$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: 50YgCJEqDLh60N9cDE9/a2tdK81raScrO0ObYnOKOho= Subject key identifier: B4:00:4E:A2:1B:5F:D8:38:6A:DA:E3:9A:44:57:23:4D:AC:51:20:78 Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 42ECA3DE810A07708659BC8432DF980CDADA3819 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: BD Signing time: Tue 22 Sep 2026 14:13:55 +0000 Manifest this update: Tue 22 Sep 2026 14:08:55 +0000 Manifest next update: Wed 23 Sep 2026 15:36:55 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: Sh00AkVCnRwmS04dNdEA271ZlwN7Fs6hPUGnYTYgyFw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ec:a3:de:81:0a:07:70:86:59:bc:84:32:df:98:0c:da:da:38:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: Sep 22 14:08:55 2026 GMT Not After : Sep 23 15:36:55 2026 GMT Subject: CN=B4004EA21B5FD8386ADAE39A4457234DAC512078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:58:c1:2b:ff:34:85:41:6e:22:8f:6e:6a: 94:83:57:21:52:9b:dc:3b:40:4b:f5:a3:71:07:1c: ae:34:0f:63:dc:ac:ee:b2:01:98:85:41:7b:a4:8c: 3e:d8:65:c3:20:b1:8f:85:86:38:fb:a9:55:ca:81: 87:6e:c7:6f:4e:f3:98:17:07:78:13:6d:83:60:8f: 37:62:2a:d3:b5:3c:6e:ee:c6:a2:54:5b:4c:d1:cd: 3f:24:85:57:ba:71:d9:ca:77:85:3a:fb:ec:a3:6a: cf:cd:15:08:d3:d5:e6:43:ac:69:68:48:af:e7:e1: a6:db:1a:52:22:f9:29:33:7e:70:73:d1:4c:3c:d7: 4e:a4:95:d0:d1:bc:ff:51:4f:63:97:30:14:3f:5e: 61:f6:e3:3f:36:c6:ae:95:9a:6b:a5:51:49:c5:34: 7d:e7:70:03:76:d4:eb:6d:32:32:aa:3b:4f:24:58: dd:85:0f:96:bc:35:d8:22:26:be:32:df:cb:cc:c1: 30:3c:7b:d3:8c:d3:c0:2d:7f:be:f8:79:94:b9:f0: d9:f7:f0:9a:91:3a:bb:3d:b9:a8:c4:87:4e:2b:d8: 33:10:6a:6a:80:37:cf:d6:dd:fd:9c:0c:ae:40:57: 51:45:b3:a5:51:77:7c:c0:a8:0a:57:a9:32:ce:ce: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:00:4E:A2:1B:5F:D8:38:6A:DA:E3:9A:44:57:23:4D:AC:51:20:78 X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:cd:cd:22:11:1c:62:31:1a:fd:04:bd:ef:b6:e2:96:86:9a: 87:c2:c9:0d:ec:5c:11:b5:93:6d:ee:7d:9a:9a:ed:c4:78:70: bd:00:8d:67:36:ad:70:70:34:e0:02:01:48:f8:21:14:1d:27: 38:22:3e:46:c5:35:0b:9d:62:81:84:94:34:7f:2d:be:56:71: 3b:9d:9a:3e:c5:b7:e5:8e:5d:8e:d2:c8:0a:f4:3d:27:57:e7: 9e:43:87:d0:cc:0d:fe:02:f6:9c:ed:9c:57:15:e9:4b:1f:2c: 4b:98:b0:07:51:91:b6:2a:76:49:5e:69:be:59:5b:2a:91:4f: e5:6f:1a:19:55:f4:32:4b:01:80:e5:98:da:26:b4:41:0c:10: 5d:f9:79:4f:f5:53:a3:3f:9c:1c:43:71:61:27:db:d9:6d:76: 9f:89:5d:a9:df:a5:a2:67:a8:3b:d0:e9:d6:00:32:8c:de:6b: d0:30:08:b8:47:ae:32:70:ff:52:3f:f7:73:52:dd:55:31:b8: ac:a1:86:7a:cc:06:a3:70:f4:77:62:38:45:69:d6:c6:e7:68: dc:64:ec:12:f2:17:d3:0a:78:c7:d7:04:80:bc:9d:80:23:ec: 99:80:3a:90:32:97:a3:0e:3d:71:7e:8b:c5:8b:6d:78:6d:e9: 14:a0:8d:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuyj3oEKB3CGWbyEMt+YDNraOBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA5MjIxNDA4NTVaFw0yNjA5MjMxNTM2NTVaMDMxMTAvBgNV BAMTKEI0MDA0RUEyMUI1RkQ4Mzg2QURBRTM5QTQ0NTcyMzREQUM1MTIwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/FjBK/80hUFuIo9uapSDVyFS m9w7QEv1o3EHHK40D2PcrO6yAZiFQXukjD7YZcMgsY+Fhjj7qVXKgYdux29O85gX B3gTbYNgjzdiKtO1PG7uxqJUW0zRzT8khVe6cdnKd4U6++yjas/NFQjT1eZDrGlo SK/n4abbGlIi+SkzfnBz0Uw8106kldDRvP9RT2OXMBQ/XmH24z82xq6VmmulUUnF NH3ncAN21OttMjKqO08kWN2FD5a8NdgiJr4y38vMwTA8e9OM08Atf774eZS58Nn3 8JqROrs9uajEh04r2DMQamqAN8/W3f2cDK5AV1FFs6VRd3zAqApXqTLOznzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtABOohtf2Dhq2uOaRFcjTaxRIHgwHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrNzSIRHGIxGv0Eve+24paGmofCyQ3sXBG1 k23ufZqa7cR4cL0AjWc2rXBwNOACAUj4IRQdJzgiPkbFNQudYoGElDR/Lb5WcTud mj7Ft+WOXY7SyAr0PSdX555Dh9DMDf4C9pztnFcV6UsfLEuYsAdRkbYqdkleab5Z WyqRT+VvGhlV9DJLAYDlmNomtEEMEF35eU/1U6M/nBxDcWEn29ltdp+JXanfpaJn qDvQ6dYAMozea9AwCLhHrjJw/1I/93NS3VUxuKyhhnrMBqNw9HdiOEVp1sbnaNxk 7BLyF9MKeMfXBIC8nYAj7JmAOpAyl6MOPXF+i8WLbXht6RSgjfU= -----END CERTIFICATE-----Generated at Tue Sep 22 18:45:34 2026 by rpki-client