$ rpki-client -vvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: hyRb3PC80xeaBekOZ0Medf1a20iV0Yk5LkyHiDNLYbU= Subject key identifier: 65:AC:B7:51:A7:44:4B:72:0D:01:3E:3D:4E:62:91:C4:7E:3A:FD:EB Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 565212DD92547C6EA97571751FFC9295EC4AF5F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 11:39:57 +0000 Manifest this update: Fri 19 Jun 2026 11:34:57 +0000 Manifest next update: Sat 20 Jun 2026 15:31:57 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: Krjz/7tP/XGp0jNAUiOLYLbzeOUxBOxv8EJ6ukPQepI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:52:12:dd:92:54:7c:6e:a9:75:71:75:1f:fc:92:95:ec:4a:f5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: Jun 19 11:34:57 2026 GMT Not After : Jun 20 15:31:57 2026 GMT Subject: CN=65ACB751A7444B720D013E3D4E6291C47E3AFDEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:3f:b2:15:1a:a2:cc:4c:93:fe:39:9b:7e: 13:23:ef:0c:77:50:f3:d4:7d:9f:95:17:88:ee:a9: 0e:0a:c7:9c:14:6f:f7:7d:60:32:ed:97:9f:a9:47: 53:0e:88:2b:78:9c:41:8b:d2:b0:f4:03:f3:03:4c: d5:f7:08:08:2c:d9:85:00:21:ea:18:20:55:32:17: ef:ac:c1:2d:eb:df:86:32:2d:c3:66:47:8d:e5:90: e2:92:9b:5c:b4:01:cb:05:14:6a:f8:2f:23:23:4d: 7b:c8:0c:cc:21:86:9d:61:9e:48:2d:72:59:13:e8: 16:3b:b2:c5:4a:9a:fc:43:d3:c3:8f:d2:ff:ed:38: d6:33:c5:7a:ef:5c:7c:0f:83:e1:72:80:49:8f:9e: 9c:67:5c:a9:ee:3f:90:78:f2:20:d1:33:1c:62:bb: 4d:74:a3:71:1d:c3:b8:fb:30:b9:26:8f:62:44:17: b0:4b:ad:06:d2:72:ba:33:ef:fb:17:79:22:b7:3e: d1:97:80:00:bc:02:fd:30:c7:e5:22:d8:b9:3a:8d: ee:c8:e9:47:54:07:82:12:f8:23:51:fa:a2:0f:ce: 40:4e:dc:0b:37:7d:07:8d:ab:32:e0:b4:bf:85:4e: cc:dc:ea:11:01:be:55:c8:10:6e:ee:ca:65:9c:17: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AC:B7:51:A7:44:4B:72:0D:01:3E:3D:4E:62:91:C4:7E:3A:FD:EB X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:79:8b:7e:31:66:b6:6b:4f:7b:4a:5c:42:ba:93:33:15:e9: c7:f5:22:99:b1:9d:7e:73:4e:18:16:a7:bd:9c:fc:c9:ac:7e: 30:5a:f6:a5:b0:56:60:5b:9d:f4:36:d5:4c:12:cc:59:06:0d: c7:aa:75:3a:bd:3d:cb:b9:8a:8b:84:c3:e5:8e:c9:72:cd:e9: dd:ec:7e:14:9f:f2:08:92:59:d4:41:47:5c:ec:49:b5:70:4b: 54:58:d7:3b:68:73:3e:b0:d2:73:bd:26:c8:de:8f:94:db:66: 5a:61:f0:06:f0:3c:7b:d5:32:60:42:c1:cf:fa:15:f3:6b:53: 47:9b:fe:44:38:45:17:e8:eb:7c:0c:56:8d:52:a0:9b:05:c7: 1a:35:e1:0c:d7:24:3f:09:a1:c6:19:ee:27:ad:12:df:e5:bc: 87:84:4a:19:1e:8d:49:ff:b4:05:94:3d:c9:cd:56:f0:11:6a: 77:a2:c8:ea:6b:78:4a:b1:70:cb:c6:17:02:a0:5f:8a:58:df: 6d:a4:c2:71:68:55:cf:e5:8b:b3:52:f1:2d:ac:6f:79:2d:3c: 4b:b5:a5:7a:0d:90:14:f0:52:77:3a:2f:a6:a4:3e:d8:c5:7b: 14:cc:61:12:eb:33:71:e0:16:74:ce:20:b3:58:e4:b7:ff:aa: dd:80:55:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlIS3ZJUfG6pdXF1H/ySlexK9fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA2MTkxMTM0NTdaFw0yNjA2MjAxNTMxNTdaMDMxMTAvBgNV BAMTKDY1QUNCNzUxQTc0NDRCNzIwRDAxM0UzRDRFNjI5MUM0N0UzQUZERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoz+yFRqizEyT/jmbfhMj7wx3 UPPUfZ+VF4juqQ4Kx5wUb/d9YDLtl5+pR1MOiCt4nEGL0rD0A/MDTNX3CAgs2YUA IeoYIFUyF++swS3r34YyLcNmR43lkOKSm1y0AcsFFGr4LyMjTXvIDMwhhp1hnkgt clkT6BY7ssVKmvxD08OP0v/tONYzxXrvXHwPg+FygEmPnpxnXKnuP5B48iDRMxxi u010o3Edw7j7MLkmj2JEF7BLrQbScroz7/sXeSK3PtGXgAC8Av0wx+Ui2Lk6je7I 6UdUB4IS+CNR+qIPzkBO3As3fQeNqzLgtL+FTszc6hEBvlXIEG7uymWcFwERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZay3UadES3INAT49TmKRxH46/eswHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV5i34xZrZrT3tKXEK6kzMV6cf1IpmxnX5z ThgWp72c/MmsfjBa9qWwVmBbnfQ21UwSzFkGDceqdTq9Pcu5iouEw+WOyXLN6d3s fhSf8giSWdRBR1zsSbVwS1RY1ztocz6w0nO9Jsjej5TbZlph8AbwPHvVMmBCwc/6 FfNrU0eb/kQ4RRfo63wMVo1SoJsFxxo14QzXJD8JocYZ7ietEt/lvIeEShkejUn/ tAWUPcnNVvARaneiyOpreEqxcMvGFwKgX4pY322kwnFoVc/li7NS8S2sb3ktPEu1 pXoNkBTwUnc6L6akPtjFexTMYRLrM3HgFnTOILNY5Lf/qt2AVWo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:37 2026 by rpki-client