$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: bV1zRrEANI+ht1EXm05b6128kMqlen2d953drRmZH3E= Subject key identifier: 97:5B:3C:4F:E1:1E:24:25:09:37:7E:AF:E3:C7:45:C1:F1:8C:ED:43 Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 4F2F79DF7634A12D5872711EF43792A9098B0B98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: 14 Signing time: Sat 16 May 2026 13:46:05 +0000 Manifest this update: Sat 16 May 2026 13:41:05 +0000 Manifest next update: Sun 17 May 2026 16:32:05 +0000 Files and hashes: 1: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 2: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: y7dBUXDMrrNYFUI/Qw3Z9lxq2qa88m+yK0rvVqUY57o=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 4: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) 5: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2f:79:df:76:34:a1:2d:58:72:71:1e:f4:37:92:a9:09:8b:0b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: May 16 13:41:05 2026 GMT Not After : May 17 16:32:05 2026 GMT Subject: CN=975B3C4FE11E242509377EAFE3C745C1F18CED43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:0d:f3:c9:45:51:e7:3a:d4:14:33:c1:2e: 80:5b:99:52:98:0b:96:5b:f5:d7:e2:41:0e:d6:3a: 1c:bb:5c:f4:ec:c7:ed:5c:84:bd:22:5d:91:1d:03: cb:93:42:cf:7a:ee:2e:fc:ca:76:4b:27:84:c0:46: 14:0c:db:a4:3f:16:d3:5e:85:dd:6c:2c:82:1f:ec: 19:f7:5c:c8:a7:f4:0b:97:35:56:ad:4d:4f:2b:74: 3b:68:87:2b:e7:97:56:28:10:42:ea:f2:d2:93:a3: a7:ae:2f:65:52:fa:cf:9e:f0:5b:cf:79:56:94:3a: 98:91:07:67:bb:c4:5a:67:d0:f5:9d:02:73:aa:c7: e8:4c:6b:3e:50:47:02:41:f4:43:59:85:d3:3a:3e: fd:98:cf:8d:8a:1e:24:d1:0e:d8:9a:8a:2a:19:72: ec:ee:13:d8:7c:93:e9:44:6b:91:63:af:cc:d0:73: b6:9e:b0:b4:c7:2a:44:d4:2e:05:19:6f:bd:6f:11: 68:dc:ae:01:6d:f9:24:c4:95:31:ab:e3:39:48:79: 30:7b:8a:c6:48:12:db:e4:fe:38:5e:fc:ae:2b:fd: 0d:13:7d:71:a9:42:f6:6f:0d:64:f9:9f:82:b2:e2: a1:67:f9:75:74:60:c7:b4:26:57:00:58:d8:e6:96: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:3C:4F:E1:1E:24:25:09:37:7E:AF:E3:C7:45:C1:F1:8C:ED:43 X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:dd:6b:8d:c8:f9:98:88:58:15:fc:0a:ca:71:c8:e1:7e:92: 47:3c:bd:93:7f:4a:bf:30:a7:0f:5d:b0:ca:85:dc:c6:d5:02: 04:98:03:2a:37:53:72:2d:53:bb:33:9b:83:fe:ad:74:20:22: d8:4e:03:af:c7:a6:aa:5f:5a:39:ca:85:67:06:b1:ae:c7:a4: e3:2f:a1:c8:1f:b0:87:88:c9:af:da:4d:61:54:0f:94:d8:a0: df:30:64:27:91:2b:c1:e0:27:5f:e8:79:4c:2f:89:18:43:ba: 1d:f1:2a:da:01:74:35:f5:95:6f:c0:2d:6e:3d:60:5a:11:ee: 5c:c5:ab:87:d2:a2:70:4e:db:69:31:1c:26:68:14:e0:d1:aa: 5a:93:5a:84:2b:18:2a:24:94:2c:38:4b:d2:e7:7a:e8:3e:ba: a3:0b:c0:e2:f2:eb:a4:88:ff:49:1e:04:39:29:97:8a:d2:b9: 2e:fa:e5:c4:c7:70:d2:0e:f2:79:8e:d7:d0:45:cf:3f:13:7d: 21:94:a0:59:27:b3:5c:21:67:00:82:b1:ce:28:34:a2:2b:0c: 9f:fe:43:c5:40:ab:3b:f9:15:b3:ca:39:0f:2f:5e:ab:91:23: 6d:fd:28:44:53:9a:33:63:70:ba:26:ab:90:81:f4:ae:e3:0a: e2:c6:a4:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTy9533Y0oS1YcnEe9DeSqQmLC5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA1MTYxMzQxMDVaFw0yNjA1MTcxNjMyMDVaMDMxMTAvBgNV BAMTKDk3NUIzQzRGRTExRTI0MjUwOTM3N0VBRkUzQzc0NUMxRjE4Q0VENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekQ3zyUVR5zrUFDPBLoBbmVKY C5Zb9dfiQQ7WOhy7XPTsx+1chL0iXZEdA8uTQs967i78ynZLJ4TARhQM26Q/FtNe hd1sLIIf7Bn3XMin9AuXNVatTU8rdDtohyvnl1YoEELq8tKTo6euL2VS+s+e8FvP eVaUOpiRB2e7xFpn0PWdAnOqx+hMaz5QRwJB9ENZhdM6Pv2Yz42KHiTRDtiaiioZ cuzuE9h8k+lEa5Fjr8zQc7aesLTHKkTULgUZb71vEWjcrgFt+STElTGr4zlIeTB7 isZIEtvk/jhe/K4r/Q0TfXGpQvZvDWT5n4Ky4qFn+XV0YMe0JlcAWNjmluK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl1s8T+EeJCUJN36v48dFwfGM7UMwHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXda43I+ZiIWBX8CspxyOF+kkc8vZN/Sr8w pw9dsMqF3MbVAgSYAyo3U3ItU7szm4P+rXQgIthOA6/HpqpfWjnKhWcGsa7HpOMv ocgfsIeIya/aTWFUD5TYoN8wZCeRK8HgJ1/oeUwviRhDuh3xKtoBdDX1lW/ALW49 YFoR7lzFq4fSonBO22kxHCZoFODRqlqTWoQrGCoklCw4S9Lneug+uqMLwOLy66SI /0keBDkpl4rSuS765cTHcNIO8nmO19BFzz8TfSGUoFkns1whZwCCsc4oNKIrDJ/+ Q8VAqzv5FbPKOQ8vXquRI239KERTmjNjcLomq5CB9K7jCuLGpNU= -----END CERTIFICATE-----Generated at Sat May 16 20:31:20 2026 by rpki-client