$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: t/20TzEEyaQfN6j73OInV8ZR9pw5Ydf9yU7a0bOuuzs= Subject key identifier: 41:9E:A9:08:0E:14:67:BB:57:B0:77:37:81:2D:9D:19:73:BB:31:EB Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 27C4753ACA08266DCEE6D3D6A3554723CBF87702 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: EA Signing time: Sun 25 Oct 2026 17:59:08 +0000 Manifest this update: Sun 25 Oct 2026 17:54:08 +0000 Manifest next update: Mon 26 Oct 2026 19:05:08 +0000 Files and hashes: 1: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) 2: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) 3: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: kQXrZlVV4nvDBLBRFXl8nOd8LuSB3oy70yaJKwEsQe4=) 4: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 5: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 19:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c4:75:3a:ca:08:26:6d:ce:e6:d3:d6:a3:55:47:23:cb:f8:77:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Oct 25 17:54:08 2026 GMT Not After : Oct 26 19:05:08 2026 GMT Subject: CN=419EA9080E1467BB57B07737812D9D1973BB31EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:c5:16:18:c0:b3:94:5a:54:f7:03:56:86: e3:1c:ba:e6:c2:4a:ad:be:71:ae:12:8b:a0:34:4f: 69:de:dd:d6:2b:9c:c8:b7:6c:91:a7:58:24:5e:53: 3c:ea:84:99:ba:96:c2:1a:82:08:13:8a:55:24:85: 57:b2:67:50:e1:9a:25:3d:81:b1:3e:68:54:9c:c9: 63:00:d3:be:f2:16:ff:b8:09:58:ac:09:82:d7:50: ae:ef:88:96:4a:ba:7a:14:92:cd:f0:b4:98:94:57: 16:1f:e5:da:cf:c9:e8:a1:59:a6:8f:b2:6c:73:cb: 00:b1:e4:48:80:e7:4c:02:e0:39:70:b1:4b:20:79: 31:e4:b2:22:59:2a:0f:31:b1:27:1d:c6:37:cf:26: 23:e6:1f:8e:87:3a:90:a5:24:ab:5c:9c:f0:81:af: 78:5a:b8:86:a8:7f:33:11:bd:13:c6:35:12:ac:b0: cb:40:a1:42:b9:cd:7f:05:4a:f4:13:39:a2:3f:dd: 3d:4c:0a:f6:ca:8b:0a:91:cd:15:7a:63:b3:44:83: d2:f2:a0:80:f6:2b:cc:40:ec:65:65:0c:1a:28:29: 39:b5:00:de:49:4d:72:5e:96:94:bc:b9:38:0a:88: 29:d6:43:53:38:44:ac:16:fc:5b:0e:b6:74:ff:b3: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:A9:08:0E:14:67:BB:57:B0:77:37:81:2D:9D:19:73:BB:31:EB X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:fb:4a:13:22:db:36:46:84:0f:dc:a2:b0:1b:24:1f:50:88: a4:18:a5:33:6c:0d:87:36:0d:f0:83:4f:5b:e8:f5:c2:d8:4e: f1:f8:53:06:7a:ba:0d:0d:12:42:c3:ef:19:78:b0:27:e3:c6: d7:18:69:77:f2:07:a3:0b:3c:2a:da:d2:1a:9a:12:07:64:dc: cf:ae:63:f3:a2:f9:54:10:58:47:ad:8f:91:fd:f7:71:d9:0b: e3:ee:58:48:ac:f5:4e:10:80:fe:cd:39:7d:66:d2:17:99:a6: 94:c6:9f:c8:35:7d:43:26:45:b6:cf:5d:5f:b8:a0:3e:64:94: 30:8d:34:7f:8c:81:62:34:fc:7a:45:92:fd:d7:59:0f:03:d2: 9b:8b:98:60:a6:91:30:9e:b2:02:5a:bf:47:63:91:67:c5:9f: b9:61:10:53:c6:34:fd:0f:1d:6d:b8:43:e5:08:94:0d:33:11: be:2c:aa:db:3a:69:2c:d9:93:02:b0:c6:c0:2e:9f:4e:59:ae: bf:c8:91:ca:4c:df:c3:75:36:73:25:1e:db:aa:2e:1c:5a:b2: 00:98:0a:bf:50:16:4b:7f:58:71:58:54:2a:7b:2d:c8:68:27: 8a:fa:b3:50:f3:fb:f1:72:26:27:7a:32:54:5f:01:05:9d:b9: 69:99:cd:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8R1OsoIJm3O5tPWo1VHI8v4dwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjEwMjUxNzU0MDhaFw0yNjEwMjYxOTA1MDhaMDMxMTAvBgNV BAMTKDQxOUVBOTA4MEUxNDY3QkI1N0IwNzczNzgxMkQ5RDE5NzNCQjMxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5sUWGMCzlFpU9wNWhuMcuubC Sq2+ca4Si6A0T2ne3dYrnMi3bJGnWCReUzzqhJm6lsIagggTilUkhVeyZ1DhmiU9 gbE+aFScyWMA077yFv+4CVisCYLXUK7viJZKunoUks3wtJiUVxYf5drPyeihWaaP smxzywCx5EiA50wC4DlwsUsgeTHksiJZKg8xsScdxjfPJiPmH46HOpClJKtcnPCB r3hauIaofzMRvRPGNRKssMtAoUK5zX8FSvQTOaI/3T1MCvbKiwqRzRV6Y7NEg9Ly oID2K8xA7GVlDBooKTm1AN5JTXJelpS8uTgKiCnWQ1M4RKwW/FsOtnT/s6mnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZ6pCA4UZ7tXsHc3gS2dGXO7MeswHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKP7ShMi2zZGhA/corAbJB9QiKQYpTNsDYc2 DfCDT1vo9cLYTvH4UwZ6ug0NEkLD7xl4sCfjxtcYaXfyB6MLPCra0hqaEgdk3M+u Y/Oi+VQQWEetj5H993HZC+PuWEis9U4QgP7NOX1m0heZppTGn8g1fUMmRbbPXV+4 oD5klDCNNH+MgWI0/HpFkv3XWQ8D0puLmGCmkTCesgJav0djkWfFn7lhEFPGNP0P HW24Q+UIlA0zEb4sqts6aSzZkwKwxsAun05Zrr/IkcpM38N1NnMlHtuqLhxasgCY Cr9QFkt/WHFYVCp7LchoJ4r6s1Dz+/FyJid6MlRfAQWduWmZzQk= -----END CERTIFICATE-----Generated at Mon Oct 26 11:19:59 2026 by rpki-client