$ rpki-client -vvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: mQ1RUV/6nKvmoG6IYwRbTU/P5co8n5G9uzcxEmSHAZI= Subject key identifier: 79:DD:C9:96:B8:84:86:D0:CF:34:CF:29:EB:9F:30:7B:1C:4B:AB:49 Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 44B189BF7262565D8CA938BEF4B8D21927CE059A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: 43 Signing time: Fri 19 Jun 2026 21:37:00 +0000 Manifest this update: Fri 19 Jun 2026 21:32:00 +0000 Manifest next update: Sun 21 Jun 2026 01:29:00 +0000 Files and hashes: 1: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 2: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 3: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 4: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: 5GkdP2Xn6WBQusLvxyS+qfMITkmLrYvaQmbVYTue8eo=) 5: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 6: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) 7: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 8: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 9: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 10: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 11: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b1:89:bf:72:62:56:5d:8c:a9:38:be:f4:b8:d2:19:27:ce:05:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Jun 19 21:32:00 2026 GMT Not After : Jun 21 01:29:00 2026 GMT Subject: CN=79DDC996B88486D0CF34CF29EB9F307B1C4BAB49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:e4:21:6f:c8:dd:e6:d0:f7:35:c7:c6:06: a2:0e:a0:f0:38:a8:29:2b:7c:9d:8f:ac:9b:f6:61: e5:70:77:57:17:12:17:39:14:38:89:26:c8:a5:11: 26:ee:0d:16:c2:52:e8:19:3b:02:13:46:55:95:85: ca:8f:1c:d6:74:eb:8f:a1:8e:e4:e3:e1:fd:af:ee: 94:39:72:63:e1:c3:d3:f2:be:23:55:94:ab:bf:a2: 55:c0:66:53:84:22:d2:3f:4d:63:5e:0f:c1:42:bf: 4d:38:de:aa:44:bf:a2:2f:57:da:7d:e7:05:3a:d3: 8f:be:12:cc:b7:da:a2:58:20:bc:75:67:ef:b6:3a: d2:e0:6b:18:43:61:c4:32:5e:4f:df:1d:8c:9f:95: f1:1b:c2:0c:14:eb:9c:24:d2:7b:ed:91:03:07:7d: 2b:18:f4:b7:b2:cf:f6:63:98:10:bf:05:e1:9c:dd: 3b:e2:44:b6:08:09:29:b7:5e:cd:cb:a1:c1:0e:7e: c8:99:da:99:ff:d5:28:b5:de:b2:04:52:ab:bd:f8: 0f:8a:21:2c:33:2b:e2:de:cb:d6:70:19:a2:05:44: 62:3f:6a:47:3f:d7:6b:2d:d0:ff:de:43:d9:73:06: 71:eb:8b:46:38:08:a8:47:5e:4a:60:3a:87:e9:49: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DD:C9:96:B8:84:86:D0:CF:34:CF:29:EB:9F:30:7B:1C:4B:AB:49 X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:97:7c:7e:37:0d:a6:ba:dc:19:3e:64:8b:96:17:c1:d3:76: 96:df:42:c6:a0:90:16:75:38:7a:b5:84:70:88:05:0d:6d:0c: d1:09:c5:93:65:13:f1:55:35:b0:08:e6:a6:96:70:5a:bc:b1: 3f:35:83:3c:12:f8:5f:f4:a9:e1:ad:f5:04:63:98:0f:37:8b: 28:d4:5b:15:ee:3c:ff:a7:06:d5:a6:8c:ad:91:fd:9f:e8:17: 84:10:f1:06:f4:ce:4c:50:e9:c8:ef:6c:59:4d:6d:3e:c2:40: c0:e7:a8:14:60:d4:46:7b:00:c4:d7:3a:c2:d5:e6:c6:51:64: ee:9e:b9:3e:d9:11:7d:14:3e:52:ea:08:a3:7d:84:c9:34:67: 38:ba:6d:3d:13:fb:f9:7d:53:e4:58:8c:a0:ff:d9:42:53:33: 62:9c:ab:81:4b:72:92:4a:0d:68:21:02:80:ef:d4:8d:54:a9: d9:0e:d2:10:3c:51:4d:db:8e:e1:ed:65:df:ad:a7:59:d4:f5: 2e:9b:b1:fe:27:be:6e:82:06:63:76:02:ac:d7:bd:37:9d:20: bd:6d:34:67:4d:24:5c:e7:1c:15:7c:cd:70:75:99:24:80:44: 72:04:69:10:e0:69:76:40:b0:13:5b:51:78:05:fe:de:f6:8d: 87:ee:18:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLGJv3JiVl2MqTi+9LjSGSfOBZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjA2MTkyMTMyMDBaFw0yNjA2MjEwMTI5MDBaMDMxMTAvBgNV BAMTKDc5RERDOTk2Qjg4NDg2RDBDRjM0Q0YyOUVCOUYzMDdCMUM0QkFCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclOQhb8jd5tD3NcfGBqIOoPA4 qCkrfJ2PrJv2YeVwd1cXEhc5FDiJJsilESbuDRbCUugZOwITRlWVhcqPHNZ064+h juTj4f2v7pQ5cmPhw9PyviNVlKu/olXAZlOEItI/TWNeD8FCv0043qpEv6IvV9p9 5wU604++Esy32qJYILx1Z++2OtLgaxhDYcQyXk/fHYyflfEbwgwU65wk0nvtkQMH fSsY9Leyz/ZjmBC/BeGc3TviRLYICSm3Xs3LocEOfsiZ2pn/1Si13rIEUqu9+A+K ISwzK+Ley9ZwGaIFRGI/akc/12st0P/eQ9lzBnHri0Y4CKhHXkpgOofpSbiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUed3JlriEhtDPNM8p658wexxLq0kwHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCXfH43Daa63Bk+ZIuWF8HTdpbfQsagkBZ1 OHq1hHCIBQ1tDNEJxZNlE/FVNbAI5qaWcFq8sT81gzwS+F/0qeGt9QRjmA83iyjU WxXuPP+nBtWmjK2R/Z/oF4QQ8Qb0zkxQ6cjvbFlNbT7CQMDnqBRg1EZ7AMTXOsLV 5sZRZO6euT7ZEX0UPlLqCKN9hMk0Zzi6bT0T+/l9U+RYjKD/2UJTM2Kcq4FLcpJK DWghAoDv1I1UqdkO0hA8UU3bjuHtZd+tp1nU9S6bsf4nvm6CBmN2AqzXvTedIL1t NGdNJFznHBV8zXB1mSSARHIEaRDgaXZAsBNbUXgF/t72jYfuGFw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:25 2026 by rpki-client