$ rpki-client -vvvf rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft File: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft (raw, json) Hash identifier: 32+OVpO80vJVpXxlUbdAEXSNb6EUnu3KyMZStPAnuwo= Subject key identifier: C6:90:E5:6B:98:31:1E:BB:51:67:54:A9:C2:98:0B:09:40:9C:87:7F Authority key identifier: 33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB Certificate issuer: /CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Certificate serial: 43D6E99563182C68E08D3F720CD9CBDD16AF636F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft Manifest number: EA Signing time: Fri 23 Oct 2026 22:52:35 +0000 Manifest this update: Fri 23 Oct 2026 22:47:35 +0000 Manifest next update: Sun 25 Oct 2026 00:22:35 +0000 Files and hashes: 1: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: kJDxwTEYsYCJ4Rk68b096gTPh13irPlcYW/GjEXoTKw=) 2: 33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl (hash: 65j5lTtrjFfWRM+fd9FFAEyDk1WTPn8vdHCrqtDQGW4=) 3: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: IR8ZgV48rlpVwGRZA2UdoKib4w9/NmfFD1YyStawg/A=) 4: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: VcvKBq3lW4jCz1VqqWJZKeok+nVenIiG7/VoGPMLxZA=) 5: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: NprszTkq06Ij3bEjpZd7oX80ebz7GdjG3phJlfau8PQ=) 6: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: 4WDpN8Ex7Pgi2TFpfBvmJzVBVG1rVMXsGz4I/hIirbI=) 7: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: VtAQO0AlCRmGOzLBBaKRmCdAabezXryNW6qpduImgcs=) 8: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: xuKK+GWHrh3/9399GplJKm6iNLAQ7HWW260dXuul/ZI=) 9: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: cSE2SSV8Ql4HwT5nihblkiTG5EieYy1cQFYRrdQsgj4=) 10: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: roFKFIxJ1+ZhHXf41zOVixIfqUHECqT6D58DQ8Zlx+0=) 11: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: 0cAVB/6CuYKgnp0J1rdKOsvdqJdA3t8iufwR+rDhwsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 00:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:e9:95:63:18:2c:68:e0:8d:3f:72:0c:d9:cb:dd:16:af:63:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CAB3305E3643E83E673F098209B9BCF6B1A1FB Validity Not Before: Oct 23 22:47:35 2026 GMT Not After : Oct 25 00:22:35 2026 GMT Subject: CN=C690E56B98311EBB516754A9C2980B09409C877F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:76:61:a7:5c:7e:06:8f:e8:6f:07:96:a3: 26:b0:fa:dd:d4:70:f2:0f:5e:ad:f6:34:ed:78:66: 30:f9:51:6c:64:6f:eb:ed:16:f9:7e:6c:50:bf:0e: d0:f5:d4:2d:01:5d:21:60:2b:97:30:ed:cf:df:45: de:c2:e3:a7:cf:0f:de:f7:3e:65:07:f9:80:01:a8: f9:be:7b:ca:3a:cd:5e:a0:30:c6:87:03:64:2d:91: 5d:1c:bb:9f:29:4b:45:ba:d1:60:34:ff:9d:1e:bc: 5c:0a:cf:75:e3:86:43:22:e2:62:81:e9:1b:f6:88: 3a:de:eb:fe:7f:c4:35:26:04:06:85:32:34:65:32: f5:d4:d1:72:71:b8:46:e1:54:a8:a9:24:c0:16:b6: 9a:47:cd:1b:2e:18:1b:23:df:36:50:bc:ed:f1:fe: f5:74:84:3d:c8:57:fa:d4:60:89:14:9a:2b:07:da: e8:41:22:8a:be:8b:5f:5f:98:4c:fb:a0:69:ff:a4: 