$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: 6D7ZQEpU/PhOFrR/im8Y5dA/qILLx0W8bbY3JHhX+gM= Subject key identifier: 33:BF:8B:CB:50:0F:C7:E9:B7:6B:5B:A3:29:F5:CE:8C:E1:84:52:C0 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 3187565BB6A56CC123C5624F6380721F0FFCABBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 055A Signing time: Wed 18 Mar 2026 14:22:01 +0000 Manifest this update: Wed 18 Mar 2026 14:17:01 +0000 Manifest next update: Sat 21 Mar 2026 20:36:01 +0000 Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: D3ZnGrYJnCzqW/AW+L8RWOyKI7L+o0AdHCCOsWx5vvc=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 20:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:87:56:5b:b6:a5:6c:c1:23:c5:62:4f:63:80:72:1f:0f:fc:ab:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Mar 18 14:17:01 2026 GMT Not After : Mar 21 20:36:01 2026 GMT Subject: CN=33BF8BCB500FC7E9B76B5BA329F5CE8CE18452C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:26:5e:23:51:1e:09:95:5f:8e:50:d3:89: a0:1c:74:d7:57:b2:40:50:a9:c7:63:79:5c:ef:43: 09:c3:af:ce:2f:c2:bb:9e:37:90:98:e3:d1:c8:3d: 3a:25:fc:a0:13:a8:b3:e3:b4:0f:17:4a:0b:75:d0: 38:a0:7a:ee:a7:b0:c3:c2:c9:28:13:b9:37:4c:6e: 3f:16:e5:5f:4d:e0:e7:ba:fa:6f:46:64:db:05:2c: 49:42:77:24:11:06:cf:ed:88:92:ea:fb:64:5b:19: a1:9c:0e:04:96:d8:f8:cc:6f:43:0d:a8:7c:87:d9: bc:f7:cb:35:bf:c7:90:8d:d6:e3:16:93:42:fe:d5: c7:23:5f:a4:1e:a3:af:2e:1d:7f:bd:22:77:55:2e: 1d:e8:c0:e9:18:a9:72:31:4c:77:b8:53:8c:f2:13: cb:f8:21:fe:6c:e7:d1:d9:20:b3:91:25:10:e6:4c: 2a:1b:7b:9e:cc:2a:dd:a7:c1:57:48:ad:53:83:de: 23:ad:40:4b:30:ac:c7:56:8e:eb:fe:84:01:29:28: 1d:7f:4a:24:bb:5d:6f:ca:a2:05:8c:fa:a4:43:59: d3:f9:5f:1c:ed:9a:28:03:05:d9:7b:3c:d9:ee:e1: a7:2c:57:49:a4:f7:17:88:02:39:82:b6:ed:42:69: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BF:8B:CB:50:0F:C7:E9:B7:6B:5B:A3:29:F5:CE:8C:E1:84:52:C0 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:68:12:f8:03:76:e2:3e:f9:05:1e:d6:2a:7e:7e:4a:1c: 1b:79:f7:54:34:b0:03:f0:a4:40:b9:90:37:42:9b:63:90:21: e7:f2:17:76:50:a7:cd:c4:63:7c:d7:96:05:54:38:a7:d2:78: 50:ba:12:5d:ac:19:d3:49:23:b1:7d:1b:54:70:12:6d:d3:8e: f5:b6:92:40:0d:63:35:df:6b:2f:34:1b:10:8b:1b:c6:b4:ab: 5e:2b:5c:83:a2:5a:b5:30:54:15:e7:db:38:e2:2b:70:91:fa: 5a:8b:e4:30:ed:a6:71:96:bc:d6:63:ae:9a:40:1d:7a:4d:7b: 7d:0e:8f:15:70:8d:1f:f7:d5:e2:d6:60:30:6a:77:13:68:db: 34:23:b4:c4:c4:e5:ca:29:2a:5d:62:b2:0e:6f:27:b7:d0:9a: 4f:72:ad:9a:68:65:c4:19:2d:3b:dd:8e:99:8d:f0:18:3b:b0: 06:9a:d7:ca:34:65:74:8c:38:65:37:2c:22:38:d1:54:07:b3: bb:18:10:ac:92:ce:1e:88:80:07:a8:3b:28:3b:4b:8d:1d:e7: 4c:83:e3:9b:d3:1c:9c:69:44:e3:6b:66:bf:95:b6:59:c2:05: f3:af:a5:65:a2:15:af:62:a5:4a:78:73:e5:95:11:fa:5f:a3: 1a:5b:f0:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYdWW7albMEjxWJPY4ByHw/8q7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNjAzMTgxNDE3MDFaFw0yNjAzMjEyMDM2MDFaMDMxMTAvBgNV BAMTKDMzQkY4QkNCNTAwRkM3RTlCNzZCNUJBMzI5RjVDRThDRTE4NDUyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nSZeI1EeCZVfjlDTiaAcdNdX skBQqcdjeVzvQwnDr84vwrueN5CY49HIPTol/KATqLPjtA8XSgt10Digeu6nsMPC ySgTuTdMbj8W5V9N4Oe6+m9GZNsFLElCdyQRBs/tiJLq+2RbGaGcDgSW2PjMb0MN qHyH2bz3yzW/x5CN1uMWk0L+1ccjX6Qeo68uHX+9IndVLh3owOkYqXIxTHe4U4zy E8v4If5s59HZILORJRDmTCobe57MKt2nwVdIrVOD3iOtQEswrMdWjuv+hAEpKB1/ SiS7XW/KogWM+qRDWdP5XxztmigDBdl7PNnu4acsV0mk9xeIAjmCtu1CabL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7+Ly1APx+m3a1ujKfXOjOGEUsAwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/CaBL4A3biPvkFHtYqfn5KHBt591Q0sAPw pEC5kDdCm2OQIefyF3ZQp83EY3zXlgVUOKfSeFC6El2sGdNJI7F9G1RwEm3TjvW2 kkANYzXfay80GxCLG8a0q14rXIOiWrUwVBXn2zjiK3CR+lqL5DDtpnGWvNZjrppA HXpNe30OjxVwjR/31eLWYDBqdxNo2zQjtMTE5copKl1isg5vJ7fQmk9yrZpoZcQZ LTvdjpmN8Bg7sAaa18o0ZXSMOGU3LCI40VQHs7sYEKySzh6IgAeoOyg7S40d50yD 45vTHJxpRONrZr+VtlnCBfOvpWWiFa9ipUp4c+WVEfpfoxpb8Ec= -----END CERTIFICATE-----Generated at Fri Mar 20 07:08:24 2026 by rpki-client