$ rpki-client -vvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: 3RTtJFB0uQHJnVDcN8lIBtEXk2PGGDq+P2uKKH9XDPI= Subject key identifier: 66:1D:A0:01:1E:10:AA:B9:96:E0:01:9D:A8:11:56:E5:AD:30:B1:4A Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 25DCB58A86307D4DDB0C08873B992CE58CFAE6E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 10:45:00 +0000 Manifest this update: Sun 19 Jul 2026 10:40:00 +0000 Manifest next update: Mon 20 Jul 2026 14:41:00 +0000 Files and hashes: 1: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: ZcWUb3jMu/SF+vE7Se6kRY3PrMg1IC1vqeia/E3Mv+A=) 2: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) 3: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 4: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 5: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 6: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 14:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:dc:b5:8a:86:30:7d:4d:db:0c:08:87:3b:99:2c:e5:8c:fa:e6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: Jul 19 10:40:00 2026 GMT Not After : Jul 20 14:41:00 2026 GMT Subject: CN=661DA0011E10AAB996E0019DA81156E5AD30B14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:2d:ed:e9:84:21:92:06:ab:ef:56:f2:67: 53:ef:01:ad:dc:ee:9e:81:97:d3:24:45:f2:41:b0: c8:0a:44:38:75:34:84:f8:63:a6:8c:02:84:d4:34: f2:23:e7:db:63:f3:93:b5:dd:a7:70:d3:71:d2:77: e5:46:d7:3b:0b:20:e4:76:e2:ee:25:12:5e:61:14: 4b:2b:90:7a:b7:d6:a0:92:9c:ab:3d:49:ad:67:de: 70:ec:f2:3e:b5:0a:40:b3:29:1d:2c:45:4c:23:52: e6:aa:c8:79:f6:63:b0:94:90:29:43:30:08:68:70: 29:ff:48:5c:57:4d:9d:33:dd:ae:7f:73:17:3a:d6: 13:2b:1c:48:4a:44:75:71:58:4d:11:31:ca:77:1e: 33:79:63:3c:11:d1:01:c9:71:6b:ad:5d:80:ba:20: 80:7a:66:b0:79:4b:b5:06:08:fb:ff:03:fe:7e:4e: 8b:18:9f:89:9d:ca:f0:04:07:f7:f3:0c:98:13:6a: 22:55:a3:c8:8d:56:13:0b:80:24:4a:9b:e8:7d:fd: f7:49:57:1b:f2:fa:dd:85:58:49:71:86:23:fe:c5: 2e:25:24:f7:30:7f:a8:19:48:91:01:25:e2:d2:f3: fe:99:34:5e:33:05:9f:f5:d3:54:3b:68:95:ac:33: 6a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1D:A0:01:1E:10:AA:B9:96:E0:01:9D:A8:11:56:E5:AD:30:B1:4A X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2f:ed:fc:48:a6:ca:db:dd:74:fa:ad:07:a0:4a:61:f6:05: 64:c9:99:bf:fd:3e:69:61:05:3b:31:28:a0:47:cb:9f:df:a7: 60:fc:5e:be:b3:b8:96:89:c0:69:8e:1e:d6:f2:28:85:6a:e9: 7f:5e:a1:2f:e2:14:e0:da:af:1a:27:07:4c:7f:a0:4e:f2:30: 94:d4:e3:6d:64:85:6c:7b:ab:d3:df:76:9f:78:e4:90:35:9b: 33:89:1f:ee:a5:06:e2:36:da:93:5d:d1:97:7d:2c:6d:96:2d: 2f:52:13:4a:91:82:5d:b6:ec:5c:08:48:bc:14:ee:f3:7f:79: 19:6a:e1:61:30:d5:83:66:54:3d:6d:8e:eb:59:58:98:11:7e: 05:ae:80:f6:54:5e:8e:1e:28:00:f0:cd:2f:df:72:cb:38:bf: 71:2a:b4:5a:70:a4:f5:0c:ff:f3:eb:dd:77:01:ff:09:b7:0c: e3:9d:49:d1:5c:20:43:83:6e:78:ab:69:32:a6:a4:46:1b:ad: 33:c7:96:2d:2c:e6:a6:26:31:8e:30:25:ef:63:ee:8c:64:e9: 63:c3:68:1c:98:91:b8:f6:23:c5:9a:49:48:3e:17:85:ad:7f: c8:ca:26:3b:42:83:66:fc:0d:61:4d:6a:68:e7:46:67:bc:0a: 19:a4:0f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdy1ioYwfU3bDAiHO5ks5Yz65ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjA3MTkxMDQwMDBaFw0yNjA3MjAxNDQxMDBaMDMxMTAvBgNV BAMTKDY2MURBMDAxMUUxMEFBQjk5NkUwMDE5REE4MTE1NkU1QUQzMEIxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIi3t6YQhkgar71byZ1PvAa3c 7p6Bl9MkRfJBsMgKRDh1NIT4Y6aMAoTUNPIj59tj85O13adw03HSd+VG1zsLIOR2 4u4lEl5hFEsrkHq31qCSnKs9Sa1n3nDs8j61CkCzKR0sRUwjUuaqyHn2Y7CUkClD MAhocCn/SFxXTZ0z3a5/cxc61hMrHEhKRHVxWE0RMcp3HjN5YzwR0QHJcWutXYC6 IIB6ZrB5S7UGCPv/A/5+TosYn4mdyvAEB/fzDJgTaiJVo8iNVhMLgCRKm+h9/fdJ Vxvy+t2FWElxhiP+xS4lJPcwf6gZSJEBJeLS8/6ZNF4zBZ/101Q7aJWsM2q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZh2gAR4QqrmW4AGdqBFW5a0wsUowHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4v7fxIpsrb3XT6rQegSmH2BWTJmb/9Pmlh BTsxKKBHy5/fp2D8Xr6zuJaJwGmOHtbyKIVq6X9eoS/iFODarxonB0x/oE7yMJTU 421khWx7q9Pfdp945JA1mzOJH+6lBuI22pNd0Zd9LG2WLS9SE0qRgl227FwISLwU 7vN/eRlq4WEw1YNmVD1tjutZWJgRfgWugPZUXo4eKADwzS/fcss4v3EqtFpwpPUM //Pr3XcB/wm3DOOdSdFcIEODbniraTKmpEYbrTPHli0s5qYmMY4wJe9j7oxk6WPD aByYkbj2I8WaSUg+F4Wtf8jKJjtCg2b8DWFNamjnRme8ChmkD4Y= -----END CERTIFICATE-----Generated at Mon Jul 20 03:45:07 2026 by rpki-client