88:47:cd:69:b2:17:29:51:87:e2:77:3c:15:22:73: c8:91:72:ec:df:73:d5:e4:8c:ed:7a:cb:68:78:62: 21:8c:d6:6d:57:96:30:e4:03:1b:c8:59:5d:c0:23: bb:fb:72:2c:be:f9:c0:01:a3:9f:7a:dd:fb:18:c7: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:90:E5:6B:98:31:1E:BB:51:67:54:A9:C2:98:0B:09:40:9C:87:7F X509v3 Authority Key Identifier: keyid:33:CA:B3:30:5E:36:43:E8:3E:67:3F:09:82:09:B9:BC:F6:B1:A1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/33CAB3305E3643E83E673F098209B9BCF6B1A1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:45:01:b1:2e:66:26:e5:e9:4c:13:19:1b:84:5c:58:2c:47: 1b:68:8d:43:32:5e:b7:86:1e:9b:da:13:15:c8:f6:38:54:2e: 43:f5:12:1a:66:9a:3b:68:31:c2:23:6f:26:d9:7b:c3:87:9a: 67:98:5f:a5:ca:cf:b8:9c:f3:30:0e:ef:c5:5f:d0:96:90:79: 6f:62:c7:ee:fb:95:41:db:a7:cd:e1:0a:c1:88:63:ea:82:44: f4:66:51:a8:67:19:ea:d1:2e:d8:95:d4:3d:c8:67:4e:d6:d6: 99:c2:72:81:e7:67:68:6f:e5:7f:bc:b0:9e:1a:bd:46:54:5d: ca:7e:e7:55:4f:8f:2e:eb:46:0a:60:8e:c1:bd:4e:62:4b:ee: 03:b7:a3:b4:5b:39:8e:c9:ee:16:fb:3e:b1:c9:ce:d7:75:2f: cd:f4:a3:bf:6c:92:dc:7b:76:f6:f5:5b:ba:0b:41:27:14:8a: 98:bd:a2:cd:29:c7:f3:9c:d5:87:21:5f:54:86:54:10:29:ad: b0:81:fc:f0:8d:9f:b5:17:7f:4e:f3:82:77:9e:4d:98:d8:15: 6b:5b:5b:52:f1:9e:fc:1f:c4:87:e2:31:dd:18:bb:c8:7f:0c: 66:09:35:f4:82:82:20:8c:ea:b2:b7:0f:93:c6:93:3d:f9:98: bb:cb:22:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9bplWMYLGjgjT9yDNnL3RavY28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5QkNG NkIxQTFGQjAeFw0yNjEwMjMyMjQ3MzVaFw0yNjEwMjUwMDIyMzVaMDMxMTAvBgNV BAMTKEM2OTBFNTZCOTgzMTFFQkI1MTY3NTRBOUMyOTgwQjA5NDA5Qzg3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGunZhp1x+Bo/obweWoyaw+t3U cPIPXq32NO14ZjD5UWxkb+vtFvl+bFC/DtD11C0BXSFgK5cw7c/fRd7C46fPD973 PmUH+YABqPm+e8o6zV6gMMaHA2QtkV0cu58pS0W60WA0/50evFwKz3XjhkMi4mKB 6Rv2iDre6/5/xDUmBAaFMjRlMvXU0XJxuEbhVKipJMAWtppHzRsuGBsj3zZQvO3x /vV0hD3IV/rUYIkUmisH2uhBIoq+i19fmEz7oGn/pIhHzWmyFylRh+J3PBUic8iR cuzfc9XkjO16y2h4YiGM1m1XljDkAxvIWV3AI7v7ciy++cABo5963fsYxxgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxpDla5gxHrtRZ1SpwpgLCUCch38wHwYDVR0j BBgwFoAUM8qzMF42Q+g+Zz8Jggm5vPaxofswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI4MDg5YTctMGE2OC00ZDY3LWFkYWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1 RTM2NDNFODNFNjczRjA5ODIwOUI5QkNGNkIxQTFGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0NBQjMzMDVFMzY0M0U4M0U2NzNGMDk4MjA5QjlCQ0Y2QjFB MUZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzNDQUIzMzA1RTM2NDNFODNFNjczRjA5ODIwOUI5 QkNGNkIxQTFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtFAbEuZibl6UwTGRuEXFgsRxtojUMyXreG HpvaExXI9jhULkP1EhpmmjtoMcIjbybZe8OHmmeYX6XKz7ic8zAO78Vf0JaQeW9i x+77lUHbp83hCsGIY+qCRPRmUahnGerRLtiV1D3IZ07W1pnCcoHnZ2hv5X+8sJ4a vUZUXcp+51VPjy7rRgpgjsG9TmJL7gO3o7RbOY7J7hb7PrHJztd1L830o79sktx7 dvb1W7oLQScUipi9os0px/Oc1YchX1SGVBAprbCB/PCNn7UXf07zgneeTZjYFWtb W1LxnvwfxIfiMd0Yu8h/DGYJNfSCgiCM6rK3D5PGkz35mLvLIv4= -----END CERTIFICATE-----Generated at Sat Oct 24 18:45:09 2026 by rpki-client