$ rpki-client -vvvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: nOADXiQxpYMouGTWMnaOx+49HT0OkIyBZPR7f+LxBzM= Subject key identifier: 2C:87:08:A0:83:4C:F3:77:61:BE:F7:45:FF:DE:20:73:BF:B0:5D:33 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 72077D6A69B559519DFD346C05D7803A5585B1E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:14:19 +0000 Manifest this update: Mon 21 Sep 2026 02:09:19 +0000 Manifest next update: Tue 22 Sep 2026 05:34:19 +0000 Files and hashes: 1: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: ORrqnXgdYsjsBsIXLKCmuunSdqfFI7Uq3KL4N6acOFQ=) 2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) 3: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 4: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:07:7d:6a:69:b5:59:51:9d:fd:34:6c:05:d7:80:3a:55:85:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Sep 21 02:09:19 2026 GMT Not After : Sep 22 05:34:19 2026 GMT Subject: CN=2C8708A0834CF37761BEF745FFDE2073BFB05D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:79:34:1a:17:a8:28:89:74:d3:36:6f:8c: e2:87:ce:28:5d:a3:d1:6f:ff:a7:bd:58:f4:7a:63: 04:96:f1:90:c0:81:47:ec:7a:2f:ff:e6:53:8d:ac: 7f:70:22:af:68:7f:94:c0:b8:c3:9b:d5:21:27:c9: 17:17:9e:0f:01:e8:e1:5a:d1:35:86:8a:b3:91:6d: dc:4d:6b:d3:64:73:51:19:fa:aa:ea:1c:de:c3:00: d7:c7:14:6a:9d:49:71:35:ed:49:af:22:be:9d:3f: 28:a5:95:7b:68:83:3b:1d:4f:a1:cf:f3:7b:73:71: 63:64:41:99:df:75:fc:92:dd:d4:fb:1f:7b:47:ed: 00:3d:15:7d:a0:e7:a2:83:f8:5d:59:2b:2d:11:68: 42:89:e4:50:af:25:5b:ec:4d:1a:30:97:fb:7b:25: 94:e9:44:15:ab:b5:47:5c:e2:c0:e6:59:3d:4f:45: 3a:45:41:6c:dc:26:45:3d:64:55:4d:10:1c:91:f7: cf:ce:03:17:2a:81:72:ab:da:28:34:8b:f3:bb:9e: 5b:1e:39:28:17:a9:9e:41:de:8f:81:47:f3:a9:54: f3:ca:e1:7a:9e:62:9a:31:59:b2:e6:6b:48:60:68: 4a:50:50:ee:32:71:d4:ab:b5:8a:93:cb:e8:69:bb: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:08:A0:83:4C:F3:77:61:BE:F7:45:FF:DE:20:73:BF:B0:5D:33 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1a:76:bd:21:14:20:88:ea:81:b8:66:d2:1a:21:a1:66:38: 0c:76:e4:79:f8:57:5d:c4:9d:d3:4e:60:71:3f:43:7b:80:93: cb:7f:da:db:6a:bb:d7:57:b1:98:3d:2e:e0:82:a4:7a:46:54: 89:8a:fa:11:04:22:f5:d7:47:41:ae:ad:13:bb:70:1e:05:17: bd:e7:8e:1a:51:55:69:03:e2:90:ff:68:45:bf:d7:2d:92:56: 42:ff:fd:14:90:e3:46:01:c7:8d:12:02:2e:e0:9c:6d:2d:d0: 81:25:40:5d:f8:05:83:41:9c:86:15:b6:72:54:06:99:a1:86: 5c:b2:10:fa:c5:5e:96:46:e7:dc:47:04:6f:51:ac:4f:f1:31: f7:ef:ce:75:e7:7a:fa:db:e5:d9:d1:a9:91:47:b9:12:7b:3e: b9:70:93:8f:ba:85:19:3e:34:d2:40:16:a5:d2:7a:e8:57:ae: 0f:fc:a2:09:7f:8d:62:78:a7:56:f3:78:23:73:a2:b9:0b:cb: d6:cf:f1:8e:d7:5d:ce:6f:eb:ae:f4:84:d5:2d:ce:3f:a9:b5: 6e:8e:2e:29:2b:bf:d8:02:f9:9a:3c:76:a4:a8:00:65:e8:74: ea:1e:37:3a:5e:2e:9e:35:48:29:64:66:95:4a:f1:d6:30:84: a2:91:b9:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgd9amm1WVGd/TRsBdeAOlWFsecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA5MjEwMjA5MTlaFw0yNjA5MjIwNTM0MTlaMDMxMTAvBgNV BAMTKDJDODcwOEEwODM0Q0YzNzc2MUJFRjc0NUZGREUyMDczQkZCMDVEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZnk0GheoKIl00zZvjOKHzihd o9Fv/6e9WPR6YwSW8ZDAgUfsei//5lONrH9wIq9of5TAuMOb1SEnyRcXng8B6OFa 0TWGirORbdxNa9Nkc1EZ+qrqHN7DANfHFGqdSXE17UmvIr6dPyillXtogzsdT6HP 83tzcWNkQZnfdfyS3dT7H3tH7QA9FX2g56KD+F1ZKy0RaEKJ5FCvJVvsTRowl/t7 JZTpRBWrtUdc4sDmWT1PRTpFQWzcJkU9ZFVNEByR98/OAxcqgXKr2ig0i/O7nlse OSgXqZ5B3o+BR/OpVPPK4XqeYpoxWbLma0hgaEpQUO4ycdSrtYqTy+hpuynXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIcIoINM83dhvvdF/94gc7+wXTMwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwadr0hFCCI6oG4ZtIaIaFmOAx25Hn4V13E ndNOYHE/Q3uAk8t/2ttqu9dXsZg9LuCCpHpGVImK+hEEIvXXR0GurRO7cB4FF73n jhpRVWkD4pD/aEW/1y2SVkL//RSQ40YBx40SAi7gnG0t0IElQF34BYNBnIYVtnJU BpmhhlyyEPrFXpZG59xHBG9RrE/xMffvznXnevrb5dnRqZFHuRJ7Prlwk4+6hRk+ NNJAFqXSeuhXrg/8ogl/jWJ4p1bzeCNzorkLy9bP8Y7XXc5v6670hNUtzj+ptW6O Likrv9gC+Zo8dqSoAGXodOoeNzpeLp41SClkZpVK8dYwhKKRuU0= -----END CERTIFICATE-----Generated at Mon Sep 21 06:33:56 2026 by rpki-client