$ rpki-client -vvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: 8sGc0bxfOGBfKtrmmEfczzme18o441wYJscgdWwBVhk= Subject key identifier: 68:A7:AF:7C:0B:57:9A:58:1A:E4:E0:C4:86:79:51:63:30:19:94:80 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 15F3A0428CBCB009CDC55A92BA7930CDF8FCCB45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 18:23:03 +0000 Manifest this update: Wed 29 Jul 2026 18:18:03 +0000 Manifest next update: Thu 30 Jul 2026 20:35:03 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) 2: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: lVRVbG7S2oSkzkGAj+RZo0NvrthofJMZLGOAv981Iww=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 4: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f3:a0:42:8c:bc:b0:09:cd:c5:5a:92:ba:79:30:cd:f8:fc:cb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: Jul 29 18:18:03 2026 GMT Not After : Jul 30 20:35:03 2026 GMT Subject: CN=68A7AF7C0B579A581AE4E0C48679516330199480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:0b:47:43:bb:fb:56:25:02:b7:77:70:17: 0c:71:84:eb:06:f6:9c:e6:7e:ba:6f:ba:fc:cc:9b: 0e:29:f2:e3:9d:6a:02:2d:7e:be:44:32:dc:ec:79: be:96:5a:6d:be:17:94:b8:12:d6:ce:6e:22:86:b3: 05:1d:98:9c:40:ff:8b:a2:9a:ef:3a:33:36:b8:8c: da:12:99:ba:94:eb:62:24:26:e6:0e:c8:1e:31:0a: c4:d2:23:7d:e0:d2:5d:5b:80:86:12:bf:68:41:4d: 0d:96:da:61:a3:8c:95:e2:b1:de:17:6a:e4:41:f9: 4e:2b:a1:20:04:6c:72:3f:41:eb:cf:41:61:c0:5b: d3:07:ff:c6:7c:69:70:3e:f4:29:98:34:9f:cd:6c: 93:6f:e3:be:80:34:bd:4b:aa:f5:37:8c:b8:3c:ae: 3c:b2:40:82:85:30:c0:cc:a9:5c:0b:74:38:f9:b2: 96:64:39:c3:7d:be:0e:cc:20:73:91:b5:93:c0:66: 9e:e3:63:50:c0:9b:5e:a8:9b:bf:0b:97:96:65:be: fd:5b:d5:f1:3d:fb:67:1d:48:22:c6:bb:6f:cb:99: 98:84:49:2f:2e:94:35:88:76:ae:4f:b7:3e:4a:67: 81:78:57:4d:1a:9e:21:eb:a7:cc:8c:90:c2:57:d0: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A7:AF:7C:0B:57:9A:58:1A:E4:E0:C4:86:79:51:63:30:19:94:80 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e0:bf:f9:fc:20:e6:fc:4a:46:5d:77:5d:a9:18:81:ac:5d: 53:0b:3b:81:e9:84:ea:46:c0:d3:24:ac:95:f8:2a:ac:af:11: 74:68:d6:1c:85:b5:ff:aa:79:e6:aa:6a:5b:66:53:37:7a:bd: bd:01:0b:e2:c6:34:ae:96:d4:fb:fa:3d:81:93:44:2f:d2:8e: c5:d0:28:23:02:2b:02:a0:7d:95:23:37:ba:4c:fb:8d:d2:d3: 70:a4:66:72:08:15:d5:b7:a4:ec:00:d6:6c:8d:db:4d:36:0a: 0a:8e:ae:03:a5:ee:ec:24:c1:86:ef:7c:d9:4e:1c:4d:d1:97: 0c:7a:a5:b3:3b:d9:51:4b:98:86:fc:4e:14:11:8b:95:20:d7: c5:06:5c:3f:25:fd:ce:a1:e1:14:ea:86:55:8b:60:a0:32:ce: 06:f6:a0:68:92:a2:f9:6b:a7:d8:3b:d5:6d:31:a5:d0:ef:ee: ac:ca:17:6b:37:c7:fe:6c:e9:18:c9:85:d8:2f:e3:5a:53:d8: 99:80:74:1f:dd:44:75:09:ff:e8:86:e0:9b:70:7e:d4:f0:96: c1:48:6c:c7:1a:b0:16:89:d0:e0:ee:c5:57:8e:2b:26:fc:97: 32:9c:a4:f0:0e:fe:70:40:12:00:e9:c0:fa:27:49:74:b5:0e: dd:f6:26:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfOgQoy8sAnNxVqSunkwzfj8y0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA3MjkxODE4MDNaFw0yNjA3MzAyMDM1MDNaMDMxMTAvBgNV BAMTKDY4QTdBRjdDMEI1NzlBNTgxQUU0RTBDNDg2Nzk1MTYzMzAxOTk0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DAtHQ7v7ViUCt3dwFwxxhOsG 9pzmfrpvuvzMmw4p8uOdagItfr5EMtzseb6WWm2+F5S4EtbObiKGswUdmJxA/4ui mu86Mza4jNoSmbqU62IkJuYOyB4xCsTSI33g0l1bgIYSv2hBTQ2W2mGjjJXisd4X auRB+U4roSAEbHI/QevPQWHAW9MH/8Z8aXA+9CmYNJ/NbJNv476ANL1LqvU3jLg8 rjyyQIKFMMDMqVwLdDj5spZkOcN9vg7MIHORtZPAZp7jY1DAm16om78Ll5Zlvv1b 1fE9+2cdSCLGu2/LmZiESS8ulDWIdq5Ptz5KZ4F4V00aniHrp8yMkMJX0PjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKevfAtXmlga5ODEhnlRYzAZlIAwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjgv/n8IOb8SkZdd12pGIGsXVMLO4HphOpG wNMkrJX4KqyvEXRo1hyFtf+qeeaqaltmUzd6vb0BC+LGNK6W1Pv6PYGTRC/SjsXQ KCMCKwKgfZUjN7pM+43S03CkZnIIFdW3pOwA1myN2002CgqOrgOl7uwkwYbvfNlO HE3Rlwx6pbM72VFLmIb8ThQRi5Ug18UGXD8l/c6h4RTqhlWLYKAyzgb2oGiSovlr p9g71W0xpdDv7qzKF2s3x/5s6RjJhdgv41pT2JmAdB/dRHUJ/+iG4JtwftTwlsFI bMcasBaJ0ODuxVeOKyb8lzKcpPAO/nBAEgDpwPonSXS1Dt32JqI= -----END CERTIFICATE-----Generated at Wed Jul 29 21:32:19 2026 by rpki-client