$ rpki-client -vvvf rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft File: A33230767964863363DEE33E7BD3F5C204182D74.mft (raw, json) Hash identifier: eHCKFXeKVHMLjcgVZuhWIRj3j41GxjiiviT99+J+/4Y= Subject key identifier: 2D:52:79:13:E5:A2:5A:1F:35:7F:89:A7:F0:9F:A0:D7:C8:BE:CC:B7 Authority key identifier: A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 Certificate issuer: /CN=A33230767964863363DEE33E7BD3F5C204182D74 Certificate serial: 781A2AA3B55599D0B22C4101D49CBCD83FF740ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft Manifest number: EA Signing time: Sun 25 Oct 2026 13:53:57 +0000 Manifest this update: Sun 25 Oct 2026 13:48:57 +0000 Manifest next update: Mon 26 Oct 2026 15:31:57 +0000 Files and hashes: 1: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: swM3gRycoq2bpDf9jMK6TFe7xm5hIDTJnObip9j+E3U=) 2: A33230767964863363DEE33E7BD3F5C204182D74.crl (hash: f2kr4Bx0hSmJj0BabWPRtWXOaLAiewcnkx+3ohJGPfc=) 3: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: e/qY4LpsifjFJ8z9K3gWHOX8kQ1mg4k/iAFjqdxwcPM=) 4: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: +c51V8VPvLdRJzVzsvsfm1mPoM5H0OBSu1SWRMxqOYg=) 5: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: zfPIxy8u09KfI7kcdeQFP8vqKSJ+i/ut+oqw3CDggbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1a:2a:a3:b5:55:99:d0:b2:2c:41:01:d4:9c:bc:d8:3f:f7:40:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33230767964863363DEE33E7BD3F5C204182D74 Validity Not Before: Oct 25 13:48:57 2026 GMT Not After : Oct 26 15:31:57 2026 GMT Subject: CN=2D527913E5A25A1F357F89A7F09FA0D7C8BECCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:37:12:ec:fa:56:f0:f5:d2:7c:d9:e7:e2: 3e:7a:63:1f:fc:ae:21:b8:67:c1:2b:42:4f:6e:b2: d0:0c:a2:e6:b9:b2:db:ef:43:73:07:a8:62:af:39: 98:d0:9c:17:d1:bc:c7:ce:55:20:eb:be:d1:de:c0: 8b:7b:67:b7:f4:ec:8c:0a:5c:6b:5d:53:71:c2:fb: d9:df:f0:9b:ec:7b:51:1f:e2:c7:e9:ed:45:ff:a7: 96:6f:47:49:61:f2:95:02:99:ae:95:4c:0c:ea:29: 1a:1e:46:9f:0b:7f:44:b4:59:32:d8:59:fc:6e:32: db:1f:03:ec:81:9c:f0:30:34:90:91:10:aa:ef:8b: 0d:08:2c:7f:b5:73:76:29:a4:d4:45:20:bd:af:3c: 12:9e:a6:75:52:60:dd:a5:1c:8d:f4:6f:fe:ec:95: 8d:4c:49:7d:f0:36:0a:ad:00:c2:4e:6d:89:47:28: 89:fa:50:6b:3c:45:d9:a6:ae:33:95:e0:7e:c5:a4: 8c:e0:5f:63:c8:ac:16:87:db:c0:b5:7b:37:cd:9f: dd:fa:fc:c7:29:4d:a7:7d:73:2e:e4:fb:fb:e6:fc: 63:76:18:14:ea:7d:89:48:2f:3c:e8:bb:50:b0:84: 05:91:e6:79:43:d1:13:3c:8e:26:17:9c:5b:ed:9f: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:52:79:13:E5:A2:5A:1F:35:7F:89:A7:F0:9F:A0:D7:C8:BE:CC:B7 X509v3 Authority Key Identifier: