$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: u5Me8VGmwXZIgRBJ/2UWMVzPkxrIy7mFupn1Nqu2TXM= Subject key identifier: AA:51:7E:2F:F3:CD:76:AF:25:A8:72:B8:ED:6D:CC:3B:0C:1F:DD:4F Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 31530C3E19AFA69DDDDC84287EC087F76F4A2B10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 10:53:01 +0000 Manifest this update: Sun 27 Sep 2026 10:48:01 +0000 Manifest next update: Mon 28 Sep 2026 12:18:01 +0000 Files and hashes: 1: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 2: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 3: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 4: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: l8TVuInz1AUecn1m7OGRb6MidOj3PL0YkhHO9nRaCmE=) 5: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 6: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 7: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) 8: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 12:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:53:0c:3e:19:af:a6:9d:dd:dc:84:28:7e:c0:87:f7:6f:4a:2b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Sep 27 10:48:01 2026 GMT Not After : Sep 28 12:18:01 2026 GMT Subject: CN=AA517E2FF3CD76AF25A872B8ED6DCC3B0C1FDD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:88:5c:d5:2a:d9:99:33:fd:6c:b1:d4:dc: e4:cc:8e:6a:bd:12:1e:02:c0:e8:82:6c:61:11:54: 78:b1:6d:1d:4b:6a:bf:38:f1:c1:f4:42:77:e6:a6: 84:33:6a:55:00:d6:e3:14:0c:ad:9e:d1:cb:85:3a: 3d:21:e3:c3:e8:5f:82:c0:7b:62:1c:b3:47:ae:51: 95:48:07:66:3e:6d:63:69:47:9d:d0:e5:ec:f3:04: 28:f8:33:77:a8:22:db:e6:d9:df:5e:9d:ea:8d:e4: ed:c6:95:8a:aa:e8:fe:42:09:70:e7:0d:62:4b:ae: a4:8d:1e:21:57:05:be:95:dc:28:53:1d:02:0e:e0: ae:7e:d8:27:8c:d8:8a:9c:86:8b:18:5e:89:4f:70: 21:71:45:c1:70:51:47:28:89:2d:c7:5d:67:62:f5: ce:cf:01:db:e7:ea:a2:b0:2c:ec:a2:3e:8a:93:19: 3d:c6:b7:76:ab:a6:37:2b:32:1b:00:ac:81:11:17: 4f:c0:c8:ba:fd:fc:22:4b:ac:eb:db:e3:94:1c:59: 34:b4:b4:bf:8b:bd:34:78:1f:43:30:a7:d5:b9:cc: 0c:f4:91:85:c1:b5:62:5f:9a:7b:44:0c:d5:a0:59: 73:15:37:e1:5c:75:eb:e9:dd:0f:34:b6:be:37:f9: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:7E:2F:F3:CD:76:AF:25:A8:72:B8:ED:6D:CC:3B:0C:1F:DD:4F X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ec:1d:3f:fc:23:71:c7:39:fa:a7:10:4f:b5:8a:a5:f2:d2: 94:5e:90:ed:c5:04:ff:bd:93:08:7f:67:da:95:62:69:21:85: a6:c1:6e:42:98:13:48:70:44:14:66:4c:82:39:d9:58:37:0b: 6a:fd:18:d6:91:dd:fc:8e:50:d0:61:81:2c:57:2c:c1:0d:e9: 0b:8a:69:44:7b:9c:61:d5:79:0a:9f:65:a4:32:2a:b0:9f:9d: bc:05:3d:5c:70:59:37:32:f2:ec:6a:9f:06:a7:dc:84:c3:24: 9c:7b:dd:cd:9e:61:1c:30:ba:9a:02:4d:c1:fd:5d:91:db:14: 8d:a8:33:aa:eb:8a:fc:71:f8:cf:be:fb:42:bb:50:2b:fe:a2: ed:3e:a1:ce:3a:1e:19:c9:45:80:04:b5:b7:df:5e:2a:92:70: bc:53:17:25:34:78:61:98:2c:cd:7d:74:2e:bf:9f:60:0e:ed: 03:8e:55:c3:4e:9c:88:c0:3f:b8:e6:91:24:20:8c:36:2b:e5: 8a:a1:c2:14:9a:1f:fc:7f:46:08:96:9b:a7:8c:da:21:9b:59: 2e:2b:ec:17:20:a1:62:46:27:43:c6:90:0b:fe:d1:fc:f4:41: 8e:e7:a4:b8:83:74:75:57:3b:a7:fa:53:0f:a8:89:5f:aa:93: 6c:5b:1c:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVMMPhmvpp3d3IQofsCH929KKxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA5MjcxMDQ4MDFaFw0yNjA5MjgxMjE4MDFaMDMxMTAvBgNV BAMTKEFBNTE3RTJGRjNDRDc2QUYyNUE4NzJCOEVENkRDQzNCMEMxRkRENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGIhc1SrZmTP9bLHU3OTMjmq9 Eh4CwOiCbGERVHixbR1Lar848cH0QnfmpoQzalUA1uMUDK2e0cuFOj0h48PoX4LA e2Ics0euUZVIB2Y+bWNpR53Q5ezzBCj4M3eoItvm2d9eneqN5O3GlYqq6P5CCXDn DWJLrqSNHiFXBb6V3ChTHQIO4K5+2CeM2IqchosYXolPcCFxRcFwUUcoiS3HXWdi 9c7PAdvn6qKwLOyiPoqTGT3Gt3arpjcrMhsArIERF0/AyLr9/CJLrOvb45QcWTS0 tL+LvTR4H0Mwp9W5zAz0kYXBtWJfmntEDNWgWXMVN+Fcdevp3Q80tr43+VzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlF+L/PNdq8lqHK47W3MOwwf3U8wHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjsHT/8I3HHOfqnEE+1iqXy0pRekO3FBP+9 kwh/Z9qVYmkhhabBbkKYE0hwRBRmTII52Vg3C2r9GNaR3fyOUNBhgSxXLMEN6QuK aUR7nGHVeQqfZaQyKrCfnbwFPVxwWTcy8uxqnwan3ITDJJx73c2eYRwwupoCTcH9 XZHbFI2oM6rrivxx+M+++0K7UCv+ou0+oc46HhnJRYAEtbffXiqScLxTFyU0eGGY LM19dC6/n2AO7QOOVcNOnIjAP7jmkSQgjDYr5YqhwhSaH/x/RgiWm6eM2iGbWS4r 7BcgoWJGJ0PGkAv+0fz0QY7npLiDdHVXO6f6Uw+oiV+qk2xbHN0= -----END CERTIFICATE-----Generated at Mon Sep 28 03:24:31 2026 by rpki-client