$ rpki-client -vvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: k1ZzdlgSFgTrSydXyWQ77efAEvpSXs/13kCfPcUhk1c= Subject key identifier: 1E:45:3D:87:47:5C:5C:F1:00:86:43:0F:FC:DA:C9:1D:77:FA:F1:87 Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 0842E9AB09A128CEDC8713571E80F68AA5A66AB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:01:04 +0000 Manifest this update: Tue 02 Jun 2026 12:56:04 +0000 Manifest next update: Wed 03 Jun 2026 16:41:04 +0000 Files and hashes: 1: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) 2: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: uaIjRqOSFBJW1MmxL0Ok6nuFfBkz0B1WPDF4kTJC1IY=) 3: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) 4: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 5: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 7: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 8: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:42:e9:ab:09:a1:28:ce:dc:87:13:57:1e:80:f6:8a:a5:a6:6a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Jun 2 12:56:04 2026 GMT Not After : Jun 3 16:41:04 2026 GMT Subject: CN=1E453D87475C5CF10086430FFCDAC91D77FAF187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:49:93:48:8c:8b:16:43:eb:7e:1f:d3:87: 05:fb:05:8f:f1:14:c1:f8:ea:ea:c1:2e:21:c1:ab: 38:9d:43:41:81:89:25:66:e6:41:80:e4:9c:55:23: c9:b1:fc:be:24:aa:e8:16:48:9b:a7:46:87:7f:05: f7:5e:e6:2b:3b:82:e7:ca:d3:c8:ed:c3:f3:95:df: e4:d4:04:a2:3c:ff:7d:97:67:e5:ee:74:61:86:be: 26:87:49:5f:09:80:ed:43:6c:21:df:08:d3:a9:3b: af:a3:c5:f0:91:0a:fa:ad:57:74:29:fc:38:60:ae: e3:7e:50:7d:b0:1f:e0:75:ba:87:f4:cb:da:c6:93: 0a:38:3c:b5:7a:55:73:37:17:fe:b5:48:5f:cd:36: 38:0b:f5:6c:02:2b:2c:d2:53:fd:91:21:a1:0f:7f: 5c:c9:bc:b2:e4:dc:b9:10:9e:b7:b0:30:96:2b:02: 54:2e:8f:e2:e6:6b:6c:8f:e7:dd:ee:6b:9c:74:32: fd:d9:75:e0:c2:93:72:7b:85:ba:15:de:b5:bb:8b: 4f:b5:2b:43:a8:46:f0:4c:64:22:84:f9:a3:37:65: 75:af:47:5b:b0:f2:b8:32:dd:8a:84:b5:ea:da:11: ec:eb:52:62:6c:d9:88:76:74:06:20:2d:5f:85:6f: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:3D:87:47:5C:5C:F1:00:86:43:0F:FC:DA:C9:1D:77:FA:F1:87 X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b6:ae:db:9a:b7:ed:9e:09:38:f9:23:4a:00:6d:a3:d7:7a: b8:84:14:b5:61:67:3a:e7:17:65:f0:85:6d:3a:3a:b5:66:a7: 12:ae:72:ac:bf:0f:a7:75:32:da:90:88:ad:00:12:37:44:82: 2f:ae:38:a4:c5:2e:7d:e8:cc:e8:1f:d8:3b:d5:1d:57:2b:db: a0:14:bf:97:2f:e6:88:c7:8f:e7:21:ff:90:a3:94:b8:8e:74: 9d:d0:00:0b:8b:b6:59:cf:f3:24:71:62:24:4d:58:39:80:fe: e5:bc:74:d3:85:69:76:5a:a1:c8:89:7f:a6:ad:c3:ff:b7:5b: 2a:f8:31:28:ba:d9:69:21:bf:d9:9d:df:e0:95:7e:9a:57:ac: 5e:e7:99:4e:f7:ac:e3:0f:87:e0:ac:e8:99:ec:ac:90:86:0f: 1d:6f:d8:4d:5f:74:74:db:77:64:57:e0:c0:d8:a2:1f:0b:98: f7:c3:59:d6:57:f2:5d:9d:e2:68:5e:c2:19:bd:1b:22:b6:78: 8c:13:89:29:d5:06:9f:45:a4:15:c5:45:a1:ce:6b:e8:70:e7: bc:d7:a6:e4:df:f4:ee:d7:ac:9b:59:bf:39:b7:f4:78:19:a9: 73:14:32:e3:4d:be:77:ca:8a:05:49:2f:ba:72:27:0f:e0:6d: 8e:2b:f4:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCELpqwmhKM7chxNXHoD2iqWmarEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA2MDIxMjU2MDRaFw0yNjA2MDMxNjQxMDRaMDMxMTAvBgNV BAMTKDFFNDUzRDg3NDc1QzVDRjEwMDg2NDMwRkZDREFDOTFENzdGQUYxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMkmTSIyLFkPrfh/ThwX7BY/x FMH46urBLiHBqzidQ0GBiSVm5kGA5JxVI8mx/L4kqugWSJunRod/Bfde5is7gufK 08jtw/OV3+TUBKI8/32XZ+XudGGGviaHSV8JgO1DbCHfCNOpO6+jxfCRCvqtV3Qp /DhgruN+UH2wH+B1uof0y9rGkwo4PLV6VXM3F/61SF/NNjgL9WwCKyzSU/2RIaEP f1zJvLLk3LkQnrewMJYrAlQuj+Lma2yP593ua5x0Mv3ZdeDCk3J7hboV3rW7i0+1 K0OoRvBMZCKE+aM3ZXWvR1uw8rgy3YqEteraEezrUmJs2Yh2dAYgLV+Fb2BLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkU9h0dcXPEAhkMP/NrJHXf68YcwHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO2rtuat+2eCTj5I0oAbaPXeriEFLVhZzrn F2XwhW06OrVmpxKucqy/D6d1MtqQiK0AEjdEgi+uOKTFLn3ozOgf2DvVHVcr26AU v5cv5ojHj+ch/5CjlLiOdJ3QAAuLtlnP8yRxYiRNWDmA/uW8dNOFaXZaociJf6at w/+3Wyr4MSi62Wkhv9md3+CVfppXrF7nmU73rOMPh+Cs6JnsrJCGDx1v2E1fdHTb d2RX4MDYoh8LmPfDWdZX8l2d4mhewhm9GyK2eIwTiSnVBp9FpBXFRaHOa+hw57zX puTf9O7XrJtZvzm39HgZqXMUMuNNvnfKigVJL7pyJw/gbY4r9DI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:03 2026 by rpki-client