$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft File: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft (raw, json) Hash identifier: ojpaGK1aQQRHma8Qgi7nbWnOx5ISKhjTcilXauFLCXI= Subject key identifier: 55:10:FF:66:BB:92:9D:E5:FE:23:85:F1:5C:E8:B5:1A:3E:D7:0E:7F Authority key identifier: 33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D Certificate issuer: /CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Certificate serial: 3512C3692C2727066B2F722BE2AC20E2D7C27C56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft Manifest number: EB Signing time: Mon 26 Oct 2026 11:06:04 +0000 Manifest this update: Mon 26 Oct 2026 11:01:04 +0000 Manifest next update: Tue 27 Oct 2026 12:58:04 +0000 Files and hashes: 1: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: Pp8IAqZslv9JrsHvh5t4K1Xf7pozFAooFyaeWpnY8Hw=) 2: 33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl (hash: LANRg3b0G4hBarXme3BG+GEquUxhg0ToB/v7L44OepY=) 3: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: U02e5KxNF9MHIRapu80B9THLjIPZwCj+D7pGERVzSdk=) 4: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: suxBsM49rj/B+/QbrRHASWUhsJL/fsUqfhAd7EFeilQ=) 5: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: uqKW3vXwMrHK/2SgTQdiTOjsX9kzPieFPKMfbMm8/NQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:12:c3:69:2c:27:27:06:6b:2f:72:2b:e2:ac:20:e2:d7:c2:7c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D Validity Not Before: Oct 26 11:01:04 2026 GMT Not After : Oct 27 12:58:04 2026 GMT Subject: CN=5510FF66BB929DE5FE2385F15CE8B51A3ED70E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:9a:72:25:52:2e:3a:b1:18:0e:19:41:21: ff:b9:04:fe:77:82:34:0e:6b:13:71:71:36:f0:58: aa:8a:de:c6:d6:5a:2f:1c:0a:b7:97:5f:f4:78:96: 09:2a:44:02:e7:74:84:7b:6e:4e:a5:df:96:f8:a8: a6:48:cb:26:5d:e6:c4:12:0a:44:49:81:ca:24:36: 58:38:3c:07:48:c2:60:0c:ef:f8:be:38:17:c1:4a: fa:9f:ed:af:ad:2c:f0:9c:7a:85:54:5d:04:e3:4b: 16:41:e1:c5:77:3d:17:aa:a3:35:73:3f:98:6d:c6: b0:5f:df:c8:02:01:8c:da:4f:bd:fa:1b:65:ae:c4: 42:48:aa:f4:37:48:4a:21:42:ca:38:fd:82:14:fc: be:0a:15:22:f0:14:97:c3:ca:d4:57:8a:85:80:f6: 51:24:da:ac:83:9f:7f:5c:64:87:ab:38:71:40:89: d8:bd:74:9e:69:51:8c:b9:76:d6:1a:04:9f:77:35: 70:25:ba:62:36:b4:c2:5a:65:f2:bc:db:06:93:84: d0:41:d2:92:2d:32:2f:47:2b:8f:50:11:c0:a7:1d: 1a:6c:67:83:d6:99:1e:d7:b5:52:34:aa:87:e9:fa: a4:96:18:fa:34:f6:66:74:ea:46:48:82:10:56:de: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:10:FF:66:BB:92:9D:E5:FE:23:85:F1:5C:E8:B5:1A:3E:D7:0E:7F X509v3 Authority Key Identifier: