$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: N484xGCaczMrkdiCBwd3v1sWdmRXkG0uH9T+pOS9XTo= Subject key identifier: 12:D8:3E:C8:49:4D:F7:F4:8B:B4:B0:D6:53:51:82:9F:FD:ED:71:13 Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 7D7834E8D557CDE44233BDF4B2E429BA26F80FB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:42:25 +0000 Manifest this update: Sat 13 Jun 2026 14:37:25 +0000 Manifest next update: Sun 14 Jun 2026 17:44:25 +0000 Files and hashes: 1: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) 2: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 3: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: E7lbTEkVk3RS9Lge5N0wvDDRoIw9QThYXLpXgeeEcYI=) 4: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:78:34:e8:d5:57:cd:e4:42:33:bd:f4:b2:e4:29:ba:26:f8:0f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Jun 13 14:37:25 2026 GMT Not After : Jun 14 17:44:25 2026 GMT Subject: CN=12D83EC8494DF7F48BB4B0D65351829FFDED7113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:41:59:eb:ea:15:7f:7d:c7:03:51:ea:67: 11:cc:d8:e2:61:5f:03:d3:29:7c:ba:4d:c5:0b:54: 32:ea:e5:4b:3c:99:05:aa:6a:34:35:33:c7:1f:34: b8:38:4d:24:eb:03:62:e9:84:a2:f6:42:a1:e8:37: 73:76:50:97:0c:21:a6:75:c2:c6:23:c6:b1:0f:51: 25:19:34:22:24:14:24:30:30:60:0b:97:21:0a:44: 4c:3c:da:53:df:73:04:eb:f1:53:c4:d9:da:c0:88: 22:47:98:ae:fd:70:ef:04:dc:26:d4:f1:3b:77:17: a0:77:35:c6:9a:49:30:ed:98:c7:38:20:c5:8c:fe: a1:4a:9c:2a:1e:41:59:0c:c0:c0:47:6d:ae:d4:6f: a0:28:ab:be:e7:18:d0:66:86:8e:b7:84:57:b3:9d: 8a:2e:6d:9d:be:79:f2:1f:30:3a:8f:7c:61:6e:99: 82:fe:65:9c:91:6f:5d:10:83:ab:c3:c5:cd:fa:6d: a0:0b:d1:8e:f9:48:f8:61:a0:18:7f:d7:65:03:9c: 60:15:ea:1c:a1:21:eb:23:6d:05:46:26:b8:04:56: 56:a4:2c:e6:df:da:a8:a4:3a:6a:2b:42:07:f9:cc: 50:95:42:75:28:05:65:75:90:36:c2:d8:39:96:ce: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:3E:C8:49:4D:F7:F4:8B:B4:B0:D6:53:51:82:9F:FD:ED:71:13 X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:87:2b:72:01:f4:25:b7:19:c9:8d:8c:db:4e:7f:58:39:68: fd:68:16:d4:66:48:e7:95:bb:20:3c:97:a5:1d:59:5e:23:0f: c0:d2:45:b1:d2:89:75:c2:77:67:11:79:21:1a:fa:bc:1b:9f: f9:4f:70:c4:60:02:81:89:71:c4:7b:6a:84:43:29:21:a8:e2: 7e:06:09:ca:50:49:04:3f:b1:f0:ea:5a:c9:fa:31:8a:e4:3e: 91:84:c9:b4:7e:55:8c:e4:64:d2:cd:e6:50:a7:1a:fc:80:7d: 87:01:d9:59:d4:16:f8:e7:ae:33:2c:b8:e6:9b:07:77:47:10: ee:02:6c:d7:9a:75:07:19:45:0e:b8:d5:3d:b9:10:92:a8:bc: 00:94:81:ee:3e:0f:30:92:6b:ce:e9:cc:9a:f9:09:42:d7:84: a7:62:09:76:90:89:e8:cb:99:e7:4f:da:48:ee:f8:f7:e9:ff: f2:e1:08:db:f6:15:5f:32:c4:a7:ea:a8:43:8a:2b:50:d2:dd: fd:f5:03:4a:59:59:32:b8:60:ba:af:03:63:99:bb:88:d1:c1: 1e:ce:79:b8:5e:9e:01:e9:f1:c1:23:53:af:ca:1a:8e:21:e0: d0:d1:51:c1:1c:f3:91:3d:8d:4f:a6:fa:87:ea:91:98:30:6d: ab:51:92:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXg06NVXzeRCM730suQpuib4D7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA2MTMxNDM3MjVaFw0yNjA2MTQxNzQ0MjVaMDMxMTAvBgNV BAMTKDEyRDgzRUM4NDk0REY3RjQ4QkI0QjBENjUzNTE4MjlGRkRFRDcxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColEFZ6+oVf33HA1HqZxHM2OJh XwPTKXy6TcULVDLq5Us8mQWqajQ1M8cfNLg4TSTrA2LphKL2QqHoN3N2UJcMIaZ1 wsYjxrEPUSUZNCIkFCQwMGALlyEKREw82lPfcwTr8VPE2drAiCJHmK79cO8E3CbU 8Tt3F6B3NcaaSTDtmMc4IMWM/qFKnCoeQVkMwMBHba7Ub6Aoq77nGNBmho63hFez nYoubZ2+efIfMDqPfGFumYL+ZZyRb10Qg6vDxc36baAL0Y75SPhhoBh/12UDnGAV 6hyhIesjbQVGJrgEVlakLObf2qikOmorQgf5zFCVQnUoBWV1kDbC2DmWztEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEtg+yElN9/SLtLDWU1GCn/3tcRMwHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOHK3IB9CW3GcmNjNtOf1g5aP1oFtRmSOeV uyA8l6UdWV4jD8DSRbHSiXXCd2cReSEa+rwbn/lPcMRgAoGJccR7aoRDKSGo4n4G CcpQSQQ/sfDqWsn6MYrkPpGEybR+VYzkZNLN5lCnGvyAfYcB2VnUFvjnrjMsuOab B3dHEO4CbNeadQcZRQ641T25EJKovACUge4+DzCSa87pzJr5CULXhKdiCXaQiejL medP2kju+Pfp//LhCNv2FV8yxKfqqEOKK1DS3f31A0pZWTK4YLqvA2OZu4jRwR7O ebhengHp8cEjU6/KGo4h4NDRUcEc85E9jU+m+ofqkZgwbatRki8= -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:20 2026 by rpki-client