keyid:A3:32:30:76:79:64:86:33:63:DE:E3:3E:7B:D3:F5:C2:04:18:2D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A33230767964863363DEE33E7BD3F5C204182D74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/A33230767964863363DEE33E7BD3F5C204182D74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ec:ea:9a:8d:77:84:e7:b4:cb:69:e6:47:fb:36:de:80:57: c2:74:f3:0a:07:94:e8:b8:d5:ea:6b:72:74:79:08:08:21:8b: ec:01:83:08:0a:4e:e9:36:d1:0a:63:db:7e:f2:63:34:3d:c3: 6d:18:f7:7d:48:19:cc:f6:4a:43:3d:08:1b:5a:c7:4f:53:2b: f1:d8:d5:6d:7f:14:15:31:54:8e:b6:c9:9e:4f:da:d7:3c:ef: 46:5d:7a:87:de:7f:d1:45:aa:7c:2f:f7:3e:e2:9f:e5:1e:6d: 7e:82:06:71:cf:c4:c7:ad:67:e6:d2:af:93:bb:b1:0f:61:01: f9:92:df:77:55:6e:fb:44:81:a7:53:71:e4:28:68:cc:ad:a4: f5:c7:5e:db:a2:7a:0a:df:bc:3d:13:3c:40:b9:b6:ad:12:97: cb:be:36:f5:f6:b1:4e:bd:6c:ab:65:ae:a2:73:a3:02:c2:2b: 05:ab:1b:af:41:98:09:1c:24:66:82:e2:8d:60:74:fd:8f:69: 91:24:fd:33:03:32:58:31:6c:57:a5:7a:86:e2:27:73:2f:b8: 72:fe:33:37:27:2b:28:c2:55:29:bc:52:29:4a:49:66:ba:5b: 05:70:6e:4d:9b:e6:72:2f:ae:7a:c0:6c:8e:36:fa:a1:c1:bb: 09:67:d4:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBoqo7VVmdCyLEEB1Jy82D/3QO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIw NDE4MkQ3NDAeFw0yNjEwMjUxMzQ4NTdaFw0yNjEwMjYxNTMxNTdaMDMxMTAvBgNV BAMTKDJENTI3OTEzRTVBMjVBMUYzNTdGODlBN0YwOUZBMEQ3QzhCRUNDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0DcS7PpW8PXSfNnn4j56Yx/8 riG4Z8ErQk9ustAMoua5stvvQ3MHqGKvOZjQnBfRvMfOVSDrvtHewIt7Z7f07IwK XGtdU3HC+9nf8Jvse1Ef4sfp7UX/p5ZvR0lh8pUCma6VTAzqKRoeRp8Lf0S0WTLY WfxuMtsfA+yBnPAwNJCREKrviw0ILH+1c3YppNRFIL2vPBKepnVSYN2lHI30b/7s lY1MSX3wNgqtAMJObYlHKIn6UGs8RdmmrjOV4H7FpIzgX2PIrBaH28C1ezfNn936 /McpTad9cy7k+/vm/GN2GBTqfYlILzzou1CwhAWR5nlD0RM8jiYXnFvtn3HtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVJ5E+WiWh81f4mn8J+g18i+zLcwHwYDVR0j BBgwFoAUozIwdnlkhjNj3uM+e9P1wgQYLXQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTg2ZDM2MzctOTJiNC00YWM3LWE3NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3 OTY0ODYzMzYzREVFMzNFN0JEM0Y1QzIwNDE4MkQ3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzMyMzA3Njc5NjQ4NjMzNjNERUUzM0U3QkQzRjVDMjA0MTgy RDc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvQTMzMjMwNzY3OTY0ODYzMzYzREVFMzNFN0JEM0Y1 QzIwNDE4MkQ3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3s6pqNd4TntMtp5kf7Nt6AV8J08woHlOi4 1eprcnR5CAghi+wBgwgKTuk20Qpj237yYzQ9w20Y931IGcz2SkM9CBtax09TK/HY 1W1/FBUxVI62yZ5P2tc870Zdeofef9FFqnwv9z7in+UebX6CBnHPxMetZ+bSr5O7 sQ9hAfmS33dVbvtEgadTceQoaMytpPXHXtuiegrfvD0TPEC5tq0Sl8u+NvX2sU69 bKtlrqJzowLCKwWrG69BmAkcJGaC4o1gdP2PaZEk/TMDMlgxbFeleobiJ3MvuHL+ MzcnKyjCVSm8UilKSWa6WwVwbk2b5nIvrnrAbI42+qHBuwln1GY= -----END CERTIFICATE-----Generated at Mon Oct 26 02:23:32 2026 by rpki-client