$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: 5mLP0sKbHcUwujg+EqZkoeU0HWMb3LT9gvPsbW5SBOE= Subject key identifier: DC:D9:95:DF:D8:7E:FA:E0:3B:08:6F:8C:59:AB:EC:B1:D7:C2:92:51 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 0CD50E45F8A6E28BA412270366626DE9CCE4CCD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0373 Signing time: Sat 28 Feb 2026 10:51:20 +0000 Manifest this update: Sat 28 Feb 2026 10:46:20 +0000 Manifest next update: Tue 03 Mar 2026 18:52:20 +0000 Files and hashes: 1: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 3: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: 2wBcOPKUCI6Zp/xtAhOQEAoecnilxu7COOIy78SMgIo=) 4: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: wIErJkLMbRJtjpYByB4aOJK0idqx1HwHCvBT7cA6xPk=) 5: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 6: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: 0aTtvK24bNcmqnpepTgUdZw0ocIUT1z+NlDz+JkEtYE=) 7: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d5:0e:45:f8:a6:e2:8b:a4:12:27:03:66:62:6d:e9:cc:e4:cc:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Feb 28 10:46:20 2026 GMT Not After : Mar 3 18:52:20 2026 GMT Subject: CN=DCD995DFD87EFAE03B086F8C59ABECB1D7C29251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:0a:03:e4:89:32:28:01:5f:a8:f3:dd:1c: 49:c2:f2:29:a5:c4:a0:87:8d:42:c3:09:c7:d3:69: 57:cb:71:a9:1b:49:bf:b6:9c:8d:dc:25:92:bd:1a: 7e:75:ff:16:a5:84:12:92:0f:e0:a5:60:4c:0d:4c: 2e:4e:c5:82:c4:21:dc:a4:ab:af:08:97:1a:d6:74: 13:1b:dd:34:39:52:0e:ce:a3:a1:e2:b1:f5:2b:8f: 34:79:dd:fd:07:bc:8f:66:ba:90:f0:1b:f0:ad:d0: d1:d5:03:9f:f7:fd:54:4c:e7:3c:27:5a:e1:e7:ed: 2c:04:d2:ff:99:a4:44:2b:46:6e:1f:fe:33:52:c5: e5:9d:c2:64:92:22:8b:bc:7d:fb:25:18:7a:ee:60: 6d:18:d3:c5:f8:1e:42:7b:e1:d5:03:8d:3f:37:75: cc:51:41:08:a0:c2:6c:aa:f4:42:b3:e3:b2:02:2a: da:09:dc:b9:21:05:c3:42:80:a9:df:51:e8:44:b6: d5:8c:9f:ae:6a:68:40:4e:ed:5c:21:fb:d0:9c:88: 07:ce:c0:67:08:5a:cc:bd:c5:bb:7b:f8:6e:d5:ec: 22:ac:f2:aa:6d:29:fd:89:6c:65:46:fa:08:7f:37: 0b:90:33:c1:9a:27:7d:c8:74:96:d2:e9:e8:48:37: 32:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:95:DF:D8:7E:FA:E0:3B:08:6F:8C:59:AB:EC:B1:D7:C2:92:51 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2a:2f:ec:54:8f:d1:76:26:0f:dd:a4:4b:98:e8:78:3e:9b: e6:4b:e8:0f:5b:84:9b:e4:b6:f5:4c:db:76:b0:89:01:bd:c5: 82:03:a2:22:47:9e:a8:39:c7:8b:cf:17:92:c2:0f:71:7e:95: 6b:61:8a:36:73:5f:39:c6:12:89:36:e0:d2:a4:06:47:3a:75: e0:52:d7:6f:13:be:06:f8:16:7e:64:59:e4:87:2f:92:fa:1a: e3:61:78:3e:38:1a:ac:5f:c2:3d:01:6c:79:bf:4f:ac:3f:eb: 27:20:0e:86:13:c4:16:05:09:1e:c9:c3:b8:34:c9:05:98:56: 59:46:5a:6a:e3:4d:53:60:3f:21:f8:ec:61:df:f3:a8:44:e8: de:a3:8b:f0:13:95:f5:4e:14:10:89:e0:06:c3:b5:1e:9c:cf: 12:6f:e8:1c:6b:98:58:0a:03:78:43:95:10:21:68:96:9d:9d: 64:0b:0d:0d:01:3a:10:d2:60:12:29:bf:23:f8:21:75:d7:42: 6b:12:de:bb:36:ec:ed:57:00:7a:18:d9:0f:8e:4f:4e:dc:be: f5:3d:48:d3:a6:eb:60:94:b9:a8:52:b0:b2:a2:84:fb:bc:35: f9:c6:13:b9:ad:78:00:e0:de:09:90:33:ff:59:6d:d9:b5:a4: cf:a5:b7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNUORfim4oukEicDZmJt6czkzNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNjAyMjgxMDQ2MjBaFw0yNjAzMDMxODUyMjBaMDMxMTAvBgNV BAMTKERDRDk5NURGRDg3RUZBRTAzQjA4NkY4QzU5QUJFQ0IxRDdDMjkyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCQoD5IkyKAFfqPPdHEnC8iml xKCHjULDCcfTaVfLcakbSb+2nI3cJZK9Gn51/xalhBKSD+ClYEwNTC5OxYLEIdyk q68IlxrWdBMb3TQ5Ug7Oo6HisfUrjzR53f0HvI9mupDwG/Ct0NHVA5/3/VRM5zwn WuHn7SwE0v+ZpEQrRm4f/jNSxeWdwmSSIou8ffslGHruYG0Y08X4HkJ74dUDjT83 dcxRQQigwmyq9EKz47ICKtoJ3LkhBcNCgKnfUehEttWMn65qaEBO7Vwh+9CciAfO wGcIWsy9xbt7+G7V7CKs8qptKf2JbGVG+gh/NwuQM8GaJ33IdJbS6ehINzL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NmV39h++uA7CG+MWavssdfCklEwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcqL+xUj9F2Jg/dpEuY6Hg+m+ZL6A9bhJvk tvVM23awiQG9xYIDoiJHnqg5x4vPF5LCD3F+lWthijZzXznGEok24NKkBkc6deBS 128Tvgb4Fn5kWeSHL5L6GuNheD44Gqxfwj0BbHm/T6w/6ycgDoYTxBYFCR7Jw7g0 yQWYVllGWmrjTVNgPyH47GHf86hE6N6ji/ATlfVOFBCJ4AbDtR6czxJv6BxrmFgK A3hDlRAhaJadnWQLDQ0BOhDSYBIpvyP4IXXXQmsS3rs27O1XAHoY2Q+OT07cvvU9 SNOm62CUuahSsLKihPu8NfnGE7mteADg3gmQM/9Zbdm1pM+lt6c= -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:22 2026 by rpki-client