$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: /o2nvtr8F6oDAXjQokX1bgl3XoOhbBZJ3Ox3W7xszKY= Subject key identifier: 99:8F:5C:4D:C2:3F:23:78:9B:B3:16:61:2B:DD:7F:EB:70:F6:06:B0 Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 6FBE633B2BD56DDE230E3BF06C52E3E0CE88CFE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:32:36 +0000 Manifest this update: Tue 16 Jun 2026 23:27:36 +0000 Manifest next update: Thu 18 Jun 2026 01:55:36 +0000 Files and hashes: 1: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: g0XDVFUGwF6vW7t3z4OdLilNXHDH4+Rad6fb5WaxZfs=) 2: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 3: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) 4: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) 5: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:be:63:3b:2b:d5:6d:de:23:0e:3b:f0:6c:52:e3:e0:ce:88:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Jun 16 23:27:36 2026 GMT Not After : Jun 18 01:55:36 2026 GMT Subject: CN=998F5C4DC23F23789BB316612BDD7FEB70F606B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:07:bb:e4:ff:ec:6d:2e:66:73:30:06:5a: 61:2b:51:8f:7a:95:89:f8:33:1f:eb:74:7b:e8:43: a0:f4:c7:55:d5:00:7e:c8:f8:80:dd:d9:db:1d:d6: d2:7e:cf:af:d9:a8:45:c5:ab:fd:df:3d:d0:ea:09: 9f:43:9a:5c:d8:a0:71:cc:e2:a3:22:df:65:59:bf: 74:79:b4:f9:83:87:6d:97:9a:36:c4:40:d7:76:68: 2f:09:82:6e:81:71:b5:a6:30:99:c8:65:95:45:ad: 8c:79:b0:23:5b:91:7e:b7:e0:b0:df:82:f0:e9:a0: 23:b4:e9:a0:17:ea:e9:1b:48:9b:1e:eb:a4:d5:38: d7:0c:e7:b8:3a:3a:d6:69:0e:21:b3:ee:47:ba:22: 34:a2:b5:f6:f7:d0:37:5c:3b:79:b4:eb:9e:01:76: 6f:b6:84:48:43:ea:d8:bc:86:34:52:91:57:a0:c1: 4b:08:0a:f1:26:b1:07:98:f3:0b:eb:74:41:2e:88: 78:f7:28:48:58:80:86:0a:72:cb:e0:14:53:9f:e3: 9f:3f:ef:c2:93:84:8d:de:99:86:3d:d1:6f:69:aa: f0:cc:8b:63:ba:ff:d9:3a:a1:87:10:75:4e:da:84: 66:e3:3d:2b:6b:5b:1a:1e:2e:22:20:43:7a:07:68: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8F:5C:4D:C2:3F:23:78:9B:B3:16:61:2B:DD:7F:EB:70:F6:06:B0 X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:02:cb:17:36:10:ef:c8:d4:ef:53:e4:ee:58:f3:cc:3e:82: 91:0d:58:41:fe:9e:ae:e9:8f:9d:8f:f3:91:67:b1:14:2e:ae: 36:2b:bc:23:5b:d2:b6:13:0e:69:30:f3:30:c9:b8:5d:c0:ae: 70:17:6b:d7:56:a5:a4:e9:07:69:a0:02:1d:2a:86:40:d7:f0: 2a:0d:95:4e:0f:7f:92:f1:44:ec:fd:31:96:1e:5b:8a:35:2d: 92:36:45:87:ce:a3:8c:f8:5b:14:f5:70:70:dd:61:57:21:eb: 01:c8:33:e0:bb:ee:cf:7e:56:97:a2:3e:4b:0f:28:71:b3:94: 20:e6:12:f1:49:7a:83:8c:19:76:40:0c:9e:60:fe:8f:c5:21: 0d:1a:4a:3b:3c:56:68:86:53:e3:18:10:40:e3:8a:3c:e1:e4: 81:fc:2c:ef:1b:9a:a2:ef:54:04:3d:a1:48:86:e6:4c:30:e1: 23:d2:1c:0b:ce:37:12:d8:ce:f8:89:51:08:16:c9:db:3a:84: 04:a7:d0:de:cf:e5:45:c8:4d:a6:47:fd:2e:5f:c4:b6:8a:3e: 63:46:5c:05:d1:cd:91:46:eb:4f:42:52:07:02:6a:49:f9:87: b9:36:02:b8:07:93:b1:70:d2:5e:fe:16:98:47:58:d4:33:84: 37:c6:a5:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb75jOyvVbd4jDjvwbFLj4M6Iz+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjA2MTYyMzI3MzZaFw0yNjA2MTgwMTU1MzZaMDMxMTAvBgNV BAMTKDk5OEY1QzREQzIzRjIzNzg5QkIzMTY2MTJCREQ3RkVCNzBGNjA2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjwe75P/sbS5mczAGWmErUY96 lYn4Mx/rdHvoQ6D0x1XVAH7I+IDd2dsd1tJ+z6/ZqEXFq/3fPdDqCZ9DmlzYoHHM 4qMi32VZv3R5tPmDh22XmjbEQNd2aC8Jgm6BcbWmMJnIZZVFrYx5sCNbkX634LDf gvDpoCO06aAX6ukbSJse66TVONcM57g6OtZpDiGz7ke6IjSitfb30DdcO3m0654B dm+2hEhD6ti8hjRSkVegwUsICvEmsQeY8wvrdEEuiHj3KEhYgIYKcsvgFFOf458/ 78KThI3emYY90W9pqvDMi2O6/9k6oYcQdU7ahGbjPStrWxoeLiIgQ3oHaHE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmY9cTcI/I3ibsxZhK91/63D2BrAwHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcCyxc2EO/I1O9T5O5Y88w+gpENWEH+nq7p j52P85FnsRQurjYrvCNb0rYTDmkw8zDJuF3ArnAXa9dWpaTpB2mgAh0qhkDX8CoN lU4Pf5LxROz9MZYeW4o1LZI2RYfOo4z4WxT1cHDdYVch6wHIM+C77s9+VpeiPksP KHGzlCDmEvFJeoOMGXZADJ5g/o/FIQ0aSjs8VmiGU+MYEEDjijzh5IH8LO8bmqLv VAQ9oUiG5kww4SPSHAvONxLYzviJUQgWyds6hASn0N7P5UXITaZH/S5fxLaKPmNG XAXRzZFG609CUgcCakn5h7k2ArgHk7Fw0l7+FphHWNQzhDfGpdU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:31 2026 by rpki-client