$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: kvrbGM2VrKHVKwGncCaTv4IwGiWO31i01457QDL6Va8= Subject key identifier: F0:96:5E:F7:D7:9D:5D:47:7F:EC:39:13:7D:30:4B:E7:27:2A:96:52 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 1C3D8926E727121F68476C19A67635461BABEBFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0388 Signing time: Fri 17 Apr 2026 09:21:26 +0000 Manifest this update: Fri 17 Apr 2026 09:16:26 +0000 Manifest next update: Mon 20 Apr 2026 15:50:26 +0000 Files and hashes: 1: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 2: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 3: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 4: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: 0aTtvK24bNcmqnpepTgUdZw0ocIUT1z+NlDz+JkEtYE=) 5: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: afeNM46TRHopTqyas4ufBzeRoS+rDg5LgZzbTnX2c9c=) 6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 7: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: 2wBcOPKUCI6Zp/xtAhOQEAoecnilxu7COOIy78SMgIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3d:89:26:e7:27:12:1f:68:47:6c:19:a6:76:35:46:1b:ab:eb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Apr 17 09:16:26 2026 GMT Not After : Apr 20 15:50:26 2026 GMT Subject: CN=F0965EF7D79D5D477FEC39137D304BE7272A9652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:9f:27:ae:53:95:d7:f0:41:f7:21:4a:cf: 07:6d:ce:57:65:1f:d4:f9:8a:1d:83:d5:e1:14:56: 38:70:64:17:6d:4f:f8:c1:00:d9:4a:fd:4a:31:ea: de:14:15:a0:62:5b:ed:06:a3:41:c9:65:7f:23:a8: 4c:fd:1f:20:f6:0c:93:8b:a7:b0:d5:7c:f5:f8:6f: 1b:83:cc:a7:08:51:72:47:d2:26:e1:32:be:ff:85: 12:8b:3c:b1:f7:4c:60:a2:5b:fe:cf:9c:80:fb:54: 93:5e:f5:25:e1:66:02:3d:d0:1b:0e:d0:a5:9e:29: 5d:b8:1c:d5:70:12:a9:63:32:46:d9:3e:38:d6:96: 0d:e6:94:6f:aa:9d:5a:c9:89:a4:26:e0:b6:50:60: 7c:a6:7b:26:ef:d2:6c:b8:be:d8:9e:d6:d4:56:50: ef:5d:28:cd:a3:89:cf:0a:a6:c0:f0:f3:57:df:68: c8:42:da:13:7b:28:53:51:77:d9:26:82:50:ee:79: 0b:b1:f6:83:ea:62:ab:78:a4:ef:50:63:4d:f0:4c: 9e:b5:6a:6b:1f:3e:21:f2:05:63:33:07:56:c4:99: 85:90:7c:7e:41:b6:62:13:f0:b2:73:51:c0:b1:c5: aa:96:cc:6c:f5:52:26:0a:e9:0c:6c:d8:e1:4b:8d: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:96:5E:F7:D7:9D:5D:47:7F:EC:39:13:7D:30:4B:E7:27:2A:96:52 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2c:13:b1:5b:40:03:e1:33:20:85:0e:a8:e2:d5:f4:8e:80: 27:c9:03:41:23:42:52:29:48:3f:0b:8a:09:ad:4e:a6:c9:3f: a6:0c:a9:d1:53:bc:79:90:62:64:da:d3:7c:f7:f7:30:e6:78: e2:05:b9:19:bd:65:ff:fe:92:15:3a:e4:48:d0:62:8a:c0:dd: 89:98:c4:2f:7c:e3:3b:25:69:d5:4f:35:fe:28:db:2a:ca:a9: 34:26:91:65:6e:04:0d:77:92:26:01:cd:34:bf:ad:78:51:d7: c3:73:72:2c:90:e8:55:0b:3c:6b:c4:d5:63:c3:13:6e:16:f2: 4e:4f:15:70:30:ba:be:75:ef:d1:8c:c6:31:8d:99:c1:34:20: 44:06:e7:50:8d:a1:a4:51:8c:01:87:24:88:ee:c0:82:0e:47: cd:e4:1a:1d:1f:f3:36:ed:69:3c:f9:24:8c:6a:6d:d7:71:29: 83:7f:44:ba:f3:d8:e5:a8:68:54:0d:b3:06:89:28:84:be:ad: af:05:1f:ab:31:22:fd:ce:2e:fb:3f:a3:2a:41:9d:65:d7:12: a6:51:8f:b5:dc:b1:d4:4a:e7:66:46:3e:d4:39:25:8a:99:a7: 7b:cd:69:3d:41:73:9b:21:45:21:a9:29:96:eb:4c:63:bb:35: b5:3b:8e:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHD2JJucnEh9oR2wZpnY1Rhur6/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNjA0MTcwOTE2MjZaFw0yNjA0MjAxNTUwMjZaMDMxMTAvBgNV BAMTKEYwOTY1RUY3RDc5RDVENDc3RkVDMzkxMzdEMzA0QkU3MjcyQTk2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbG58nrlOV1/BB9yFKzwdtzldl H9T5ih2D1eEUVjhwZBdtT/jBANlK/Uox6t4UFaBiW+0Go0HJZX8jqEz9HyD2DJOL p7DVfPX4bxuDzKcIUXJH0ibhMr7/hRKLPLH3TGCiW/7PnID7VJNe9SXhZgI90BsO 0KWeKV24HNVwEqljMkbZPjjWlg3mlG+qnVrJiaQm4LZQYHymeybv0my4vtie1tRW UO9dKM2jic8KpsDw81ffaMhC2hN7KFNRd9kmglDueQux9oPqYqt4pO9QY03wTJ61 amsfPiHyBWMzB1bEmYWQfH5BtmIT8LJzUcCxxaqWzGz1UiYK6Qxs2OFLjc5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8JZe99edXUd/7DkTfTBL5ycqllIwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMsE7FbQAPhMyCFDqji1fSOgCfJA0EjQlIp SD8LigmtTqbJP6YMqdFTvHmQYmTa03z39zDmeOIFuRm9Zf/+khU65EjQYorA3YmY xC984zsladVPNf4o2yrKqTQmkWVuBA13kiYBzTS/rXhR18NzciyQ6FULPGvE1WPD E24W8k5PFXAwur5179GMxjGNmcE0IEQG51CNoaRRjAGHJIjuwIIOR83kGh0f8zbt aTz5JIxqbddxKYN/RLrz2OWoaFQNswaJKIS+ra8FH6sxIv3OLvs/oypBnWXXEqZR j7XcsdRK52ZGPtQ5JYqZp3vNaT1Bc5shRSGpKZbrTGO7NbU7jhA= -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:43 2026 by rpki-client