$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft File: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft (raw, json) Hash identifier: Gs/0TCKFvGul0kH/AUB/Ibn7rXENQqnhKb6EYbzV7qI= Subject key identifier: 63:B7:85:82:C0:12:5C:FF:19:2F:3B:B5:A1:01:72:2D:4E:39:79:98 Authority key identifier: 33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B Certificate issuer: /CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Certificate serial: 355F0DFDEC87A46450257EA09295A2E11AA2E1E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 23:33:02 +0000 Manifest this update: Wed 16 Sep 2026 23:28:02 +0000 Manifest next update: Fri 18 Sep 2026 03:16:02 +0000 Files and hashes: 1: 33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl (hash: Gqhlty2/bvgEpl94Oh6VX9S9iS1eMocd3Lc/vWfgbmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5f:0d:fd:ec:87:a4:64:50:25:7e:a0:92:95:a2:e1:1a:a2:e1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA9D5C65132C12EE7132CDE68B97B1E156C13B Validity Not Before: Sep 16 23:28:02 2026 GMT Not After : Sep 18 03:16:02 2026 GMT Subject: CN=63B78582C0125CFF192F3BB5A101722D4E397998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:80:dd:f8:c6:92:26:1e:c7:87:3b:3b:d9: 43:78:e9:69:78:db:24:d8:1d:57:34:d0:45:f3:4a: 8c:65:23:3a:b0:5d:15:e3:80:ed:65:86:cf:09:80: 5d:60:6f:c6:68:2b:56:40:9f:88:46:48:6a:c7:32: a7:5d:bb:78:ed:b1:c6:6d:36:68:2a:20:9f:a0:86: 50:4b:b5:cc:5a:60:9b:5f:f9:a0:d5:ff:3f:85:a8: 2e:9a:20:aa:65:ac:f8:e9:e2:ac:ef:7c:d2:3f:89: b4:64:eb:98:99:65:2b:99:dd:9f:6d:01:9c:b4:de: 89:1d:8f:6d:bb:11:ae:c3:77:99:4d:df:5f:f5:13: 22:2b:14:5c:d4:15:ba:c9:e2:11:3d:4b:7a:96:70: 23:f4:e3:7d:9b:82:12:96:d7:13:d1:81:24:2d:64: 5c:f8:95:9f:73:53:10:13:b4:46:15:d2:7f:80:f9: ed:98:64:d4:5d:cf:ce:27:b4:04:f8:c2:dd:58:64: 68:38:d3:89:0c:33:26:23:42:3e:c4:37:44:69:6f: d8:7e:eb:3b:73:14:33:6f:c3:2c:ef:55:27:c7:df: c5:14:f2:40:25:5b:aa:58:52:d9:81:b0:03:5f:36: dd:97:bd:00:e7:02:93:c7:e1:41:03:0a:f9:65:60: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B7:85:82:C0:12:5C:FF:19:2F:3B:B5:A1:01:72:2D:4E:39:79:98 X509v3 Authority Key Identifier: keyid:33:CA:9D:5C:65:13:2C:12:EE:71:32:CD:E6:8B:97:B1:E1:56:C1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/33CA9D5C65132C12EE7132CDE68B97B1E156C13B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:10:eb:98:1b:bb:59:e2:5f:10:72:99:89:81:a7:99:14:41: 2b:63:3c:c6:fb:cc:51:97:a9:a3:a8:12:26:86:92:d8:7c:ad: 19:36:0c:bd:96:cb:e8:eb:80:2b:a5:ff:1c:ae:40:a8:7e:fe: b8:40:62:b5:33:be:5e:8d:95:93:22:a0:88:e0:97:57:08:d7: 58:bc:d0:e8:d8:a8:e8:be:de:c4:e0:68:02:e2:33:1e:fc:06: fd:5d:69:cc:12:19:3b:79:c4:18:40:73:97:5f:27:25:d6:97: b4:0d:88:f9:72:d4:f1:1c:e2:91:99:7a:bd:46:c8:9d:b9:92: 3f:76:7f:bd:08:39:b5:c6:c8:3b:79:d7:fe:df:a9:25:54:c2: f4:22:5f:76:1f:69:68:05:e9:d6:23:55:43:73:97:21:91:61: cb:38:a6:5b:c4:c9:cc:29:34:87:27:32:59:7f:6f:32:bc:68: b4:1a:af:d8:9b:34:0a:07:e1:95:67:76:6e:1b:c1:15:37:69: 40:eb:d0:75:c7:21:a3:a0:a1:b0:f6:be:5c:c3:73:92:a4:40: 31:ae:ab:01:37:22:26:b1:9f:db:e9:5a:b8:23:fd:1b:2a:41: a5:68:d8:02:8d:ca:5d:97:a0:1f:e6:28:5c:02:fd:76:2b:82: 40:b3:d7:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNV8N/eyHpGRQJX6gkpWi4Rqi4ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFF MTU2QzEzQjAeFw0yNjA5MTYyMzI4MDJaFw0yNjA5MTgwMzE2MDJaMDMxMTAvBgNV BAMTKDYzQjc4NTgyQzAxMjVDRkYxOTJGM0JCNUExMDE3MjJENEUzOTc5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXIDd+MaSJh7Hhzs72UN46Wl4 2yTYHVc00EXzSoxlIzqwXRXjgO1lhs8JgF1gb8ZoK1ZAn4hGSGrHMqddu3jtscZt NmgqIJ+ghlBLtcxaYJtf+aDV/z+FqC6aIKplrPjp4qzvfNI/ibRk65iZZSuZ3Z9t AZy03okdj227Ea7Dd5lN31/1EyIrFFzUFbrJ4hE9S3qWcCP0432bghKW1xPRgSQt ZFz4lZ9zUxATtEYV0n+A+e2YZNRdz84ntAT4wt1YZGg404kMMyYjQj7EN0Rpb9h+ 6ztzFDNvwyzvVSfH38UU8kAlW6pYUtmBsANfNt2XvQDnApPH4UEDCvllYAIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7eFgsASXP8ZLzu1oQFyLU45eZgwHwYDVR0j BBgwFoAUM8qdXGUTLBLucTLN5ouXseFWwTswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNhZGVjZGQtMjUzMy00NjJkLWFjZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2 NTEzMkMxMkVFNzEzMkNERTY4Qjk3QjFFMTU2QzEzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBOUQ1QzY1MTMyQzEyRUU3MTMyQ0RFNjhCOTdCMUUxNTZD MTNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvMzNDQTlENUM2NTEzMkMxMkVFNzEzMkNERTY4Qjk3 QjFFMTU2QzEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQQ65gbu1niXxBymYmBp5kUQStjPMb7zFGX qaOoEiaGkth8rRk2DL2Wy+jrgCul/xyuQKh+/rhAYrUzvl6NlZMioIjgl1cI11i8 0OjYqOi+3sTgaALiMx78Bv1dacwSGTt5xBhAc5dfJyXWl7QNiPly1PEc4pGZer1G yJ25kj92f70IObXGyDt51/7fqSVUwvQiX3YfaWgF6dYjVUNzlyGRYcs4plvEycwp NIcnMll/bzK8aLQar9ibNAoH4ZVndm4bwRU3aUDr0HXHIaOgobD2vlzDc5KkQDGu qwE3Iiaxn9vpWrgj/RsqQaVo2AKNyl2XoB/mKFwC/XYrgkCz1w8= -----END CERTIFICATE-----Generated at Thu Sep 17 11:05:41 2026 by rpki-client