$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: WpFk8k1iz/aKgpvwCmSpgTd7xm8uBHXuDdrXZnsIhkA= Subject key identifier: B7:66:23:E3:BD:C8:74:A0:0A:7A:D2:9A:6C:F7:E4:FA:92:A9:A5:D5 Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 2FC6698B684F8CD677C08942A4F4D03DFA350FAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 12:03:11 +0000 Manifest this update: Wed 04 Nov 2026 11:58:11 +0000 Manifest next update: Thu 05 Nov 2026 13:12:11 +0000 Files and hashes: 1: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 2: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: PNIhbbMM9mkkUUuxtQKodAAL1EwvNPbzI2cLZbrx89Y=) 3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 4: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) 5: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 6: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 7: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 8: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 13:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c6:69:8b:68:4f:8c:d6:77:c0:89:42:a4:f4:d0:3d:fa:35:0f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Nov 4 11:58:11 2026 GMT Not After : Nov 5 13:12:11 2026 GMT Subject: CN=B76623E3BDC874A00A7AD29A6CF7E4FA92A9A5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:8d:fe:12:f6:a3:a2:e8:00:d2:a5:08:fd: 9d:91:18:93:bd:2b:d8:18:c5:3c:14:6b:b3:af:21: 54:34:0a:3c:4e:78:6c:16:2f:46:92:23:8f:9a:45: 48:69:14:40:6e:ba:a4:10:66:49:77:39:56:1c:78: a8:cb:a7:ed:2b:4a:8b:f3:23:6c:12:a1:5d:ed:5c: e3:49:5a:b3:18:86:c5:b1:5d:50:c5:8e:c3:6e:27: 90:03:b2:2c:b5:62:ed:4c:74:6e:b8:f7:7c:6e:0c: 14:58:e9:d2:69:5b:fc:fc:60:8b:04:f9:cc:e0:4c: c2:db:6e:52:cb:09:7b:70:62:43:67:71:24:f9:e6: cb:73:b3:3b:42:fb:7a:d5:3b:91:27:08:54:86:3d: 61:66:e6:02:e2:af:48:8e:a1:5d:a5:a9:d6:0a:8f: 30:a7:b8:30:96:a8:87:8a:c2:96:4a:42:c5:1d:79: db:ad:ea:81:ee:23:36:3b:9a:1a:a7:5b:8d:e3:4f: 54:90:84:49:b5:dc:89:c1:c8:e6:a2:c7:59:de:d2: 59:3e:1e:31:e4:6c:b8:4d:bb:d3:df:5d:bf:24:c0: 25:ff:2b:2a:cf:0b:39:64:44:8c:ce:ee:05:a8:ed: b1:1a:4c:0f:e6:cd:04:f3:fe:b8:de:fe:30:4b:50: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:23:E3:BD:C8:74:A0:0A:7A:D2:9A:6C:F7:E4:FA:92:A9:A5:D5 X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ad:11:3f:f1:8e:af:f4:55:ea:0b:6c:d1:bb:27:83:84:88: 13:81:8c:f8:54:6a:be:63:7a:40:b2:31:7c:1e:a0:30:38:44: 10:ff:0f:bc:52:ba:75:df:ca:3c:18:f2:54:ea:2f:45:0a:68: 1a:db:8b:62:14:49:ac:8d:b2:89:87:57:2d:17:f7:cd:fb:d8: ab:a1:9a:77:4d:98:dc:60:4a:2b:d3:64:a6:3a:00:d8:f0:ff: ee:fb:f3:80:31:5b:15:5f:a5:eb:7b:17:1f:79:50:6e:81:e9: c1:58:33:51:e1:0a:af:5e:e4:92:91:d0:3a:68:4b:16:46:1b: f7:98:28:dd:dd:cb:56:44:a4:8a:95:ba:8f:8b:be:ca:dd:32: c9:17:d1:ac:5b:6b:e8:9c:a8:8e:77:0c:be:76:6e:cb:d5:e3: 16:8a:0a:ce:73:53:be:24:bc:d3:56:ab:94:4c:0e:b6:dd:02: fb:87:a5:f8:e9:d1:f1:b2:f5:78:bd:eb:1b:b9:d8:2c:d1:28: 1f:9d:91:c2:4b:9e:16:03:88:12:ad:60:bc:d8:da:f3:71:39: 7b:22:8e:12:bc:81:cb:45:ea:13:55:cc:99:18:6b:6e:c2:e6: d2:10:c7:d2:1c:64:30:46:12:28:fe:28:be:71:da:b2:2e:3a: b5:1f:69:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8Zpi2hPjNZ3wIlCpPTQPfo1D6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjExMDQxMTU4MTFaFw0yNjExMDUxMzEyMTFaMDMxMTAvBgNV BAMTKEI3NjYyM0UzQkRDODc0QTAwQTdBRDI5QTZDRjdFNEZBOTJBOUE1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheY3+EvajougA0qUI/Z2RGJO9 K9gYxTwUa7OvIVQ0CjxOeGwWL0aSI4+aRUhpFEBuuqQQZkl3OVYceKjLp+0rSovz I2wSoV3tXONJWrMYhsWxXVDFjsNuJ5ADsiy1Yu1MdG6493xuDBRY6dJpW/z8YIsE +czgTMLbblLLCXtwYkNncST55stzsztC+3rVO5EnCFSGPWFm5gLir0iOoV2lqdYK jzCnuDCWqIeKwpZKQsUdedut6oHuIzY7mhqnW43jT1SQhEm13InByOaix1ne0lk+ HjHkbLhNu9PfXb8kwCX/KyrPCzlkRIzO7gWo7bEaTA/mzQTz/rje/jBLUCTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2Yj473IdKAKetKabPfk+pKppdUwHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAutET/xjq/0VeoLbNG7J4OEiBOBjPhUar5j ekCyMXweoDA4RBD/D7xSunXfyjwY8lTqL0UKaBrbi2IUSayNsomHVy0X98372Kuh mndNmNxgSivTZKY6ANjw/+7784AxWxVfpet7Fx95UG6B6cFYM1HhCq9e5JKR0Dpo SxZGG/eYKN3dy1ZEpIqVuo+LvsrdMskX0axba+icqI53DL52bsvV4xaKCs5zU74k vNNWq5RMDrbdAvuHpfjp0fGy9Xi96xu52CzRKB+dkcJLnhYDiBKtYLzY2vNxOXsi jhK8gctF6hNVzJkYa27C5tIQx9IcZDBGEij+KL5x2rIuOrUfae0= -----END CERTIFICATE-----Generated at Thu Nov 5 05:26:55 2026 by rpki-client