$ rpki-client -vvvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: SuduTwpoQ0SX7Mh5khs++NDoglaGi3ZoNbcjhKk5liw= Subject key identifier: C3:69:B3:E8:5C:3B:4D:A1:99:CD:7F:DF:79:47:61:4C:66:10:2D:18 Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 7FF4CC01DBA64351DA935EC905FAE050A3EC0CD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 21:34:23 +0000 Manifest this update: Wed 02 Sep 2026 21:29:23 +0000 Manifest next update: Fri 04 Sep 2026 00:04:23 +0000 Files and hashes: 1: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 2: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 3: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 4: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 5: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 6: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 7: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: cxvCYNcdrvI4kLsRWw92EFvLEoBy5acpZAOKBVqgZE8=) 8: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) 9: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 10: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 11: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f4:cc:01:db:a6:43:51:da:93:5e:c9:05:fa:e0:50:a3:ec:0c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Sep 2 21:29:23 2026 GMT Not After : Sep 4 00:04:23 2026 GMT Subject: CN=C369B3E85C3B4DA199CD7FDF7947614C66102D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:4c:90:d8:9a:e3:fd:72:65:89:6b:86:88: e8:60:2a:d8:fb:49:48:cf:54:23:f2:93:96:d7:a2: b2:0e:3c:36:33:fa:70:d4:73:37:19:c8:cf:8c:36: d2:34:c9:85:36:e2:c6:b6:14:1c:96:3e:70:83:3d: 6c:21:f6:14:1c:cd:a5:df:d3:a7:b7:8f:6d:97:3a: 08:f1:a8:79:9a:c7:3c:2e:06:3e:74:64:91:f1:82: 27:c5:5c:dd:b9:e8:cd:00:d2:f5:d5:85:f9:b9:dd: 6c:9a:c1:bd:95:52:21:d1:13:a3:8f:35:f9:dd:eb: 61:f4:50:8d:47:67:99:e9:11:f8:fc:3c:79:e7:bb: 47:b4:20:9f:86:79:a9:ce:ad:ce:4e:30:31:47:d0: 7b:30:e3:09:f8:50:e7:aa:48:6b:48:19:bf:3c:09: a9:e7:72:c6:f5:d5:40:16:97:2a:c5:83:d6:66:9f: 56:01:91:e5:8a:72:36:84:c1:4d:63:d4:4f:bf:d3: 0c:f4:9a:de:10:47:c3:f8:fa:28:41:4e:b5:71:32: b8:a3:6e:bf:bf:ea:76:3c:bb:c1:31:1d:51:ef:cd: e9:54:8a:a4:90:69:74:db:d5:e0:98:b9:9d:07:9b: fb:55:23:7b:09:51:4a:fe:e5:85:eb:c9:94:68:6e: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:B3:E8:5C:3B:4D:A1:99:CD:7F:DF:79:47:61:4C:66:10:2D:18 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:51:ba:78:a0:6e:c0:7c:a9:30:a6:09:83:2f:fc:7c:f3:f1: 78:9e:44:17:9a:6a:7a:e5:08:7b:64:b7:72:71:1e:f3:3e:cc: 37:d2:bf:3b:2a:ec:fc:2d:e8:10:00:e9:2a:bf:e8:c3:2f:6d: ac:dd:b4:ff:3c:85:9d:1a:49:df:89:00:e8:28:49:8f:58:68: 7e:88:c6:50:c0:13:7e:20:bb:16:e0:e6:51:bd:3c:c3:d5:8a: f0:dd:f0:7f:38:5e:f1:8d:4e:08:25:b2:76:45:ce:63:94:78: 4d:a7:a0:cd:39:e3:a1:df:d5:3e:d0:15:8e:c4:23:6e:d5:4c: b4:c3:01:7e:46:a7:54:55:12:61:31:4a:c9:c7:1f:80:54:36: a3:bb:72:3d:42:cf:e9:5f:5a:25:bb:ff:ea:a0:ab:bb:ea:8f: 91:52:c9:e6:e8:2c:59:d6:9f:26:19:80:5a:66:94:f5:58:fe: 17:49:ec:ba:88:1d:6d:7e:7c:33:ea:c5:d4:9a:51:19:aa:56: 32:43:88:e9:38:41:fa:45:84:c6:84:4f:66:13:b9:58:34:28: ad:3f:f1:dc:ec:bf:5f:45:65:3e:fc:ac:d8:2d:65:8f:e9:b9: 5b:b9:71:97:16:87:64:1d:77:06:9e:32:62:16:78:bb:75:79: 18:c8:59:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/TMAdumQ1Hak17JBfrgUKPsDNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA5MDIyMTI5MjNaFw0yNjA5MDQwMDA0MjNaMDMxMTAvBgNV BAMTKEMzNjlCM0U4NUMzQjREQTE5OUNEN0ZERjc5NDc2MTRDNjYxMDJEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiy0yQ2Jrj/XJliWuGiOhgKtj7 SUjPVCPyk5bXorIOPDYz+nDUczcZyM+MNtI0yYU24sa2FByWPnCDPWwh9hQczaXf 06e3j22XOgjxqHmaxzwuBj50ZJHxgifFXN256M0A0vXVhfm53Wyawb2VUiHRE6OP Nfnd62H0UI1HZ5npEfj8PHnnu0e0IJ+GeanOrc5OMDFH0Hsw4wn4UOeqSGtIGb88 Canncsb11UAWlyrFg9Zmn1YBkeWKcjaEwU1j1E+/0wz0mt4QR8P4+ihBTrVxMrij br+/6nY8u8ExHVHvzelUiqSQaXTb1eCYuZ0Hm/tVI3sJUUr+5YXryZRobvP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw2mz6Fw7TaGZzX/feUdhTGYQLRgwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRRunigbsB8qTCmCYMv/Hzz8XieRBeaanrl CHtkt3JxHvM+zDfSvzsq7Pwt6BAA6Sq/6MMvbazdtP88hZ0aSd+JAOgoSY9YaH6I xlDAE34guxbg5lG9PMPVivDd8H84XvGNTgglsnZFzmOUeE2noM0546Hf1T7QFY7E I27VTLTDAX5Gp1RVEmExSsnHH4BUNqO7cj1Cz+lfWiW7/+qgq7vqj5FSyeboLFnW nyYZgFpmlPVY/hdJ7LqIHW1+fDPqxdSaURmqVjJDiOk4QfpFhMaET2YTuVg0KK0/ 8dzsv19FZT78rNgtZY/puVu5cZcWh2QddwaeMmIWeLt1eRjIWWw= -----END CERTIFICATE-----Generated at Thu Sep 3 05:59:00 2026 by rpki-client