$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: x9DLzeMFHn5SxeUVDv07+MEl3ON16v7tuqtPktyxdGw= Subject key identifier: 31:82:36:09:77:35:0A:AF:D4:4D:9B:1C:4D:1B:02:15:06:16:3D:7C Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 0C4FB307647C1B474E5F385A095805C8B2B3323B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 10:44:53 +0000 Manifest this update: Tue 22 Sep 2026 10:39:53 +0000 Manifest next update: Wed 23 Sep 2026 14:33:53 +0000 Files and hashes: 1: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 2: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) 3: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: mOLK/O6rYWbz19FUlX6xaKr/gtkWeQHCjiW8wZIR7Dg=) 4: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 5: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4f:b3:07:64:7c:1b:47:4e:5f:38:5a:09:58:05:c8:b2:b3:32:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Sep 22 10:39:53 2026 GMT Not After : Sep 23 14:33:53 2026 GMT Subject: CN=3182360977350AAFD44D9B1C4D1B021506163D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:10:4f:f2:d7:c2:9b:e9:e8:1c:36:e2:91: dc:24:8d:2b:6c:33:48:fe:d0:dd:00:dd:42:b9:b3: ef:a7:9f:44:63:ba:34:c7:34:3f:ac:9f:41:23:87: 30:18:49:f7:bb:ec:93:ca:91:a2:f7:5a:a9:1d:36: 92:ea:c6:eb:b0:25:ea:92:83:96:82:cb:34:30:18: 2b:59:93:6d:22:02:72:e3:48:a8:9b:de:8f:45:43: 47:a4:1c:b5:4c:c6:59:44:49:0d:31:99:d8:d8:ee: c1:99:a5:bf:de:0a:de:26:d4:89:f9:25:9f:b8:85: ae:2b:67:f7:bc:26:2c:fd:29:ab:5e:95:fd:01:6c: 37:91:25:9a:71:18:21:25:63:b0:38:17:01:60:fa: f0:62:f8:83:ee:94:7b:91:a8:4f:87:32:78:c3:ac: 30:a8:33:2e:f8:86:8d:58:13:29:fd:5a:49:48:b6: f0:56:4c:c6:79:af:93:bd:71:89:d3:66:ad:da:a6: 9f:f7:dc:08:e1:a6:04:68:5e:0b:2f:c1:9f:35:00: fc:9d:cf:fc:e8:a3:a5:c2:20:c4:07:c7:97:26:49: 55:39:a1:1e:7e:b4:c4:af:57:9b:e7:99:e4:b6:90: c7:2c:df:70:49:8e:ef:4b:a1:62:78:d4:3c:ec:4e: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:36:09:77:35:0A:AF:D4:4D:9B:1C:4D:1B:02:15:06:16:3D:7C X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5c:71:9f:81:cc:2c:52:e8:68:ed:bc:a9:66:51:65:f6:0c: 90:7c:b4:3f:a4:85:5f:53:8e:b7:ce:fe:68:7d:57:29:b9:3d: 64:a5:dd:fd:46:51:28:cb:fb:e3:22:76:6b:d3:8a:72:8d:e3: cf:49:ea:99:55:ca:6e:97:53:af:28:be:70:50:f0:53:20:a5: 5f:c3:b4:53:fc:1a:dc:9a:ec:95:d1:49:14:59:32:7d:84:57: b1:a5:17:52:8b:7c:3e:96:6b:86:a2:f5:61:cf:12:1f:7d:46: 8f:42:d8:96:88:c9:c0:15:b1:e2:06:04:61:76:ce:b9:79:52: e6:d6:22:bd:21:f0:39:5c:3e:9e:88:cf:b7:5e:04:70:57:96: a3:f1:fc:f0:fd:4c:a5:fa:d5:a1:dd:ae:f4:15:b7:3b:1f:88: 2f:1c:f6:78:5f:40:15:89:71:ad:5a:76:42:18:5d:68:e9:67: 23:c3:cc:ea:e6:c1:64:aa:35:e2:28:15:a5:c2:41:23:09:78: fc:d5:58:43:33:7d:70:ac:fd:fa:0f:dc:40:99:19:34:25:4a: 79:00:62:3c:cc:f3:8f:0d:b7:58:53:91:62:4b:fc:c5:cf:51: fe:1a:36:3c:ae:66:61:35:d8:85:8d:e1:39:73:00:f4:f4:5b: 0d:00:39:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDE+zB2R8G0dOXzhaCVgFyLKzMjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA5MjIxMDM5NTNaFw0yNjA5MjMxNDMzNTNaMDMxMTAvBgNV BAMTKDMxODIzNjA5NzczNTBBQUZENDREOUIxQzREMUIwMjE1MDYxNjNEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92BBP8tfCm+noHDbikdwkjSts M0j+0N0A3UK5s++nn0RjujTHND+sn0EjhzAYSfe77JPKkaL3WqkdNpLqxuuwJeqS g5aCyzQwGCtZk20iAnLjSKib3o9FQ0ekHLVMxllESQ0xmdjY7sGZpb/eCt4m1In5 JZ+4ha4rZ/e8Jiz9Katelf0BbDeRJZpxGCElY7A4FwFg+vBi+IPulHuRqE+HMnjD rDCoMy74ho1YEyn9WklItvBWTMZ5r5O9cYnTZq3app/33AjhpgRoXgsvwZ81APyd z/zoo6XCIMQHx5cmSVU5oR5+tMSvV5vnmeS2kMcs33BJju9LoWJ41DzsToj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMYI2CXc1Cq/UTZscTRsCFQYWPXwwHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBccZ+BzCxS6GjtvKlmUWX2DJB8tD+khV9T jrfO/mh9Vym5PWSl3f1GUSjL++MidmvTinKN489J6plVym6XU68ovnBQ8FMgpV/D tFP8Gtya7JXRSRRZMn2EV7GlF1KLfD6Wa4ai9WHPEh99Ro9C2JaIycAVseIGBGF2 zrl5UubWIr0h8DlcPp6Iz7deBHBXlqPx/PD9TKX61aHdrvQVtzsfiC8c9nhfQBWJ ca1adkIYXWjpZyPDzOrmwWSqNeIoFaXCQSMJePzVWEMzfXCs/foP3ECZGTQlSnkA YjzM848Nt1hTkWJL/MXPUf4aNjyuZmE12IWN4TlzAPT0Ww0AOaQ= -----END CERTIFICATE-----Generated at Wed Sep 23 04:35:52 2026 by rpki-client