$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft File: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft (raw, json) Hash identifier: 8z9w2pGm6m4b7IYvLwYRpacHhJ/ookqDNnjxa86WK2s= Subject key identifier: 62:E2:3E:3D:0D:60:AB:21:60:0B:4C:F2:68:55:75:F4:2A:7E:36:8A Authority key identifier: 33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F Certificate issuer: /CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Certificate serial: 6B4C11721F9DB285EE25A879109D89D3A924906D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:58:21 +0000 Manifest this update: Thu 17 Sep 2026 07:53:21 +0000 Manifest next update: Fri 18 Sep 2026 11:56:21 +0000 Files and hashes: 1: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: D1Bs40msN4T1EsFyFt+7hA3fUVZ3Ox4prYQv9dgFW30=) 2: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: Idr9E51DnsxslvEhsupC2DXrugteUn6rOQC6bHIGQEc=) 3: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: x5pTQNGt4/kN10M+oZQf7PVzLTBro78R5GXb0E/MdHE=) 4: 33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl (hash: vvGR8vUIpxIjfpiMkytIy4RzTSvZhXbR/3nlpS48k5k=) 5: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: TlNubbEC148cAdiEPF2MQDiraCb1dG5XHceYv40l5u4=) 6: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: 8k6aDl60v1ure0qCHDz6FgohushoGe3xp2fkg+fDqX4=) 7: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: XOxY41uvBdSNzSAGeoheHPNQsOiig6loN0GxpT95Je8=) 8: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: xaylfD3eW82VInvmm3Tk4BclpJ/ZIAXvUl+mvGXRuok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4c:11:72:1f:9d:b2:85:ee:25:a8:79:10:9d:89:d3:a9:24:90:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A70133EE15A92F98C43BE642D1CCF7C2B07E6F Validity Not Before: Sep 17 07:53:21 2026 GMT Not After : Sep 18 11:56:21 2026 GMT Subject: CN=62E23E3D0D60AB21600B4CF2685575F42A7E368A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:4d:17:0b:f3:a1:d8:7f:d4:cd:af:8b:5e: 56:2f:d7:cb:ae:45:cf:75:da:8b:ac:cc:ab:c8:f8: c4:bb:83:d2:3f:62:b8:14:8b:87:cd:b9:13:b9:05: 2c:bf:8d:5b:b1:f7:ff:62:6b:b8:11:8e:42:49:d5: a9:d1:aa:51:11:ca:66:0c:72:69:01:d5:1c:2b:e6: 61:7a:1b:dd:55:de:f9:ad:ef:ab:51:64:86:9b:ea: dd:7c:44:03:48:d3:05:cd:dc:66:bf:48:a9:11:a8: 98:16:83:30:d6:c7:4d:87:c9:f6:3e:b2:1a:e1:8f: b5:1a:c2:8a:c8:49:e6:6a:a8:c1:aa:50:10:10:f8: 5a:87:fc:f8:60:27:88:46:f6:1b:80:40:b0:3f:1d: 7f:ea:c6:f6:a6:42:42:fe:f1:09:be:82:06:96:27: 28:4d:a7:6a:08:86:e3:0a:fe:87:03:a8:53:fb:0d: d9:80:89:95:42:03:67:9b:1f:2d:13:55:31:54:59: 05:98:d2:65:57:a8:1b:59:d4:d2:1b:5c:5a:b9:c4: cd:21:ef:1e:28:84:cc:77:3e:a4:0a:60:53:85:c7: 77:20:85:c6:5b:30:d8:d5:eb:2d:10:c5:4d:cc:28: 47:27:26:d8:92:a0:94:30:36:59:ce:5c:18:6e:c1: 82:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E2:3E:3D:0D:60:AB:21:60:0B:4C:F2:68:55:75:F4:2A:7E:36:8A X509v3 Authority Key Identifier: keyid:33:A7:01:33:EE:15:A9:2F:98:C4:3B:E6:42:D1:CC:F7:C2:B0:7E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/33A70133EE15A92F98C43BE642D1CCF7C2B07E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8b:de:f2:5b:87:8b:d2:2b:3a:76:b4:97:c1:1c:ba:44:38: e5:1b:30:4f:e1:1a:4e:2d:09:ea:e2:64:f9:3f:06:4d:f4:a5: 73:1c:1e:96:76:68:2e:06:f5:58:86:6a:7f:4e:4e:b0:e6:7c: 54:a6:76:58:dc:26:23:d4:2c:2a:fd:98:7c:b8:34:26:6e:90: 93:69:0d:09:81:e0:e7:81:2b:f3:01:68:83:06:b1:6b:2a:f1: fa:da:9f:75:c4:95:9e:94:23:8f:c8:af:93:1c:63:bc:6d:28: 3d:c3:72:cd:a7:8d:b0:b1:3c:c4:cf:db:2b:46:16:e2:d3:17: a7:98:f2:07:0c:4a:c2:3b:b9:84:80:a8:31:98:53:d6:26:98: 06:e4:c5:fb:a9:2d:22:d9:2d:bf:06:9d:81:a5:a6:9c:3f:47: b7:72:44:1e:34:25:22:d5:60:1f:99:4a:f2:e0:db:3a:42:33: 92:39:f6:5c:d6:69:a0:b1:54:71:3b:34:1c:5d:d8:7f:88:ed: ef:83:48:f1:1f:5a:d4:48:a8:ad:ac:28:e2:a6:25:d2:14:a1: ee:ee:2b:9a:89:33:42:af:81:ee:3d:2a:72:08:79:9d:e0:d3: b8:83:29:a4:82:e7:04:ae:50:83:cf:dc:cd:c6:08:55:21:e7: 5e:73:a7:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0wRch+dsoXuJah5EJ2J06kkkG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdD MkIwN0U2RjAeFw0yNjA5MTcwNzUzMjFaFw0yNjA5MTgxMTU2MjFaMDMxMTAvBgNV BAMTKDYyRTIzRTNEMEQ2MEFCMjE2MDBCNENGMjY4NTU3NUY0MkE3RTM2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZE0XC/Oh2H/Uza+LXlYv18uu Rc912ouszKvI+MS7g9I/YrgUi4fNuRO5BSy/jVux9/9ia7gRjkJJ1anRqlERymYM cmkB1Rwr5mF6G91V3vmt76tRZIab6t18RANI0wXN3Ga/SKkRqJgWgzDWx02HyfY+ shrhj7UaworISeZqqMGqUBAQ+FqH/PhgJ4hG9huAQLA/HX/qxvamQkL+8Qm+ggaW JyhNp2oIhuMK/ocDqFP7DdmAiZVCA2ebHy0TVTFUWQWY0mVXqBtZ1NIbXFq5xM0h 7x4ohMx3PqQKYFOFx3cghcZbMNjV6y0QxU3MKEcnJtiSoJQwNlnOXBhuwYKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYuI+PQ1gqyFgC0zyaFV19Cp+NoowHwYDVR0j BBgwFoAUM6cBM+4VqS+YxDvmQtHM98Kwfm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcxM2ZjMTctNTdmMS00NjcxLThhMTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNF RTE1QTkyRjk4QzQzQkU2NDJEMUNDRjdDMkIwN0U2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0E3MDEzM0VFMTVBOTJGOThDNDNCRTY0MkQxQ0NGN0MyQjA3 RTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvMzNBNzAxMzNFRTE1QTkyRjk4QzQzQkU2NDJEMUND RjdDMkIwN0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOL3vJbh4vSKzp2tJfBHLpEOOUbME/hGk4t CeriZPk/Bk30pXMcHpZ2aC4G9ViGan9OTrDmfFSmdljcJiPULCr9mHy4NCZukJNp DQmB4OeBK/MBaIMGsWsq8fran3XElZ6UI4/Ir5McY7xtKD3Dcs2njbCxPMTP2ytG FuLTF6eY8gcMSsI7uYSAqDGYU9YmmAbkxfupLSLZLb8GnYGlppw/R7dyRB40JSLV YB+ZSvLg2zpCM5I59lzWaaCxVHE7NBxd2H+I7e+DSPEfWtRIqK2sKOKmJdIUoe7u K5qJM0Kvge49KnIIeZ3g07iDKaSC5wSuUIPP3M3GCFUh515zp60= -----END CERTIFICATE-----Generated at Thu Sep 17 12:21:07 2026 by rpki-client