$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: IeGz3oYU8G43jly1T/GFvE3dG0mizvncee+Q+zpWSRU= Subject key identifier: ED:89:18:C7:86:A6:C6:10:22:C8:A7:8D:7D:37:A3:F4:E2:96:C2:6F Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 0AD0EB730300EEB0621EF47AA0D4FC89F42DB395 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: BC Signing time: Sun 20 Sep 2026 17:23:29 +0000 Manifest this update: Sun 20 Sep 2026 17:18:29 +0000 Manifest next update: Mon 21 Sep 2026 20:34:29 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: xbYKoS9IfdCC/zLKnWiGKVTDur9gleWsBST1g4/tpUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d0:eb:73:03:00:ee:b0:62:1e:f4:7a:a0:d4:fc:89:f4:2d:b3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Sep 20 17:18:29 2026 GMT Not After : Sep 21 20:34:29 2026 GMT Subject: CN=ED8918C786A6C61022C8A78D7D37A3F4E296C26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:72:b2:6c:75:88:21:05:c0:8b:c9:b5:fe: 1e:90:dd:be:58:f1:4e:46:80:53:71:70:a2:9f:6c: bc:f0:13:bc:d3:7c:18:08:26:11:7a:8e:b4:6b:52: fe:30:39:ae:e6:46:5c:54:15:f9:30:6f:63:04:17: 0d:71:8b:1f:4a:3c:33:da:3a:cf:42:6f:64:42:86: f8:35:d8:30:17:bf:59:8d:24:53:be:bf:52:0a:2b: ac:41:c5:5b:e8:ef:c3:55:af:25:89:3b:cc:e8:ec: 71:0c:5b:66:ab:13:69:3e:98:1d:d2:b4:b6:07:42: 0c:e9:73:18:da:2c:62:77:e3:60:43:c8:a4:f5:fc: 1f:6f:9d:64:a1:1e:d0:a3:b3:53:b0:e7:bc:1c:bc: cd:65:a6:30:d1:c2:a4:b5:96:12:88:0f:a6:46:ac: c7:a0:21:f3:9f:20:bb:78:e4:5b:26:8c:96:8d:20: 48:81:e2:a9:ca:e0:af:b4:c5:eb:83:83:23:91:e3: 8c:f5:80:81:26:2e:c2:63:96:92:2f:86:e9:1f:45: 35:a0:59:14:ed:e1:7c:af:41:80:1b:40:10:09:a6: fc:37:92:d9:a0:c6:25:4b:89:eb:79:27:88:79:5d: 57:41:45:de:47:6e:3e:b8:8d:8d:ab:e1:95:e0:36: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:18:C7:86:A6:C6:10:22:C8:A7:8D:7D:37:A3:F4:E2:96:C2:6F X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a6:2c:17:8f:50:54:26:72:11:7d:53:ff:28:d0:2a:4f:6f: 64:be:2a:a3:e6:b1:45:29:9a:ba:09:f7:e5:77:84:5a:2c:c3: 9b:c5:4c:43:f5:09:76:ae:41:2b:cc:c5:3a:40:e3:f1:c4:29: ba:08:ef:5c:e1:c8:ae:5d:36:51:68:07:7f:9f:95:94:49:fe: 26:63:ef:c9:60:58:b3:78:dd:aa:1f:f1:7f:c7:e3:08:3f:7f: fd:ea:c9:52:4f:87:cd:f8:f1:73:94:61:8e:f3:3c:b3:8f:3e: e4:8d:8e:f4:74:72:76:0b:a0:7d:35:b0:31:13:5a:98:4f:2a: 0d:8c:21:f2:28:c2:16:b4:7e:8c:10:f3:b1:42:36:f2:fc:c3: a6:33:d5:d4:24:a7:23:d9:1d:3d:ac:ee:35:74:fd:3d:70:29: 00:f0:92:c7:1c:ef:50:ea:dd:c4:b8:38:ed:38:08:3d:2a:48: 5e:60:2c:0a:b7:d7:b6:1c:22:01:f3:5d:99:78:7b:41:48:5c: d7:91:99:6d:cf:29:12:14:fd:38:d4:a1:ba:aa:82:05:be:1b: 2c:da:3c:1a:47:20:36:7e:cb:c0:ae:5e:fb:33:2c:b2:8b:a7: 04:a7:ff:e1:98:f3:af:3a:3f:dc:18:41:02:a7:11:49:41:67: e6:1a:78:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtDrcwMA7rBiHvR6oNT8ifQts5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA5MjAxNzE4MjlaFw0yNjA5MjEyMDM0MjlaMDMxMTAvBgNV BAMTKEVEODkxOEM3ODZBNkM2MTAyMkM4QTc4RDdEMzdBM0Y0RTI5NkMyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWnKybHWIIQXAi8m1/h6Q3b5Y 8U5GgFNxcKKfbLzwE7zTfBgIJhF6jrRrUv4wOa7mRlxUFfkwb2MEFw1xix9KPDPa Os9Cb2RChvg12DAXv1mNJFO+v1IKK6xBxVvo78NVryWJO8zo7HEMW2arE2k+mB3S tLYHQgzpcxjaLGJ342BDyKT1/B9vnWShHtCjs1Ow57wcvM1lpjDRwqS1lhKID6ZG rMegIfOfILt45FsmjJaNIEiB4qnK4K+0xeuDgyOR44z1gIEmLsJjlpIvhukfRTWg WRTt4XyvQYAbQBAJpvw3ktmgxiVLiet5J4h5XVdBRd5Hbj64jY2r4ZXgNqzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YkYx4amxhAiyKeNfTej9OKWwm8wHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGamLBePUFQmchF9U/8o0CpPb2S+KqPmsUUp mroJ9+V3hFosw5vFTEP1CXauQSvMxTpA4/HEKboI71zhyK5dNlFoB3+flZRJ/iZj 78lgWLN43aof8X/H4wg/f/3qyVJPh8348XOUYY7zPLOPPuSNjvR0cnYLoH01sDET WphPKg2MIfIowha0fowQ87FCNvL8w6Yz1dQkpyPZHT2s7jV0/T1wKQDwkscc71Dq 3cS4OO04CD0qSF5gLAq317YcIgHzXZl4e0FIXNeRmW3PKRIU/TjUobqqggW+Gyza PBpHIDZ+y8CuXvszLLKLpwSn/+GY8686P9wYQQKnEUlBZ+YaeHQ= -----END CERTIFICATE-----Generated at Mon Sep 21 06:01:48 2026 by rpki-client