$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: U8z+HVKl0PRkGzBBL4OZhSds6dI11DMpVPsEjB7Z6R4= Subject key identifier: BB:B4:0B:DC:84:2D:36:E9:49:7B:4B:CE:DA:45:89:64:BD:61:E7:88 Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 6D730BBEBDB43524A4D9B84002EAB7E624F6DADD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: BD Signing time: Mon 21 Sep 2026 04:37:22 +0000 Manifest this update: Mon 21 Sep 2026 04:32:22 +0000 Manifest next update: Tue 22 Sep 2026 07:16:22 +0000 Files and hashes: 1: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: TzP5KhNnCcPse59R6dv4fYoDJvR0ZzKSf7Nu1E9O5CU=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:73:0b:be:bd:b4:35:24:a4:d9:b8:40:02:ea:b7:e6:24:f6:da:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Sep 21 04:32:22 2026 GMT Not After : Sep 22 07:16:22 2026 GMT Subject: CN=BBB40BDC842D36E9497B4BCEDA458964BD61E788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:a6:b4:56:19:be:35:6a:81:38:7e:60:c3: bd:b3:91:29:90:26:20:ca:a8:a8:c0:ea:17:b0:1c: 25:bc:60:87:4b:e1:91:2f:ac:41:ed:e6:88:eb:05: 5d:cd:bd:83:69:46:59:32:63:1a:ab:78:12:73:07: 92:b3:ae:cd:56:9c:81:3c:51:a2:c0:e7:9b:dd:2d: 0d:28:da:5d:bc:a8:f8:16:e7:d9:28:56:52:eb:68: f2:b9:19:dd:68:5d:c4:d3:44:76:a7:50:10:27:12: e6:5b:23:2d:2c:c1:bf:0e:56:3c:8a:1d:9b:a0:9b: 10:a7:ea:fa:f4:fa:48:62:72:6f:7d:b3:1f:a0:f1: 36:e0:2e:e5:13:4d:87:db:18:05:eb:1a:b1:f5:98: 87:2d:87:80:91:7b:87:71:4f:f3:37:df:4b:7c:b3: e7:f4:4b:8e:55:3c:d4:00:59:2e:89:d0:10:1a:4e: 6a:26:50:eb:0f:11:d8:bc:a5:c0:7d:24:3f:7f:1a: e3:3e:30:dd:41:31:57:c4:c0:17:14:b6:8e:67:9e: ab:8f:e7:3a:5e:c7:e6:6f:e9:89:2e:a0:8a:3e:c6: 66:de:4c:cd:84:c4:00:d9:50:9e:cb:40:84:a5:b6: d3:5e:af:1b:e7:e2:8a:10:ee:ab:a2:55:94:42:19: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:0B:DC:84:2D:36:E9:49:7B:4B:CE:DA:45:89:64:BD:61:E7:88 X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f5:85:25:db:d4:1e:98:9c:89:5f:50:db:5f:ab:fa:dc:c3: d2:02:be:d1:66:af:37:1c:f3:11:24:a2:33:7d:e8:9b:cd:d5: be:1c:ab:b0:e8:3e:ad:42:f9:c8:80:62:cb:ca:6f:2e:f6:b8: 0c:bd:62:bb:43:08:5b:29:f3:29:4c:15:b3:1c:d3:6e:af:20: 42:75:f9:7c:37:28:9f:e0:e9:d2:91:17:7e:0d:b1:be:a6:95: b1:a7:1b:fd:b5:9c:f6:5d:fb:18:b4:98:f9:01:1b:e8:0f:49: 24:9e:06:e7:36:19:98:17:bc:24:56:59:5d:e4:5d:63:3f:a7: 34:09:f8:df:3a:5b:10:5c:b2:13:93:bc:55:a5:08:7c:a6:9d: 13:da:d0:59:56:49:01:90:7f:5a:56:df:a3:05:db:f6:c7:b2: ac:d1:75:a6:ee:e1:b6:10:0c:d0:e1:f1:d0:84:ba:76:0f:2d: c1:6f:59:d4:3e:2d:5a:11:12:f5:93:c0:05:db:f6:83:60:ab: d7:7d:62:05:76:7f:cb:5c:73:2b:d4:c5:2d:ab:2d:76:e2:fa: 9d:5b:4c:da:b9:0c:1e:a4:10:0e:4a:b6:ae:78:eb:a6:c4:0e: 4f:6a:84:40:ab:39:49:7b:82:5b:1c:84:95:9b:73:ce:4f:f4: 96:fa:e5:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXMLvr20NSSk2bhAAuq35iT22t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA5MjEwNDMyMjJaFw0yNjA5MjIwNzE2MjJaMDMxMTAvBgNV BAMTKEJCQjQwQkRDODQyRDM2RTk0OTdCNEJDRURBNDU4OTY0QkQ2MUU3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcqa0Vhm+NWqBOH5gw72zkSmQ JiDKqKjA6hewHCW8YIdL4ZEvrEHt5ojrBV3NvYNpRlkyYxqreBJzB5Kzrs1WnIE8 UaLA55vdLQ0o2l28qPgW59koVlLraPK5Gd1oXcTTRHanUBAnEuZbIy0swb8OVjyK HZugmxCn6vr0+khicm99sx+g8TbgLuUTTYfbGAXrGrH1mIcth4CRe4dxT/M330t8 s+f0S45VPNQAWS6J0BAaTmomUOsPEdi8pcB9JD9/GuM+MN1BMVfEwBcUto5nnquP 5zpex+Zv6YkuoIo+xmbeTM2ExADZUJ7LQISlttNerxvn4ooQ7quiVZRCGafVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu7QL3IQtNulJe0vO2kWJZL1h54gwHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf1hSXb1B6YnIlfUNtfq/rcw9ICvtFmrzcc 8xEkojN96JvN1b4cq7DoPq1C+ciAYsvKby72uAy9YrtDCFsp8ylMFbMc026vIEJ1 +Xw3KJ/g6dKRF34Nsb6mlbGnG/21nPZd+xi0mPkBG+gPSSSeBuc2GZgXvCRWWV3k XWM/pzQJ+N86WxBcshOTvFWlCHymnRPa0FlWSQGQf1pW36MF2/bHsqzRdabu4bYQ DNDh8dCEunYPLcFvWdQ+LVoREvWTwAXb9oNgq9d9YgV2f8tccyvUxS2rLXbi+p1b TNq5DB6kEA5Ktq5466bEDk9qhECrOUl7glschJWbc85P9Jb65dE= -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:57 2026 by rpki-client