keyid:33:DC:D8:55:DE:6E:86:6A:83:A5:70:AB:A8:A1:DE:A5:A6:E3:0E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/33DCD855DE6E866A83A570ABA8A1DEA5A6E30E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a2:e0:e7:27:ad:d6:7e:05:78:17:42:d3:bc:b1:65:cd:0f: 7f:3c:eb:ea:5d:72:02:a5:5d:b5:68:01:30:b8:dc:1e:30:bf: 59:b1:cb:d3:66:83:50:d3:f6:b3:51:8d:8d:8b:9c:f7:6f:98: ed:6c:f4:68:67:57:34:7f:69:76:02:6d:52:81:2a:93:cc:55: 73:13:4d:1d:48:41:f2:a6:6e:0f:9f:ee:70:7b:ac:9f:75:f0: 0d:b9:7b:31:38:6f:57:11:63:35:54:74:0b:bd:c5:11:03:23: eb:b3:53:ff:5f:8f:e5:ee:c8:c2:68:43:1d:1e:cc:05:bc:a1: 03:21:8e:56:37:18:05:e2:fa:2d:df:f5:bf:50:6b:88:47:da: c7:49:44:e1:df:a5:07:72:ef:89:8c:1c:9f:16:01:c1:52:8a: 23:bc:f6:e8:64:7d:89:38:0c:06:07:49:9f:56:08:36:6b:3e: 37:94:fc:4f:e6:c5:d0:11:2d:ff:a1:36:d6:ae:0a:7e:4a:15: 30:a6:96:af:f7:3f:3c:07:63:31:56:9d:23:bb:2b:f6:34:6e: d9:fa:4d:b5:c6:01:71:32:ea:7a:3f:c2:0c:78:06:f6:5f:ed: 92:7f:38:0e:59:97:18:a8:75:1f:16:bf:1d:cc:79:0b:21:34: cd:1d:e9:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRLDaSwnJwZrL3Ir4qwg4tfCfFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURFQTVB NkUzMEU0RDAeFw0yNjEwMjYxMTAxMDRaFw0yNjEwMjcxMjU4MDRaMDMxMTAvBgNV BAMTKDU1MTBGRjY2QkI5MjlERTVGRTIzODVGMTVDRThCNTFBM0VENzBFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QZpyJVIuOrEYDhlBIf+5BP53 gjQOaxNxcTbwWKqK3sbWWi8cCreXX/R4lgkqRALndIR7bk6l35b4qKZIyyZd5sQS CkRJgcokNlg4PAdIwmAM7/i+OBfBSvqf7a+tLPCceoVUXQTjSxZB4cV3PReqozVz P5htxrBf38gCAYzaT736G2WuxEJIqvQ3SEohQso4/YIU/L4KFSLwFJfDytRXioWA 9lEk2qyDn39cZIerOHFAidi9dJ5pUYy5dtYaBJ93NXAlumI2tMJaZfK82waThNBB 0pItMi9HK49QEcCnHRpsZ4PWmR7XtVI0qofp+qSWGPo09mZ06kZIghBW3hEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVRD/ZruSneX+I4XxXOi1Gj7XDn8wHwYDVR0j BBgwFoAUM9zYVd5uhmqDpXCrqKHepabjDk0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmY1NDJiYzQtNzRkYy00NWRkLWI2NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVE RTZFODY2QTgzQTU3MEFCQThBMURFQTVBNkUzMEU0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zM0RDRDg1NURFNkU4NjZBODNBNTcwQUJBOEExREVBNUE2RTMw RTRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvMzNEQ0Q4NTVERTZFODY2QTgzQTU3MEFCQThBMURF QTVBNkUzMEU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyi4OcnrdZ+BXgXQtO8sWXND3886+pdcgKl XbVoATC43B4wv1mxy9Nmg1DT9rNRjY2LnPdvmO1s9GhnVzR/aXYCbVKBKpPMVXMT TR1IQfKmbg+f7nB7rJ918A25ezE4b1cRYzVUdAu9xREDI+uzU/9fj+XuyMJoQx0e zAW8oQMhjlY3GAXi+i3f9b9Qa4hH2sdJROHfpQdy74mMHJ8WAcFSiiO89uhkfYk4 DAYHSZ9WCDZrPjeU/E/mxdARLf+hNtauCn5KFTCmlq/3PzwHYzFWnSO7K/Y0btn6 TbXGAXEy6no/wgx4BvZf7ZJ/OA5ZlxiodR8Wvx3MeQshNM0d6dw= -----END CERTIFICATE-----Generated at Mon Oct 26 16:56:46 2026 by rpki-client