$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json) Hash identifier: 5vgsnHvVQQut7nSnOcgrDUFTUPSWLu8wz458eeZ5zkU= Subject key identifier: 53:51:87:5E:69:81:92:2A:33:A8:99:18:98:6D:17:78:CF:92:FB:53 Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29 Certificate serial: 209242A61FEEF97F18AB80CFB64B55386ED6F032 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft Manifest number: BE Signing time: Tue 22 Sep 2026 05:33:22 +0000 Manifest this update: Tue 22 Sep 2026 05:28:22 +0000 Manifest next update: Wed 23 Sep 2026 09:25:22 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=) 2: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: 7bcQVyKqObpKWlVNzkTABJYVQ+m6dxXzf3x6XocWmwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:92:42:a6:1f:ee:f9:7f:18:ab:80:cf:b6:4b:55:38:6e:d6:f0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29 Validity Not Before: Sep 22 05:28:22 2026 GMT Not After : Sep 23 09:25:22 2026 GMT Subject: CN=5351875E6981922A33A89918986D1778CF92FB53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:01:17:58:01:01:c7:fd:30:47:62:7c:93: 36:51:6c:5e:1c:51:4b:42:60:92:0a:c2:d1:70:77: 49:e2:c5:5d:39:1b:9b:68:c8:f2:f5:c0:8b:cb:dc: 59:ee:2c:d2:fd:50:be:f6:50:46:68:54:6f:90:d1: 4d:7b:f8:d0:45:cd:3e:d3:bf:55:6e:17:9f:37:6a: 1a:70:7d:8e:4f:e9:43:76:23:98:8e:48:ec:b4:25: eb:f0:a2:d4:82:60:1c:d0:64:df:0b:e5:40:64:b8: 21:d8:dc:76:cb:0a:1b:f7:7c:a5:91:d6:38:5d:35: b2:0b:87:8f:bf:86:bc:33:68:48:c2:26:f7:b8:bf: 26:18:db:b6:95:0d:09:73:08:d5:a1:3c:df:ba:42: 70:df:c3:99:95:e9:9c:87:9c:6f:21:12:9f:1e:a5: 36:26:46:5d:d2:86:fd:c9:a9:47:d3:bd:d9:28:d4: 0c:64:49:e6:04:58:f3:31:49:f7:69:48:c8:5f:96: 8c:df:6b:67:e5:1d:1b:47:b8:a9:e9:d4:75:49:20: 26:2a:e7:9e:15:f9:43:4b:05:79:30:b2:e7:80:59: 0d:b4:24:67:55:83:0f:d8:b6:96:26:b3:1b:72:47: b5:d8:38:ca:c6:02:75:9d:6d:4a:f6:7c:27:9f:2d: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:87:5E:69:81:92:2A:33:A8:99:18:98:6D:17:78:CF:92:FB:53 X509v3 Authority Key Identifier: keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:4e:9e:19:06:07:cd:b7:4b:c3:cc:ce:0c:35:3e:eb:f9: ca:09:f0:c9:26:49:73:c4:68:d7:fc:e3:65:fb:35:d3:48:8b: 8f:a2:5e:c6:4e:e9:8d:84:0f:18:12:fc:2d:41:e1:bd:ab:ea: 96:d4:6f:a2:1c:01:90:ee:ff:89:0c:71:62:de:a0:95:b7:35: 45:4b:65:11:73:dc:10:e6:21:5e:60:4d:18:48:2c:78:3a:c7: c5:c9:4c:81:7f:19:74:12:fe:20:a2:16:ef:73:b9:8e:d8:f5: 88:eb:08:33:67:73:c2:03:5a:b0:f1:5e:d6:35:83:e2:7b:b8: 91:7e:dd:9d:b6:14:27:c0:ae:98:21:5f:97:58:97:fa:3e:46: 6f:79:df:57:a3:9b:8b:bf:80:52:f2:1b:28:60:fe:12:cd:48: fc:b2:d1:72:17:50:88:43:3e:09:9b:66:20:71:19:32:16:84: 42:a2:cb:c5:df:22:d1:75:ab:99:c9:45:60:97:00:3f:a9:c1: ac:23:9e:d1:17:cf:33:b1:f2:c4:57:9a:94:b7:93:2a:70:ea: 84:b7:9f:1b:d2:40:1c:d1:58:03:56:5e:31:8e:e4:52:7f:0c: 57:0c:a9:ea:06:3b:f4:3d:40:d2:0e:54:8a:02:59:35:00:db: 93:a2:69:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJJCph/u+X8Yq4DPtktVOG7W8DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JD MUI0OUYyOTAeFw0yNjA5MjIwNTI4MjJaFw0yNjA5MjMwOTI1MjJaMDMxMTAvBgNV BAMTKDUzNTE4NzVFNjk4MTkyMkEzM0E4OTkxODk4NkQxNzc4Q0Y5MkZCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdAEXWAEBx/0wR2J8kzZRbF4c UUtCYJIKwtFwd0nixV05G5toyPL1wIvL3FnuLNL9UL72UEZoVG+Q0U17+NBFzT7T v1VuF583ahpwfY5P6UN2I5iOSOy0JevwotSCYBzQZN8L5UBkuCHY3HbLChv3fKWR 1jhdNbILh4+/hrwzaEjCJve4vyYY27aVDQlzCNWhPN+6QnDfw5mV6ZyHnG8hEp8e pTYmRl3Shv3JqUfTvdko1AxkSeYEWPMxSfdpSMhflozfa2flHRtHuKnp1HVJICYq 554V+UNLBXkwsueAWQ20JGdVgw/YtpYmsxtyR7XYOMrGAnWdbUr2fCefLS61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU1GHXmmBkiozqJkYmG0XeM+S+1MwHwYDVR0j BBgwFoAUMygJIHNAFDNqAknJCaOOe8G0nykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmZTQyNTUtMWQ5MS00ZmNjLWJjZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3 MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JDMUI0OUYyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzI4MDkyMDczNDAxNDMzNkEwMjQ5QzkwOUEzOEU3QkMxQjQ5 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhF N0JDMUI0OUYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg1Tp4ZBgfNt0vDzM4MNT7r+coJ8MkmSXPE aNf842X7NdNIi4+iXsZO6Y2EDxgS/C1B4b2r6pbUb6IcAZDu/4kMcWLeoJW3NUVL ZRFz3BDmIV5gTRhILHg6x8XJTIF/GXQS/iCiFu9zuY7Y9YjrCDNnc8IDWrDxXtY1 g+J7uJF+3Z22FCfArpghX5dYl/o+Rm9531ejm4u/gFLyGyhg/hLNSPyy0XIXUIhD PgmbZiBxGTIWhEKiy8XfItF1q5nJRWCXAD+pwawjntEXzzOx8sRXmpS3kypw6oS3 nxvSQBzRWANWXjGO5FJ/DFcMqeoGO/Q9QNIOVIoCWTUA25OiacM= -----END CERTIFICATE-----Generated at Tue Sep 22 09:28:04 2026 by rpki-client