$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: FU2nhLQRk6XjMuLR5ROln7WGaWJKBWn7yAfwxy4J0xk= Subject key identifier: E1:B7:1A:08:B0:D7:43:9D:F7:52:23:1E:C1:82:C0:E0:7B:8D:26:E2 Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 794633E56A9D691FF119A24E4DE07A508577CE84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: D3 Signing time: Thu 08 Oct 2026 01:48:43 +0000 Manifest this update: Thu 08 Oct 2026 01:43:43 +0000 Manifest next update: Fri 09 Oct 2026 05:30:43 +0000 Files and hashes: 1: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) 2: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) 3: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: wz3SmzkftrX7o3cGlxHjNNglkH+PIHTHule11mo9iD8=) 4: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 5: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 05:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:46:33:e5:6a:9d:69:1f:f1:19:a2:4e:4d:e0:7a:50:85:77:ce:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Oct 8 01:43:43 2026 GMT Not After : Oct 9 05:30:43 2026 GMT Subject: CN=E1B71A08B0D7439DF752231EC182C0E07B8D26E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:0e:58:f0:9f:18:27:e1:3a:5d:4a:d8:06: 74:ef:32:28:71:71:76:72:fe:e0:19:dc:5b:95:fd: ca:12:c5:1e:1c:2e:da:f2:19:43:48:fa:dc:24:0a: df:a8:82:39:d4:f0:a4:e7:0e:14:70:d2:d0:c0:ef: 86:ad:f1:f6:a1:6e:b8:dd:6a:36:7f:bf:ab:07:ac: 22:dc:d4:8e:a1:b9:c6:d4:be:f7:c5:87:7d:51:4f: b1:e5:f1:22:2e:07:43:8b:ce:c0:f8:74:8d:e5:d7: 17:ed:73:9c:11:12:71:40:0c:0f:77:6a:af:a7:ed: 58:da:1c:12:d4:d1:0c:9f:46:db:e0:e0:d7:85:e8: e8:9c:14:2f:ab:81:d7:32:0d:38:72:0e:f3:7c:7c: cb:9d:18:5c:9a:ce:e1:38:2d:0c:09:9b:a4:fc:8a: f0:3c:03:4d:fa:c2:71:87:47:b0:3c:f5:f9:5a:64: a8:2c:6c:92:a2:85:c8:c4:dc:a3:ce:b6:8c:e5:f5: de:c9:8e:5f:64:0a:f4:82:0d:f3:b4:12:b6:a3:d9: a7:24:b8:92:ea:ec:f7:34:ca:d7:52:3c:6a:64:9e: 57:ac:54:ac:59:ba:c8:ad:93:c1:3b:26:e6:ee:1d: de:c3:11:ec:9c:67:63:5d:bb:1d:34:74:0a:cf:c7: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B7:1A:08:B0:D7:43:9D:F7:52:23:1E:C1:82:C0:E0:7B:8D:26:E2 X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e2:24:a5:77:22:b4:73:5c:97:64:28:77:3a:1b:ad:4c:59: 36:23:08:49:de:77:73:3f:a3:ac:be:97:00:a1:16:f7:11:e5: 30:86:3b:e4:bf:ed:af:db:e1:86:99:41:29:81:b4:19:6f:4a: 5c:6c:3e:3f:be:ea:88:19:59:1a:5f:ba:dc:46:6a:2a:78:43: ca:8e:e8:c4:ec:f2:0e:18:df:a9:af:49:5d:b5:0c:9d:dc:91: d5:79:06:e5:71:23:e6:12:a1:57:07:69:fa:13:68:dd:47:56: a8:dd:60:86:c9:68:b0:e1:4c:56:b3:d1:28:b0:d6:08:11:fd: d7:4a:5c:24:0f:80:e6:e2:48:5d:b9:2f:5b:4b:c5:b4:4e:08: 41:1f:a9:44:eb:dc:59:30:f9:4c:f8:50:53:af:d6:af:64:b7: 24:99:01:0c:8c:43:18:b3:91:a0:b0:e2:55:ab:d7:f1:6e:03: a5:e3:b2:c0:79:5b:4a:40:3b:f8:a2:f3:ef:77:03:82:b3:1a: 87:15:79:6f:9d:4a:75:ed:30:55:f5:1a:e1:de:01:25:34:86: de:41:19:23:0e:27:70:c1:eb:e9:d9:3c:43:c6:de:ff:96:25: 53:6a:71:2e:cf:86:7e:dc:41:b9:54:b5:0f:70:63:b5:0f:4f: 42:10:22:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUYz5WqdaR/xGaJOTeB6UIV3zoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjEwMDgwMTQzNDNaFw0yNjEwMDkwNTMwNDNaMDMxMTAvBgNV BAMTKEUxQjcxQTA4QjBENzQzOURGNzUyMjMxRUMxODJDMEUwN0I4RDI2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2g5Y8J8YJ+E6XUrYBnTvMihx cXZy/uAZ3FuV/coSxR4cLtryGUNI+twkCt+ogjnU8KTnDhRw0tDA74at8fahbrjd ajZ/v6sHrCLc1I6hucbUvvfFh31RT7Hl8SIuB0OLzsD4dI3l1xftc5wREnFADA93 aq+n7VjaHBLU0QyfRtvg4NeF6OicFC+rgdcyDThyDvN8fMudGFyazuE4LQwJm6T8 ivA8A036wnGHR7A89flaZKgsbJKihcjE3KPOtozl9d7Jjl9kCvSCDfO0Eraj2ack uJLq7Pc0ytdSPGpknlesVKxZusitk8E7JubuHd7DEeycZ2Ndux00dArPx+hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bcaCLDXQ533UiMewYLA4HuNJuIwHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEziJKV3IrRzXJdkKHc6G61MWTYjCEned3M/ o6y+lwChFvcR5TCGO+S/7a/b4YaZQSmBtBlvSlxsPj++6ogZWRpfutxGaip4Q8qO 6MTs8g4Y36mvSV21DJ3ckdV5BuVxI+YSoVcHafoTaN1HVqjdYIbJaLDhTFaz0Siw 1ggR/ddKXCQPgObiSF25L1tLxbROCEEfqUTr3Fkw+Uz4UFOv1q9ktySZAQyMQxiz kaCw4lWr1/FuA6XjssB5W0pAO/ii8+93A4KzGocVeW+dSnXtMFX1GuHeASU0ht5B GSMOJ3DB6+nZPEPG3v+WJVNqcS7Phn7cQblUtQ9wY7UPT0IQIoM= -----END CERTIFICATE-----Generated at Thu Oct 8 19:29:05 2026 by rpki-client