$ rpki-client -vvvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: eHgDIK0L2I69DB1kjPoaT6+cBMFNM+JEP5T5RWJ67zo= Subject key identifier: B7:5E:0B:AB:C6:98:74:AB:8C:B1:10:CE:61:41:36:01:16:C2:30:63 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 4E6980E73E1D4F362140877A3F6C6F647D2026B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 18:09:57 +0000 Manifest this update: Wed 02 Sep 2026 18:04:57 +0000 Manifest next update: Thu 03 Sep 2026 20:12:57 +0000 Files and hashes: 1: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: V4QRRDgZ2BwUxTJ8e7G7PoOwac9hKbAUwdGW7esp7bQ=) 2: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) 3: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:69:80:e7:3e:1d:4f:36:21:40:87:7a:3f:6c:6f:64:7d:20:26:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: Sep 2 18:04:57 2026 GMT Not After : Sep 3 20:12:57 2026 GMT Subject: CN=B75E0BABC69874AB8CB110CE6141360116C23063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2f:34:fe:1b:d7:25:29:d9:8f:a8:a5:3f:e0: aa:80:34:7e:dc:91:c2:20:1a:8f:b2:1c:74:75:c8: 81:f0:d5:60:11:66:d9:d9:0f:cc:50:a8:7a:63:ea: 33:d7:0e:32:0e:0b:4e:51:e4:92:17:db:d7:67:38: f4:d5:ff:cd:e3:00:e4:28:4a:f0:e5:6e:91:c5:cc: f5:90:c3:cd:fa:18:ff:c7:3f:0e:99:43:ec:70:4b: 57:d1:b7:bc:45:42:09:33:98:fc:91:51:54:fe:d7: 7a:18:c6:81:bf:c9:bb:04:cd:b6:9b:7d:13:78:19: b3:2b:96:ac:3a:f3:ce:36:f2:b7:df:26:11:07:0b: 4a:57:fe:59:b4:07:a4:63:b5:1e:b0:fb:08:e8:58: bd:e9:4d:f9:89:67:37:ad:cc:1a:76:cc:2b:30:f4: 3d:d9:42:ef:a8:3f:9e:72:02:71:fb:92:13:69:68: 38:18:37:59:47:10:fe:87:57:79:f8:93:11:e0:f4: 8b:3f:5f:44:24:fa:bd:67:09:30:a1:58:03:c3:bf: fa:87:03:72:27:ad:68:12:e9:9d:83:08:fd:68:71: 80:c9:64:51:e6:f5:0b:0b:f7:ed:22:47:68:40:b1: e9:0d:1b:af:4d:ff:cf:be:6e:d9:a8:56:4c:00:7c: 2f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:0B:AB:C6:98:74:AB:8C:B1:10:CE:61:41:36:01:16:C2:30:63 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:62:bb:63:09:6f:38:7e:a6:63:2d:d8:27:60:0c:13:6a:7b: d6:a7:05:f2:02:29:0d:bd:95:4f:bc:ed:08:cb:35:02:89:25: 59:aa:23:9e:52:53:42:91:05:c2:ba:8e:05:8b:3e:d7:59:54: c8:48:4c:89:40:fe:01:9c:11:03:48:00:d4:f6:06:a9:3e:ee: 87:8a:5e:0d:75:da:40:e8:05:59:32:a3:dc:6b:dc:7a:5c:6f: 01:da:d6:24:2e:61:3e:b2:d6:c9:0d:24:a0:8b:26:1f:26:67: d2:f6:b8:a1:7f:da:7c:87:f5:d1:f2:ce:de:06:8d:57:71:c7: d0:89:34:1a:79:bc:b9:ff:da:f4:3d:52:50:4d:3d:3f:c6:96: b0:9a:ad:63:b5:0f:ae:44:5d:13:b0:c3:bc:67:fe:1f:cc:c4: 6c:07:74:50:3b:d0:2f:22:49:8d:39:9d:e7:c8:fb:21:f1:07: 5a:4e:00:c7:cc:f0:5b:8c:b3:68:0a:12:a2:50:0a:0d:d5:84: 93:be:23:a0:d6:63:57:86:72:fc:15:c7:34:a4:65:4b:91:e2: 72:3f:ea:a0:cd:10:c9:77:c4:44:6b:1a:91:4a:27:b7:4a:75: 1d:20:f2:ce:7b:07:74:df:18:9d:2f:d4:a9:90:70:89:4c:64: 52:16:a1:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmmA5z4dTzYhQId6P2xvZH0gJrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjA5MDIxODA0NTdaFw0yNjA5MDMyMDEyNTdaMDMxMTAvBgNV BAMTKEI3NUUwQkFCQzY5ODc0QUI4Q0IxMTBDRTYxNDEzNjAxMTZDMjMwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4LzT+G9clKdmPqKU/4KqANH7c kcIgGo+yHHR1yIHw1WARZtnZD8xQqHpj6jPXDjIOC05R5JIX29dnOPTV/83jAOQo SvDlbpHFzPWQw836GP/HPw6ZQ+xwS1fRt7xFQgkzmPyRUVT+13oYxoG/ybsEzbab fRN4GbMrlqw688428rffJhEHC0pX/lm0B6RjtR6w+wjoWL3pTfmJZzetzBp2zCsw 9D3ZQu+oP55yAnH7khNpaDgYN1lHEP6HV3n4kxHg9Is/X0Qk+r1nCTChWAPDv/qH A3InrWgS6Z2DCP1ocYDJZFHm9QsL9+0iR2hAsekNG69N/8++btmoVkwAfC+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt14Lq8aYdKuMsRDOYUE2ARbCMGMwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxiu2MJbzh+pmMt2CdgDBNqe9anBfICKQ29 lU+87QjLNQKJJVmqI55SU0KRBcK6jgWLPtdZVMhITIlA/gGcEQNIANT2Bqk+7oeK Xg112kDoBVkyo9xr3HpcbwHa1iQuYT6y1skNJKCLJh8mZ9L2uKF/2nyH9dHyzt4G jVdxx9CJNBp5vLn/2vQ9UlBNPT/GlrCarWO1D65EXROww7xn/h/MxGwHdFA70C8i SY05nefI+yHxB1pOAMfM8FuMs2gKEqJQCg3VhJO+I6DWY1eGcvwVxzSkZUuR4nI/ 6qDNEMl3xERrGpFKJ7dKdR0g8s57B3TfGJ0v1KmQcIlMZFIWoYU= -----END CERTIFICATE-----Generated at Thu Sep 3 08:01:04 2026 by rpki-client