$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: gAfp+7NTrUJh8J7r7ZTqgLz6iCpyBEA+xExIffAk1Hk= Subject key identifier: A6:BC:DE:98:A4:F1:3D:4E:14:03:6F:3C:7B:66:8B:58:7E:94:50:99 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 35E34B0C61529EF89C6CDDE2AC77487190727301 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 05:53:02 +0000 Manifest this update: Wed 29 Jul 2026 05:48:02 +0000 Manifest next update: Thu 30 Jul 2026 06:28:02 +0000 Files and hashes: 1: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) 2: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 3: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) 4: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: hYMu+vxFlndeVRbZ0FJU+VLF8FjmHbBWWf9z66HYDPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:4b:0c:61:52:9e:f8:9c:6c:dd:e2:ac:77:48:71:90:72:73:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Jul 29 05:48:02 2026 GMT Not After : Jul 30 06:28:02 2026 GMT Subject: CN=A6BCDE98A4F13D4E14036F3C7B668B587E945099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:37:d5:04:0b:99:6a:54:0a:2c:ad:72:a3: 9f:4f:68:7b:02:80:4f:3e:da:7e:41:2c:58:75:44: 96:ba:2a:42:8e:f9:90:e0:6d:12:5c:80:00:cc:93: 0c:b1:79:2d:7c:25:1f:9f:90:fd:ea:88:9c:b5:f2: 84:e9:98:db:8a:58:f5:ad:f8:a6:cd:24:67:72:4d: dd:44:94:62:80:8d:c8:3b:70:e9:9f:60:02:31:9d: 9e:0b:50:a7:2a:3b:0c:ca:b3:18:5f:a8:28:40:bb: a5:dc:5f:f0:e2:20:5d:46:7e:99:fe:a5:a6:74:94: 4a:18:30:ab:12:72:48:8d:4c:fb:31:80:6e:fe:b5: 62:43:50:16:2e:24:3a:e5:5f:cd:77:cb:55:89:90: 7c:79:b3:33:22:56:94:0b:53:1f:20:d9:ce:ce:2b: c1:19:31:90:c7:59:ca:a7:d4:30:de:dc:93:ce:4e: 06:a7:73:56:85:da:65:ca:89:97:e2:8d:2f:f0:c3: 79:20:0f:92:11:aa:a5:9f:b4:af:30:78:6c:fd:64: 82:b5:b1:0a:c4:05:b5:40:e0:54:29:d7:ec:fd:ab: 12:d5:a7:8d:8d:81:90:85:a3:17:ed:2e:d2:44:0c: dc:f4:e6:05:28:2a:71:9b:9e:5d:e0:c6:8b:e3:1b: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:DE:98:A4:F1:3D:4E:14:03:6F:3C:7B:66:8B:58:7E:94:50:99 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6a:99:ff:a5:6b:70:f1:6c:39:d2:42:89:07:f0:94:05:45: df:ac:5b:57:eb:e9:68:3c:34:62:90:b0:29:71:67:f6:4b:86: be:3d:4a:c3:a9:ae:1e:8e:17:5b:4a:d5:96:e4:64:27:72:1b: 5e:24:5a:31:ba:ad:a0:af:cf:16:90:45:47:b5:07:32:ab:8d: 0e:1c:39:48:4a:55:a7:a7:d7:39:f7:ba:b2:ad:d3:b1:e8:c9: 40:ea:ab:53:64:9a:9d:c5:48:71:84:5d:bc:f1:71:3f:3b:91: 5e:ba:5b:b1:44:c6:cc:72:85:15:25:07:4a:f8:06:29:c5:77: d3:6b:d9:e3:0f:fa:7f:37:f5:6b:7b:43:40:c4:20:5b:7f:9f: b9:ee:a6:93:7e:87:27:e3:d3:44:51:ec:20:f9:9d:ba:03:83: 2b:2a:fa:5d:38:50:9f:9b:d6:9c:08:64:7c:7d:5e:82:0d:40: 37:c8:16:6c:67:d3:c2:41:09:0c:84:ef:be:54:62:4b:15:ca: d8:cf:22:90:ad:1e:1c:4d:6c:5c:ba:a1:5a:a9:b0:46:61:33: 70:34:45:ec:2b:19:7c:e7:4c:d8:17:0a:13:b1:a6:85:29:3b: d3:4f:45:bd:dd:a8:45:d0:c9:65:a2:1b:79:80:de:95:14:69: f0:20:1d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeNLDGFSnvicbN3irHdIcZBycwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA3MjkwNTQ4MDJaFw0yNjA3MzAwNjI4MDJaMDMxMTAvBgNV BAMTKEE2QkNERTk4QTRGMTNENEUxNDAzNkYzQzdCNjY4QjU4N0U5NDUwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVjfVBAuZalQKLK1yo59PaHsC gE8+2n5BLFh1RJa6KkKO+ZDgbRJcgADMkwyxeS18JR+fkP3qiJy18oTpmNuKWPWt +KbNJGdyTd1ElGKAjcg7cOmfYAIxnZ4LUKcqOwzKsxhfqChAu6XcX/DiIF1Gfpn+ paZ0lEoYMKsSckiNTPsxgG7+tWJDUBYuJDrlX813y1WJkHx5szMiVpQLUx8g2c7O K8EZMZDHWcqn1DDe3JPOTganc1aF2mXKiZfijS/ww3kgD5IRqqWftK8weGz9ZIK1 sQrEBbVA4FQp1+z9qxLVp42NgZCFoxftLtJEDNz05gUoKnGbnl3gxovjG9+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprzemKTxPU4UA288e2aLWH6UUJkwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZqmf+la3DxbDnSQokH8JQFRd+sW1fr6Wg8 NGKQsClxZ/ZLhr49SsOprh6OF1tK1ZbkZCdyG14kWjG6raCvzxaQRUe1BzKrjQ4c OUhKVaen1zn3urKt07HoyUDqq1Nkmp3FSHGEXbzxcT87kV66W7FExsxyhRUlB0r4 BinFd9Nr2eMP+n839Wt7Q0DEIFt/n7nuppN+hyfj00RR7CD5nboDgysq+l04UJ+b 1pwIZHx9XoINQDfIFmxn08JBCQyE775UYksVytjPIpCtHhxNbFy6oVqpsEZhM3A0 RewrGXznTNgXChOxpoUpO9NPRb3dqEXQyWWiG3mA3pUUafAgHYQ= -----END CERTIFICATE-----Generated at Wed Jul 29 14:14:31 2026 by rpki-client