$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: rSufN1SdjagusvkqN4ho/BOmv1FdZAl1hHQrEtdQZk0= Subject key identifier: 75:37:EC:73:79:14:C0:B7:56:A5:DC:37:B5:AA:E7:D7:BF:D8:EE:98 Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 563610AF58AC49CE3E30DA4AE9C3DADFCC3ACF67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 15:10:25 +0000 Manifest this update: Mon 21 Sep 2026 15:05:25 +0000 Manifest next update: Tue 22 Sep 2026 17:30:25 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) 2: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: HU9xFu0HDHu6dpw5cN0WZsDPqQcWu8jWmsp7Atq+tRE=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:36:10:af:58:ac:49:ce:3e:30:da:4a:e9:c3:da:df:cc:3a:cf:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Sep 21 15:05:25 2026 GMT Not After : Sep 22 17:30:25 2026 GMT Subject: CN=7537EC737914C0B756A5DC37B5AAE7D7BFD8EE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:2b:f9:44:39:3c:0f:da:01:5e:a0:c3:2a: 53:36:f8:5f:bb:7b:c8:c7:60:2b:e7:b5:97:c8:a6: e1:f3:ef:6a:98:8c:85:a4:61:1b:09:9f:3a:c2:14: 18:66:91:df:3d:45:b6:43:a9:cd:dd:80:60:aa:c1: 14:21:0e:83:12:ed:6c:e1:84:9d:40:40:c7:74:58: c4:25:55:da:55:f0:18:84:de:a3:25:6c:a6:fd:c3: 98:e1:98:59:83:c5:29:b0:48:70:b4:76:cf:9d:2f: 8e:24:05:50:05:b1:52:b5:75:45:1e:6a:c3:75:34: 40:ef:91:15:d2:39:cc:7a:d5:51:56:80:d3:82:15: ae:d2:57:ce:3e:b5:4c:c4:36:40:02:17:ab:45:4a: d8:fe:13:a8:d7:2e:3d:0b:96:86:b6:d5:f5:17:02: 74:18:a1:de:b0:a4:32:e5:38:43:01:8e:82:6f:30: 07:9f:6d:05:ba:a3:c2:3c:36:62:ed:68:33:f1:af: 7f:9b:f1:d2:ca:f2:75:99:7f:d5:92:d4:d1:6b:0c: 91:42:14:91:c8:a6:9e:80:fa:28:34:51:1f:c9:0b: 33:1e:52:15:9f:4d:e9:0f:e8:3d:ae:4d:07:39:72: 50:c3:6a:66:ee:55:4b:7d:2c:22:6f:a2:27:a0:52: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:37:EC:73:79:14:C0:B7:56:A5:DC:37:B5:AA:E7:D7:BF:D8:EE:98 X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:63:53:4f:fa:8b:f1:22:37:3d:98:75:98:fd:be:71:12:4b: 4a:54:8c:f6:33:dd:d4:2f:64:77:8c:55:1a:1e:8a:9e:73:73: 52:21:2d:7d:49:f3:fd:e7:97:9a:b7:a8:a7:8d:4c:4f:c6:48: fc:44:4a:fc:ee:37:0e:60:83:b6:5c:b5:12:7b:9a:e1:3f:e2: a4:24:c6:ae:74:2b:8f:9b:8b:5a:bf:15:e7:7b:3d:a4:c9:05: d0:5e:75:91:e2:82:a6:65:1e:69:b7:00:bf:86:f8:8d:4f:c1: 23:12:7f:cd:60:1a:d7:e0:ee:72:c6:37:24:62:db:2e:d6:41: 8e:1a:e6:2d:3e:81:43:ed:75:14:2e:4e:8d:fb:fa:d1:23:4e: b5:2c:1d:05:30:29:0f:77:dd:d7:1d:ed:37:03:f6:b4:7e:06: 7e:84:a1:23:35:76:3a:d6:b5:d2:ac:63:33:18:68:8d:8c:8b: 4d:7f:65:0c:b2:60:24:64:2c:b2:ce:e0:f7:f2:da:41:7c:e3: 4f:65:c2:d8:fb:fc:16:1b:8d:a3:7f:4a:1f:5a:1d:20:a5:a2: 3b:c3:7d:e9:3f:5a:9c:52:5f:ad:25:00:6b:b0:ae:19:3b:14: 84:5f:81:e0:f6:42:df:53:e8:ba:82:68:3d:98:31:68:89:26: 30:3b:e7:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjYQr1isSc4+MNpK6cPa38w6z2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA5MjExNTA1MjVaFw0yNjA5MjIxNzMwMjVaMDMxMTAvBgNV BAMTKDc1MzdFQzczNzkxNEMwQjc1NkE1REMzN0I1QUFFN0Q3QkZEOEVFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPzyv5RDk8D9oBXqDDKlM2+F+7 e8jHYCvntZfIpuHz72qYjIWkYRsJnzrCFBhmkd89RbZDqc3dgGCqwRQhDoMS7Wzh hJ1AQMd0WMQlVdpV8BiE3qMlbKb9w5jhmFmDxSmwSHC0ds+dL44kBVAFsVK1dUUe asN1NEDvkRXSOcx61VFWgNOCFa7SV84+tUzENkACF6tFStj+E6jXLj0Lloa21fUX AnQYod6wpDLlOEMBjoJvMAefbQW6o8I8NmLtaDPxr3+b8dLK8nWZf9WS1NFrDJFC FJHIpp6A+ig0UR/JCzMeUhWfTekP6D2uTQc5clDDambuVUt9LCJvoiegUhiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdTfsc3kUwLdWpdw3tarn17/Y7pgwHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNjU0/6i/EiNz2YdZj9vnESS0pUjPYz3dQv ZHeMVRoeip5zc1IhLX1J8/3nl5q3qKeNTE/GSPxESvzuNw5gg7ZctRJ7muE/4qQk xq50K4+bi1q/Fed7PaTJBdBedZHigqZlHmm3AL+G+I1PwSMSf81gGtfg7nLGNyRi 2y7WQY4a5i0+gUPtdRQuTo37+tEjTrUsHQUwKQ933dcd7TcD9rR+Bn6EoSM1djrW tdKsYzMYaI2Mi01/ZQyyYCRkLLLO4Pfy2kF8409lwtj7/BYbjaN/Sh9aHSClojvD fek/WpxSX60lAGuwrhk7FIRfgeD2Qt9T6LqCaD2YMWiJJjA751o= -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:10 2026 by rpki-client