a6:3f:d7:97:d5:3a:1e:28:87:fd:db:6b: 92:d6:a3:c4:e4:28:53:fe:33:c5:a8:e1:5d:23:d6:81:de:3c: a7:09:ea:16:6b:0f:03:2f:19:af:b8:48:0a:5a:10:bd:1b:9b: f4:9e:1d:3d:4d:c5:db:b1:65:0c:0a:46:6f:19:17:0d:b9:c8: d1:0a:0f:2b:20:9b:f0:dd:8e:70:8c:df:90:84:29:cb:3d:21: 17:05:8b:8a:d4:93:b0:20:52:ad:f3:2b:54:0c:18:b8:7d:9b: 9b:b4:2d:28:7e:5f:ab:0a:25:a0:66:d5:32:3e:7e:08:b1:33: 8f:a4:0e:90:78:bb:a4:b7:81:56:e1:53:b1:f7:ff:a2:76:be: 54:fc:8b:97:96:0c:c7:68:a6:08:27:1d:89:7b:f0:0e:2a:9b: 45:54:4f:9a:58:8d:c3:06:94:86:15:10:c0:a0:74:b1:5f:b2: 5c:a1:e0:58:db:72:c2:e6:15:e1:c8:e5:be:ca:40:8a:02:66: 2b:0b:fc:c5:97:c1:cf:dd:ae:51:87:a5:5c:a1:c7:b1:c9:c8: 2f:10:04:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULgxqrNqUG/r4/42o8ro9iD17K6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNjA0MTcwMTA2MzVaFw0yNjA0MjAwMjQ2MzVaMDMxMTAvBgNV BAMTKDAwN0VFMTZGNDIwNkVFRTUzODc2MEEzRTRBN0I0NkUwNDQ0QzNGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0FzmjrG6rg0sCkO14efOT0RO QdCmrfSegfqKFb0InxSjnGJLlnmVYVyowC2BKglCWSExmd6TePCq7AtyLPIux/DD j9FKlNFnANLnyTSU6e/tUewLAN/glLVu2xn/ORLsOtVAWQG+GT/W/fExzPlbmaEe JkGld/4SxsfT/I6aSSbi5By4ZDZgN8OPvlGu/4CUkWXL9MMgplxSMcTY2N3kggrC /1L/JY4rMrNb1M1RN2C/krWi0wQhO/2wjK/gsr5bVx3bas06rPXcM2IF7d8rbfNw j6JewjaAsRJ3QHRVSaeg1p1/VftH+qqmnBka28SmEgfG/KUrwgCE0PXIbD1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAH7hb0IG7uU4dgo+SntG4ERMP8MwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEYJLdDF9VU7hryhNxfQ0Mhaqzl37+dGy1D E+0v+qCphrL7EH3daXWEGaY/15fVOh4oh/3ba5LWo8TkKFP+M8Wo4V0j1oHePKcJ 6hZrDwMvGa+4SApaEL0bm/SeHT1NxduxZQwKRm8ZFw25yNEKDysgm/DdjnCM35CE Kcs9IRcFi4rUk7AgUq3zK1QMGLh9m5u0LSh+X6sKJaBm1TI+fgixM4+kDpB4u6S3 gVbhU7H3/6J2vlT8i5eWDMdopggnHYl78A4qm0VUT5pYjcMGlIYVEMCgdLFfslyh 4FjbcsLmFeHI5b7KQIoCZisL/MWXwc/drlGHpVyhx7HJyC8QBDE= -----END CERTIFICATE-----Generated at Fri Apr 17 20:52:40 2026 by rpki-client