$ rpki-client -vvvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: Qze9QtRxF0xWZZAbecT8Mr/GTBRC2kHzDohCbh2RkEs= Subject key identifier: 77:87:D2:F4:51:66:63:2C:5E:A6:92:8C:85:02:BB:69:95:0A:3F:7C Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 1A79A59FAE1309E64901249A9B9165474BAFF7A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 07:40:45 +0000 Manifest this update: Wed 23 Sep 2026 07:35:45 +0000 Manifest next update: Thu 24 Sep 2026 08:13:45 +0000 Files and hashes: 1: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) 2: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 3: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 4: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 5: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 6: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 7: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 8: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 9: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 10: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: odyZIFpjMqG+pVqV97jPNTOmDrp8r024uoZeVFfiih0=) 11: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:79:a5:9f:ae:13:09:e6:49:01:24:9a:9b:91:65:47:4b:af:f7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Sep 23 07:35:45 2026 GMT Not After : Sep 24 08:13:45 2026 GMT Subject: CN=7787D2F45166632C5EA6928C8502BB69950A3F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:32:bf:07:7c:26:67:3c:e0:3d:a6:ed:8d: c4:19:5a:88:38:34:79:ec:81:ac:d1:37:b8:02:9f: 00:a6:f5:84:2d:74:7c:da:5d:8d:68:07:fc:f1:98: 1f:d0:03:34:06:d1:62:22:95:24:24:1e:f0:13:29: 60:d9:d7:14:34:c1:9b:01:45:a4:19:1a:58:3e:f0: e2:97:44:41:91:b5:45:17:ec:ef:a1:30:68:04:ad: f5:1f:b0:93:40:92:b2:8c:94:1b:2a:b1:cb:7b:d4: cd:90:e3:12:d7:a1:f0:ac:cc:67:d1:57:65:ee:e8: 1d:1d:ad:60:77:e9:1b:75:74:34:4f:60:21:2d:c8: db:1c:c7:fb:0e:d6:c7:1a:15:cc:9b:33:bb:59:e3: 0c:83:02:ef:81:bb:37:b7:84:1a:41:00:98:9c:23: 87:5e:c1:af:f2:90:23:da:6a:2a:e5:2f:19:60:d5: 11:b2:f8:ca:02:0e:ef:b9:8d:a5:64:64:af:97:e7: 84:bf:23:11:cf:a8:99:69:e1:ca:2b:8a:6f:59:5f: 29:51:31:2b:ca:73:b8:f3:66:51:94:03:a0:57:44: 26:b3:35:66:cd:e3:53:34:a8:78:91:6b:9e:eb:c2: f1:51:d3:e9:f4:a9:43:d0:65:eb:7d:69:c9:a2:81: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:87:D2:F4:51:66:63:2C:5E:A6:92:8C:85:02:BB:69:95:0A:3F:7C X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a3:75:c3:e4:d7:43:07:f8:b6:46:3a:23:f3:6e:0c:89:2a: 9f:7b:50:4a:f3:a2:91:a1:07:88:86:91:c4:51:84:c2:fc:b8: 02:d0:cc:a9:5d:2e:27:68:d2:24:f5:05:80:ca:1a:2a:61:54: eb:03:7a:80:1d:b9:78:3b:fe:4c:e2:8e:73:83:06:69:e9:86: 3c:6d:5f:ea:f8:3d:5f:81:3f:90:c1:5a:b0:f3:26:16:cf:98: 8f:94:a3:bf:03:80:ff:59:dd:cb:b8:0a:12:67:bf:9d:f9:8e: 5a:fb:53:97:69:13:bb:d4:fe:7c:db:51:8c:18:ba:33:f7:2b: b9:ae:9b:15:b0:32:2d:92:4c:c3:55:a0:80:b0:12:65:2e:2c: 1e:18:d4:d9:fb:dc:dc:a9:67:82:82:fe:22:44:5b:82:15:07: f4:7c:7a:7a:e3:cc:40:99:86:a8:18:04:9b:7a:3f:69:9a:22: b5:c7:4b:0a:fa:aa:9a:30:34:54:1f:b5:85:70:df:f5:a2:c6: 7c:d9:c5:cb:32:65:96:1b:ce:ab:74:b1:68:f7:22:0a:78:3a: c4:1f:05:90:c1:22:04:e2:0a:3e:e2:b2:e8:bc:21:62:07:67: 7c:c9:46:23:e7:46:0d:a5:14:85:d0:30:16:89:32:35:6f:89: 0e:23:ff:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnmln64TCeZJASSam5FlR0uv96cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA5MjMwNzM1NDVaFw0yNjA5MjQwODEzNDVaMDMxMTAvBgNV BAMTKDc3ODdEMkY0NTE2NjYzMkM1RUE2OTI4Qzg1MDJCQjY5OTUwQTNGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDjK/B3wmZzzgPabtjcQZWog4 NHnsgazRN7gCnwCm9YQtdHzaXY1oB/zxmB/QAzQG0WIilSQkHvATKWDZ1xQ0wZsB RaQZGlg+8OKXREGRtUUX7O+hMGgErfUfsJNAkrKMlBsqsct71M2Q4xLXofCszGfR V2Xu6B0drWB36Rt1dDRPYCEtyNscx/sO1scaFcybM7tZ4wyDAu+Buze3hBpBAJic I4dewa/ykCPaairlLxlg1RGy+MoCDu+5jaVkZK+X54S/IxHPqJlp4corim9ZXylR MSvKc7jzZlGUA6BXRCazNWbN41M0qHiRa57rwvFR0+n0qUPQZet9acmigQ+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd4fS9FFmYyxeppKMhQK7aZUKP3wwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKjdcPk10MH+LZGOiPzbgyJKp97UErzopGh B4iGkcRRhML8uALQzKldLido0iT1BYDKGiphVOsDeoAduXg7/kzijnODBmnphjxt X+r4PV+BP5DBWrDzJhbPmI+Uo78DgP9Z3cu4ChJnv535jlr7U5dpE7vU/nzbUYwY ujP3K7mumxWwMi2STMNVoICwEmUuLB4Y1Nn73NypZ4KC/iJEW4IVB/R8enrjzECZ hqgYBJt6P2maIrXHSwr6qpowNFQftYVw3/WixnzZxcsyZZYbzqt0sWj3Igp4OsQf BZDBIgTiCj7isui8IWIHZ3zJRiPnRg2lFIXQMBaJMjVviQ4j/8M= -----END CERTIFICATE-----Generated at Wed Sep 23 10:23:26 2026 by rpki-client