$ rpki-client -vvvf rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft File: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft (raw, json) Hash identifier: 2KkEpyv830RdAR7ueE7mSHAH0eyEMq6HyNugSBxwXps= Subject key identifier: F7:8A:3D:4E:05:4A:D1:3E:82:3C:BB:56:4C:04:4C:D5:10:93:6C:B2 Authority key identifier: 33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E Certificate issuer: /CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Certificate serial: 334ED68CCFD630459695CC2CA29D8B489C6ACB4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:15:03 +0000 Manifest this update: Thu 17 Sep 2026 09:10:03 +0000 Manifest next update: Fri 18 Sep 2026 09:49:03 +0000 Files and hashes: 1: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: 3ztmF6u8CybuvGS2PB2tOwVdrSE0WLnmTt/ftgrSMls=) 2: 33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl (hash: 9T8d4dUR6lCWUW1syc+nRk8izM8j1VrR7cphcsR6YXk=) 3: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: 6+shesNn/Cszh08Qu7iPBDHYgYQ+ycTf0GBg7Jh4sNk=) 4: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: IfMWwhDvn79zUR3Or4ntsHEBkoKu9G8xlYcDLbW/Ei4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4e:d6:8c:cf:d6:30:45:96:95:cc:2c:a2:9d:8b:48:9c:6a:cb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EAEF2715BAF7E7E2B4CE305105279D798F4A0E Validity Not Before: Sep 17 09:10:03 2026 GMT Not After : Sep 18 09:49:03 2026 GMT Subject: CN=F78A3D4E054AD13E823CBB564C044CD510936CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:3f:35:6b:29:60:19:3e:a8:59:67:0f:8b: 94:15:1d:83:66:b6:c0:14:1e:5d:29:00:30:82:fd: a2:42:f5:1d:0c:19:f3:1a:74:4d:37:a3:e2:5e:8b: a5:1b:9d:94:a7:31:10:96:c6:bb:1e:8b:0e:21:17: 1b:69:22:d1:b9:55:87:cc:a2:88:79:10:5c:da:00: ba:b2:6f:01:af:5d:76:1d:43:db:ba:40:47:a5:3f: 59:9b:2a:e0:13:26:f7:7b:92:51:20:97:38:83:f4: 35:88:70:ef:cb:76:ec:fd:67:0e:a1:b3:2b:27:cd: 9a:28:84:2e:b8:9d:06:62:17:62:1c:b7:06:6b:74: 13:92:ad:01:e9:de:82:1f:c9:95:43:9d:78:1e:b5: d7:4c:e9:4a:ab:e6:ca:7b:d4:71:d3:c3:45:56:bf: 05:00:05:fc:b8:ab:11:ab:55:4b:1e:1c:96:27:df: d9:0f:38:4d:80:fe:6a:61:c3:e4:39:d0:cd:c1:ef: 6f:36:4d:fb:2f:d2:8f:72:5f:ee:1b:e8:ed:65:85: e1:da:d5:72:be:fd:90:a4:9a:51:c8:b5:ce:fc:3f: 41:36:e5:3e:10:70:ff:08:d9:ba:77:06:86:36:7d: 03:7d:be:c0:16:19:5b:6e:08:54:14:34:d9:27:a8: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8A:3D:4E:05:4A:D1:3E:82:3C:BB:56:4C:04:4C:D5:10:93:6C:B2 X509v3 Authority Key Identifier: