$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: 4n+XnikWga+eJcjwaYc+t8fgHVTclx04l1q6H5Uxk0M= Subject key identifier: DB:8C:8A:4F:95:B3:6D:98:06:63:97:83:35:8E:0E:3E:B9:66:BB:A9 Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 51BD872D9A0C3B2A8C1B6E32D37172E8036C8923 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: CE Signing time: Sat 03 Oct 2026 05:27:17 +0000 Manifest this update: Sat 03 Oct 2026 05:22:17 +0000 Manifest next update: Sun 04 Oct 2026 07:05:17 +0000 Files and hashes: 1: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: t9E+6E8W3piAEulpcljwVKJx/Vc3pnhjl2urd8iLBCM=) 2: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) 3: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 4: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 5: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 21:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bd:87:2d:9a:0c:3b:2a:8c:1b:6e:32:d3:71:72:e8:03:6c:89:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: Oct 3 05:22:17 2026 GMT Not After : Oct 4 07:05:17 2026 GMT Subject: CN=DB8C8A4F95B36D9806639783358E0E3EB966BBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:48:d9:c7:21:66:08:db:f1:d2:a5:ee:46: 80:57:29:a1:82:71:18:cb:5f:f5:9a:a8:8e:70:a4: fb:bc:4b:35:c0:51:c4:88:7a:2c:df:3e:65:4a:0b: 65:a6:fe:a4:b1:c3:6d:1e:3c:dc:ab:e2:e8:b9:75: 95:17:d8:c3:27:93:67:73:09:2e:87:c5:db:7b:9a: be:76:16:ec:8a:ba:4a:90:52:74:ed:d0:bf:b5:86: e5:d0:7a:4b:65:d8:1f:16:f8:65:74:18:fd:08:8b: 27:23:8a:05:a6:1b:0d:a5:16:c3:9e:cd:ed:6f:10: 8b:f4:b4:79:f2:1f:3c:bd:6d:43:98:f1:54:cc:56: bb:53:63:4f:f5:2c:e3:b8:01:27:75:51:31:ed:a7: 66:11:9b:f0:ba:05:ef:e6:5e:81:cb:41:65:07:3c: b7:23:a2:e4:f8:a8:0d:3b:00:9a:c7:fb:b4:30:af: 89:33:16:a6:1b:11:0c:ca:d1:bc:bf:59:42:87:0c: bc:60:9c:72:4c:76:e0:d7:f4:7b:96:73:a2:2e:4e: 73:d4:7d:0f:de:ab:b1:ce:0c:58:7c:78:ba:58:50: 34:40:56:aa:59:96:f1:90:dc:ce:5d:8b:82:16:7d: 02:e3:0d:c0:ff:61:b9:ac:cd:dd:59:99:dd:1b:fc: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8C:8A:4F:95:B3:6D:98:06:63:97:83:35:8E:0E:3E:B9:66:BB:A9 X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0a:4b:cf:a7:72:6f:3e:cc:df:c4:6c:76:60:b5:ac:de:0e: b7:5a:14:4f:4c:74:7e:6d:59:d0:9d:35:34:52:c3:bc:63:35: 65:81:4e:51:f2:f2:f0:cb:5f:53:98:c2:11:8b:03:5a:70:f7: fe:d0:3c:e9:10:fb:be:a8:f4:c6:96:8e:58:36:30:9b:7f:19: 26:b4:f4:0b:c0:ec:9c:98:70:90:12:e7:fe:b4:22:d5:e5:e5: 94:95:a1:46:b3:4a:c6:32:c1:6f:b7:eb:a9:96:5f:64:63:20: 11:c1:38:77:6b:47:69:2e:13:05:da:43:59:db:0c:82:dc:21: a2:5f:25:90:2a:0d:1e:69:70:28:8c:d0:f8:21:2f:b8:b1:0b: 5e:14:30:d1:3d:12:2b:3b:ad:36:c8:62:41:e2:83:61:d8:1c: 89:5b:8d:c7:1b:f1:80:ab:99:ef:aa:59:7b:b3:9f:c5:3e:5e: 4a:6f:11:86:d2:0b:dc:74:68:28:d9:41:58:d2:cc:5a:6f:00: c3:f6:4f:6d:71:6c:c0:12:e9:6d:37:2e:d2:29:d8:d3:59:a1: 88:b1:3d:0b:81:08:c5:c1:fa:44:fb:9c:11:df:83:5e:7d:85: 5b:8d:d7:a7:a1:60:2d:6c:e8:05:96:e1:83:12:b5:80:53:c7: 89:19:04:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUb2HLZoMOyqMG24y03Fy6ANsiSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjEwMDMwNTIyMTdaFw0yNjEwMDQwNzA1MTdaMDMxMTAvBgNV BAMTKERCOEM4QTRGOTVCMzZEOTgwNjYzOTc4MzM1OEUwRTNFQjk2NkJCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv20jZxyFmCNvx0qXuRoBXKaGC cRjLX/WaqI5wpPu8SzXAUcSIeizfPmVKC2Wm/qSxw20ePNyr4ui5dZUX2MMnk2dz CS6Hxdt7mr52FuyKukqQUnTt0L+1huXQektl2B8W+GV0GP0IiycjigWmGw2lFsOe ze1vEIv0tHnyHzy9bUOY8VTMVrtTY0/1LOO4ASd1UTHtp2YRm/C6Be/mXoHLQWUH PLcjouT4qA07AJrH+7Qwr4kzFqYbEQzK0by/WUKHDLxgnHJMduDX9HuWc6IuTnPU fQ/eq7HODFh8eLpYUDRAVqpZlvGQ3M5di4IWfQLjDcD/Ybmszd1Zmd0b/OxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24yKT5WzbZgGY5eDNY4OPrlmu6kwHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0KS8+ncm8+zN/EbHZgtazeDrdaFE9MdH5t WdCdNTRSw7xjNWWBTlHy8vDLX1OYwhGLA1pw9/7QPOkQ+76o9MaWjlg2MJt/GSa0 9AvA7JyYcJAS5/60ItXl5ZSVoUazSsYywW+366mWX2RjIBHBOHdrR2kuEwXaQ1nb DILcIaJfJZAqDR5pcCiM0PghL7ixC14UMNE9Eis7rTbIYkHig2HYHIlbjccb8YCr me+qWXuzn8U+XkpvEYbSC9x0aCjZQVjSzFpvAMP2T21xbMAS6W03LtIp2NNZoYix PQuBCMXB+kT7nBHfg159hVuN16ehYC1s6AWW4YMStYBTx4kZBOU= -----END CERTIFICATE-----Generated at Sat Oct 3 13:23:14 2026 by rpki-client