$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: supcm2clizgGwo0vcxPeT/QXeOrN/mK8IieU5CgzrG4= Subject key identifier: 04:48:D9:AE:C2:C3:D1:26:15:0E:C8:E7:FF:18:50:3B:DF:C2:58:9C Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 4E908CE577AAD15DFCC557BD3CE687224C5AA2CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: 3D Signing time: Mon 15 Jun 2026 12:05:32 +0000 Manifest this update: Mon 15 Jun 2026 12:00:32 +0000 Manifest next update: Tue 16 Jun 2026 13:59:32 +0000 Files and hashes: 1: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: W7vfrH2TSOq2cIfXt99Q8OiTAk77J913XaESPYHIHCs=) 2: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 3: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 4: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 5: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 6: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 7: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) 8: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 9: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 10: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 11: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:90:8c:e5:77:aa:d1:5d:fc:c5:57:bd:3c:e6:87:22:4c:5a:a2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Jun 15 12:00:32 2026 GMT Not After : Jun 16 13:59:32 2026 GMT Subject: CN=0448D9AEC2C3D126150EC8E7FF18503BDFC2589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:f9:4e:c0:db:7e:70:bd:9c:78:a6:1e:f0: 0e:4b:3c:1c:cc:24:77:9a:16:76:dd:dd:9f:5b:fe: 86:bf:08:af:c7:ef:7d:00:d1:dc:ff:eb:2e:54:31: 72:28:a0:33:42:7f:70:41:1a:55:c3:d5:65:c1:7a: 93:37:ed:83:8e:a7:14:96:e0:fa:4c:92:f1:48:fc: fc:b3:b0:8e:37:c9:d7:4a:5c:5d:c1:fb:be:dc:28: be:54:37:46:ca:e8:e3:b9:15:c8:93:86:b8:ce:36: 0e:d7:69:ca:22:91:76:d8:76:1e:11:51:9f:04:ef: 84:a8:5f:84:00:c6:6e:45:31:63:4b:ae:19:d6:08: 82:2e:dd:84:da:08:42:ae:ca:63:d4:02:a4:18:bb: be:77:8e:79:97:2e:1d:88:d4:86:0d:4e:a9:12:14: c8:53:32:a5:c9:b2:af:1d:6f:ea:62:43:45:d3:e9: 61:48:08:26:bc:a8:b3:55:0a:5d:9c:e3:d3:3e:92: 5a:8d:5e:34:45:56:d6:19:df:b1:07:6c:d2:17:7f: 20:cc:9d:ce:19:cd:17:53:5c:12:6d:ef:9d:5d:e7: 2c:e6:96:24:08:4f:14:4b:26:b4:d6:09:6a:eb:65: 9f:c5:4f:7a:95:ee:0b:25:64:e0:18:7b:25:59:c6: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:48:D9:AE:C2:C3:D1:26:15:0E:C8:E7:FF:18:50:3B:DF:C2:58:9C X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b9:29:34:0a:dd:c6:dc:8b:60:99:f0:8a:4f:bb:ec:6c:f4: 78:4c:2f:45:62:db:c5:63:15:0c:28:49:70:7b:e3:34:16:48: bc:8c:6f:0d:30:77:54:7a:a3:eb:8a:ef:48:6b:72:67:85:64: 63:15:78:d7:20:e3:45:27:5b:55:93:fb:6d:a7:61:b6:bf:f6: 8c:51:92:e2:65:6b:46:3d:a2:61:2b:e3:4e:60:02:3f:c1:ce: 34:b8:ca:a2:b1:dd:52:9a:d3:cb:8a:d4:15:5d:2d:b1:0c:7f: 01:d2:c5:bc:c1:be:6a:eb:f1:68:5a:fa:81:58:f3:d7:54:d2: af:eb:b4:18:8d:07:ff:9d:ec:34:ad:fb:48:ea:49:c0:91:45: 52:13:9f:88:b6:3f:08:e2:1e:1d:46:83:47:2b:48:48:d0:11: b3:22:fa:f5:7a:c6:b3:f7:07:b0:93:82:30:46:4a:49:75:c3: f5:8c:e8:70:61:dc:07:7b:ca:f9:db:42:7b:40:1a:14:3a:cf: a0:ca:0f:0d:c0:c3:96:09:e5:49:4b:ce:3b:e2:a6:7c:24:8f: 7e:e8:93:55:ba:4c:65:82:44:16:80:2d:db:d9:2d:dc:47:bf: 79:9b:09:fc:4b:ae:73:e4:f1:fa:1e:68:0e:b4:60:63:fd:0a: 07:3d:44:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpCM5Xeq0V38xVe9POaHIkxaos4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA2MTUxMjAwMzJaFw0yNjA2MTYxMzU5MzJaMDMxMTAvBgNV BAMTKDA0NDhEOUFFQzJDM0QxMjYxNTBFQzhFN0ZGMTg1MDNCREZDMjU4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdvlOwNt+cL2ceKYe8A5LPBzM JHeaFnbd3Z9b/oa/CK/H730A0dz/6y5UMXIooDNCf3BBGlXD1WXBepM37YOOpxSW 4PpMkvFI/PyzsI43yddKXF3B+77cKL5UN0bK6OO5FciThrjONg7XacoikXbYdh4R UZ8E74SoX4QAxm5FMWNLrhnWCIIu3YTaCEKuymPUAqQYu753jnmXLh2I1IYNTqkS FMhTMqXJsq8db+piQ0XT6WFICCa8qLNVCl2c49M+klqNXjRFVtYZ37EHbNIXfyDM nc4ZzRdTXBJt751d5yzmliQITxRLJrTWCWrrZZ/FT3qV7gslZOAYeyVZxkfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBEjZrsLD0SYVDsjn/xhQO9/CWJwwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG5KTQK3cbci2CZ8IpPu+xs9HhML0Vi28Vj FQwoSXB74zQWSLyMbw0wd1R6o+uK70hrcmeFZGMVeNcg40UnW1WT+22nYba/9oxR kuJla0Y9omEr405gAj/BzjS4yqKx3VKa08uK1BVdLbEMfwHSxbzBvmrr8Wha+oFY 89dU0q/rtBiNB/+d7DSt+0jqScCRRVITn4i2PwjiHh1Gg0crSEjQEbMi+vV6xrP3 B7CTgjBGSkl1w/WM6HBh3Ad7yvnbQntAGhQ6z6DKDw3Aw5YJ5UlLzjvipnwkj37o k1W6TGWCRBaALdvZLdxHv3mbCfxLrnPk8foeaA60YGP9Cgc9RBI= -----END CERTIFICATE-----Generated at Mon Jun 15 19:05:29 2026 by rpki-client