$ rpki-client -vvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json) Hash identifier: t3v1KkIc7I4Vy0THvg9GX6HxmFiUWO8IrH3v2e7jbgE= Subject key identifier: E7:C4:21:0A:40:E3:B0:6E:4B:68:F0:1A:72:D2:C3:71:E8:FD:FD:3D Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29 Certificate serial: 2D2A7F09A337D014203F5A83611FDE4A4F29DA88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:24:08 +0000 Manifest this update: Tue 02 Jun 2026 11:19:08 +0000 Manifest next update: Wed 03 Jun 2026 14:07:08 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=) 2: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: YhAz+PUpiGP0gpSDAH5QdUN7rxOyHfrZXQ7R05mV6uE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2a:7f:09:a3:37:d0:14:20:3f:5a:83:61:1f:de:4a:4f:29:da:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29 Validity Not Before: Jun 2 11:19:08 2026 GMT Not After : Jun 3 14:07:08 2026 GMT Subject: CN=E7C4210A40E3B06E4B68F01A72D2C371E8FDFD3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:da:b4:25:ed:62:c4:9a:e1:ef:30:a3:a5: 77:6c:18:c4:ac:71:fb:b7:ca:82:20:c1:94:e8:e8: bf:4d:1f:f4:0a:90:de:66:36:74:9e:f1:a4:c5:1c: 1c:3d:dd:18:b7:d9:e4:43:e4:1d:d4:d2:26:d3:d4: 9f:eb:bc:59:ec:46:cc:68:bd:c3:39:06:f1:9a:ae: 06:fe:62:b7:ca:77:a4:53:43:c2:1e:e9:e7:9d:38: b6:45:58:0a:a1:ed:81:45:b4:d9:18:93:2e:fb:08: cd:3f:ec:ea:e9:47:bd:0a:68:e7:99:a1:18:c2:c0: 75:c7:1d:f8:76:58:71:6d:9e:d1:5a:44:af:ea:37: 31:a8:e8:a0:87:eb:ba:37:57:d3:8f:bf:84:1e:c8: d0:08:da:7e:d3:a5:87:b5:af:d1:5b:b8:0c:20:a5: 18:49:e8:89:c0:55:57:72:c4:e3:f6:da:b3:ea:5a: 7c:68:e0:12:88:85:da:ef:16:02:8a:85:56:58:90: 3d:00:9b:e0:85:ab:1c:0b:44:5d:f5:49:a2:5e:26: 4b:2a:97:76:b5:8f:e1:89:a6:d6:f5:78:ed:41:67: eb:dd:53:16:7d:f2:aa:79:b4:ec:1d:b2:a1:2c:b0: 34:c7:ec:16:db:f2:4b:91:de:f7:0a:40:aa:ec:ec: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C4:21:0A:40:E3:B0:6E:4B:68:F0:1A:72:D2:C3:71:E8:FD:FD:3D X509v3 Authority Key Identifier: keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:52:e9:6c:f7:0e:62:19:f1:3e:5d:12:a6:05:8c:98:ef:93: 4f:d7:3f:c9:50:8e:c2:3f:e8:46:c2:b8:dc:85:ee:93:f1:85: df:4c:fd:bb:4b:70:ee:88:13:8a:6b:0a:70:7f:0e:0b:bc:19: 1e:27:08:42:d2:5c:05:de:d2:8e:58:bc:40:ce:34:67:6e:ff: 52:d4:50:71:06:cd:88:d4:1c:ae:76:2d:13:14:8b:1f:f1:e1: 35:c3:17:f9:44:33:b5:2c:95:ba:7b:f1:7b:72:87:91:5d:ac: 84:c4:e1:ac:1e:93:fe:a9:36:13:ef:7b:bd:ed:21:55:dd:2e: 30:e2:ce:ba:af:cc:99:2e:f0:90:1c:2b:50:3a:57:fc:f9:1c: 34:ab:51:1b:19:f3:f6:74:ab:1e:c0:40:87:13:51:92:8d:04: 6e:2a:27:c1:6b:ef:56:37:79:2e:c8:f7:e8:65:f2:4d:c1:03: 05:48:16:6b:bf:1b:16:31:4b:19:40:a2:c1:8d:69:64:99:c0: 62:3d:80:32:00:a6:f1:70:68:bb:b4:0f:60:d6:8d:e8:97:5d: 41:ec:63:aa:ce:a1:c9:26:cb:bf:4a:e8:37:90:3e:b3:05:40: fa:ba:25:3f:bf:2f:d9:a1:a0:73:71:2f:37:43:d0:84:d0:82: 37:49:ab:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSp/CaM30BQgP1qDYR/eSk8p2ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JD MUI0OUYyOTAeFw0yNjA2MDIxMTE5MDhaFw0yNjA2MDMxNDA3MDhaMDMxMTAvBgNV BAMTKEU3QzQyMTBBNDBFM0IwNkU0QjY4RjAxQTcyRDJDMzcxRThGREZEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xtq0Je1ixJrh7zCjpXdsGMSs cfu3yoIgwZTo6L9NH/QKkN5mNnSe8aTFHBw93Ri32eRD5B3U0ibT1J/rvFnsRsxo vcM5BvGargb+YrfKd6RTQ8Ie6eedOLZFWAqh7YFFtNkYky77CM0/7OrpR70KaOeZ oRjCwHXHHfh2WHFtntFaRK/qNzGo6KCH67o3V9OPv4QeyNAI2n7TpYe1r9FbuAwg pRhJ6InAVVdyxOP22rPqWnxo4BKIhdrvFgKKhVZYkD0Am+CFqxwLRF31SaJeJksq l3a1j+GJptb1eO1BZ+vdUxZ98qp5tOwdsqEssDTH7Bbb8kuR3vcKQKrs7FoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58QhCkDjsG5LaPAactLDcej9/T0wHwYDVR0j BBgwFoAUMygJIHNAFDNqAknJCaOOe8G0nykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmZTQyNTUtMWQ5MS00ZmNjLWJjZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3 MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JDMUI0OUYyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzI4MDkyMDczNDAxNDMzNkEwMjQ5QzkwOUEzOEU3QkMxQjQ5 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhF N0JDMUI0OUYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVS6Wz3DmIZ8T5dEqYFjJjvk0/XP8lQjsI/ 6EbCuNyF7pPxhd9M/btLcO6IE4prCnB/Dgu8GR4nCELSXAXe0o5YvEDONGdu/1LU UHEGzYjUHK52LRMUix/x4TXDF/lEM7Uslbp78Xtyh5FdrITE4awek/6pNhPve73t IVXdLjDizrqvzJku8JAcK1A6V/z5HDSrURsZ8/Z0qx7AQIcTUZKNBG4qJ8Fr71Y3 eS7I9+hl8k3BAwVIFmu/GxYxSxlAosGNaWSZwGI9gDIApvFwaLu0D2DWjeiXXUHs Y6rOockmy79K6DeQPrMFQPq6JT+/L9mhoHNxLzdD0ITQgjdJq6s= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:58 2026 by rpki-client