$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json) Hash identifier: G139Hu3fUwvtUNaDjGyKYGaelaripcru9U7YSeM8CK4= Subject key identifier: AF:41:9E:BB:21:66:C0:CC:C7:6F:FE:D6:FC:F2:E8:61:81:26:3F:2B Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29 Certificate serial: 301F68628D77907B6DCCD1C9BD5C8FEEC02E6F59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 23:12:39 +0000 Manifest this update: Wed 16 Sep 2026 23:07:39 +0000 Manifest next update: Fri 18 Sep 2026 00:20:39 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=) 2: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: FhDsv4oPlv8LVCpc5k+lUK2Wv9VSYrrTLzqvAKCPzgg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1f:68:62:8d:77:90:7b:6d:cc:d1:c9:bd:5c:8f:ee:c0:2e:6f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29 Validity Not Before: Sep 16 23:07:39 2026 GMT Not After : Sep 18 00:20:39 2026 GMT Subject: CN=AF419EBB2166C0CCC76FFED6FCF2E86181263F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:de:f4:0e:e2:74:e5:ab:19:61:0a:62:78: ee:69:43:c8:6b:5b:20:c9:76:5c:7f:9b:2a:bb:4d: f1:9b:b7:7a:ba:74:04:01:c7:b4:83:a6:7c:48:09: 44:ce:38:85:5a:f4:88:da:7b:7a:bc:a2:0c:7e:19: a2:a2:92:36:36:82:7f:f8:e7:20:59:ea:20:6d:40: b1:be:63:56:40:68:fa:05:3d:42:0f:89:7f:55:92: 6d:80:7c:79:0e:aa:88:9c:d1:e3:27:3a:3e:f9:ce: 49:1d:fa:1d:66:da:64:76:67:23:37:ff:42:d0:20: 93:00:53:39:37:8c:bb:55:08:ed:63:ed:5d:5d:de: 34:2f:5e:15:3e:20:56:af:22:19:7c:59:fd:b1:bf: 69:2c:0c:78:f6:72:9b:e7:3c:06:36:b2:5b:7d:f4: 9b:6a:fe:08:af:ed:4f:15:26:7c:38:86:7e:d0:a5: 0d:49:5a:6f:c9:de:79:8a:09:09:3f:ad:57:1e:17: a3:4a:fa:41:11:e7:09:8c:3a:8e:05:4e:2e:fd:e9: 5d:57:01:d2:78:60:d9:ae:e1:fc:e9:b6:50:01:0f: b3:9f:7d:93:10:db:06:08:3a:2b:f6:f8:0d:ce:23: 44:fa:21:6f:16:0f:b9:1f:92:a7:22:65:27:29:2e: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:41:9E:BB:21:66:C0:CC:C7:6F:FE:D6:FC:F2:E8:61:81:26:3F:2B X509v3 Authority Key Identifier: keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:d3:4d:18:97:09:b5:61:4f:f6:4e:ab:86:71:28:0b:16: 25:bd:70:d6:db:87:dc:8c:45:6d:e6:fd:8f:83:ae:7d:74:17: 36:51:7b:2d:13:e5:e9:02:74:be:c8:14:b4:e2:62:2e:28:f3: ae:27:d9:f7:0e:9e:e3:b5:03:f0:79:61:17:5e:84:38:44:c7: 50:0d:df:c2:8f:91:09:b6:04:73:56:6e:31:dd:57:e4:b9:ac: 38:26:94:2c:61:8c:3d:3e:2c:87:bb:29:c8:4a:21:e2:bf:02: 0e:28:5f:03:72:f7:d3:fd:fd:74:27:5b:4a:9f:d6:40:ca:b4: f7:fd:88:3d:12:f7:54:bd:47:6e:2e:70:c6:ed:34:39:d9:b1: 05:6b:26:b5:05:0c:ae:65:18:c9:59:b7:c4:c2:d3:09:9f:5b: c0:3f:3b:d3:9b:23:ca:ac:54:53:cc:b0:08:ea:6a:b6:19:2f: 00:a0:b0:1c:53:02:b3:53:9c:c3:51:11:a6:28:1f:8f:0c:a4: b8:4d:21:44:80:d6:9a:5f:f8:e1:aa:59:6e:80:a1:65:b3:63: 10:4b:bf:53:51:35:cd:05:3d:1e:cf:16:e6:b0:a5:b3:cf:2e: 85:2f:53:77:56:d7:df:05:4e:4b:7c:ad:66:36:fd:90:5c:bd: f3:58:25:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB9oYo13kHttzNHJvVyP7sAub1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JD MUI0OUYyOTAeFw0yNjA5MTYyMzA3MzlaFw0yNjA5MTgwMDIwMzlaMDMxMTAvBgNV BAMTKEFGNDE5RUJCMjE2NkMwQ0NDNzZGRkVENkZDRjJFODYxODEyNjNGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziN70DuJ05asZYQpieO5pQ8hr WyDJdlx/myq7TfGbt3q6dAQBx7SDpnxICUTOOIVa9Ijae3q8ogx+GaKikjY2gn/4 5yBZ6iBtQLG+Y1ZAaPoFPUIPiX9Vkm2AfHkOqoic0eMnOj75zkkd+h1m2mR2ZyM3 /0LQIJMAUzk3jLtVCO1j7V1d3jQvXhU+IFavIhl8Wf2xv2ksDHj2cpvnPAY2slt9 9Jtq/giv7U8VJnw4hn7QpQ1JWm/J3nmKCQk/rVceF6NK+kER5wmMOo4FTi796V1X AdJ4YNmu4fzptlABD7OffZMQ2wYIOiv2+A3OI0T6IW8WD7kfkqciZScpLitHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0GeuyFmwMzHb/7W/PLoYYEmPyswHwYDVR0j BBgwFoAUMygJIHNAFDNqAknJCaOOe8G0nykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmZTQyNTUtMWQ5MS00ZmNjLWJjZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3 MzQwMTQzMzZBMDI0OUM5MDlBMzhFN0JDMUI0OUYyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzI4MDkyMDczNDAxNDMzNkEwMjQ5QzkwOUEzOEU3QkMxQjQ5 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvMzMyODA5MjA3MzQwMTQzMzZBMDI0OUM5MDlBMzhF N0JDMUI0OUYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmg000Ylwm1YU/2TquGcSgLFiW9cNbbh9yM RW3m/Y+Drn10FzZRey0T5ekCdL7IFLTiYi4o864n2fcOnuO1A/B5YRdehDhEx1AN 38KPkQm2BHNWbjHdV+S5rDgmlCxhjD0+LIe7KchKIeK/Ag4oXwNy99P9/XQnW0qf 1kDKtPf9iD0S91S9R24ucMbtNDnZsQVrJrUFDK5lGMlZt8TC0wmfW8A/O9ObI8qs VFPMsAjqarYZLwCgsBxTArNTnMNREaYoH48MpLhNIUSA1ppf+OGqWW6AoWWzYxBL v1NRNc0FPR7PFuawpbPPLoUvU3dW198FTkt8rWY2/ZBcvfNYJRs= -----END CERTIFICATE-----Generated at Thu Sep 17 09:17:38 2026 by rpki-client