$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: QcYRjo/5gUZtjfZR9U38FiKDgxx0PTyxFOzU77mcf0c= Subject key identifier: 3B:AC:06:6C:BF:BC:F2:9D:1B:1B:E1:93:13:29:12:BA:17:A0:4D:96 Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 0708C766ACDEA12079B8D0564ECA9E6EF19227E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:16:14 +0000 Manifest this update: Tue 16 Jun 2026 18:11:14 +0000 Manifest next update: Wed 17 Jun 2026 20:27:14 +0000 Files and hashes: 1: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 2: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 3: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 4: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: Egp/aBgJyZZajX5QuYqDkgeE98XewIcGQgw1hD6Zf50=) 5: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 6: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) 7: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 8: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:08:c7:66:ac:de:a1:20:79:b8:d0:56:4e:ca:9e:6e:f1:92:27:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Jun 16 18:11:14 2026 GMT Not After : Jun 17 20:27:14 2026 GMT Subject: CN=3BAC066CBFBCF29D1B1BE193132912BA17A04D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:02:1b:53:2b:6f:d1:f5:63:d7:e4:63:b7: cf:57:0c:11:2c:70:f2:b2:77:14:46:3d:ab:dd:39: 57:29:cd:80:5e:a6:a6:16:16:47:77:19:d0:89:70: da:a9:07:e3:13:b4:69:0b:53:fb:c1:48:2b:02:98: 39:26:8c:25:77:ec:d8:3b:c7:8b:d5:07:c6:dd:16: 2d:5f:5e:54:25:82:2e:cb:fa:7d:55:20:c2:d4:cd: f7:33:32:e7:13:28:45:01:bf:b7:9f:88:06:ef:a0: 87:79:cd:0b:5c:3e:f5:a1:e6:54:c2:3d:ff:41:e3: b6:6c:00:33:94:a2:c4:97:fc:42:f3:bb:2a:b5:18: c5:02:7a:85:40:ba:86:a9:2f:de:6a:3c:d0:d2:bf: 5c:bb:3d:3a:4f:0c:b5:86:76:0d:12:cc:eb:17:4e: a4:67:df:d5:3b:77:30:e3:4e:d4:35:5a:3a:e1:75: d4:c3:2f:bb:d1:36:36:de:7d:3b:39:0a:20:4a:ff: 07:47:b2:e4:1a:b5:a1:8a:08:bd:9b:85:e1:e9:f6: e2:c7:60:26:2d:bc:95:e6:04:44:3b:a8:4b:57:2f: 5e:16:16:13:a3:9d:2b:77:4b:71:e1:19:81:53:e9: 79:eb:a3:56:f5:88:c3:d3:1e:ab:e9:e5:d4:74:34: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:06:6C:BF:BC:F2:9D:1B:1B:E1:93:13:29:12:BA:17:A0:4D:96 X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:03:a1:fa:2c:7e:46:43:68:84:86:96:79:c1:bc:b6:6c:9f: 5c:dd:be:0c:6a:fa:70:b9:72:22:93:8b:f2:12:86:ee:f8:4b: 18:91:e7:6c:06:e7:0c:4a:af:f2:04:f5:a4:68:3e:03:e0:1d: 26:0a:5e:42:ff:c1:40:94:20:96:c0:19:da:46:bd:02:91:81: 09:40:9e:87:d3:3a:2d:5e:4f:b0:8f:a6:b2:fe:a4:d5:17:c2: 6b:f4:67:e7:dd:69:b4:ce:55:40:ff:50:9a:52:e4:d2:6a:f7: 91:51:99:99:b4:bc:44:15:92:79:2f:f2:f5:11:ed:b5:df:1f: 22:96:39:12:8c:eb:dc:89:03:e6:a0:41:66:a7:bd:4f:4f:4c: 7a:fa:4f:3e:c7:d0:33:3d:55:92:ea:7d:cc:4e:92:ca:ed:1f: 0b:9a:e9:c2:51:03:20:ca:9c:c4:60:f0:3d:81:3b:b6:8a:bf: 54:ea:4b:ec:bf:86:d4:e2:ca:5b:53:c8:f4:e2:aa:99:42:45: 9a:ae:91:e8:ee:3c:e8:ae:cd:a1:4a:89:33:ec:f4:11:01:eb: af:8d:3f:21:92:52:1d:21:2d:4c:d6:03:49:21:c1:ae:1d:a4: 15:c3:d4:a1:3a:9a:8c:ab:91:c1:40:af:1d:78:ca:0a:57:9b: ec:3e:4c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwjHZqzeoSB5uNBWTsqebvGSJ+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA2MTYxODExMTRaFw0yNjA2MTcyMDI3MTRaMDMxMTAvBgNV BAMTKDNCQUMwNjZDQkZCQ0YyOUQxQjFCRTE5MzEzMjkxMkJBMTdBMDREOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FgIbUytv0fVj1+Rjt89XDBEs cPKydxRGPavdOVcpzYBepqYWFkd3GdCJcNqpB+MTtGkLU/vBSCsCmDkmjCV37Ng7 x4vVB8bdFi1fXlQlgi7L+n1VIMLUzfczMucTKEUBv7efiAbvoId5zQtcPvWh5lTC Pf9B47ZsADOUosSX/ELzuyq1GMUCeoVAuoapL95qPNDSv1y7PTpPDLWGdg0SzOsX TqRn39U7dzDjTtQ1WjrhddTDL7vRNjbefTs5CiBK/wdHsuQataGKCL2bheHp9uLH YCYtvJXmBEQ7qEtXL14WFhOjnSt3S3HhGYFT6Xnro1b1iMPTHqvp5dR0NAwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6wGbL+88p0bG+GTEykSuhegTZYwHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkDofosfkZDaISGlnnBvLZsn1zdvgxq+nC5 ciKTi/IShu74SxiR52wG5wxKr/IE9aRoPgPgHSYKXkL/wUCUIJbAGdpGvQKRgQlA nofTOi1eT7CPprL+pNUXwmv0Z+fdabTOVUD/UJpS5NJq95FRmZm0vEQVknkv8vUR 7bXfHyKWORKM69yJA+agQWanvU9PTHr6Tz7H0DM9VZLqfcxOksrtHwua6cJRAyDK nMRg8D2BO7aKv1TqS+y/htTiyltTyPTiqplCRZqukejuPOiuzaFKiTPs9BEB66+N PyGSUh0hLUzWA0khwa4dpBXD1KE6moyrkcFArx14ygpXm+w+TOU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:22 2026 by rpki-client