$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: cDPeUOBrIeSL9qVRRb+U8fTy5t/SPs7Yn5cGvRUaM1U= Subject key identifier: 63:85:FE:1A:89:46:63:07:B4:D0:30:03:C5:BA:0F:BD:7C:A0:74:2F Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 777A524D5247B0A06288F54759A826CC8E5A7C9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 019D Signing time: Thu 16 Apr 2026 04:02:56 +0000 Manifest this update: Thu 16 Apr 2026 03:57:56 +0000 Manifest next update: Sun 19 Apr 2026 08:42:56 +0000 Files and hashes: 1: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 4: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: oqFQ9BoRmVjDeBRE6k6yojzpt4ppED6Y2CZ6zsIOKzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7a:52:4d:52:47:b0:a0:62:88:f5:47:59:a8:26:cc:8e:5a:7c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Apr 16 03:57:56 2026 GMT Not After : Apr 19 08:42:56 2026 GMT Subject: CN=6385FE1A89466307B4D03003C5BA0FBD7CA0742F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:3e:eb:d8:2b:ca:1c:85:55:60:16:4d:08: 5c:cc:43:33:7c:e3:18:4b:28:95:3a:77:8f:98:d5: d1:26:ce:31:3b:2f:22:3f:7c:05:bd:7a:89:4a:dd: 95:d7:52:e7:6c:83:45:72:b6:de:cb:78:55:df:da: f4:52:e8:15:9b:e2:20:e9:f8:0d:5c:1d:13:83:5c: ae:48:52:27:92:27:fe:2f:15:2a:03:00:cd:e8:4e: 42:2d:e9:24:57:6a:34:1c:29:b4:60:cd:4e:c9:e2: bb:51:73:92:36:68:85:0f:f0:c6:1f:6d:ea:31:e9: 37:04:cc:a2:a9:9b:03:3d:a4:6e:b4:72:c1:55:dd: 6f:16:1b:1b:24:ba:e2:61:33:3b:0f:f9:72:56:32: 97:52:8a:0d:97:75:4f:b7:99:ea:46:87:c5:a8:79: f4:2d:ed:1e:53:19:8b:00:51:39:80:ac:35:4c:aa: 8a:db:49:99:b4:96:03:d8:1e:a1:d5:a0:e1:ad:70: 8c:0b:73:27:4d:43:af:f9:d2:b3:05:c1:8b:b6:94: 04:0b:76:5f:6b:33:70:3c:44:0e:0f:1b:21:82:36: 95:85:a8:0e:97:dc:a1:38:1c:14:4d:4c:39:01:a4: b9:1b:11:18:fc:af:7f:01:80:ef:b1:60:df:e9:fa: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:85:FE:1A:89:46:63:07:B4:D0:30:03:C5:BA:0F:BD:7C:A0:74:2F X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f1:b9:14:8a:1b:11:67:a6:0f:ac:8f:55:12:03:1d:0f:ef: 3f:df:a7:cd:c4:f3:91:66:41:80:0f:67:05:df:4c:b7:7a:26: 28:c6:79:5f:ea:38:64:81:91:fb:75:2b:a1:61:ee:c1:db:fe: a9:59:9f:5d:71:ae:71:2c:c4:17:42:19:1a:0a:94:58:75:e3: 5e:00:00:7f:e0:92:12:21:11:3a:2b:e2:2c:03:2e:8f:ae:34: a4:5f:d0:97:17:09:3a:40:55:c7:2c:aa:c9:54:4c:cf:87:22: 78:15:20:43:79:f9:18:9d:4f:f0:22:99:df:af:fe:e9:53:d2: 06:19:25:d7:b8:4d:9e:9b:82:e6:39:a1:fe:3d:59:7c:ad:a6: 93:e2:a0:2b:f4:09:47:43:d1:c9:92:3f:9b:db:4e:81:ac:2c: d3:3e:5c:27:de:a0:4a:76:31:f8:1c:6d:b3:95:ba:e7:87:ac: af:cb:ef:9f:0d:51:8c:d0:20:d6:d6:38:1b:4f:5b:0c:82:ae: 01:53:fe:bf:2b:33:d0:0e:2b:aa:82:b1:bc:6b:42:18:d3:1f: 42:20:c7:ba:14:26:c8:64:78:03:a6:60:0e:97:bb:57:f7:1f: dc:78:a2:ac:65:65:48:d2:66:ca:4a:d5:c4:11:b2:47:d3:1c: 63:13:59:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3pSTVJHsKBiiPVHWagmzI5afJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNjA0MTYwMzU3NTZaFw0yNjA0MTkwODQyNTZaMDMxMTAvBgNV BAMTKDYzODVGRTFBODk0NjYzMDdCNEQwMzAwM0M1QkEwRkJEN0NBMDc0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCz7r2CvKHIVVYBZNCFzMQzN8 4xhLKJU6d4+Y1dEmzjE7LyI/fAW9eolK3ZXXUudsg0Vytt7LeFXf2vRS6BWb4iDp +A1cHRODXK5IUieSJ/4vFSoDAM3oTkIt6SRXajQcKbRgzU7J4rtRc5I2aIUP8MYf beox6TcEzKKpmwM9pG60csFV3W8WGxskuuJhMzsP+XJWMpdSig2XdU+3mepGh8Wo efQt7R5TGYsAUTmArDVMqorbSZm0lgPYHqHVoOGtcIwLcydNQ6/50rMFwYu2lAQL dl9rM3A8RA4PGyGCNpWFqA6X3KE4HBRNTDkBpLkbERj8r38BgO+xYN/p+nSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4X+GolGYwe00DADxboPvXygdC8wHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbxuRSKGxFnpg+sj1USAx0P7z/fp83E85Fm QYAPZwXfTLd6JijGeV/qOGSBkft1K6Fh7sHb/qlZn11xrnEsxBdCGRoKlFh1414A AH/gkhIhETor4iwDLo+uNKRf0JcXCTpAVccsqslUTM+HIngVIEN5+RidT/Aimd+v /ulT0gYZJde4TZ6bguY5of49WXytppPioCv0CUdD0cmSP5vbToGsLNM+XCfeoEp2 MfgcbbOVuueHrK/L758NUYzQINbWOBtPWwyCrgFT/r8rM9AOK6qCsbxrQhjTH0Ig x7oUJshkeAOmYA6Xu1f3H9x4oqxlZUjSZspK1cQRskfTHGMTWYw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:56 2026 by rpki-client