$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: L45sph6vl0qNfURp9OYTa4CpGc/9EkGUU9JLYnOGhFU= Subject key identifier: 19:CB:B1:8B:50:F3:DE:5D:73:C0:B8:B8:18:41:68:CD:0C:7E:A0:5F Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 4A509E3FA087DE2305E4446406C0582254A10EFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: 0102 Signing time: Thu 16 Apr 2026 12:51:14 +0000 Manifest this update: Thu 16 Apr 2026 12:46:14 +0000 Manifest next update: Sun 19 Apr 2026 18:04:14 +0000 Files and hashes: 1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: 9rUlUDZS04O9NI67IVZNWVT51kOoiv41c8P338Fu4fQ=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: gzXm2H1SRhJOnW165GmOJoJuVcF7cAXPU5ZcWnDj+6k=) 3: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:50:9e:3f:a0:87:de:23:05:e4:44:64:06:c0:58:22:54:a1:0e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Apr 16 12:46:14 2026 GMT Not After : Apr 19 18:04:14 2026 GMT Subject: CN=19CBB18B50F3DE5D73C0B8B8184168CD0C7EA05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:11:7f:c0:6f:e3:f2:d3:b1:56:1a:de:a3: 56:78:7d:32:50:d2:a6:7b:61:c5:7c:c6:1c:1b:2f: f6:33:79:2f:55:e0:bb:ea:5f:ea:88:b1:01:2c:f8: 31:50:9e:9f:27:53:56:f0:f4:52:c0:3a:ad:26:d1: 07:f6:1d:c6:f3:2f:41:d6:c2:97:3a:fa:58:4e:41: f4:24:d6:c8:8f:08:1e:e2:5e:a0:81:54:39:f9:3d: 67:54:7d:67:00:c1:d5:51:90:5d:e2:b6:d3:ef:50: 4d:dc:c4:97:e5:6d:ba:6f:3c:cb:79:d7:64:38:4a: 30:76:e2:59:48:ef:b6:db:1c:0c:59:9c:c3:d7:c0: 65:f2:ea:4f:46:a3:04:f8:82:cc:3f:7f:e6:83:91: 43:10:95:10:68:fe:5e:61:73:f8:aa:98:5b:98:97: 70:d8:b0:9b:ef:e6:8b:97:ac:34:0a:20:dd:e6:42: 30:27:e7:e1:50:1c:5e:49:07:bd:38:09:87:f6:f6: b2:f2:2d:46:e4:9b:fd:11:13:d7:e1:39:cf:a5:26: 13:73:7e:fd:48:e0:e6:d5:8d:25:89:db:1e:f3:fa: 3a:40:61:26:b9:6d:bf:b3:85:f6:62:00:91:76:e9: f6:9a:39:57:33:29:44:15:2b:1e:1e:75:6c:9d:98: 8a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CB:B1:8B:50:F3:DE:5D:73:C0:B8:B8:18:41:68:CD:0C:7E:A0:5F X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3e:96:9c:c3:c7:c7:97:be:83:a5:15:cd:d1:ee:ce:83:06: 96:6c:ad:89:f6:d6:f1:dc:0b:60:37:bf:47:58:f4:08:71:8b: f0:df:0c:7f:39:51:22:43:17:cc:ff:7a:cb:39:3a:b8:d7:04: bb:80:e0:26:d8:c2:24:dc:b9:f5:19:25:d2:4b:be:9c:90:c2: 60:ab:c3:f2:3c:c4:dd:16:6c:01:90:9e:a1:b9:15:e1:23:fd: be:3f:02:04:12:80:87:f8:1f:e8:bd:f6:bc:a5:0e:9d:02:af: 48:4d:7e:1b:9a:a0:70:8e:c6:2f:b5:54:f9:a5:13:0a:50:01: 82:5a:a6:f6:38:4f:21:6c:1f:10:bb:58:28:75:bf:b4:ef:2c: cf:ba:9c:8d:a9:b4:c4:6e:7d:a7:d1:ec:84:cd:4b:66:bd:62: 41:68:a6:3b:4f:b1:84:3e:4a:4d:ad:72:15:1f:99:f6:9f:18: d1:a6:ba:ae:ae:b2:bd:cc:03:48:c6:7d:34:b1:9b:f1:11:25: d3:9c:23:70:5d:b3:92:92:a7:5b:c7:a4:e0:40:68:50:df:0d: c6:06:43:33:6b:e4:54:27:ec:c7:e4:2a:fe:c8:d4:93:26:13: 96:3c:38:3a:9a:f7:17:92:a3:e0:ad:c8:1e:e8:fb:6b:7e:91: c5:ab:c4:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlCeP6CH3iMF5ERkBsBYIlShDv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNjA0MTYxMjQ2MTRaFw0yNjA0MTkxODA0MTRaMDMxMTAvBgNV BAMTKDE5Q0JCMThCNTBGM0RFNUQ3M0MwQjhCODE4NDE2OENEMEM3RUEwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHxF/wG/j8tOxVhreo1Z4fTJQ 0qZ7YcV8xhwbL/YzeS9V4LvqX+qIsQEs+DFQnp8nU1bw9FLAOq0m0Qf2HcbzL0HW wpc6+lhOQfQk1siPCB7iXqCBVDn5PWdUfWcAwdVRkF3ittPvUE3cxJflbbpvPMt5 12Q4SjB24llI77bbHAxZnMPXwGXy6k9GowT4gsw/f+aDkUMQlRBo/l5hc/iqmFuY l3DYsJvv5ouXrDQKIN3mQjAn5+FQHF5JB704CYf29rLyLUbkm/0RE9fhOc+lJhNz fv1I4ObVjSWJ2x7z+jpAYSa5bb+zhfZiAJF26faaOVczKUQVKx4edWydmIpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGcuxi1Dz3l1zwLi4GEFozQx+oF8wHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA+lpzDx8eXvoOlFc3R7s6DBpZsrYn21vHc C2A3v0dY9Ahxi/DfDH85USJDF8z/ess5OrjXBLuA4CbYwiTcufUZJdJLvpyQwmCr w/I8xN0WbAGQnqG5FeEj/b4/AgQSgIf4H+i99rylDp0Cr0hNfhuaoHCOxi+1VPml EwpQAYJapvY4TyFsHxC7WCh1v7TvLM+6nI2ptMRufafR7ITNS2a9YkFopjtPsYQ+ Sk2tchUfmfafGNGmuq6usr3MA0jGfTSxm/ERJdOcI3Bds5KSp1vHpOBAaFDfDcYG QzNr5FQn7MfkKv7I1JMmE5Y8ODqa9xeSo+CtyB7o+2t+kcWrxHY= -----END CERTIFICATE-----Generated at Fri Apr 17 21:25:38 2026 by rpki-client