$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: cPf13kHgGmpXDe+8IJXkrlYS47Dc0KavnbzT3nmiL6c= Subject key identifier: 2C:25:4B:CD:1D:24:14:E1:CD:A4:D5:26:ED:3B:FD:2E:3A:E8:F1:FC Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 23E986D46CB11F9CC136DE418AED2564DF143142 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:30:42 +0000 Manifest this update: Mon 20 Jul 2026 15:25:42 +0000 Manifest next update: Tue 21 Jul 2026 18:01:42 +0000 Files and hashes: 1: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: hsUr2P4n6V2mIO+KRQaSkdFxv5ivWOBNauxWwVC+C4g=) 2: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) 3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 4: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 5: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 7: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) 8: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e9:86:d4:6c:b1:1f:9c:c1:36:de:41:8a:ed:25:64:df:14:31:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Jul 20 15:25:42 2026 GMT Not After : Jul 21 18:01:42 2026 GMT Subject: CN=2C254BCD1D2414E1CDA4D526ED3BFD2E3AE8F1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:70:44:fa:5f:cf:5f:53:7c:cc:4d:3c:68: b8:44:61:96:c4:eb:6c:92:fc:cf:ea:0c:82:2e:36: 3b:0f:dd:3b:52:80:ab:e0:34:2e:dc:be:d8:d9:7b: 4c:e0:ee:f0:61:59:9e:0d:bc:a2:28:14:8c:80:b3: 35:36:66:4e:29:68:7b:5a:0e:81:20:e3:ff:da:a0: 61:ff:68:e0:e8:51:3a:96:de:25:78:78:c1:5c:38: 71:b9:69:d4:32:f0:a1:d8:82:9b:ca:ab:0a:2d:40: 14:55:e7:98:3a:af:e0:d4:1d:5f:4d:f5:38:19:48: f3:c5:8d:8f:d3:e3:34:25:2d:90:f2:61:9f:a8:51: 5d:e4:3a:be:ad:f0:1d:e5:f1:8a:d6:d3:83:e7:f3: cc:41:de:3a:e3:6b:fe:e3:06:dd:65:6e:cf:69:28: f2:1c:32:94:8b:a7:ba:f3:b7:c1:ef:d7:40:98:77: 51:47:ff:b5:8f:0a:f2:b2:5f:9b:82:96:c0:07:2b: 03:0e:2a:e0:94:76:5b:33:c9:43:60:a1:1d:85:af: 7a:55:7c:15:76:06:96:f4:b8:13:d0:52:06:a8:90: 9c:82:76:f9:ea:9b:40:cb:b3:12:5f:2b:88:61:23: 0e:4c:b6:8f:16:9a:d1:e2:06:76:f9:f5:2e:01:71: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:25:4B:CD:1D:24:14:E1:CD:A4:D5:26:ED:3B:FD:2E:3A:E8:F1:FC X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:01:85:81:1c:a7:43:fb:31:3e:4c:de:9b:f3:23:5f:42:b8: c6:06:42:e0:fa:f9:39:62:97:94:f4:88:e8:3f:ec:90:d5:6e: 34:22:bb:b5:2f:a2:3a:2b:69:6b:80:00:59:40:cb:3c:c7:77: b7:c0:38:9b:39:1f:16:94:cc:d9:34:ff:37:1b:66:1a:a3:9a: 20:12:88:68:0e:c1:88:af:34:cc:3d:ac:34:21:ea:21:fe:c9: 2d:7d:e0:8d:8a:b8:bf:f8:5a:5c:60:e4:0c:b5:db:03:85:10: 55:1c:2b:18:9b:53:72:86:ce:6a:50:37:e0:6d:f3:44:ef:4e: 79:9a:b6:63:f6:31:63:18:7f:ba:96:c0:c1:5d:e7:e4:55:df: 04:ed:e0:81:d3:06:38:43:01:2a:3a:7e:2e:8f:09:5f:ac:64: 17:d8:d1:57:fe:15:29:ea:6b:ee:62:27:6f:c0:83:ac:4e:f4: 12:d2:2e:5d:8d:85:fb:ae:f2:3f:3f:9f:68:3a:d0:68:07:9d: 87:47:a3:cf:32:6a:2b:2a:89:4c:dc:50:ee:c9:12:60:3f:a9: 0a:ef:8c:21:a7:2c:4a:eb:4c:3c:a9:bf:89:62:d8:b0:05:37: 8b:d9:3b:26:20:0e:2c:58:a8:1b:6e:e6:41:77:dc:83:74:c6: 8f:8d:46:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+mG1GyxH5zBNt5Biu0lZN8UMUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA3MjAxNTI1NDJaFw0yNjA3MjExODAxNDJaMDMxMTAvBgNV BAMTKDJDMjU0QkNEMUQyNDE0RTFDREE0RDUyNkVEM0JGRDJFM0FFOEYxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1HBE+l/PX1N8zE08aLhEYZbE 62yS/M/qDIIuNjsP3TtSgKvgNC7cvtjZe0zg7vBhWZ4NvKIoFIyAszU2Zk4paHta DoEg4//aoGH/aODoUTqW3iV4eMFcOHG5adQy8KHYgpvKqwotQBRV55g6r+DUHV9N 9TgZSPPFjY/T4zQlLZDyYZ+oUV3kOr6t8B3l8YrW04Pn88xB3jrja/7jBt1lbs9p KPIcMpSLp7rzt8Hv10CYd1FH/7WPCvKyX5uClsAHKwMOKuCUdlszyUNgoR2Fr3pV fBV2Bpb0uBPQUgaokJyCdvnqm0DLsxJfK4hhIw5Mto8WmtHiBnb59S4BccFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCVLzR0kFOHNpNUm7Tv9Ljro8fwwHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4BhYEcp0P7MT5M3pvzI19CuMYGQuD6+Tli l5T0iOg/7JDVbjQiu7UvojoraWuAAFlAyzzHd7fAOJs5HxaUzNk0/zcbZhqjmiAS iGgOwYivNMw9rDQh6iH+yS194I2KuL/4Wlxg5Ay12wOFEFUcKxibU3KGzmpQN+Bt 80TvTnmatmP2MWMYf7qWwMFd5+RV3wTt4IHTBjhDASo6fi6PCV+sZBfY0Vf+FSnq a+5iJ2/Ag6xO9BLSLl2Nhfuu8j8/n2g60GgHnYdHo88yaisqiUzcUO7JEmA/qQrv jCGnLErrTDypv4li2LAFN4vZOyYgDixYqBtu5kF33IN0xo+NRho= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:51 2026 by rpki-client