$ rpki-client -vvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: Z3MmA+DfTMpbVWsk34yY/UrAtFacFiSwD2RhwzZ4C8o= Subject key identifier: 22:58:F4:DD:86:96:AD:D7:A1:20:CF:2C:80:3C:24:76:AA:2A:3F:A5 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 7795AFA6E52BEF2A05C643EDCC457BA62740EA95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 14:14:42 +0000 Manifest this update: Sun 02 Aug 2026 14:09:42 +0000 Manifest next update: Mon 03 Aug 2026 15:34:42 +0000 Files and hashes: 1: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) 2: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: 4wUUGaotXL/r/hbfSpoBbU5pW3c9N61n5rcaP5Qhtnw=) 3: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 4: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:95:af:a6:e5:2b:ef:2a:05:c6:43:ed:cc:45:7b:a6:27:40:ea:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Aug 2 14:09:42 2026 GMT Not After : Aug 3 15:34:42 2026 GMT Subject: CN=2258F4DD8696ADD7A120CF2C803C2476AA2A3FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:6b:2a:df:d3:88:c7:e7:97:f9:42:0e:2a: 94:bc:20:32:e7:b8:38:ae:9b:7f:80:1f:77:41:b0: bf:45:69:f4:7b:6c:7b:b2:9a:66:ec:f8:d0:af:46: e4:2c:d4:63:90:52:de:fd:79:73:58:23:d5:b8:9f: 87:62:b8:b7:06:32:65:2b:9d:0f:ea:17:3f:21:b6: 98:73:83:36:92:ac:62:80:98:f1:94:9d:4e:6f:11: 91:0b:d4:67:66:d8:57:5c:c0:4c:62:b0:16:08:bd: 5f:78:02:8f:83:0b:d8:8b:f7:db:7e:a0:69:ec:da: fa:63:43:77:26:ff:30:01:05:da:07:7e:9c:c0:89: 5a:d2:81:72:65:95:2c:2a:40:bc:49:7b:19:c3:4a: a8:26:a6:18:93:f6:e0:54:f9:99:53:26:94:02:ff: ca:3d:4c:5b:ef:a7:6a:c0:39:34:cf:78:2c:81:2e: 2e:99:a6:d4:c0:5c:ef:3a:a3:0a:a8:58:dd:38:e6: b3:2b:6a:a0:b1:15:87:d7:6c:27:28:8a:74:4c:a1: 2b:22:cf:79:a8:f1:5e:30:9c:a3:8b:cb:20:4a:39: 81:7b:d0:b4:be:cf:03:5f:21:f6:97:9f:85:d2:d2: fc:89:b3:30:76:f9:ce:85:38:88:06:98:6a:b4:08: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:F4:DD:86:96:AD:D7:A1:20:CF:2C:80:3C:24:76:AA:2A:3F:A5 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6e:18:72:26:a4:c9:88:e3:44:eb:eb:77:80:f6:c0:36:9b: 64:c2:59:bb:11:be:d0:aa:18:2c:0a:3b:47:b0:95:14:61:a4: 14:dd:81:2d:20:bd:56:e9:da:68:3c:da:c8:dc:1b:ba:ae:5f: 1e:8a:cb:c9:37:be:21:08:10:87:85:8a:5a:bd:16:f4:61:a1: 1d:30:85:e1:09:35:95:45:fe:31:c7:e2:2e:1a:5c:24:2f:e2: 0d:63:80:89:94:74:6f:cb:c7:58:83:c0:26:0d:78:da:b7:d8: 11:a4:b4:32:4c:e1:04:5e:3c:5d:66:c0:7e:90:fd:79:da:f9: ee:a1:5e:b7:5f:21:46:37:ae:9b:78:01:d6:17:ed:0c:19:64: d4:21:a5:94:ff:f2:53:87:46:af:ed:b8:35:1a:d7:a6:14:84: 37:53:d0:68:30:d9:9f:6b:db:ce:37:2b:cd:3c:e3:b9:42:de: 74:5f:70:52:07:3a:dd:24:c2:2a:00:76:b8:2c:e4:d6:01:7f: 98:f1:1d:71:c4:26:16:e5:80:3a:39:eb:c7:08:d4:ed:c8:1b: 0a:d5:34:e9:46:a4:70:3f:40:53:0f:e4:ee:ba:0b:5f:6d:4d: 31:fe:34:b8:ae:cb:4e:bd:d2:d9:9f:34:7c:69:dd:44:b3:be: 48:a5:b8:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5WvpuUr7yoFxkPtzEV7pidA6pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA4MDIxNDA5NDJaFw0yNjA4MDMxNTM0NDJaMDMxMTAvBgNV BAMTKDIyNThGNEREODY5NkFERDdBMTIwQ0YyQzgwM0MyNDc2QUEyQTNGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZ2sq39OIx+eX+UIOKpS8IDLn uDium3+AH3dBsL9FafR7bHuymmbs+NCvRuQs1GOQUt79eXNYI9W4n4diuLcGMmUr nQ/qFz8htphzgzaSrGKAmPGUnU5vEZEL1Gdm2FdcwExisBYIvV94Ao+DC9iL99t+ oGns2vpjQ3cm/zABBdoHfpzAiVrSgXJllSwqQLxJexnDSqgmphiT9uBU+ZlTJpQC /8o9TFvvp2rAOTTPeCyBLi6ZptTAXO86owqoWN045rMraqCxFYfXbCcoinRMoSsi z3mo8V4wnKOLyyBKOYF70LS+zwNfIfaXn4XS0vyJszB2+c6FOIgGmGq0CPrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlj03YaWrdehIM8sgDwkdqoqP6UwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5uGHImpMmI40Tr63eA9sA2m2TCWbsRvtCq GCwKO0ewlRRhpBTdgS0gvVbp2mg82sjcG7quXx6Ky8k3viEIEIeFilq9FvRhoR0w heEJNZVF/jHH4i4aXCQv4g1jgImUdG/Lx1iDwCYNeNq32BGktDJM4QRePF1mwH6Q /Xna+e6hXrdfIUY3rpt4AdYX7QwZZNQhpZT/8lOHRq/tuDUa16YUhDdT0Ggw2Z9r 2843K80847lC3nRfcFIHOt0kwioAdrgs5NYBf5jxHXHEJhblgDo568cI1O3IGwrV NOlGpHA/QFMP5O66C19tTTH+NLiuy0690tmfNHxp3USzvkiluA4= -----END CERTIFICATE-----Generated at Sun Aug 2 22:48:09 2026 by rpki-client