$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: nGLGc8ILmfp5098QwrLUVKUd5/X5v+qdv1CY9EUzLM8= Subject key identifier: 75:2C:87:5D:6C:AC:CA:A3:C8:53:9E:E7:E8:45:A4:E5:F6:CF:A1:D6 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 4DFE3D140D4AAD0A78AEA282C15994832E075492 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0260 Signing time: Wed 22 Apr 2026 05:22:12 +0000 Manifest this update: Wed 22 Apr 2026 05:17:12 +0000 Manifest next update: Sat 25 Apr 2026 15:03:12 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: 5i1YTslTNg48hCezw8wJk6S499BDtIS1iFIDbWRsu44=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: Tv/HtEdI/qxXmqMcvFn7TRW42CYB2Xaf6KBnLis/Xas=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fe:3d:14:0d:4a:ad:0a:78:ae:a2:82:c1:59:94:83:2e:07:54:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Apr 22 05:17:12 2026 GMT Not After : Apr 25 15:03:12 2026 GMT Subject: CN=752C875D6CACCAA3C8539EE7E845A4E5F6CFA1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:a7:c1:bd:a1:24:6f:84:5b:02:5c:14:e0: 23:62:22:e0:13:1a:f8:ea:44:bd:e0:3d:e3:9d:33: 08:06:4f:fe:c3:a9:26:b8:35:5c:f8:52:bb:28:ea: 35:16:b1:9b:53:32:27:76:c5:83:ce:97:3c:a1:30: 52:af:ad:85:93:c1:cd:57:bb:79:7c:9b:43:58:37: 12:3a:82:7f:be:c4:d6:6c:e9:d4:77:83:92:89:c2: ea:ac:f6:fc:d0:0c:b9:a7:6f:22:49:8f:14:1b:84: 47:5b:da:a5:50:21:17:3a:db:7f:c9:4d:7e:f6:c4: 9d:80:f8:67:ec:b5:02:b7:d3:6e:ef:df:30:57:71: 71:33:93:16:c9:51:0e:66:a7:f3:de:0d:32:dd:f0: af:0c:ab:e2:58:1c:b8:da:2d:67:8c:10:29:d1:28: c6:f0:52:5f:92:c6:02:21:81:98:68:76:7e:ad:c2: 5d:b7:20:63:3b:0f:e3:02:20:de:e6:2b:a1:e0:e8: 76:02:f6:c9:6e:e4:1a:99:8e:4b:41:cb:b9:85:3b: 21:55:03:38:24:e7:49:3a:54:b7:b0:45:c2:bb:01: eb:d2:58:96:d7:3a:b5:f8:9f:fa:22:bc:88:fd:6a: 04:dc:e0:aa:b6:6d:7f:c5:82:41:de:8d:6f:5c:99: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2C:87:5D:6C:AC:CA:A3:C8:53:9E:E7:E8:45:A4:E5:F6:CF:A1:D6 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ae:d6:32:15:fb:7e:f1:b4:2c:13:25:65:88:e4:f9:60:04: a1:2e:e1:c5:47:7f:f4:4a:8c:85:49:2a:c2:58:66:3e:fa:cc: 92:96:2b:2d:9a:fa:04:f4:cc:89:14:6e:4c:53:8e:d1:6a:dd: 91:e5:07:54:9f:fa:ed:f8:75:f4:4c:49:fd:fc:61:2b:ef:a9: 64:85:1b:6c:e6:42:90:e4:a1:0f:90:f1:f5:4a:fa:07:6d:ec: de:d2:d6:3f:01:d3:a8:bd:6f:07:d2:2e:c6:b6:5c:f3:52:5b: 0d:e5:f3:9f:06:ce:95:0d:de:e5:a9:fc:97:39:0b:9e:82:3f: e4:ae:21:fa:6c:79:c6:d0:17:61:6a:91:de:aa:4e:95:85:26: c4:c5:a8:f4:f0:2c:4f:9a:b0:f4:c2:63:43:80:ff:83:e1:9b: 0e:b5:7a:61:23:f2:ea:8d:c2:c1:06:af:d9:7d:c1:74:28:44: 84:e3:f1:20:23:c1:7c:e1:46:08:cd:77:dd:e8:62:31:13:90: b6:ef:a4:2a:bb:c0:d3:9f:5e:59:01:ac:47:b8:38:cc:73:b0: 5b:be:9a:d4:df:0b:3d:a6:47:72:80:63:cd:2c:fa:91:21:70: 90:5b:17:11:3e:4b:9a:a4:63:9f:d5:d7:f8:eb:fd:63:13:6f: 26:aa:57:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTf49FA1KrQp4rqKCwVmUgy4HVJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNjA0MjIwNTE3MTJaFw0yNjA0MjUxNTAzMTJaMDMxMTAvBgNV BAMTKDc1MkM4NzVENkNBQ0NBQTNDODUzOUVFN0U4NDVBNEU1RjZDRkExRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpKfBvaEkb4RbAlwU4CNiIuAT GvjqRL3gPeOdMwgGT/7DqSa4NVz4Urso6jUWsZtTMid2xYPOlzyhMFKvrYWTwc1X u3l8m0NYNxI6gn++xNZs6dR3g5KJwuqs9vzQDLmnbyJJjxQbhEdb2qVQIRc623/J TX72xJ2A+GfstQK3027v3zBXcXEzkxbJUQ5mp/PeDTLd8K8Mq+JYHLjaLWeMECnR KMbwUl+SxgIhgZhodn6twl23IGM7D+MCIN7mK6Hg6HYC9slu5BqZjktBy7mFOyFV Azgk50k6VLewRcK7AevSWJbXOrX4n/oivIj9agTc4Kq2bX/FgkHejW9cmWjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdSyHXWysyqPIU57n6EWk5fbPodYwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqu1jIV+37xtCwTJWWI5PlgBKEu4cVHf/RK jIVJKsJYZj76zJKWKy2a+gT0zIkUbkxTjtFq3ZHlB1Sf+u34dfRMSf38YSvvqWSF G2zmQpDkoQ+Q8fVK+gdt7N7S1j8B06i9bwfSLsa2XPNSWw3l858GzpUN3uWp/Jc5 C56CP+SuIfpsecbQF2Fqkd6qTpWFJsTFqPTwLE+asPTCY0OA/4Phmw61emEj8uqN wsEGr9l9wXQoRITj8SAjwXzhRgjNd93oYjETkLbvpCq7wNOfXlkBrEe4OMxzsFu+ mtTfCz2mR3KAY80s+pEhcJBbFxE+S5qkY5/V1/jr/WMTbyaqVxQ= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:52 2026 by rpki-client