$ rpki-client -vvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: hiLEPPspf2n1XkdRepWh5sxWI9t8uRYMGtzf4IuL21Q= Subject key identifier: F3:08:C0:63:6B:3D:D8:96:A5:83:F9:69:8C:78:D6:64:08:8C:B1:42 Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 7A0CAFCEEE4BF37D4207EB31418A0D01E096C87E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:07:45 +0000 Manifest this update: Wed 17 Jun 2026 04:02:45 +0000 Manifest next update: Thu 18 Jun 2026 08:06:45 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: c2qwVXfwk25xDL1jYTZBV0stTe16E3IjdyQYkdunrbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0c:af:ce:ee:4b:f3:7d:42:07:eb:31:41:8a:0d:01:e0:96:c8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Jun 17 04:02:45 2026 GMT Not After : Jun 18 08:06:45 2026 GMT Subject: CN=F308C0636B3DD896A583F9698C78D664088CB142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:e4:61:30:54:db:5d:84:c7:7e:1f:9d:19: da:d7:0c:b7:5d:24:f2:f9:92:7b:57:fc:5d:45:19: e7:3b:55:17:10:16:92:cd:bf:fc:2e:f2:49:50:60: a4:9f:d0:ac:f7:85:66:32:8f:75:61:52:f6:ca:f8: 6b:71:17:2a:fd:17:53:40:29:e3:ce:29:96:3c:54: 9e:7d:7d:50:07:5c:b1:c5:e8:c4:25:80:ce:64:a5: 35:71:c1:f6:f6:7c:e3:12:2d:d1:15:bd:9a:bb:97: 7f:73:29:f6:8d:ec:b1:41:93:ef:78:8c:87:45:55: ff:cc:22:c4:d4:35:03:96:9b:5f:54:76:33:af:27: 44:0b:4d:01:fb:97:f3:42:62:ca:5e:cb:df:ab:81: 60:c3:5b:30:d9:60:c4:dd:87:2b:9d:c2:66:de:6c: 7e:63:d0:66:1e:c5:3b:4a:f4:60:69:65:9c:db:a3: af:e5:2e:ea:65:75:46:d0:3f:a6:19:e1:24:46:62: e5:4b:23:7a:db:08:a9:9d:3c:72:0d:ac:24:fa:15: ce:e6:6b:72:14:9f:f8:96:c0:85:e0:48:1e:5f:a7: bb:df:1b:36:b2:4e:af:bf:a3:90:88:f6:0e:58:35: 9f:4c:a4:16:f3:7e:78:37:2c:73:e7:6e:1d:77:ab: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:C0:63:6B:3D:D8:96:A5:83:F9:69:8C:78:D6:64:08:8C:B1:42 X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:43:6d:1a:e7:ea:d7:39:9a:e0:d1:78:7e:8e:fa:1d:69:4d: 79:0e:ed:44:35:9d:a9:c6:53:92:96:62:8e:f0:0d:cd:b4:b2: 1e:0b:e0:24:52:e5:10:51:b3:15:aa:23:1a:97:b7:ee:ef:ca: 0c:55:3a:e6:79:98:39:f7:8c:fe:6a:2b:93:b1:80:d0:f8:40: 21:9b:68:79:2e:9b:41:4e:70:d4:31:09:33:e3:18:2f:26:f9: 1d:bf:6f:70:c9:cd:14:7c:7c:4d:1f:36:a2:36:64:3c:20:a5: c5:4e:88:99:ac:d8:87:23:1a:19:a4:b2:3f:5c:f6:ef:7a:ab: 6d:ab:cb:3b:1f:c4:74:30:6d:f7:3d:ef:69:02:24:d1:1a:1d: e7:54:7c:18:c3:53:31:27:41:a9:f0:6d:b3:bd:c0:31:d5:92: f1:3e:b8:38:6a:8a:e1:05:48:51:cf:df:ad:77:5c:7f:62:ec: 2e:73:8a:6c:c9:bc:38:63:94:2e:8a:1a:3c:4c:7e:f7:14:85: 86:08:c3:69:c4:91:c6:0c:48:b9:5a:db:33:9e:73:87:18:ee: c8:63:d0:51:67:90:dc:e6:1d:35:60:b8:f7:89:ef:8a:4e:5e: ee:1a:f1:c7:49:84:3e:be:b4:ab:33:1c:00:d5:4b:54:24:ff: ca:97:f1:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegyvzu5L831CB+sxQYoNAeCWyH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA2MTcwNDAyNDVaFw0yNjA2MTgwODA2NDVaMDMxMTAvBgNV BAMTKEYzMDhDMDYzNkIzREQ4OTZBNTgzRjk2OThDNzhENjY0MDg4Q0IxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJ+RhMFTbXYTHfh+dGdrXDLdd JPL5kntX/F1FGec7VRcQFpLNv/wu8klQYKSf0Kz3hWYyj3VhUvbK+GtxFyr9F1NA KePOKZY8VJ59fVAHXLHF6MQlgM5kpTVxwfb2fOMSLdEVvZq7l39zKfaN7LFBk+94 jIdFVf/MIsTUNQOWm19UdjOvJ0QLTQH7l/NCYspey9+rgWDDWzDZYMTdhyudwmbe bH5j0GYexTtK9GBpZZzbo6/lLupldUbQP6YZ4SRGYuVLI3rbCKmdPHINrCT6Fc7m a3IUn/iWwIXgSB5fp7vfGzayTq+/o5CI9g5YNZ9MpBbzfng3LHPnbh13q3/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wjAY2s92Jalg/lpjHjWZAiMsUIwHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpDbRrn6tc5muDReH6O+h1pTXkO7UQ1nanG U5KWYo7wDc20sh4L4CRS5RBRsxWqIxqXt+7vygxVOuZ5mDn3jP5qK5OxgND4QCGb aHkum0FOcNQxCTPjGC8m+R2/b3DJzRR8fE0fNqI2ZDwgpcVOiJms2IcjGhmksj9c 9u96q22ryzsfxHQwbfc972kCJNEaHedUfBjDUzEnQanwbbO9wDHVkvE+uDhqiuEF SFHP3613XH9i7C5zimzJvDhjlC6KGjxMfvcUhYYIw2nEkcYMSLla2zOec4cY7shj 0FFnkNzmHTVguPeJ74pOXu4a8cdJhD6+tKszHADVS1Qk/8qX8V0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:37 2026 by rpki-client