$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: 3u62F7sghjb1PYhzv+VrSI8nGs11x+MDmPkQj9BpNik= Subject key identifier: 92:2B:57:42:0F:CD:6A:5E:D9:85:B9:A6:23:6F:87:E6:0B:9E:88:3C Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 790A056F4F138D75CFC0A3277F0049C589915072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 0119 Signing time: Fri 17 Apr 2026 15:02:46 +0000 Manifest this update: Fri 17 Apr 2026 14:57:46 +0000 Manifest next update: Mon 20 Apr 2026 19:59:46 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: HFRowvW00UmY5yoYcG3mvjkQ8Q2aAtAvAtYXIMCyRgo=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0a:05:6f:4f:13:8d:75:cf:c0:a3:27:7f:00:49:c5:89:91:50:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Apr 17 14:57:46 2026 GMT Not After : Apr 20 19:59:46 2026 GMT Subject: CN=922B57420FCD6A5ED985B9A6236F87E60B9E883C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:d7:bb:95:55:5d:f1:ce:bd:e6:ab:b5:71: 23:42:f8:6c:6c:1d:b9:56:c4:dd:bd:14:41:8c:88: 0b:e4:2e:14:80:db:dc:ef:52:3e:5d:33:39:22:b1: f2:77:73:76:f4:77:49:d1:50:cb:df:5d:1c:cf:4e: c6:9e:41:41:97:d2:d9:be:10:67:a9:3c:50:e0:58: 5b:33:1d:4a:be:61:b6:38:84:76:b7:48:18:a1:43: fd:d0:b6:23:a7:cb:2d:ff:fa:5a:3f:9a:25:dd:e7: 70:32:85:71:60:dc:38:dc:4e:ce:4e:34:da:d4:3b: 2a:b9:93:f3:f8:94:65:d6:dc:dc:0e:c3:0a:71:ea: 59:a4:db:e1:26:5e:97:6a:79:dc:6e:e1:19:d2:17: 16:56:68:0a:8d:9c:45:b9:54:4d:79:1f:ed:e1:72: 82:4b:f7:d1:a3:f1:eb:71:be:26:3e:66:dc:34:ec: 62:f6:0a:16:70:45:be:4d:3c:00:26:54:31:34:8e: ac:5c:c9:ac:e9:14:42:43:50:2d:ad:91:d3:7a:6b: 6d:be:c7:f7:0b:46:ed:bb:9a:12:2c:3e:76:c3:65: f4:fc:56:9e:48:f8:2f:26:10:da:f1:ca:c0:1c:6b: a2:43:a7:91:50:b3:bf:a8:35:8a:70:76:d7:51:7a: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:57:42:0F:CD:6A:5E:D9:85:B9:A6:23:6F:87:E6:0B:9E:88:3C X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:56:25:42:20:57:6e:b5:fe:6d:a7:8f:56:22:b7:5e:6b:16: 49:b0:7b:d4:5e:e4:53:bf:d4:7f:29:6e:68:5d:ee:00:2e:77: cc:85:b8:cd:20:b2:83:a5:06:13:bb:1e:31:37:da:c3:88:6b: 2a:92:05:51:99:17:08:df:84:af:05:a8:ac:4b:34:1f:ec:ad: ca:6c:7b:e9:7b:8e:da:df:8d:24:23:ae:85:c0:9b:ba:55:67: b3:b2:99:ed:97:18:4c:6d:67:40:d8:1b:c9:55:bf:11:49:a2: 92:0a:0b:6f:ba:bb:ba:5b:31:43:ea:52:e8:e2:73:65:fc:81: c9:f8:0f:49:c3:9a:f0:59:2a:86:56:81:b1:3b:c5:4f:ee:ac: db:26:c4:5d:12:31:1f:d1:d8:40:2b:bb:d5:31:07:8f:69:0f: c8:24:08:ee:29:72:27:17:f0:9c:db:59:f6:48:d4:6c:5f:00: d8:9f:1a:87:d1:c2:af:46:a1:4c:6a:1a:1c:10:b7:54:b4:67: 3b:49:08:cd:9b:9a:0b:d6:77:7f:52:0f:07:a6:26:cf:a1:ef: 4d:78:2f:5f:9b:64:c0:29:41:7d:96:c0:2a:ab:8d:61:90:5f: 28:b3:52:ac:af:bd:2b:c8:1b:84:1e:07:92:34:f8:78:7b:f6: bb:9e:39:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQoFb08TjXXPwKMnfwBJxYmRUHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNjA0MTcxNDU3NDZaFw0yNjA0MjAxOTU5NDZaMDMxMTAvBgNV BAMTKDkyMkI1NzQyMEZDRDZBNUVEOTg1QjlBNjIzNkY4N0U2MEI5RTg4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxte7lVVd8c695qu1cSNC+Gxs HblWxN29FEGMiAvkLhSA29zvUj5dMzkisfJ3c3b0d0nRUMvfXRzPTsaeQUGX0tm+ EGepPFDgWFszHUq+YbY4hHa3SBihQ/3QtiOnyy3/+lo/miXd53AyhXFg3DjcTs5O NNrUOyq5k/P4lGXW3NwOwwpx6lmk2+EmXpdqedxu4RnSFxZWaAqNnEW5VE15H+3h coJL99Gj8etxviY+Ztw07GL2ChZwRb5NPAAmVDE0jqxcyazpFEJDUC2tkdN6a22+ x/cLRu27mhIsPnbDZfT8Vp5I+C8mENrxysAca6JDp5FQs7+oNYpwdtdRelsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkitXQg/Nal7ZhbmmI2+H5gueiDwwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRWJUIgV261/m2nj1Yit15rFkmwe9Re5FO/ 1H8pbmhd7gAud8yFuM0gsoOlBhO7HjE32sOIayqSBVGZFwjfhK8FqKxLNB/srcps e+l7jtrfjSQjroXAm7pVZ7Oyme2XGExtZ0DYG8lVvxFJopIKC2+6u7pbMUPqUuji c2X8gcn4D0nDmvBZKoZWgbE7xU/urNsmxF0SMR/R2EAru9UxB49pD8gkCO4pcicX 8JzbWfZI1GxfANifGofRwq9GoUxqGhwQt1S0ZztJCM2bmgvWd39SDwemJs+h7014 L1+bZMApQX2WwCqrjWGQXyizUqyvvSvIG4QeB5I0+Hh79rueOds= -----END CERTIFICATE-----Generated at Sat Apr 18 05:49:54 2026 by rpki-client