$ rpki-client -vvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: 053sDirVdq95nUz/t6gUC43WrHeDWuSow/B92O/PGBI= Subject key identifier: 64:81:8D:A6:08:97:4B:19:74:22:5A:9C:6F:A0:A2:EF:D1:06:B0:DD Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 70009A073A171E8E7664C01D104B2993D1289943 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:32:08 +0000 Manifest this update: Wed 17 Jun 2026 03:27:08 +0000 Manifest next update: Thu 18 Jun 2026 05:34:08 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: Lnh5VTk2dDvp1itdAu5I3kjsf4Beh/0N7EpCwUNgOn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:00:9a:07:3a:17:1e:8e:76:64:c0:1d:10:4b:29:93:d1:28:99:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: Jun 17 03:27:08 2026 GMT Not After : Jun 18 05:34:08 2026 GMT Subject: CN=64818DA608974B1974225A9C6FA0A2EFD106B0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:de:69:91:4f:2a:88:d9:e5:b7:01:f7:79: 57:a8:65:9a:99:17:51:e1:46:aa:0d:ce:12:9d:70: 6b:94:50:db:91:f7:59:67:d4:db:2b:7d:cd:3f:c7: 53:67:e0:1c:6a:20:30:12:91:1e:6f:ca:8e:8b:42: 32:51:2f:3d:50:de:45:95:b4:4e:64:f6:24:7d:88: 3e:32:14:a7:99:e0:19:c3:be:1e:98:6f:62:a2:47: 95:c7:09:53:b6:bf:7f:a1:65:a4:27:49:de:54:ca: 50:69:de:18:bc:6f:23:e9:4f:c2:89:f7:0b:3e:82: b1:86:ad:d5:a9:af:14:dc:30:c4:0b:52:7c:73:4d: a4:53:43:51:23:65:69:ce:58:2a:43:ab:1b:3f:c2: c0:ce:78:63:95:6c:d3:c6:3c:88:bd:24:a8:57:8f: 79:39:50:42:e5:86:06:e3:90:2a:b1:22:a8:9e:20: 67:1b:9a:46:6c:91:29:ea:65:0a:00:4b:e7:0a:88: 15:c9:93:e1:e5:54:58:bb:57:8d:0e:43:9b:23:dd: 45:da:5d:f0:d5:b8:b2:c0:e5:51:1a:86:64:25:d3: 8e:5b:4c:2c:6c:be:77:b6:ce:12:7a:b2:2c:02:00: 35:f9:06:4f:46:75:9b:a7:b0:ed:0c:82:1d:28:be: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:8D:A6:08:97:4B:19:74:22:5A:9C:6F:A0:A2:EF:D1:06:B0:DD X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:93:1e:97:be:38:86:8b:83:70:3f:e6:73:a2:20:4e:3a:00: 6d:f2:0b:d8:c6:97:59:e0:77:36:1f:e2:a1:5a:1f:cd:7f:8e: 68:9d:a7:38:cf:68:74:66:dd:bf:97:f7:5f:9f:13:7e:3b:ab: 8a:6a:1b:9b:67:0a:24:3a:6c:1b:95:4a:e9:77:b1:fc:04:0e: 83:ba:58:80:e9:c7:95:77:6f:f8:96:26:4e:53:1a:9d:f3:cb: cf:dd:a2:56:55:c2:25:20:f3:0c:b0:46:1e:95:11:7e:69:7e: 78:fb:eb:ef:aa:a7:41:42:73:2d:db:df:fd:64:8d:6e:bb:98: fe:cb:e5:1a:06:79:a3:fe:50:bf:fd:9a:92:86:33:29:38:db: fc:dc:f6:33:0b:d3:82:d8:79:f0:cb:52:50:ec:ab:37:35:33: c7:5f:b4:4d:24:42:3f:bb:8d:c8:51:81:25:04:a8:73:24:f4: c5:97:46:f6:27:a4:2d:df:1f:68:5e:db:90:d9:1d:63:7a:de: 74:63:93:f6:b2:0a:82:d4:28:b4:44:a0:49:a0:58:0e:e0:a3: 82:52:8f:ec:aa:f6:06:d4:d6:9a:9f:f6:b5:17:80:93:21:b1: 3d:78:0f:20:6b:17:9e:c2:c2:5e:12:9b:dc:8b:e8:75:a3:ce: d2:97:5a:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcACaBzoXHo52ZMAdEEspk9EomUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA2MTcwMzI3MDhaFw0yNjA2MTgwNTM0MDhaMDMxMTAvBgNV BAMTKDY0ODE4REE2MDg5NzRCMTk3NDIyNUE5QzZGQTBBMkVGRDEwNkIwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpt5pkU8qiNnltwH3eVeoZZqZ F1HhRqoNzhKdcGuUUNuR91ln1Nsrfc0/x1Nn4BxqIDASkR5vyo6LQjJRLz1Q3kWV tE5k9iR9iD4yFKeZ4BnDvh6Yb2KiR5XHCVO2v3+hZaQnSd5UylBp3hi8byPpT8KJ 9ws+grGGrdWprxTcMMQLUnxzTaRTQ1EjZWnOWCpDqxs/wsDOeGOVbNPGPIi9JKhX j3k5UELlhgbjkCqxIqieIGcbmkZskSnqZQoAS+cKiBXJk+HlVFi7V40OQ5sj3UXa XfDVuLLA5VEahmQl045bTCxsvne2zhJ6siwCADX5Bk9GdZunsO0Mgh0ovm3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIGNpgiXSxl0Ilqcb6Ci79EGsN0wHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN2THpe+OIaLg3A/5nOiIE46AG3yC9jGl1ng dzYf4qFaH81/jmidpzjPaHRm3b+X91+fE347q4pqG5tnCiQ6bBuVSul3sfwEDoO6 WIDpx5V3b/iWJk5TGp3zy8/dolZVwiUg8wywRh6VEX5pfnj76++qp0FCcy3b3/1k jW67mP7L5RoGeaP+UL/9mpKGMyk42/zc9jML04LYefDLUlDsqzc1M8dftE0kQj+7 jchRgSUEqHMk9MWXRvYnpC3fH2he25DZHWN63nRjk/ayCoLUKLREoEmgWA7go4JS j+yq9gbU1pqf9rUXgJMhsT14DyBrF57Cwl4Sm9yL6HWjztKXWoU= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:31 2026 by rpki-client