keyid:33:EA:EF:27:15:BA:F7:E7:E2:B4:CE:30:51:05:27:9D:79:8F:4A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/33EAEF2715BAF7E7E2B4CE305105279D798F4A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:22:00:13:c0:21:50:5d:03:80:5d:fc:ee:90:da:ce:c5:61: 09:ba:97:d8:4d:27:a9:cf:60:35:0b:a3:a2:c0:4f:f3:e0:87: 28:9a:5c:16:1a:34:2c:14:e7:85:7c:0e:ae:18:f1:4c:9c:c1: 38:e3:db:05:2a:d5:52:b7:b2:85:3d:bf:70:b6:9f:06:49:44: fd:19:66:e5:c7:4e:c9:c9:15:8a:a9:f1:ca:bf:ae:f6:ba:08: 6c:58:1f:05:33:db:94:13:10:4d:8a:29:9d:c7:f3:ba:70:d5: 18:92:e9:30:36:e4:e2:8e:ca:b2:a9:1f:f9:b5:0d:19:85:30: c6:90:88:81:40:4d:c6:d4:a0:d0:6a:e9:3d:05:6f:b3:e2:c7: 12:67:d5:3d:04:c3:ec:4d:7a:d8:0d:ab:73:ce:cc:f4:c4:59: 92:4b:13:32:ce:b4:a1:5b:7c:42:2e:00:c2:bc:a3:a4:7d:f0: 78:2f:6e:fa:71:98:f5:da:1b:a1:44:8a:ef:64:6b:a0:c4:b1: dc:1a:35:e6:ee:fa:d8:dc:f1:20:dc:94:e3:2e:fb:68:46:e8: 01:33:78:5e:42:c2:05:e8:77:b4:0a:6c:8e:72:4e:3b:2b:86: 25:7e:7d:59:7c:47:65:60:4d:0b:38:7a:01:3e:2e:a7:ab:fa: 43:20:5d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM07WjM/WMEWWlcwsop2LSJxqy04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3 OThGNEEwRTAeFw0yNjA5MTcwOTEwMDNaFw0yNjA5MTgwOTQ5MDNaMDMxMTAvBgNV BAMTKEY3OEEzRDRFMDU0QUQxM0U4MjNDQkI1NjRDMDQ0Q0Q1MTA5MzZDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUD81aylgGT6oWWcPi5QVHYNm tsAUHl0pADCC/aJC9R0MGfMadE03o+Jei6UbnZSnMRCWxrseiw4hFxtpItG5VYfM ooh5EFzaALqybwGvXXYdQ9u6QEelP1mbKuATJvd7klEglziD9DWIcO/Lduz9Zw6h sysnzZoohC64nQZiF2IctwZrdBOSrQHp3oIfyZVDnXgetddM6Uqr5sp71HHTw0VW vwUABfy4qxGrVUseHJYn39kPOE2A/mphw+Q50M3B7282Tfsv0o9yX+4b6O1lheHa 1XK+/ZCkmlHItc78P0E25T4QcP8I2bp3BoY2fQN9vsAWGVtuCFQUNNknqA3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94o9TgVK0T6CPLtWTARM1RCTbLIwHwYDVR0j BBgwFoAUM+rvJxW69+fitM4wUQUnnXmPSg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4YzhmOWYtNDIxMy00YTJhLTg1YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcx NUJBRjdFN0UyQjRDRTMwNTEwNTI3OUQ3OThGNEEwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0VBRUYyNzE1QkFGN0U3RTJCNENFMzA1MTA1Mjc5RDc5OEY0 QTBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMzNFQUVGMjcxNUJBRjdFN0UyQjRDRTMwNTEwNTI3 OUQ3OThGNEEwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4iABPAIVBdA4Bd/O6Q2s7FYQm6l9hNJ6nP YDULo6LAT/PghyiaXBYaNCwU54V8Dq4Y8UycwTjj2wUq1VK3soU9v3C2nwZJRP0Z ZuXHTsnJFYqp8cq/rva6CGxYHwUz25QTEE2KKZ3H87pw1RiS6TA25OKOyrKpH/m1 DRmFMMaQiIFATcbUoNBq6T0Fb7PixxJn1T0Ew+xNetgNq3POzPTEWZJLEzLOtKFb fEIuAMK8o6R98HgvbvpxmPXaG6FEiu9ka6DEsdwaNebu+tjc8SDclOMu+2hG6AEz eF5CwgXod7QKbI5yTjsrhiV+fVl8R2VgTQs4egE+Lqer+kMgXWA= -----END CERTIFICATE-----Generated at Thu Sep 17 16:01:59 2026 by rpki-client