$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: qznMSJ/HqMM44rgGW2Lnj/L480kn7/3ue/WBX8R3oxg= Subject key identifier: 12:7C:CA:37:CA:D5:72:93:81:BB:34:A8:8F:D3:2B:C5:46:D9:E6:6A Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 25ACB44B87CDF9FEA5F4C7CB5EA3E0449840A68A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: D0 Signing time: Wed 18 Mar 2026 10:51:33 +0000 Manifest this update: Wed 18 Mar 2026 10:46:33 +0000 Manifest next update: Sat 21 Mar 2026 14:16:33 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: DDMVKyJ8rbp9Hz961mRI9XEJZN/ZrJZHTjDKSrsRkfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ac:b4:4b:87:cd:f9:fe:a5:f4:c7:cb:5e:a3:e0:44:98:40:a6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Mar 18 10:46:33 2026 GMT Not After : Mar 21 14:16:33 2026 GMT Subject: CN=127CCA37CAD5729381BB34A88FD32BC546D9E66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:56:8c:55:68:f7:58:01:cc:37:23:14:5c:a1: fa:9a:60:8d:ee:5a:07:3f:31:7e:6f:56:c7:cb:3f: e7:37:42:37:2d:1f:4b:82:32:7d:59:f6:e2:77:46: 4d:b8:e5:68:65:3d:89:f7:dd:93:63:4f:40:42:f4: a5:45:c2:0d:13:d2:8d:5e:50:02:fe:e4:33:fc:fe: 29:f1:4d:cb:7b:f6:e7:db:25:f1:af:f8:e1:9e:40: ac:ec:ae:2f:01:0f:77:08:43:56:ad:85:40:ce:e6: 5b:7a:1c:5f:02:97:69:39:f0:96:a0:00:97:21:d0: ba:d1:8d:73:a5:fc:5f:c5:d6:74:71:7b:c3:00:fa: 4e:1d:ae:71:72:c6:e8:1b:57:d8:7d:15:d8:0d:33: f5:8b:f3:09:5a:fd:9c:ec:d6:8e:31:9a:b1:6d:12: bd:e7:4d:2a:83:1e:c5:7c:ba:78:83:f3:48:bf:d2: 0a:ab:51:6c:37:95:db:80:f6:d1:26:58:5b:13:6e: 05:d7:2c:88:91:80:b8:f1:fa:30:70:e8:94:ae:26: 9d:de:5b:15:fd:a6:b7:82:9a:23:bf:7f:bb:43:18: f0:23:e2:f2:d6:96:89:15:69:65:18:46:dc:6e:fb: d3:f1:30:3c:f0:bc:a9:65:73:b5:1e:60:3a:8a:71: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7C:CA:37:CA:D5:72:93:81:BB:34:A8:8F:D3:2B:C5:46:D9:E6:6A X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:78:26:ef:e7:35:b9:16:df:fc:d7:07:1c:57:01:16:e9:b2: 83:c9:74:44:ff:85:c7:9b:37:c4:85:66:5d:f2:f0:d5:60:3e: 56:a7:48:95:c3:5c:a2:7d:15:33:eb:96:67:6f:11:b6:5d:fc: 4a:c4:b4:95:21:34:ed:1b:9e:43:04:1d:cd:e8:42:0b:9d:b5: 27:90:29:f6:75:63:eb:79:e3:69:91:10:96:2b:e3:75:b4:5b: a5:4f:19:79:48:bb:4a:c0:7a:c3:1d:16:c5:3a:ef:3f:d9:11: 39:e2:f5:28:8b:10:9f:2f:be:0c:6e:07:d4:e6:26:0f:ed:9a: a7:a9:12:b4:00:e9:46:28:52:3e:bc:1a:56:a5:4e:64:90:e8: e9:66:82:cd:08:15:79:0a:1e:74:f7:f9:23:b2:06:48:81:1b: 0d:32:6e:91:82:2a:6f:8e:3c:32:b7:0d:1f:2b:53:db:34:c0: c2:70:2f:cd:45:fa:99:88:17:3b:79:21:b3:eb:2a:a8:9c:b5: 78:40:8a:d3:b5:e8:7d:8e:a2:93:72:19:fc:24:5f:f2:28:10: f6:01:0c:5f:ec:60:60:0f:94:8d:d5:09:bd:a7:82:a3:17:72: 89:22:bf:d1:d1:fb:60:66:fc:10:a9:15:c4:6b:07:de:35:65: d6:44:90:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJay0S4fN+f6l9MfLXqPgRJhApoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNjAzMTgxMDQ2MzNaFw0yNjAzMjExNDE2MzNaMDMxMTAvBgNV BAMTKDEyN0NDQTM3Q0FENTcyOTM4MUJCMzRBODhGRDMyQkM1NDZEOUU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfVoxVaPdYAcw3IxRcofqaYI3u Wgc/MX5vVsfLP+c3QjctH0uCMn1Z9uJ3Rk245WhlPYn33ZNjT0BC9KVFwg0T0o1e UAL+5DP8/inxTct79ufbJfGv+OGeQKzsri8BD3cIQ1athUDO5lt6HF8Cl2k58Jag AJch0LrRjXOl/F/F1nRxe8MA+k4drnFyxugbV9h9FdgNM/WL8wla/Zzs1o4xmrFt Er3nTSqDHsV8uniD80i/0gqrUWw3lduA9tEmWFsTbgXXLIiRgLjx+jBw6JSuJp3e WxX9preCmiO/f7tDGPAj4vLWlokVaWUYRtxu+9PxMDzwvKllc7UeYDqKcWcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnzKN8rVcpOBuzSoj9MrxUbZ5mowHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh4Ju/nNbkW3/zXBxxXARbpsoPJdET/hceb N8SFZl3y8NVgPlanSJXDXKJ9FTPrlmdvEbZd/ErEtJUhNO0bnkMEHc3oQgudtSeQ KfZ1Y+t542mREJYr43W0W6VPGXlIu0rAesMdFsU67z/ZETni9SiLEJ8vvgxuB9Tm Jg/tmqepErQA6UYoUj68GlalTmSQ6Olmgs0IFXkKHnT3+SOyBkiBGw0ybpGCKm+O PDK3DR8rU9s0wMJwL81F+pmIFzt5IbPrKqictXhAitO16H2OopNyGfwkX/IoEPYB DF/sYGAPlI3VCb2ngqMXcokiv9HR+2Bm/BCpFcRrB941ZdZEkCk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:25 2026 by rpki-client