$ rpki-client -vvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json) Hash identifier: urvOpOiJyynUI82eQRwQiTJESTRnQPpRZQsZ5VLPt2s= Subject key identifier: EA:2A:6F:7F:93:70:DE:EC:D3:6F:37:1D:9C:0E:30:0C:7E:F5:77:F1 Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29 Certificate serial: 54FFA11DA1EACEA520E6BC48A894582839590AB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:05:14 +0000 Manifest this update: Wed 17 Jun 2026 06:00:14 +0000 Manifest next update: Thu 18 Jun 2026 09:31:14 +0000 Files and hashes: 1: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: xOqFuti62PO6NMMnWKJnRGMBQwsAQQIk50b6hM5TVEk=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ff:a1:1d:a1:ea:ce:a5:20:e6:bc:48:a8:94:58:28:39:59:0a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29 Validity Not Before: Jun 17 06:00:14 2026 GMT Not After : Jun 18 09:31:14 2026 GMT Subject: CN=EA2A6F7F9370DEECD36F371D9C0E300C7EF577F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:e0:61:8f:bd:ae:f7:6b:a0:ec:91:70:02: 04:b4:53:69:de:4f:87:24:2f:a1:7e:29:5b:c7:10: d1:ae:95:00:33:fc:26:b4:f4:a0:90:97:40:7d:38: 7e:21:e3:fc:ca:34:ff:ad:85:67:e1:e2:a9:c2:34: 1f:9d:83:23:d1:dd:1a:bc:70:2c:19:a6:3b:88:51: 2d:5b:66:58:c5:7e:be:4c:1c:25:37:69:a3:86:9b: 36:ec:03:ea:e1:d1:bb:2d:ca:76:66:2f:1d:cb:95: c4:e9:23:68:61:60:50:9d:3a:ed:09:a8:3b:9f:94: e7:5c:de:e0:75:a1:cb:b7:8d:da:7e:50:eb:19:96: 50:41:25:32:1b:be:98:c9:f6:7b:76:63:c4:d8:64: cb:e3:56:e4:48:a3:65:32:de:98:95:af:c8:d9:99: cb:09:f9:0a:e2:2c:36:2e:5a:47:17:16:0f:87:9f: b8:ff:36:75:d7:af:55:87:7c:5b:d1:ae:b1:45:99: d7:4e:2f:e9:6f:2d:f8:4b:ab:b0:6c:9a:ee:9b:eb: fe:28:e6:22:e1:e5:3a:c2:1c:58:48:91:d6:8b:0c: 2c:73:e9:57:f2:99:a9:f5:c1:b1:92:b6:f1:a2:c7: 20:58:86:26:2b:15:25:28:79:78:de:ab:e4:99:f0: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2A:6F:7F:93:70:DE:EC:D3:6F:37:1D:9C:0E:30:0C:7E:F5:77:F1 X509v3 Authority Key Identifier: keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:51:ed:0c:16:0b:70:93:cc:30:8f:ef:e4:85:6d:5e:96:e0: 6d:23:1e:17:8d:75:4b:01:e8:0d:91:3d:7b:8a:c8:c9:68:ee: 1e:86:b5:24:ee:6f:f5:c7:28:cb:71:5d:fa:2e:e9:b6:9f:55: b9:85:54:c8:28:fd:3e:ee:23:d7:93:a9:e7:78:1b:e6:c3:29: 2a:d3:80:8b:2e:5f:65:79:10:86:77:9c:f5:22:02:a4:8e:8f: 83:a2:92:f7:82:40:32:c6:b0:b5:b4:42:4f:1b:57:fc:06:db: 93:89:b6:16:92:4f:2d:93:38:f8:cc:43:38:d6:d8:af:78:27: 60:1f:5a:38:c9:d7:ff:36:6c:a8:b8:78:9b:cc:62:c4:ff:68: 30:28:5d:bc:7f:16:d9:d6:c1:49:5c:31:39:74:76:b7:dc:c0: 91:d9:df:39:1f:b1:51:f4:84:9e:e7:f9:cb:ba:3b:e5:c0:67: be:9c:db:5f:b1:de:ef:c7:31:28:39:db:e2:8a:98:12:8f:fb: 48:d4:d2:7f:29:19:ab:c1:c0:bc:79:b1:1f:fe:1b:26:eb:e7: 5f:ae:c2:79:33:59:ec:cc:29:7f:24:25:03:5e:a2:4c:03:cd: 3a:ed:06:04:74:77:b0:18:08:c8:53:b9:e1:11:da:10:4d:45: cb:7b:d8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVP+hHaHqzqUg5rxIqJRYKDlZCrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JD MUI0OUYyOTAeFw0yNjA2MTcwNjAwMTRaFw0yNjA2MTgwOTMxMTRaMDMxMTAvBgNV BAMTKEVBMkE2RjdGOTM3MERFRUNEMzZGMzcxRDlDMEUzMDBDN0VGNTc3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDleBhj72u92ug7JFwAgS0U2ne T4ckL6F+KVvHENGulQAz/Ca09KCQl0B9OH4h4/zKNP+thWfh4qnCNB+dgyPR3Rq8 cCwZpjuIUS1bZljFfr5MHCU3aaOGmzbsA+rh0bstynZmLx3LlcTpI2hhYFCdOu0J qDuflOdc3uB1ocu3jdp+UOsZllBBJTIbvpjJ9nt2Y8TYZMvjVuRIo2Uy3piVr8jZ mcsJ+QriLDYuWkcXFg+Hn7j/NnXXr1WHfFvRrrFFmddOL+lvLfhLq7Bsmu6b6/4o 5iLh5TrCHFhIkdaLDCxz6Vfyman1wbGStvGixyBYhiYrFSUoeXjeq+SZ8AY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ipvf5Nw3uzTbzcdnA4wDH71d/EwHwYDVR0j BBgwFoAUMygJIHNAFDNqAknJCaOOe8G0nykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmZTQyNTUtMWQ5MS00ZmNjLWJjZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3 MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JDMUI0OUYyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzI4MDkyMDczNDAxNDMzNkEwMjQ5QzkwOUEzOEU3QkMxQjQ5 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhF N0JDMUI0OUYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBR7QwWC3CTzDCP7+SFbV6W4G0jHheNdUsB 6A2RPXuKyMlo7h6GtSTub/XHKMtxXfou6bafVbmFVMgo/T7uI9eTqed4G+bDKSrT gIsuX2V5EIZ3nPUiAqSOj4OikveCQDLGsLW0Qk8bV/wG25OJthaSTy2TOPjMQzjW 2K94J2AfWjjJ1/82bKi4eJvMYsT/aDAoXbx/FtnWwUlcMTl0drfcwJHZ3zkfsVH0 hJ7n+cu6O+XAZ76c21+x3u/HMSg52+KKmBKP+0jU0n8pGavBwLx5sR/+Gybr51+u wnkzWezMKX8kJQNeokwDzTrtBgR0d7AYCMhTueER2hBNRct72PM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:07 2026 by rpki-client