$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: CF7j00N1XM6FvMlQzg7AbVWYjHD2No36tvPLztXVlhA= Subject key identifier: A4:E2:C4:48:99:B8:8F:74:20:8E:BC:33:FE:F0:BB:8E:35:9D:83:0F Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 54838F250713107A2FA9F007E7F6451CDE783003 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 02:03:08 +0000 Manifest this update: Thu 27 Aug 2026 01:58:08 +0000 Manifest next update: Fri 28 Aug 2026 05:38:08 +0000 Files and hashes: 1: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 2: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 3: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) 4: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: AcOMxoGq8bsjVt1AhCX9KNgb/aJWd696hi4f398p3CE=) 5: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:83:8f:25:07:13:10:7a:2f:a9:f0:07:e7:f6:45:1c:de:78:30:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Aug 27 01:58:08 2026 GMT Not After : Aug 28 05:38:08 2026 GMT Subject: CN=A4E2C44899B88F74208EBC33FEF0BB8E359D830F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:f8:f5:66:e4:33:c2:fe:72:96:7f:b2:5e: 4e:62:93:b6:f1:e5:01:27:96:ee:43:25:56:3d:49: b2:17:3d:68:fd:04:f3:8e:67:81:7e:82:f4:30:5f: 16:c9:01:63:8c:0f:de:b9:0f:ef:2e:fa:f9:ec:88: 9b:61:6e:15:30:e4:c8:a6:20:c0:f5:25:6b:ed:84: ca:28:16:dd:e0:14:1d:03:e6:02:11:74:e1:dc:81: 07:b0:95:21:a1:b6:07:73:c8:17:ff:62:ef:32:36: 0f:d7:0e:c9:73:a7:99:a2:0e:0b:70:c7:a7:15:1a: 10:d9:e1:65:00:96:e0:59:6b:f9:29:c9:ce:6d:2c: ad:61:11:55:6b:46:87:a1:e9:4a:d6:c6:79:33:b9: 4f:ce:19:38:bf:f5:d7:f9:e6:b7:27:5c:47:10:2a: 2f:02:cb:98:ec:ee:56:af:6e:ed:4e:6f:07:f7:3b: 26:98:cd:af:92:7f:a9:bb:2d:6a:34:99:33:50:3a: 73:de:92:b6:a1:d7:c8:53:27:f5:4c:54:ff:ef:ce: fc:29:1c:c7:b0:2c:ec:84:d8:7a:91:e7:d6:fa:ed: 04:10:67:7e:62:34:48:23:8b:a9:10:0e:ca:8f:b9: 55:d7:5d:76:f6:bd:23:de:44:8c:0e:8d:30:a9:3c: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E2:C4:48:99:B8:8F:74:20:8E:BC:33:FE:F0:BB:8E:35:9D:83:0F X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:10:06:e1:a5:04:77:ca:7a:45:4b:6a:17:fc:1f:d2:e1: c8:7f:0c:e0:e2:d2:fe:a3:e5:ea:64:68:e5:5b:89:57:9f:9b: dc:4d:d7:67:f4:79:77:6d:bb:8f:0b:ca:56:78:29:28:47:18: 3d:f2:8c:19:c1:49:0c:ac:04:da:37:12:42:e5:1d:79:7e:1a: 94:4d:e4:d3:ad:dc:1e:63:33:e5:80:73:f0:fc:b9:94:9b:e1: af:46:94:31:85:66:51:3b:d5:a4:24:97:67:6a:8d:3c:9a:27: b7:61:3f:32:05:c9:f4:0d:f1:9a:c9:f1:5f:f8:ea:24:da:25: d5:3e:f0:8e:8b:28:8d:0e:df:d6:c0:f4:c4:c9:05:37:bb:99: c2:81:1c:de:6d:2b:0e:b5:e0:91:96:0f:d0:3c:06:59:9e:45: 3c:c3:bc:13:94:5f:f9:83:1e:cb:1c:96:a6:4a:88:9a:58:59: 72:17:32:91:b0:3d:52:27:5e:47:6b:f5:61:73:bc:99:0d:bc: a7:bf:0c:c7:9e:98:ea:8b:5b:64:85:e7:b8:e3:75:ba:16:3f: 67:26:10:09:96:a4:c5:e1:16:ff:00:5f:fb:b8:9a:f6:76:d0: 6d:14:9d:31:f9:c7:e0:86:bb:ca:d1:9c:ac:73:87:63:ff:8f: e0:15:a8:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIOPJQcTEHovqfAH5/ZFHN54MAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjA4MjcwMTU4MDhaFw0yNjA4MjgwNTM4MDhaMDMxMTAvBgNV BAMTKEE0RTJDNDQ4OTlCODhGNzQyMDhFQkMzM0ZFRjBCQjhFMzU5RDgzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0fj1ZuQzwv5yln+yXk5ik7bx 5QEnlu5DJVY9SbIXPWj9BPOOZ4F+gvQwXxbJAWOMD965D+8u+vnsiJthbhUw5Mim IMD1JWvthMooFt3gFB0D5gIRdOHcgQewlSGhtgdzyBf/Yu8yNg/XDslzp5miDgtw x6cVGhDZ4WUAluBZa/kpyc5tLK1hEVVrRoeh6UrWxnkzuU/OGTi/9df55rcnXEcQ Ki8Cy5js7lavbu1Obwf3OyaYza+Sf6m7LWo0mTNQOnPekrah18hTJ/VMVP/vzvwp HMewLOyE2HqR59b67QQQZ35iNEgji6kQDsqPuVXXXXb2vSPeRIwOjTCpPK4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOLESJm4j3Qgjrwz/vC7jjWdgw8wHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+HEAbhpQR3ynpFS2oX/B/S4ch/DODi0v6j 5epkaOVbiVefm9xN12f0eXdtu48LylZ4KShHGD3yjBnBSQysBNo3EkLlHXl+GpRN 5NOt3B5jM+WAc/D8uZSb4a9GlDGFZlE71aQkl2dqjTyaJ7dhPzIFyfQN8ZrJ8V/4 6iTaJdU+8I6LKI0O39bA9MTJBTe7mcKBHN5tKw614JGWD9A8BlmeRTzDvBOUX/mD HssclqZKiJpYWXIXMpGwPVInXkdr9WFzvJkNvKe/DMeemOqLW2SF57jjdboWP2cm EAmWpMXhFv8AX/u4mvZ20G0UnTH5x+CGu8rRnKxzh2P/j+AVqGY= -----END CERTIFICATE-----Generated at Thu Aug 27 18:23:29 2026 by rpki-client