$ rpki-client -vvvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: HQI7IJ8RFScU8NI4nHqPOqddsHlpUE7wTCduWfnUgV0= Subject key identifier: 65:58:2F:19:E5:4A:8B:92:00:12:1F:8D:2E:7B:B4:90:36:7A:D7:59 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 215D5A4DD632F96469C9FE5D2CF0944EBDEC739F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: BD Signing time: Mon 21 Sep 2026 16:01:28 +0000 Manifest this update: Mon 21 Sep 2026 15:56:28 +0000 Manifest next update: Tue 22 Sep 2026 16:50:28 +0000 Files and hashes: 1: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) 3: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) 4: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: lBUDj0FrEIaf4yT/eHqXMNsTGF5L4PeaDoctwCcHg2g=) 5: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5d:5a:4d:d6:32:f9:64:69:c9:fe:5d:2c:f0:94:4e:bd:ec:73:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: Sep 21 15:56:28 2026 GMT Not After : Sep 22 16:50:28 2026 GMT Subject: CN=65582F19E54A8B9200121F8D2E7BB490367AD759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:68:f0:ee:88:6c:bc:d3:b3:c6:8a:ab:a8: a9:e1:84:0d:37:c8:c4:44:13:d6:2c:7c:eb:a9:04: f1:fd:dd:06:b8:61:71:19:fb:f5:81:6c:19:ea:16: 64:ab:6f:8e:4f:43:92:58:bf:48:b0:af:2d:d6:a6: f9:ca:72:f1:e9:a9:2d:23:94:98:95:48:49:7d:83: 8e:dc:f1:de:04:b0:02:bc:cb:24:28:1f:84:43:7f: 74:3a:70:6f:3a:f9:4b:d1:73:4f:dd:47:49:23:e3: c5:ec:b1:a1:b1:70:c0:3a:17:29:ea:f5:37:ad:9e: f1:cf:10:3e:b9:ed:a3:99:47:5c:f7:f3:78:17:2c: de:cf:ca:e5:f7:49:28:44:b6:98:c8:29:f3:bf:7a: 92:90:ac:a5:43:f1:71:bb:0c:1d:38:b4:6d:80:7f: 14:7d:f1:6c:dc:6f:c5:3a:fa:67:49:68:ed:f9:7c: 3a:a4:4c:6b:c2:82:73:e3:7a:0f:05:4c:c3:69:77: 2e:ef:ca:e7:88:57:e1:f9:7b:1c:4d:b0:66:eb:c7: c7:8c:c6:a0:f1:68:96:4b:95:82:26:e2:aa:6c:6d: b0:ac:be:93:30:f1:56:fb:cf:3a:9f:e5:f4:de:99: 7f:0a:21:7c:30:46:51:dc:e3:0a:ab:63:f8:7c:cf: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:58:2F:19:E5:4A:8B:92:00:12:1F:8D:2E:7B:B4:90:36:7A:D7:59 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4e:d0:e5:d4:13:87:17:1a:6f:b3:31:06:b9:95:7c:c9:ef: a8:7a:a8:6b:d5:67:78:ff:63:a7:4b:00:e8:7a:6b:a4:f8:6b: b7:fb:e0:a5:65:aa:9c:68:9f:c9:9e:1b:40:14:f3:4a:df:62: 08:bd:30:71:f2:a0:02:11:7c:7a:b9:70:54:e1:71:a2:c2:f8: 17:b2:40:10:32:bc:ae:a0:79:e8:a7:89:d2:e1:85:34:c6:f0: a9:73:8d:56:92:9f:af:d9:89:07:da:12:3f:73:93:cb:2e:63: 5e:d5:c8:23:96:d6:3f:1c:90:11:f8:b7:51:b6:e3:7b:56:44: 07:f9:91:6e:ef:17:d6:6a:4c:e4:13:71:8b:a7:c2:1f:46:ba: 9e:c1:ce:1b:fc:d5:d8:f5:55:0a:06:98:1c:6a:f0:a3:54:88: 7d:0d:19:92:d9:48:03:fe:2c:00:9c:93:98:7a:4d:eb:13:ad: 92:61:8b:96:e0:a1:df:c1:03:c4:e6:8c:b3:41:26:d7:18:42: 9b:f8:fa:cd:e0:c7:40:cb:3a:80:74:6c:1e:e6:1c:bb:ad:ad: d8:a6:99:50:20:c6:39:3d:a6:2c:cc:dd:00:26:e1:93:da:69: 42:f3:a0:3e:2c:0e:3e:c5:47:ad:56:5d:65:bb:ba:bb:80:74: d0:44:0c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIV1aTdYy+WRpyf5dLPCUTr3sc58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA5MjExNTU2MjhaFw0yNjA5MjIxNjUwMjhaMDMxMTAvBgNV BAMTKDY1NTgyRjE5RTU0QThCOTIwMDEyMUY4RDJFN0JCNDkwMzY3QUQ3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7A2jw7ohsvNOzxoqrqKnhhA03 yMREE9YsfOupBPH93Qa4YXEZ+/WBbBnqFmSrb45PQ5JYv0iwry3WpvnKcvHpqS0j lJiVSEl9g47c8d4EsAK8yyQoH4RDf3Q6cG86+UvRc0/dR0kj48XssaGxcMA6Fynq 9TetnvHPED657aOZR1z383gXLN7PyuX3SShEtpjIKfO/epKQrKVD8XG7DB04tG2A fxR98Wzcb8U6+mdJaO35fDqkTGvCgnPjeg8FTMNpdy7vyueIV+H5exxNsGbrx8eM xqDxaJZLlYIm4qpsbbCsvpMw8Vb7zzqf5fTemX8KIXwwRlHc4wqrY/h8zyOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVgvGeVKi5IAEh+NLnu0kDZ611kwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5O0OXUE4cXGm+zMQa5lXzJ76h6qGvVZ3j/ Y6dLAOh6a6T4a7f74KVlqpxon8meG0AU80rfYgi9MHHyoAIRfHq5cFThcaLC+Bey QBAyvK6geeinidLhhTTG8KlzjVaSn6/ZiQfaEj9zk8suY17VyCOW1j8ckBH4t1G2 43tWRAf5kW7vF9ZqTOQTcYunwh9Gup7Bzhv81dj1VQoGmBxq8KNUiH0NGZLZSAP+ LACck5h6TesTrZJhi5bgod/BA8TmjLNBJtcYQpv4+s3gx0DLOoB0bB7mHLutrdim mVAgxjk9pizM3QAm4ZPaaULzoD4sDj7FR61WXWW7uruAdNBEDIA= -----END CERTIFICATE-----Generated at Mon Sep 21 20:20:03 2026 by rpki-client