
$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json)
Hash identifier: Qg4D7xibnBdu2PMsJUrHtXTT/KcKja4gmyr86nfZKsQ=
Subject key identifier: 30:48:87:2E:74:CF:B3:E5:02:F3:29:41:49:C1:BB:FC:3F:52:65:60
Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Certificate serial: 3F33B82613581E96B22942CC07127DC3772051
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 04:58:00 +0000
Manifest this update: Thu 18 Jun 2026 04:53:00 +0000
Manifest next update: Fri 19 Jun 2026 06:28:00 +0000
Files and hashes: 1: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: LVUCDbrIeOhNr2On+iyb5Aqz1S7XqCBhQt/ANL6tdoc=)
2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=)
3: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=)
4: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 06:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:33:b8:26:13:58:1e:96:b2:29:42:cc:07:12:7d:c3:77:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E
Validity
Not Before: Jun 18 04:53:00 2026 GMT
Not After : Jun 19 06:28:00 2026 GMT
Subject: CN=3048872E74CFB3E502F3294149C1BBFC3F526560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:a0:98:d7:ac:88:3a:20:d7:77:2b:e6:b2:
64:d8:3c:b0:3a:e7:e7:bc:c4:9f:de:58:8d:e0:4c:
b5:e9:28:2a:3e:24:0f:47:6b:3e:7a:a8:1c:26:01:
c5:92:ff:9b:8a:de:ef:54:17:0f:20:08:fc:c4:1b:
56:7c:26:32:73:a1:72:3c:a3:d3:21:87:03:53:87:
d2:f7:54:15:1e:7b:bd:44:d1:4e:1f:46:5c:d4:60:
60:70:14:2d:62:dc:e3:ea:ba:ba:d7:e3:e2:fd:24:
39:88:2a:6c:3e:fe:00:dd:85:64:e2:d9:de:13:0c:
ac:09:67:05:4f:63:d1:22:a2:2a:aa:23:1b:60:6e:
ef:d0:c9:c0:02:30:f3:48:1e:73:40:94:1f:76:f0:
3c:cf:75:c0:ec:c5:70:11:5f:d9:8d:32:46:2a:2f:
c9:87:67:46:43:9e:85:9f:3a:d8:34:7e:22:f4:9f:
aa:76:df:97:4d:cb:d0:f5:63:d6:44:4d:86:8c:fe:
d4:8b:03:f3:3c:c5:80:fc:69:67:4d:0c:34:e2:d9:
2d:99:9b:d2:8f:a5:d7:57:1d:9e:6f:88:ef:23:db:
bb:a0:5b:fc:6d:ee:25:60:52:e0:81:04:a7:a6:c5:
73:a3:a2:94:ba:6f:17:ad:01:c1:6f:d4:06:b3:f3:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:87:2E:74:CF:B3:E5:02:F3:29:41:49:C1:BB:FC:3F:52:65:60
X509v3 Authority Key Identifier:
keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a9:57:98:ac:d4:fc:f7:10:36:14:70:8b:f0:55:c3:bb:c4:
76:80:b8:ae:a4:54:59:a4:43:e8:55:3a:e0:85:eb:e7:e0:bc:
98:c9:0c:f9:55:8c:9b:d0:60:61:bf:cd:9a:2b:93:6f:84:eb:
26:38:0d:a6:d2:2a:16:7f:63:96:22:69:cc:0a:a2:2b:c7:2c:
75:71:cd:c8:2a:a8:0b:02:97:dc:96:eb:be:7c:00:36:df:f3:
34:f7:85:7a:49:7c:d5:5d:76:97:33:b6:7a:66:f5:74:3c:f8:
87:23:44:c7:ba:73:c4:23:7c:d0:67:5c:0b:51:42:91:14:5c:
54:63:eb:3d:7a:9a:29:36:80:71:5d:2b:d8:12:ea:92:09:42:
68:32:b5:e5:f1:0c:72:94:59:1b:20:d8:fc:e6:12:30:13:1f:
c7:44:5e:c3:02:d4:4e:04:d8:5f:18:1b:ab:1a:2a:8d:8c:cb:
ee:36:60:dd:34:b6:d4:c6:d1:77:c1:55:55:5c:50:f6:7a:fc:
60:e0:70:f2:09:ff:dd:cb:03:38:99:c1:99:a7:36:b6:aa:de:
a3:05:ae:1e:b1:c6:c6:9f:79:c5:4d:a4:d9:e7:60:c9:21:b3:
9c:6b:ff:41:37:95:c0:57:95:d9:b4:ce:52:86:5c:4c:c6:4e:
89:a8:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:30 2026 by rpki-client