$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: D3T30GOSJVQTAVZxiwsFhhg8NuMpZ6Ms51AYEAyrblg= Subject key identifier: 67:F0:E9:B8:72:6D:B3:F4:61:B8:10:B1:42:B3:21:74:D5:D2:86:B5 Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 5422567B5788B46C0EA8026675B79E00226011FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 03:47:29 +0000 Manifest this update: Thu 03 Sep 2026 03:42:29 +0000 Manifest next update: Fri 04 Sep 2026 07:42:29 +0000 Files and hashes: 1: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 2: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) 3: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) 4: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: rzvh1uBmbjr/Qt3rHMURk25tC4t9/BdOjX3eOrIyOWQ=) 5: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:22:56:7b:57:88:b4:6c:0e:a8:02:66:75:b7:9e:00:22:60:11:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Sep 3 03:42:29 2026 GMT Not After : Sep 4 07:42:29 2026 GMT Subject: CN=67F0E9B8726DB3F461B810B142B32174D5D286B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:7e:5b:8d:c5:23:0e:61:74:4d:98:40:e3: 1a:73:16:71:03:c7:6b:fe:69:e8:a5:e7:63:c0:0f: 57:88:33:8c:df:9f:1d:16:ac:4e:f8:77:a5:4d:bd: b0:7d:11:11:b8:ab:58:fe:49:7b:60:3f:cf:cf:49: 46:a2:15:1e:54:87:28:3a:e1:a1:71:57:62:97:c2: 78:12:f9:5a:b4:7a:df:5f:4d:ff:75:e6:78:43:12: 0e:ab:90:d7:a3:4b:6e:65:2b:20:5f:dc:3a:a1:6c: 70:22:c6:3b:90:70:7a:76:4c:4a:06:50:8b:8a:2c: 27:04:9e:e5:ee:ff:3a:13:71:71:63:78:fa:7a:dc: c1:e2:8f:aa:86:34:99:6a:3a:99:9e:82:54:df:0a: c5:5a:90:85:42:4c:b7:1a:49:10:e4:77:55:4b:1d: a7:91:86:a1:b7:f2:e8:fd:0d:52:ab:00:38:3b:69: cc:95:32:f6:3c:26:23:59:33:35:9c:ac:ca:31:af: 59:f5:9d:77:98:c2:9e:89:10:f8:17:5b:4b:dd:3a: c2:50:31:d5:4b:12:d5:86:00:5d:37:3e:92:03:ee: a2:59:88:d3:4c:fd:f8:23:68:9d:5a:b0:02:7d:90: 9d:06:58:13:23:9b:74:90:a4:c4:f3:7a:8f:d3:2c: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:E9:B8:72:6D:B3:F4:61:B8:10:B1:42:B3:21:74:D5:D2:86:B5 X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e6:2a:05:49:5b:c2:46:80:5a:c5:d8:c0:82:e6:36:d5:ff: ac:32:a4:2b:88:5e:77:4c:dd:a3:0a:47:54:18:fd:1f:b3:52: 09:62:65:1e:2a:2d:9a:60:01:f0:be:02:b4:71:47:31:04:42: 03:bd:49:7b:e6:88:8e:5a:cb:c5:36:4f:83:5f:bb:ba:d3:b7: 26:54:09:6c:92:9b:78:17:04:1f:da:a8:18:33:63:83:f7:0b: 54:dc:f0:e0:dd:e7:3c:f4:d1:73:14:6e:2c:b6:b1:dd:84:d3: 7d:0c:7c:87:1b:0c:7a:8a:1c:35:4c:cf:50:0b:d5:83:09:70: cb:f7:ce:77:87:9c:2c:55:ed:7e:07:73:13:57:7e:ec:d7:5f: 90:05:3f:8b:8a:1b:ab:e4:35:dd:e5:a0:d9:ae:c9:b9:31:f8: d4:8d:40:a3:7f:02:9f:d7:f5:dd:cf:0a:1e:46:58:eb:ca:08: 94:a2:cb:50:80:3a:29:a4:fb:c3:51:35:d3:8b:88:bc:b0:05: f5:14:8e:4b:16:b3:72:9a:3a:a0:f0:b8:89:b0:32:ce:65:11: 3f:0c:11:25:2e:7d:d7:8b:17:c4:7a:29:ec:06:1d:08:5b:96: de:1b:be:10:76:09:5f:e8:6f:81:09:22:f3:30:6f:ac:f0:f7: 50:f3:57:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCJWe1eItGwOqAJmdbeeACJgEfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjA5MDMwMzQyMjlaFw0yNjA5MDQwNzQyMjlaMDMxMTAvBgNV BAMTKDY3RjBFOUI4NzI2REIzRjQ2MUI4MTBCMTQyQjMyMTc0RDVEMjg2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASn5bjcUjDmF0TZhA4xpzFnED x2v+aeil52PAD1eIM4zfnx0WrE74d6VNvbB9ERG4q1j+SXtgP8/PSUaiFR5Uhyg6 4aFxV2KXwngS+Vq0et9fTf915nhDEg6rkNejS25lKyBf3DqhbHAixjuQcHp2TEoG UIuKLCcEnuXu/zoTcXFjePp63MHij6qGNJlqOpmeglTfCsVakIVCTLcaSRDkd1VL HaeRhqG38uj9DVKrADg7acyVMvY8JiNZMzWcrMoxr1n1nXeYwp6JEPgXW0vdOsJQ MdVLEtWGAF03PpID7qJZiNNM/fgjaJ1asAJ9kJ0GWBMjm3SQpMTzeo/TLK/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/DpuHJts/RhuBCxQrMhdNXShrUwHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrmKgVJW8JGgFrF2MCC5jbV/6wypCuIXndM 3aMKR1QY/R+zUgliZR4qLZpgAfC+ArRxRzEEQgO9SXvmiI5ay8U2T4Nfu7rTtyZU CWySm3gXBB/aqBgzY4P3C1Tc8ODd5zz00XMUbiy2sd2E030MfIcbDHqKHDVMz1AL 1YMJcMv3zneHnCxV7X4HcxNXfuzXX5AFP4uKG6vkNd3loNmuybkx+NSNQKN/Ap/X 9d3PCh5GWOvKCJSiy1CAOimk+8NRNdOLiLywBfUUjksWs3KaOqDwuImwMs5lET8M ESUufdeLF8R6KewGHQhblt4bvhB2CV/ob4EJIvMwb6zw91DzV/E= -----END CERTIFICATE-----Generated at Thu Sep 3 18:58:13 2026 by rpki-client