$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: WR4FiH8ygfRkY3nechtKFpvO4j0YheV/5O66yKRbltA= Subject key identifier: 12:FC:F5:A1:30:B5:4C:B3:4A:13:12:74:25:E7:F8:40:9E:F1:76:1A Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 6DF1F54CF93A03A81F62D5598E14EED648956A75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: 60 Signing time: Sun 12 Jul 2026 23:48:34 +0000 Manifest this update: Sun 12 Jul 2026 23:43:34 +0000 Manifest next update: Tue 14 Jul 2026 01:20:34 +0000 Files and hashes: 1: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: VvcY6DONFoLvmj7fdcAClqss2oW8N6He7Ik2KnGGh+U=) 2: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 4: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 5: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 01:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f1:f5:4c:f9:3a:03:a8:1f:62:d5:59:8e:14:ee:d6:48:95:6a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Jul 12 23:43:34 2026 GMT Not After : Jul 14 01:20:34 2026 GMT Subject: CN=12FCF5A130B54CB34A13127425E7F8409EF1761A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a5:27:25:85:0e:c0:d4:a8:f5:4b:82:84:44: 1d:55:9d:15:28:72:c9:5b:7f:a6:e0:06:01:5b:37: 8c:86:24:07:34:a5:28:83:86:a0:bb:6e:78:9a:9f: f1:34:ad:6d:77:68:52:e9:79:8b:02:e2:19:11:cd: 7b:e9:a9:a2:8c:a9:f7:6b:6f:46:2b:e0:25:10:58: 8d:f7:a2:88:44:e7:00:83:32:9a:50:42:85:d6:39: 62:7a:e9:fe:40:59:63:44:8e:ff:2a:ec:21:74:f9: fc:8a:84:b8:ab:84:7d:ae:f8:0e:08:6a:13:1b:69: 29:20:4c:df:a5:ce:3f:f5:e7:14:41:03:32:d2:47: c6:c5:4f:c9:c2:39:4b:3b:9e:40:4c:2f:da:e1:6a: 36:d4:60:3c:5b:a1:57:fd:2f:ac:a2:7b:f5:ca:b8: e6:8b:94:df:6c:1c:9f:4f:5c:e2:8c:e1:cd:bd:69: 08:51:1c:1c:7c:bc:d4:71:a6:b4:cf:c4:d8:4e:45: b0:61:0b:dc:71:6e:39:b8:c3:74:c8:7f:90:bb:00: 5d:ad:e8:47:5b:a4:28:9e:52:69:d5:1c:d9:c7:e4: 78:ad:d2:72:57:ba:86:ba:10:36:e4:85:9f:bb:5f: 8f:36:c1:1e:16:b7:2e:e9:47:df:5a:78:b6:1e:6d: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FC:F5:A1:30:B5:4C:B3:4A:13:12:74:25:E7:F8:40:9E:F1:76:1A X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:64:aa:01:6f:51:5a:43:d4:35:ef:09:85:a3:0d:82:fb:f9: aa:d9:05:d6:1f:11:29:67:5a:c0:20:c5:b3:1b:47:54:fb:08: 8c:68:fc:f1:45:7d:99:ee:ec:58:c8:c1:00:1b:fa:38:e7:78: d0:ab:24:47:3c:6d:d9:b2:c7:61:a6:19:bd:e8:0d:3b:53:47: a6:06:13:32:a3:43:2a:2e:d7:10:54:a9:96:a5:54:0c:d4:5e: e1:5a:4f:3b:bb:62:4e:37:bb:0d:71:bb:89:e2:f1:33:69:e3: 21:bd:eb:6b:5b:ef:53:e5:03:96:8e:a0:eb:e9:78:f6:99:86: 93:f5:18:04:b5:15:b2:59:c4:19:50:8b:72:d9:2d:94:86:18: 1b:75:ec:5f:63:c0:35:60:27:34:43:08:d0:15:1e:32:2f:54: b3:e9:6a:aa:e9:88:39:2d:16:8c:e0:54:bd:38:8e:d0:d6:ed: 12:55:10:f3:a4:93:0d:04:ae:47:73:3e:0e:49:93:7d:35:1a: c2:55:0d:d5:b4:11:74:01:fa:1f:64:4b:ab:9a:c3:f6:db:12: 12:c2:2a:f1:34:56:1b:b3:62:44:be:c9:f9:4a:d8:6e:a6:50: ce:c7:72:ca:b1:d5:35:be:85:c4:97:de:27:73:ab:c9:dd:da: ee:1f:b8:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfH1TPk6A6gfYtVZjhTu1kiVanUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA3MTIyMzQzMzRaFw0yNjA3MTQwMTIwMzRaMDMxMTAvBgNV BAMTKDEyRkNGNUExMzBCNTRDQjM0QTEzMTI3NDI1RTdGODQwOUVGMTc2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpSclhQ7A1Kj1S4KERB1VnRUo cslbf6bgBgFbN4yGJAc0pSiDhqC7bnian/E0rW13aFLpeYsC4hkRzXvpqaKMqfdr b0Yr4CUQWI33oohE5wCDMppQQoXWOWJ66f5AWWNEjv8q7CF0+fyKhLirhH2u+A4I ahMbaSkgTN+lzj/15xRBAzLSR8bFT8nCOUs7nkBML9rhajbUYDxboVf9L6yie/XK uOaLlN9sHJ9PXOKM4c29aQhRHBx8vNRxprTPxNhORbBhC9xxbjm4w3TIf5C7AF2t 6EdbpCieUmnVHNnH5Hit0nJXuoa6EDbkhZ+7X482wR4Wty7pR99aeLYebcOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvz1oTC1TLNKExJ0Jef4QJ7xdhowHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxkqgFvUVpD1DXvCYWjDYL7+arZBdYfESln WsAgxbMbR1T7CIxo/PFFfZnu7FjIwQAb+jjneNCrJEc8bdmyx2GmGb3oDTtTR6YG EzKjQyou1xBUqZalVAzUXuFaTzu7Yk43uw1xu4ni8TNp4yG962tb71PlA5aOoOvp ePaZhpP1GAS1FbJZxBlQi3LZLZSGGBt17F9jwDVgJzRDCNAVHjIvVLPpaqrpiDkt FozgVL04jtDW7RJVEPOkkw0ErkdzPg5Jk301GsJVDdW0EXQB+h9kS6uaw/bbEhLC KvE0VhuzYkS+yflK2G6mUM7Hcsqx1TW+hcSX3idzq8nd2u4fuHo= -----END CERTIFICATE-----Generated at Mon Jul 13 13:50:20 2026 by rpki-client