$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: tIR1eyd48l0Wn/5fcCZeXr/9DfNWsTMsna4RjpkLbTc= Subject key identifier: 15:54:C1:7E:A6:05:0A:94:78:05:F2:4A:CD:EC:35:2A:08:2C:B0:5E Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 5C1CD133A5610E46099E2B12896CD74E5689E48C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 05:27:37 +0000 Manifest this update: Wed 29 Jul 2026 05:22:37 +0000 Manifest next update: Thu 30 Jul 2026 08:58:37 +0000 Files and hashes: 1: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 2: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 3: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 4: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) 5: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: yiyJZthtkODH/3INTLXeit+e2BSxIsG+Q9kL6wflcNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1c:d1:33:a5:61:0e:46:09:9e:2b:12:89:6c:d7:4e:56:89:e4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Jul 29 05:22:37 2026 GMT Not After : Jul 30 08:58:37 2026 GMT Subject: CN=1554C17EA6050A947805F24ACDEC352A082CB05E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f0:86:f5:8d:8a:69:8d:a8:82:c0:02:e9:ce: 15:a5:7b:6a:4a:16:07:b7:e6:76:54:c9:52:72:cb: d8:a6:20:a7:24:9b:9d:93:9b:0c:07:4d:79:56:d3: 4f:94:b7:5a:25:95:37:96:7b:fc:c8:4d:53:56:6a: da:1e:77:e3:26:96:0d:23:ea:fe:cc:79:a1:53:16: 99:83:c3:ec:11:d3:db:bf:c1:0e:15:bf:f4:d6:ae: 6a:1b:ed:f1:9a:68:b8:75:54:29:7c:22:84:d6:01: 9b:8d:1c:9d:94:a6:96:43:d0:27:e8:62:70:04:fe: 10:97:b3:84:30:70:c7:e1:d7:e1:56:0b:c3:88:93: a7:fc:5e:db:c4:1e:f1:1b:97:4b:7b:be:51:be:7a: 9c:55:3a:a3:02:30:be:5f:b3:63:a6:15:12:a1:63: 0e:d2:6f:09:0f:92:c6:ac:59:83:62:8b:56:09:2c: a9:ba:62:7a:65:8b:c6:0f:e0:26:25:87:4f:ab:6d: f4:81:8e:62:62:73:d6:73:34:01:af:72:b1:da:da: bb:41:5d:25:b3:51:d8:f5:2d:ce:c3:27:15:6e:6b: 0b:7d:42:6b:91:06:f4:70:fc:94:ff:00:ee:b2:1f: 93:d8:5c:90:3a:39:ce:23:fc:a7:29:c7:44:b6:71: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:C1:7E:A6:05:0A:94:78:05:F2:4A:CD:EC:35:2A:08:2C:B0:5E X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:07:de:c9:38:45:ad:f0:cc:e5:3b:d8:ba:7e:82:18:ff:f5: 42:53:9a:60:7f:3b:57:23:73:f3:f8:75:9d:1a:c5:6f:42:6e: 36:b9:57:6d:a0:77:8e:d8:ee:f5:5c:91:e4:0f:d9:4a:c1:d7: 82:24:dd:25:2e:12:02:33:a9:40:31:c6:ee:c4:de:4c:23:52: 29:49:d0:cf:a2:ae:dd:e8:70:1c:32:ef:c2:3a:08:f4:21:57: e3:e6:a1:92:29:d6:5b:70:72:7f:d1:fc:28:70:b9:75:94:62: 92:17:91:74:d2:9c:12:2f:61:98:55:c7:7a:7a:20:41:70:ae: 55:44:58:c1:3a:a9:53:1d:82:1c:28:a7:a1:19:d3:b4:8d:e9: be:dd:8b:ec:1b:ce:df:e0:47:31:3c:00:29:c2:8c:1d:7f:f7: 06:93:d2:5d:05:65:a7:f8:48:79:96:29:2c:f5:71:86:19:fc: a1:d6:30:f6:58:fa:51:7b:e9:15:6f:25:16:74:80:46:20:de: be:2c:c4:86:1e:99:bd:81:aa:87:fc:58:50:81:ef:f8:2e:b6: d7:c7:3f:bf:2f:53:f5:cb:85:ee:53:46:1f:2b:3e:67:ef:7a: db:2e:2f:eb:d8:a0:78:91:24:36:78:37:a7:8e:9f:7f:40:44: 10:d0:db:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBzRM6VhDkYJnisSiWzXTlaJ5IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA3MjkwNTIyMzdaFw0yNjA3MzAwODU4MzdaMDMxMTAvBgNV BAMTKDE1NTRDMTdFQTYwNTBBOTQ3ODA1RjI0QUNERUMzNTJBMDgyQ0IwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD28Ib1jYppjaiCwALpzhWle2pK Fge35nZUyVJyy9imIKckm52TmwwHTXlW00+Ut1ollTeWe/zITVNWatoed+Mmlg0j 6v7MeaFTFpmDw+wR09u/wQ4Vv/TWrmob7fGaaLh1VCl8IoTWAZuNHJ2UppZD0Cfo YnAE/hCXs4QwcMfh1+FWC8OIk6f8XtvEHvEbl0t7vlG+epxVOqMCML5fs2OmFRKh Yw7SbwkPksasWYNii1YJLKm6Ynpli8YP4CYlh0+rbfSBjmJic9ZzNAGvcrHa2rtB XSWzUdj1Lc7DJxVuawt9QmuRBvRw/JT/AO6yH5PYXJA6Oc4j/Kcpx0S2ca3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVTBfqYFCpR4BfJKzew1KggssF4wHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMH3sk4Ra3wzOU72Lp+ghj/9UJTmmB/O1cj c/P4dZ0axW9Cbja5V22gd47Y7vVckeQP2UrB14Ik3SUuEgIzqUAxxu7E3kwjUilJ 0M+irt3ocBwy78I6CPQhV+PmoZIp1ltwcn/R/ChwuXWUYpIXkXTSnBIvYZhVx3p6 IEFwrlVEWME6qVMdghwop6EZ07SN6b7di+wbzt/gRzE8ACnCjB1/9waT0l0FZaf4 SHmWKSz1cYYZ/KHWMPZY+lF76RVvJRZ0gEYg3r4sxIYemb2Bqof8WFCB7/guttfH P78vU/XLhe5TRh8rPmfvetsuL+vYoHiRJDZ4N6eOn39ARBDQ20E= -----END CERTIFICATE-----Generated at Wed Jul 29 12:25:56 2026 by rpki-client