$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: 1eT8FA55RLvtSIjvtWc/n8rID+zWHqgtHzO+u8CbgCI= Subject key identifier: 43:3B:DF:37:88:B7:DA:15:D4:A3:22:04:D0:16:63:C4:5C:8C:85:CE Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 56593BE6736DB93D29CA46D3CCAEFD8042F5C260 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 16:04:00 +0000 Manifest this update: Wed 16 Sep 2026 15:59:00 +0000 Manifest next update: Thu 17 Sep 2026 17:14:00 +0000 Files and hashes: 1: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: R3TbriBHzOF4a4x8syYkdUzfnQ3iCvVCAwRTB9syir4=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) 3: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:3b:e6:73:6d:b9:3d:29:ca:46:d3:cc:ae:fd:80:42:f5:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Sep 16 15:59:00 2026 GMT Not After : Sep 17 17:14:00 2026 GMT Subject: CN=433BDF3788B7DA15D4A32204D01663C45C8C85CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1d:d6:d7:7a:16:d7:e9:e5:fc:a5:04:26:f9: 65:7e:43:92:3b:6e:67:8b:53:41:9d:ee:80:6b:03: ef:54:7e:3b:41:ea:03:20:c5:48:e3:44:9e:4f:8e: ff:5a:84:3c:89:17:55:1e:43:9b:77:89:b5:87:91: cf:42:df:07:bf:9a:76:d6:e6:4e:8d:bf:32:ba:ff: 6e:2a:b4:59:98:ab:ec:1e:84:37:39:69:f9:87:55: 7a:76:10:27:04:ff:c1:07:49:1a:31:75:d6:18:f3: 91:81:1f:a7:6e:1b:ef:74:b6:7e:3f:41:90:24:93: 2b:dd:dc:0d:bd:94:dd:de:66:4e:df:c0:59:fd:30: 1a:cf:54:d8:78:31:60:0f:e8:25:43:c3:1d:8e:c4: 9c:24:4c:34:03:2c:43:b7:0f:ca:b7:41:7b:80:b3: 54:8a:8f:d7:89:7c:09:db:42:71:de:50:1c:fe:0b: 20:69:6e:3d:77:23:52:cc:5c:30:d0:67:b1:84:f0: 74:44:39:e6:ef:8e:0a:c3:72:6d:46:51:d8:be:fb: 81:1d:dc:c9:2a:f5:ec:9c:2a:f8:8b:44:dc:93:79: 1a:f9:2d:a3:c0:a8:ab:ab:7d:c5:3b:e4:5d:ee:27: 56:b4:ec:21:0e:04:5c:ac:62:b7:21:61:7f:21:62: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3B:DF:37:88:B7:DA:15:D4:A3:22:04:D0:16:63:C4:5C:8C:85:CE X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0b:59:32:bb:d7:b3:36:98:4d:ed:8e:7a:61:a9:9a:2c:9a: ea:94:d0:01:4c:75:8f:33:1b:9c:96:6f:11:9b:45:e5:a4:43: 39:9e:c3:ac:23:36:2e:4b:8f:8b:d5:33:7d:96:e8:a0:fa:62: d2:f6:ea:fa:0d:dd:4c:e9:88:bd:54:fb:45:13:e3:8a:06:79: 68:b3:6d:16:36:2b:27:12:75:7a:fe:10:b9:04:e7:2f:74:5f: e8:65:3d:97:05:67:86:7d:2d:7c:99:80:e0:b8:70:21:82:81: 67:0a:61:50:0d:b4:a4:7c:a3:f3:4f:16:f2:b1:79:2e:28:4c: e4:73:70:ab:7b:ee:e7:6f:52:a0:68:ef:56:6d:b1:f5:c2:35: 88:bd:9e:80:1e:b8:42:bf:ca:10:72:b5:ce:0a:72:05:7b:5e: ce:a4:68:12:5f:e4:bb:b1:7f:16:84:6a:2a:d5:6c:b0:1b:1c: 26:36:85:c7:6f:31:15:14:22:fe:31:b2:06:d0:a4:25:98:55: 60:75:ef:bf:72:9f:5d:19:8c:ef:73:6a:fd:2a:26:a7:28:aa: 67:7e:40:74:2f:2d:6f:b7:fd:53:9c:36:2f:a9:f3:3f:16:88: cd:e4:54:c2:8f:35:bf:a7:35:67:b0:1e:19:9d:ac:ce:73:e6: 64:8d:6a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlk75nNtuT0pykbTzK79gEL1wmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA5MTYxNTU5MDBaFw0yNjA5MTcxNzE0MDBaMDMxMTAvBgNV BAMTKDQzM0JERjM3ODhCN0RBMTVENEEzMjIwNEQwMTY2M0M0NUM4Qzg1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0HdbXehbX6eX8pQQm+WV+Q5I7 bmeLU0Gd7oBrA+9UfjtB6gMgxUjjRJ5Pjv9ahDyJF1UeQ5t3ibWHkc9C3we/mnbW 5k6NvzK6/24qtFmYq+wehDc5afmHVXp2ECcE/8EHSRoxddYY85GBH6duG+90tn4/ QZAkkyvd3A29lN3eZk7fwFn9MBrPVNh4MWAP6CVDwx2OxJwkTDQDLEO3D8q3QXuA s1SKj9eJfAnbQnHeUBz+CyBpbj13I1LMXDDQZ7GE8HREOebvjgrDcm1GUdi++4Ed 3Mkq9eycKviLRNyTeRr5LaPAqKurfcU75F3uJ1a07CEOBFysYrchYX8hYpr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQzvfN4i32hXUoyIE0BZjxFyMhc4wHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoLWTK717M2mE3tjnphqZosmuqU0AFMdY8z G5yWbxGbReWkQzmew6wjNi5Lj4vVM32W6KD6YtL26voN3UzpiL1U+0UT44oGeWiz bRY2KycSdXr+ELkE5y90X+hlPZcFZ4Z9LXyZgOC4cCGCgWcKYVANtKR8o/NPFvKx eS4oTORzcKt77udvUqBo71ZtsfXCNYi9noAeuEK/yhBytc4KcgV7Xs6kaBJf5Lux fxaEairVbLAbHCY2hcdvMRUUIv4xsgbQpCWYVWB1779yn10ZjO9zav0qJqcoqmd+ QHQvLW+3/VOcNi+p8z8WiM3kVMKPNb+nNWewHhmdrM5z5mSNavs= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:14 2026 by rpki-client