$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: IaxLGsxQtIVCSD3BqL/6015ZmQFYxp94olmQ4CTgcLs= Subject key identifier: 82:FA:9E:62:FF:60:1B:1D:5F:EE:D9:63:BB:D1:54:D3:A4:BC:E5:F1 Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 11CF7A8F46AD6672849D5FEBF03BF8B1CACDF153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 01CD Signing time: Sun 01 Mar 2026 17:42:10 +0000 Manifest this update: Sun 01 Mar 2026 17:37:10 +0000 Manifest next update: Wed 04 Mar 2026 21:18:10 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) 2: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: StwMgZPh/kereUbMnUJKX1zKffMTAHo3V68Tj3AAhdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cf:7a:8f:46:ad:66:72:84:9d:5f:eb:f0:3b:f8:b1:ca:cd:f1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Mar 1 17:37:10 2026 GMT Not After : Mar 4 21:18:10 2026 GMT Subject: CN=82FA9E62FF601B1D5FEED963BBD154D3A4BCE5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:67:b0:d7:47:4a:32:ed:9a:98:32:38:04:d9: c7:75:4c:04:5b:d3:c6:ac:95:cb:60:94:89:8e:19: 9d:0f:d8:24:ff:be:15:fc:c2:5f:17:e9:72:c3:20: 67:37:74:9f:10:95:1b:82:29:e1:4f:bb:4f:e6:72: 5d:d1:c5:3d:6a:22:65:aa:d8:e7:bb:77:ab:0b:b0: 47:aa:09:cd:92:97:50:e7:5e:b7:3e:ea:23:ae:2a: 11:d9:11:92:70:a3:1d:25:20:1d:59:af:1c:78:71: fb:34:86:3e:e6:93:2b:94:18:e0:da:78:5d:00:17: 56:84:37:3f:f5:4c:b1:7b:a1:f3:f6:d6:44:52:35: 14:33:89:42:e6:6f:e9:8f:22:3e:59:85:66:c6:78: aa:ba:cb:cc:30:7f:cf:65:e3:4b:38:25:f6:55:d1: ef:a4:ba:39:2f:b5:59:26:19:a1:cc:aa:e0:0f:37: a8:c7:3a:ba:cd:59:93:d7:af:ac:b4:44:b7:cf:e8: a0:d3:98:59:bd:e7:74:7d:bf:0f:5b:8d:fd:e1:4e: 7f:8b:30:49:2a:14:51:6b:fb:a5:4f:b1:68:bd:98: 8c:18:b9:ff:66:1d:13:18:55:e3:ad:be:67:78:94: 13:b5:7a:5b:c9:a0:bc:c5:e5:f9:1e:3c:b8:b5:27: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:9E:62:FF:60:1B:1D:5F:EE:D9:63:BB:D1:54:D3:A4:BC:E5:F1 X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:db:36:a2:4f:de:f7:b3:2e:56:45:1a:89:b5:74:76:b1:23: 7f:22:5e:54:48:52:b5:d9:3f:f5:c2:fa:2e:94:91:9b:72:40: 38:98:2c:ef:a2:2d:95:4f:15:88:b8:76:6b:fb:e2:2b:b5:b2: 8e:ed:1a:3e:0d:cc:37:fb:e8:af:3a:4b:61:de:54:11:2c:51: e7:16:35:bc:a6:b3:6b:c3:e2:fe:aa:47:ee:8e:ec:5b:8a:e7: c2:43:68:57:a4:7f:17:00:a0:d7:0e:1a:f4:30:ba:c7:90:14: 97:9c:f8:86:a1:54:bf:4a:87:ee:a0:cd:f1:b6:0d:ff:26:95: 94:f5:b4:ff:1a:da:cf:61:af:83:e0:0f:d9:3a:42:59:82:4d: d7:43:1c:3c:5b:ca:9c:1e:30:04:ec:34:79:f0:93:0e:77:e7: db:a5:28:0a:7e:3f:ff:2f:ae:31:f1:40:54:6e:b4:82:ab:18: 19:e5:34:bf:0f:6c:ca:96:b9:e8:1d:ce:74:1c:e7:be:14:8f: d2:ce:79:e8:6f:d0:91:6d:67:de:bb:fb:43:bf:c9:a8:19:3c: 59:56:5f:46:cf:ed:51:f4:86:e7:4a:a2:28:c9:83:b0:ef:a3: b5:fc:7e:8e:6c:47:b9:98:83:cf:bc:82:48:8c:32:99:ba:3a: 28:67:02:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEc96j0atZnKEnV/r8Dv4scrN8VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNjAzMDExNzM3MTBaFw0yNjAzMDQyMTE4MTBaMDMxMTAvBgNV BAMTKDgyRkE5RTYyRkY2MDFCMUQ1RkVFRDk2M0JCRDE1NEQzQTRCQ0U1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZ7DXR0oy7ZqYMjgE2cd1TARb 08aslctglImOGZ0P2CT/vhX8wl8X6XLDIGc3dJ8QlRuCKeFPu0/mcl3RxT1qImWq 2Oe7d6sLsEeqCc2Sl1DnXrc+6iOuKhHZEZJwox0lIB1Zrxx4cfs0hj7mkyuUGODa eF0AF1aENz/1TLF7ofP21kRSNRQziULmb+mPIj5ZhWbGeKq6y8wwf89l40s4JfZV 0e+kujkvtVkmGaHMquAPN6jHOrrNWZPXr6y0RLfP6KDTmFm953R9vw9bjf3hTn+L MEkqFFFr+6VPsWi9mIwYuf9mHRMYVeOtvmd4lBO1elvJoLzF5fkePLi1J9JDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvqeYv9gGx1f7tlju9FU06S85fEwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDbNqJP3vezLlZFGom1dHaxI38iXlRIUrXZ P/XC+i6UkZtyQDiYLO+iLZVPFYi4dmv74iu1so7tGj4NzDf76K86S2HeVBEsUecW Nbyms2vD4v6qR+6O7FuK58JDaFekfxcAoNcOGvQwuseQFJec+IahVL9Kh+6gzfG2 Df8mlZT1tP8a2s9hr4PgD9k6QlmCTddDHDxbypweMATsNHnwkw5359ulKAp+P/8v rjHxQFRutIKrGBnlNL8PbMqWuegdznQc574Uj9LOeehv0JFtZ967+0O/yagZPFlW X0bP7VH0hudKoijJg7Dvo7X8fo5sR7mYg8+8gkiMMpm6OihnAhU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:37:57 2026 by rpki-client