$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: Zuiy+88Ca3/3COt3hWoyFJurvECQqzskS5UAgqiM6CM= Subject key identifier: DB:08:6D:A5:25:A5:88:7A:D1:8B:71:66:ED:FD:30:C1:5B:3E:78:2E Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 47920D162085F8340CE476DF685B979BDEA290D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 011B Signing time: Tue 21 Apr 2026 23:32:37 +0000 Manifest this update: Tue 21 Apr 2026 23:27:37 +0000 Manifest next update: Sat 25 Apr 2026 08:35:37 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: R+3A1QkJIRPTXeuuAn9kfKJdiNQFSg/xAnqEu+bPaSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 08:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:92:0d:16:20:85:f8:34:0c:e4:76:df:68:5b:97:9b:de:a2:90:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Apr 21 23:27:37 2026 GMT Not After : Apr 25 08:35:37 2026 GMT Subject: CN=DB086DA525A5887AD18B7166EDFD30C15B3E782E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:95:9d:55:80:ac:99:ce:ed:74:c1:d0:89: 3a:5b:c4:77:2a:7b:bb:c8:3d:66:19:cd:d5:dd:66: 4c:3e:54:02:04:b1:2b:0d:56:32:f2:af:f6:1a:86: 92:15:08:2c:2d:3c:8b:2c:8c:70:45:9c:85:5e:39: 3d:09:ac:e2:ae:58:7c:c9:49:4a:6b:bd:54:83:46: 27:88:af:c6:00:e7:1f:25:ec:4a:b8:c4:6f:69:86: ae:7e:cc:aa:75:aa:86:a7:d9:da:73:ff:c3:f5:33: 8b:25:8f:58:8c:93:6b:02:37:45:ec:f5:c7:6e:e4: 7c:60:70:9a:b3:71:bd:05:65:cc:fa:3b:1b:e6:40: f6:c2:72:89:5e:c4:99:b7:33:0e:49:46:48:cd:d6: 88:46:62:f9:11:b6:02:db:a6:e1:54:e1:a5:4c:88: 22:bd:bc:6f:28:66:cb:0c:29:79:5a:d2:d9:d0:bc: 55:b4:1a:93:49:d0:07:27:7e:48:03:b9:4e:51:4f: 4b:09:e0:72:93:25:a9:03:08:bc:33:61:a1:c0:0e: a1:87:87:9b:37:90:21:68:39:33:5e:2f:09:21:0f: d0:b9:00:f4:d6:9f:f9:05:f0:c3:23:46:b3:5e:17: 2d:a8:dd:5a:6c:58:17:f6:50:6a:42:d3:3c:65:65: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:6D:A5:25:A5:88:7A:D1:8B:71:66:ED:FD:30:C1:5B:3E:78:2E X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fc:f6:3d:57:cf:8b:79:6b:ce:06:c5:16:1c:1d:e4:02:d3: 14:69:e9:9e:b8:06:eb:9e:95:9d:96:90:89:f9:dc:f9:4c:5a: ad:5d:3d:a2:36:fe:3d:e8:8b:8b:e9:5f:19:19:e5:68:21:33: 10:b6:5b:79:a8:eb:f8:22:03:17:51:74:03:1e:82:90:82:7b: 3a:00:5e:79:66:51:1c:71:66:a6:8a:aa:ec:0c:ec:df:32:d5: da:93:3c:43:da:14:ef:4e:fe:82:0a:df:07:a1:64:07:28:b0: bc:1b:d7:b1:ad:b9:3f:db:1d:52:30:fe:86:52:b4:68:ad:96: 0d:67:2a:d7:8b:68:90:fd:24:54:0b:da:42:79:e3:e5:2c:ff: c0:8a:ac:09:6a:ae:8f:87:3c:2f:85:dc:24:4c:27:82:b7:db: 29:35:13:8c:6c:7a:3a:c7:70:a4:8b:e8:69:49:86:8e:cb:53: 5d:e1:cf:b5:7e:7a:bd:96:43:3f:fd:e3:78:97:64:36:c4:55: 6e:0e:d2:f6:2d:7b:77:41:05:51:59:5b:70:3d:31:2e:03:6d: 09:9f:22:6c:cd:32:6d:71:07:d1:c7:03:f7:c1:67:13:e5:c3: d6:e8:fe:e5:87:90:f9:ab:c6:04:ce:80:2c:8a:e1:d9:b8:66: 10:13:e9:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5INFiCF+DQM5HbfaFuXm96ikNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNjA0MjEyMzI3MzdaFw0yNjA0MjUwODM1MzdaMDMxMTAvBgNV BAMTKERCMDg2REE1MjVBNTg4N0FEMThCNzE2NkVERkQzMEMxNUIzRTc4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFJWdVYCsmc7tdMHQiTpbxHcq e7vIPWYZzdXdZkw+VAIEsSsNVjLyr/YahpIVCCwtPIssjHBFnIVeOT0JrOKuWHzJ SUprvVSDRieIr8YA5x8l7Eq4xG9phq5+zKp1qoan2dpz/8P1M4slj1iMk2sCN0Xs 9cdu5HxgcJqzcb0FZcz6OxvmQPbCcolexJm3Mw5JRkjN1ohGYvkRtgLbpuFU4aVM iCK9vG8oZssMKXla0tnQvFW0GpNJ0AcnfkgDuU5RT0sJ4HKTJakDCLwzYaHADqGH h5s3kCFoOTNeLwkhD9C5APTWn/kF8MMjRrNeFy2o3VpsWBf2UGpC0zxlZYSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2whtpSWliHrRi3Fm7f0wwVs+eC4wHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD89j1Xz4t5a84GxRYcHeQC0xRp6Z64Buue lZ2WkIn53PlMWq1dPaI2/j3oi4vpXxkZ5WghMxC2W3mo6/giAxdRdAMegpCCezoA XnlmURxxZqaKquwM7N8y1dqTPEPaFO9O/oIK3wehZAcosLwb17GtuT/bHVIw/oZS tGitlg1nKteLaJD9JFQL2kJ54+Us/8CKrAlqro+HPC+F3CRMJ4K32yk1E4xsejrH cKSL6GlJho7LU13hz7V+er2WQz/943iXZDbEVW4O0vYte3dBBVFZW3A9MS4DbQmf ImzNMm1xB9HHA/fBZxPlw9bo/uWHkPmrxgTOgCyK4dm4ZhAT6X4= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:47 2026 by rpki-client