$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: 5sT5ubz4M46JGs3iKDpnxW6Mfws2OpK7MiwZOXMlfQE= Subject key identifier: CE:17:FD:19:C9:36:86:0C:08:D9:AF:C1:3A:84:72:8E:FC:6C:F7:19 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 7593133A1DE124B247FBF1A4CB57BB3CA8DA3722 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 0104 Signing time: Sun 01 Mar 2026 05:03:08 +0000 Manifest this update: Sun 01 Mar 2026 04:58:08 +0000 Manifest next update: Wed 04 Mar 2026 12:51:08 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: L3yKbSoX9zX4gqWmEqo/RfTIX0mAg77Bd8yHARZAtCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:93:13:3a:1d:e1:24:b2:47:fb:f1:a4:cb:57:bb:3c:a8:da:37:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Mar 1 04:58:08 2026 GMT Not After : Mar 4 12:51:08 2026 GMT Subject: CN=CE17FD19C936860C08D9AFC13A84728EFC6CF719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:a1:ba:10:63:cc:8e:44:48:ec:f7:ca:e5: a3:0c:dd:e0:80:5e:92:1f:b8:bd:aa:1c:7f:d9:4c: f6:d8:c3:3c:49:cf:20:07:49:70:3a:09:a2:da:9f: 5a:07:27:11:3d:79:5b:d1:cf:35:28:c3:9b:1c:75: 54:f8:a1:3d:1d:c7:a7:3a:42:38:0f:d6:a2:6c:23: 76:99:41:a2:ca:e4:10:69:84:30:b4:03:5e:75:d8: b5:2d:7c:89:cb:4e:bf:f2:61:3a:a9:35:49:75:ac: 57:34:f2:c4:9f:f5:48:c4:c1:0b:bb:5c:5b:1e:1b: 84:22:cd:d1:17:f0:ee:27:6f:e2:e1:45:d1:7a:07: 32:16:7a:ad:77:4c:20:0f:3b:16:9a:16:0f:a7:19: e7:33:c5:16:c6:7a:83:13:ec:23:4b:79:ed:35:6b: 09:19:db:f8:d3:e5:84:4f:2e:8c:25:de:12:cb:1b: 6a:68:fe:d9:e4:11:e7:b6:05:38:e7:c7:71:7b:f7: 06:fe:c5:38:a5:f9:4a:b5:03:7e:0e:c0:80:ef:4e: d0:c9:62:5c:86:82:63:f2:fc:2e:a6:b3:f2:19:e0: bc:f0:1c:76:6a:62:8e:60:16:2d:86:5e:72:7f:a6: 23:ad:88:d9:5b:e5:34:f4:da:79:ba:8d:d1:8e:f6: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:FD:19:C9:36:86:0C:08:D9:AF:C1:3A:84:72:8E:FC:6C:F7:19 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a5:e7:6d:40:e2:20:b9:93:29:72:8f:33:00:9a:a8:fe:ff: 4e:f4:de:70:d6:a0:80:27:64:a3:47:50:82:32:02:e9:35:3d: 5a:6f:b0:e3:2e:70:aa:3e:12:c2:33:82:95:cb:e5:fb:c2:74: 6b:87:9d:3a:0c:71:3b:b0:20:f7:09:d8:de:4a:5f:21:62:89: 79:43:75:2c:9f:37:88:56:e9:39:a5:aa:7d:0c:b9:46:80:84: 62:fe:9a:55:93:9c:54:e4:e8:e2:59:b4:79:10:34:9b:ce:5d: f7:8b:ee:fe:ea:d0:1f:06:e6:99:31:4a:21:b3:35:ac:aa:a2: bb:99:f6:23:cc:ca:e7:4e:0b:11:2e:30:8b:76:e2:7d:8d:c7: 56:09:f9:65:de:06:15:c6:78:a7:56:a7:ea:13:37:bc:24:27: 36:51:1b:c7:41:d4:dd:23:f4:49:b0:c8:3c:d6:e3:9a:2b:84: a4:b6:0c:88:80:2f:21:62:35:f3:df:58:9f:79:dc:b9:20:c7: bb:86:f0:e7:f0:6a:ff:be:25:90:85:9d:a5:48:91:c3:b4:ae: 8b:b5:e1:8c:33:51:78:1b:1b:a2:bb:76:91:d8:c6:b0:a3:eb: 49:1a:30:1e:49:03:4b:6e:07:47:57:64:fd:69:56:7c:f5:5c: f4:ab:39:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZMTOh3hJLJH+/Gky1e7PKjaNyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNjAzMDEwNDU4MDhaFw0yNjAzMDQxMjUxMDhaMDMxMTAvBgNV BAMTKENFMTdGRDE5QzkzNjg2MEMwOEQ5QUZDMTNBODQ3MjhFRkM2Q0Y3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TaG6EGPMjkRI7PfK5aMM3eCA XpIfuL2qHH/ZTPbYwzxJzyAHSXA6CaLan1oHJxE9eVvRzzUow5scdVT4oT0dx6c6 QjgP1qJsI3aZQaLK5BBphDC0A1512LUtfInLTr/yYTqpNUl1rFc08sSf9UjEwQu7 XFseG4QizdEX8O4nb+LhRdF6BzIWeq13TCAPOxaaFg+nGeczxRbGeoMT7CNLee01 awkZ2/jT5YRPLowl3hLLG2po/tnkEee2BTjnx3F79wb+xTil+Uq1A34OwIDvTtDJ YlyGgmPy/C6ms/IZ4LzwHHZqYo5gFi2GXnJ/piOtiNlb5TT02nm6jdGO9pGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhf9Gck2hgwI2a/BOoRyjvxs9xkwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMel521A4iC5kylyjzMAmqj+/0703nDWoIAn ZKNHUIIyAuk1PVpvsOMucKo+EsIzgpXL5fvCdGuHnToMcTuwIPcJ2N5KXyFiiXlD dSyfN4hW6Tmlqn0MuUaAhGL+mlWTnFTk6OJZtHkQNJvOXfeL7v7q0B8G5pkxSiGz NayqoruZ9iPMyudOCxEuMIt24n2Nx1YJ+WXeBhXGeKdWp+oTN7wkJzZRG8dB1N0j 9EmwyDzW45orhKS2DIiALyFiNfPfWJ953Lkgx7uG8Ofwav++JZCFnaVIkcO0rou1 4YwzUXgbG6K7dpHYxrCj60kaMB5JA0tuB0dXZP1pVnz1XPSrOdI= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:24 2026 by rpki-client