$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json) Hash identifier: 3QlLQACBzYIC+/JwLMAM6K/WFsmQ88rnQ1kAsHex/jI= Subject key identifier: C8:2A:D4:35:E4:8B:66:3C:DF:91:D0:7C:FD:72:2F:E0:6A:FA:BB:EF Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Certificate serial: 58081289D610F627D5EA955CADF708AA146964DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft Manifest number: EF Signing time: Wed 28 Oct 2026 08:10:22 +0000 Manifest this update: Wed 28 Oct 2026 08:05:22 +0000 Manifest next update: Thu 29 Oct 2026 09:17:22 +0000 Files and hashes: 1: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: yyXLotHMvNxWitW09ZBKYQrjzug3Ia/CZodWWfnFAn8=) 2: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=) 3: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=) 4: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=) 5: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=) 6: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:08:12:89:d6:10:f6:27:d5:ea:95:5c:ad:f7:08:aa:14:69:64:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Validity Not Before: Oct 28 08:05:22 2026 GMT Not After : Oct 29 09:17:22 2026 GMT Subject: CN=C82AD435E48B663CDF91D07CFD722FE06AFABBEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:29:20:c1:04:ba:fd:f5:18:f1:09:d4:f5: 5d:b7:a0:c6:61:c1:6d:39:b5:9b:32:d1:53:73:d8: e3:04:cc:8b:32:61:89:51:ef:43:d9:ca:aa:2f:02: 96:fa:a5:c4:e9:69:5a:bd:22:cf:61:33:a2:58:13: 23:c3:28:2c:15:35:3c:bc:61:3b:57:8f:db:47:cc: 6d:90:2f:7b:cf:e4:49:8c:38:66:8a:d3:e5:03:ce: 51:a3:e4:6e:1c:49:94:31:00:5a:95:05:ba:f5:f1: e9:e1:79:cd:3f:c4:60:19:72:72:a6:5d:7e:01:f6: 85:b3:2b:55:a0:da:41:08:3b:63:1b:8d:a0:58:3c: 47:40:9e:99:de:2e:53:1f:51:b1:cb:34:cd:a6:c3: 62:7b:27:e0:65:f9:6a:4a:80:c4:c0:67:fa:07:ca: c5:e0:32:cb:e6:4c:33:7a:60:e6:3d:d2:7f:79:de: 58:12:d4:6f:ea:0c:8a:14:24:71:84:19:0a:b9:8c: 24:8e:2e:b4:c8:84:3b:6f:13:4c:5d:21:c1:ca:33: ed:81:69:69:5b:34:72:01:a9:98:e7:cd:17:20:a7: b4:7e:6e:36:7c:2f:27:b6:c6:eb:de:05:95:e3:2a: 20:7b:de:0c:71:a8:96:15:10:d2:66:85:33:a3:29: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:D4:35:E4:8B:66:3C:DF:91:D0:7C:FD:72:2F:E0:6A:FA:BB:EF X509v3 Authority Key Identifier: keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4e:f3:00:55:e7:6c:40:0b:39:f0:4c:6a:cd:47:9c:6f:8c: eb:ab:86:88:1c:7c:6e:ba:83:89:c4:b6:67:f0:38:fc:98:94: 7a:c0:93:03:1d:a4:82:cc:b0:be:11:bb:5b:ce:37:e7:e0:dd: b1:32:34:de:e1:c8:86:a4:5c:d0:a5:67:7c:7b:df:ad:dc:28: 91:ca:a8:e7:58:26:c8:60:ad:d6:6d:14:6d:e4:e4:78:7b:a2: ba:0c:a7:02:9e:d8:e6:d8:0d:69:d3:3a:ce:46:54:4d:7e:3a: dc:d9:03:a7:71:4a:c4:e6:5c:1c:e4:f5:82:df:ec:c3:4b:19: 7e:1f:19:bf:98:5b:d2:9d:c9:85:04:6b:7d:49:a3:59:89:65: f1:e6:85:76:d4:8c:37:72:66:9c:f1:62:ec:73:65:97:ea:4e: 04:22:a3:81:f4:45:62:3e:b9:de:1e:9a:54:72:39:14:f8:58: 73:40:c0:fa:22:0b:ef:39:5a:50:ea:3c:12:c9:ff:56:36:b8: 7d:e6:34:91:34:df:66:b1:ad:a2:b2:93:df:44:7d:6a:25:79: 0f:ca:d9:39:24:a2:a0:7d:44:89:0b:8f:50:1e:e4:8e:d1:65: 46:21:4b:88:8f:cd:44:84:c5:c4:74:89:3f:74:23:ab:ba:85: 85:04:f6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAgSidYQ9ifV6pVcrfcIqhRpZN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3 NTAxQ0U2RTAeFw0yNjEwMjgwODA1MjJaFw0yNjEwMjkwOTE3MjJaMDMxMTAvBgNV BAMTKEM4MkFENDM1RTQ4QjY2M0NERjkxRDA3Q0ZENzIyRkUwNkFGQUJCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iSkgwQS6/fUY8QnU9V23oMZh wW05tZsy0VNz2OMEzIsyYYlR70PZyqovApb6pcTpaVq9Is9hM6JYEyPDKCwVNTy8 YTtXj9tHzG2QL3vP5EmMOGaK0+UDzlGj5G4cSZQxAFqVBbr18enhec0/xGAZcnKm XX4B9oWzK1Wg2kEIO2MbjaBYPEdAnpneLlMfUbHLNM2mw2J7J+Bl+WpKgMTAZ/oH ysXgMsvmTDN6YOY90n953lgS1G/qDIoUJHGEGQq5jCSOLrTIhDtvE0xdIcHKM+2B aWlbNHIBqZjnzRcgp7R+bjZ8Lye2xuveBZXjKiB73gxxqJYVENJmhTOjKfJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCrUNeSLZjzfkdB8/XIv4Gr6u+8wHwYDVR0j BBgwFoAUezPvSbkSrvKhpRfCysk9DnUBzm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ1NDcxMDQtOTM5ZS00MGUzLThmYzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlC OTEyQUVGMkExQTUxN0MyQ0FDOTNEMEU3NTAxQ0U2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjMzRUY0OUI5MTJBRUYyQTFBNTE3QzJDQUM5M0QwRTc1MDFD RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvN0IzM0VGNDlCOTEyQUVGMkExQTUxN0MyQ0FDOTNE MEU3NTAxQ0U2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlO8wBV52xACznwTGrNR5xvjOurhogcfG66 g4nEtmfwOPyYlHrAkwMdpILMsL4Ru1vON+fg3bEyNN7hyIakXNClZ3x7363cKJHK qOdYJshgrdZtFG3k5Hh7oroMpwKe2ObYDWnTOs5GVE1+OtzZA6dxSsTmXBzk9YLf 7MNLGX4fGb+YW9KdyYUEa31Jo1mJZfHmhXbUjDdyZpzxYuxzZZfqTgQio4H0RWI+ ud4emlRyORT4WHNAwPoiC+85WlDqPBLJ/1Y2uH3mNJE032axraKyk99EfWoleQ/K 2TkkoqB9RIkLj1Ae5I7RZUYhS4iPzUSExcR0iT90I6u6hYUE9rQ= -----END CERTIFICATE-----Generated at Wed Oct 28 11:38:16 2026 by rpki-client