$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft File: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft (raw, json) Hash identifier: bKhAxxzIRrfns0KAcq6H/SWbG4Iyzl4HAX7YnUACADM= Subject key identifier: 3E:74:5B:8D:6C:21:F3:8B:FC:38:D2:84:87:0B:65:F5:FA:87:53:3D Authority key identifier: 33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF Certificate issuer: /CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Certificate serial: 489847D94FE779D4B7BE8D27BC8546240C2B42F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft Manifest number: DC Signing time: Tue 13 Oct 2026 09:27:24 +0000 Manifest this update: Tue 13 Oct 2026 09:22:24 +0000 Manifest next update: Wed 14 Oct 2026 12:53:24 +0000 Files and hashes: 1: 3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (hash: 5WXzkwnRjAabSJmPonFxbSLdJu3Rkyb5SUPqv4YS6mc=) 2: 333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl (hash: /V86GnDAuBCK8/GJRgnMRthmjVptFd+JvIltj6UqOyY=) 3: 3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (hash: nlxlV3qQfxFiozQP6dQce25XVv+jgI/sDm2SO5XtMkQ=) 4: 3130332e3135332e3139312e302f32342d3234203d3e20313430343639.roa (hash: 3MtPZsgaG3GGHW0Fsi5xI0TV6YGTe2Jk4x3Wr8wYof4=) 5: 323430363a343934303a3a2f33322d3332203d3e20313430343639.roa (hash: CdvnxidTj9NKp9GFbkdgBl3gm2CzWnwrbCqP/b1TIA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 12:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:98:47:d9:4f:e7:79:d4:b7:be:8d:27:bc:85:46:24:0c:2b:42:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333C12DD288104B6B3C5A2CAB606BF5508F4DDDF Validity Not Before: Oct 13 09:22:24 2026 GMT Not After : Oct 14 12:53:24 2026 GMT Subject: CN=3E745B8D6C21F38BFC38D284870B65F5FA87533D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:8e:36:d2:5d:80:40:ba:8f:31:c6:3c:f5: 22:7a:92:11:50:5c:c8:9a:80:e3:a8:5a:4a:60:fe: 4d:52:45:81:f2:12:c7:71:b4:9c:b4:1e:4e:e5:8f: b3:08:63:f5:b5:f4:35:63:09:25:77:c7:0a:61:56: b5:0f:ee:2e:03:4a:1c:8d:ab:d7:b9:be:df:93:88: 0b:47:90:0b:35:a2:a6:22:ac:a8:76:4a:52:21:99: 88:8c:93:8b:95:e7:7b:98:5e:c4:15:39:51:3e:ff: de:c8:7e:c8:3a:52:bc:02:12:aa:28:26:d2:68:32: e3:3f:e6:ca:01:8b:96:77:15:77:84:f9:8a:06:eb: ef:47:81:18:96:4f:73:96:eb:e2:4f:cf:2c:db:28: cd:ef:e0:1e:b9:69:12:8d:9f:83:d1:2c:d0:84:18: 86:31:51:ad:fa:6a:f2:6d:59:0b:7c:f7:d1:be:bd: 92:85:fe:3e:81:e0:b5:47:2f:f5:4c:41:6d:ba:99: 32:0e:a1:13:ab:f6:64:da:7f:04:f3:13:52:fe:0e: b5:8f:93:01:4e:b4:4d:3a:a1:b0:aa:c4:fb:b5:61: 75:90:88:e5:cc:da:e4:87:d7:bf:e4:94:11:2d:80: fd:de:c2:0e:f0:61:3b:51:28:c2:2e:44:43:af:1f: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:74:5B:8D:6C:21:F3:8B:FC:38:D2:84:87:0B:65:F5:FA:87:53:3D X509v3 Authority Key Identifier: