$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: 9ssaipPvT2C0U9N2a9Hh7P562ExiygeL2HysKyTr6wQ= Subject key identifier: DA:BA:C1:87:A8:48:27:DA:BB:FB:E5:98:5B:35:32:2D:F3:91:E8:25 Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 05B1A980057827EA17B9F2DF497D555AA95A7457 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 02:39:33 +0000 Manifest this update: Mon 15 Jun 2026 02:34:33 +0000 Manifest next update: Tue 16 Jun 2026 05:07:33 +0000 Files and hashes: 1: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: mfMyknDMs/oK1pnGRWeRT9LG4dhkZUP3bfEpAvUAcmE=) 2: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 3: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 4: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 5: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) 6: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b1:a9:80:05:78:27:ea:17:b9:f2:df:49:7d:55:5a:a9:5a:74:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: Jun 15 02:34:33 2026 GMT Not After : Jun 16 05:07:33 2026 GMT Subject: CN=DABAC187A84827DABBFBE5985B35322DF391E825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:d8:a2:f8:65:cf:82:53:dc:38:6a:80:6d: 31:fc:03:60:04:3a:d6:da:3d:a5:c5:38:dc:36:ac: aa:be:a6:bc:c7:c3:92:ca:27:74:79:3e:e2:e3:21: aa:0b:cd:33:4e:04:99:92:5e:82:a3:65:fd:b3:be: 77:12:eb:e7:05:8a:b9:5d:1b:ea:74:5f:3e:fd:8a: 79:4b:c9:22:2e:c4:8e:8e:bd:0d:72:1d:8d:39:fb: 5d:25:8c:26:8e:02:16:cf:80:7d:84:99:ab:22:14: cf:df:f3:57:a7:cf:ed:8d:ba:59:e1:4e:93:7d:4c: 4c:dd:fa:db:a8:4f:b0:ea:b9:bd:d5:06:42:6e:65: 6d:45:24:69:e5:55:c2:07:c1:3c:d5:cd:e1:3d:b0: ee:c3:a1:9c:8b:25:38:18:20:f5:ea:99:fe:4f:bb: 30:5e:5b:ed:3f:88:d6:e4:ec:11:00:46:57:82:57: 88:4c:72:00:ed:63:52:55:df:9f:9c:62:b3:84:79: f1:53:ae:84:74:59:d2:24:ee:30:9c:f9:bf:a6:6e: 6e:ab:c5:b0:41:e0:20:5b:ad:64:1e:e1:ea:a3:aa: 99:61:f6:3b:a7:20:eb:bc:5b:b1:d9:0f:1b:51:d4: 86:5d:99:69:af:1d:82:7a:42:b2:0c:9e:6d:bf:0a: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BA:C1:87:A8:48:27:DA:BB:FB:E5:98:5B:35:32:2D:F3:91:E8:25 X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:29:e8:b5:72:70:9c:e4:1a:1d:1a:5c:89:57:49:a5:55:91: 04:13:1b:47:55:db:54:4a:c4:c4:ae:99:6b:c0:70:c9:df:8d: d7:1d:26:04:f6:73:a2:61:da:d8:a6:4a:b9:b2:50:23:ab:43: e2:71:e6:24:52:62:0d:38:a1:c9:0d:69:81:df:14:f9:44:15: 77:85:de:a3:3e:08:6f:88:29:40:24:86:8b:e9:a7:0b:19:1c: d6:19:50:92:02:c5:30:f7:ae:74:52:a2:24:24:f2:26:1a:64: 02:88:01:3f:22:d7:83:9d:9b:ac:9e:b0:32:5b:e6:e9:f6:27: 6b:e5:f9:bc:52:6e:ce:ef:e5:e2:9f:47:a4:24:c7:09:33:29: 5b:a1:3f:2f:6f:ea:4a:ce:47:a2:06:e9:7c:1f:d5:01:bf:b8: f8:d6:72:5d:dd:6c:df:94:4f:8b:4c:fc:fc:83:4e:ad:94:a6: b7:0f:47:c7:cb:30:fb:69:04:15:ac:69:94:8e:3e:48:19:bd: dc:34:08:ec:77:92:cb:bf:b8:ae:3e:9b:d0:34:b7:0f:97:3f: f9:1a:f0:24:68:db:0f:11:7c:7f:b5:ce:30:93:17:79:fb:37: bb:89:1b:e9:dc:74:ea:9c:48:04:23:46:e9:c3:2d:e1:fa:e8: 4b:27:43:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbGpgAV4J+oXufLfSX1VWqladFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjA2MTUwMjM0MzNaFw0yNjA2MTYwNTA3MzNaMDMxMTAvBgNV BAMTKERBQkFDMTg3QTg0ODI3REFCQkZCRTU5ODVCMzUzMjJERjM5MUU4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/dii+GXPglPcOGqAbTH8A2AE OtbaPaXFONw2rKq+przHw5LKJ3R5PuLjIaoLzTNOBJmSXoKjZf2zvncS6+cFirld G+p0Xz79inlLySIuxI6OvQ1yHY05+10ljCaOAhbPgH2EmasiFM/f81enz+2Nulnh TpN9TEzd+tuoT7Dqub3VBkJuZW1FJGnlVcIHwTzVzeE9sO7DoZyLJTgYIPXqmf5P uzBeW+0/iNbk7BEARleCV4hMcgDtY1JV35+cYrOEefFTroR0WdIk7jCc+b+mbm6r xbBB4CBbrWQe4eqjqplh9junIOu8W7HZDxtR1IZdmWmvHYJ6QrIMnm2/ClZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rrBh6hIJ9q7++WYWzUyLfOR6CUwHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsp6LVycJzkGh0aXIlXSaVVkQQTG0dV21RK xMSumWvAcMnfjdcdJgT2c6Jh2timSrmyUCOrQ+Jx5iRSYg04ockNaYHfFPlEFXeF 3qM+CG+IKUAkhovppwsZHNYZUJICxTD3rnRSoiQk8iYaZAKIAT8i14Odm6yesDJb 5un2J2vl+bxSbs7v5eKfR6QkxwkzKVuhPy9v6krOR6IG6Xwf1QG/uPjWcl3dbN+U T4tM/PyDTq2UprcPR8fLMPtpBBWsaZSOPkgZvdw0COx3ksu/uK4+m9A0tw+XP/ka 8CRo2w8RfH+1zjCTF3n7N7uJG+ncdOqcSAQjRunDLeH66EsnQ/c= -----END CERTIFICATE-----Generated at Mon Jun 15 16:42:15 2026 by rpki-client