keyid:33:3C:12:DD:28:81:04:B6:B3:C5:A2:CA:B6:06:BF:55:08:F4:DD:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/333C12DD288104B6B3C5A2CAB606BF5508F4DDDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:50:4b:a4:4a:42:00:43:8c:62:26:18:0b:92:68:54:9c:40: ec:f8:8c:71:4c:ac:a8:f0:e4:69:87:e2:12:28:79:d4:02:af: 72:93:93:cb:af:14:ef:ac:6e:0b:76:b7:64:1f:e0:c4:77:61: 07:2f:1b:a8:47:74:5d:ba:c6:41:99:c1:e4:d2:9b:2a:5b:0b: b0:4c:08:d5:26:8f:c7:e1:08:53:ac:9b:44:06:89:f7:e8:b0: 19:dd:a1:67:98:03:13:61:ce:b7:08:cc:4a:87:e1:99:a0:29: 4e:e7:ab:c7:be:50:a9:be:d0:be:8a:96:1d:0f:0b:11:7a:ac: 93:ef:4b:1f:25:2b:a3:13:e4:3d:28:d0:e9:23:2c:ab:77:60: 3e:aa:81:32:70:30:8c:cd:7e:1d:5a:00:39:7a:fd:dd:df:ad: 41:02:7b:0b:77:f8:ae:6d:92:63:9b:8f:83:d2:91:7b:7b:58: 66:bb:64:6e:dc:c8:da:16:10:01:d0:c1:03:b7:0a:f6:8c:da: 6f:db:63:0f:d9:be:ae:c9:0c:a9:2d:94:cf:fb:cf:bc:b6:be: 18:39:d7:9b:01:e9:21:10:15:86:c8:98:56:54:d3:38:7a:14: ef:d9:e2:ba:e2:fc:3a:a6:6e:e4:4c:f5:b8:d3:55:f0:f9:ea: fa:62:12:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJhH2U/nedS3vo0nvIVGJAwrQvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUw OEY0RERERjAeFw0yNjEwMTMwOTIyMjRaFw0yNjEwMTQxMjUzMjRaMDMxMTAvBgNV BAMTKDNFNzQ1QjhENkMyMUYzOEJGQzM4RDI4NDg3MEI2NUY1RkE4NzUzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNY420l2AQLqPMcY89SJ6khFQ XMiagOOoWkpg/k1SRYHyEsdxtJy0Hk7lj7MIY/W19DVjCSV3xwphVrUP7i4DShyN q9e5vt+TiAtHkAs1oqYirKh2SlIhmYiMk4uV53uYXsQVOVE+/97Ifsg6UrwCEqoo JtJoMuM/5soBi5Z3FXeE+YoG6+9HgRiWT3OW6+JPzyzbKM3v4B65aRKNn4PRLNCE GIYxUa36avJtWQt899G+vZKF/j6B4LVHL/VMQW26mTIOoROr9mTafwTzE1L+DrWP kwFOtE06obCqxPu1YXWQiOXM2uSH17/klBEtgP3ewg7wYTtRKMIuREOvH9tZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPnRbjWwh84v8ONKEhwtl9fqHUz0wHwYDVR0j BBgwFoAUMzwS3SiBBLazxaLKtga/VQj03d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM1NjhiNWItYjZhZS00NTNlLThlMTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQy ODgxMDRCNkIzQzVBMkNBQjYwNkJGNTUwOEY0RERERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzNDMTJERDI4ODEwNEI2QjNDNUEyQ0FCNjA2QkY1NTA4RjRE RERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM1NjhiNWItYjZhZS00NTNlLThl MTYtZDU1ZGQ2MzU0NjBiLzAvMzMzQzEyREQyODgxMDRCNkIzQzVBMkNBQjYwNkJG NTUwOEY0RERERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5QS6RKQgBDjGImGAuSaFScQOz4jHFMrKjw 5GmH4hIoedQCr3KTk8uvFO+sbgt2t2Qf4MR3YQcvG6hHdF26xkGZweTSmypbC7BM CNUmj8fhCFOsm0QGiffosBndoWeYAxNhzrcIzEqH4ZmgKU7nq8e+UKm+0L6Klh0P CxF6rJPvSx8lK6MT5D0o0OkjLKt3YD6qgTJwMIzNfh1aADl6/d3frUECewt3+K5t kmObj4PSkXt7WGa7ZG7cyNoWEAHQwQO3CvaM2m/bYw/Zvq7JDKktlM/7z7y2vhg5 15sB6SEQFYbImFZU0zh6FO/Z4rri/DqmbuRM9bjTVfD56vpiElA= -----END CERTIFICATE-----Generated at Wed Oct 14 03:15:00 2026 by rpki-client