$ rpki-client -vvvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json) Hash identifier: 63UJEaCqdD/I4EQRFkyZRZyxW3Au5HgPZLvAwh/X88k= Subject key identifier: 9D:07:33:76:BD:A5:43:30:4D:54:D3:46:21:B0:DC:1D:AF:8A:84:DE Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551 Certificate serial: 381AE7212EC2C6DE14EC37AF096A97DBC489384E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 23:09:12 +0000 Manifest this update: Thu 24 Sep 2026 23:04:12 +0000 Manifest next update: Sat 26 Sep 2026 00:36:12 +0000 Files and hashes: 1: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: PTE2rFwwqeHK0t795aSvbtiS3EKNOYRnzJklmUbmOcw=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1a:e7:21:2e:c2:c6:de:14:ec:37:af:09:6a:97:db:c4:89:38:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551 Validity Not Before: Sep 24 23:04:12 2026 GMT Not After : Sep 26 00:36:12 2026 GMT Subject: CN=9D073376BDA543304D54D34621B0DC1DAF8A84DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:08:a8:2a:f5:5d:86:ff:b1:5b:1d:a2:12: b4:23:d5:45:4e:f4:9d:30:19:e4:c1:46:32:79:47: da:49:9c:1a:40:38:45:79:c8:78:74:93:c4:01:c6: 7a:ec:e7:ab:63:15:36:69:68:c4:d0:cf:0a:db:c8: 26:6c:f6:f4:b3:1e:f2:c1:57:05:f6:a1:bd:8e:7d: ee:33:f7:d1:00:4e:d4:f4:68:7a:06:14:4d:4e:b0: df:33:68:26:e5:94:1b:89:e5:16:79:b8:94:f4:80: c5:80:d3:ca:27:11:f2:76:c1:e0:e9:bb:e7:e5:70: 67:8b:fa:4e:6f:35:c1:8f:60:d0:fc:f3:1c:ad:79: ed:90:28:3e:22:c0:4f:00:9a:96:19:f3:ac:b4:2f: 43:0d:f5:3c:eb:e4:f7:87:8f:d5:0e:4a:c7:b8:24: 51:ba:cc:c0:27:92:5b:d9:f3:af:05:b0:c1:c6:8e: 93:b3:5b:d7:f5:29:03:b9:4d:6b:8d:04:93:69:ae: 01:f9:e5:db:9e:6a:1f:96:7e:82:94:f5:e0:48:4d: 7e:75:4a:de:26:c2:81:49:41:c4:d8:c8:ce:63:ec: 86:0b:7f:cd:a8:5e:a2:ac:48:9d:1b:84:0b:36:6e: b4:44:06:e6:46:71:57:98:57:dc:34:82:84:8b:c9: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:07:33:76:BD:A5:43:30:4D:54:D3:46:21:B0:DC:1D:AF:8A:84:DE X509v3 Authority Key Identifier: keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:aa:7e:a4:6b:53:b9:e0:67:06:b8:3a:2f:c2:f9:38:ff:20: 77:8a:dd:d2:ba:2c:0b:3f:ae:49:a0:95:8d:9a:b2:ca:f0:11: 68:84:09:84:dc:5b:39:da:af:a9:7a:c7:ef:81:fc:9f:13:3a: 66:d5:83:7c:ab:64:3c:e5:ac:8b:ff:ab:63:fc:a4:0d:e5:9d: 38:14:bb:92:8f:71:39:4b:0d:68:4f:06:e1:5a:66:8e:fb:92: c0:f6:bf:02:95:e6:aa:5f:1a:ad:26:50:f8:b4:27:25:ae:d2: d5:49:22:a1:53:7d:b0:9e:a7:3e:f8:c2:47:6d:68:cb:17:f8: e0:d5:99:bf:54:4e:68:44:f9:2c:30:a7:fa:e9:0b:6e:1a:31: e5:45:78:06:19:e3:1c:67:7b:d6:21:d2:f1:cf:c2:c8:22:79: 21:76:b9:c5:ef:f8:0d:63:83:86:d9:28:4d:ea:54:df:00:c1: 38:e6:76:3c:0a:92:c1:8e:ee:cf:3c:2a:93:46:c5:25:87:0a: a5:a5:62:c0:7c:48:72:86:27:0a:fd:cb:a9:72:2c:6d:a0:83: 9c:ba:cb:75:7e:17:d1:59:fa:b9:9b:77:33:ae:25:d8:9e:5c: e1:d1:6d:93:df:1d:7f:c8:ab:3b:e5:a1:35:14:54:79:17:eb: ab:c1:27:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBrnIS7Cxt4U7DevCWqX28SJOE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx NjE0NjU1MTAeFw0yNjA5MjQyMzA0MTJaFw0yNjA5MjYwMDM2MTJaMDMxMTAvBgNV BAMTKDlEMDczMzc2QkRBNTQzMzA0RDU0RDM0NjIxQjBEQzFEQUY4QTg0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYAioKvVdhv+xWx2iErQj1UVO 9J0wGeTBRjJ5R9pJnBpAOEV5yHh0k8QBxnrs56tjFTZpaMTQzwrbyCZs9vSzHvLB VwX2ob2Ofe4z99EATtT0aHoGFE1OsN8zaCbllBuJ5RZ5uJT0gMWA08onEfJ2weDp u+flcGeL+k5vNcGPYND88xytee2QKD4iwE8AmpYZ86y0L0MN9Tzr5PeHj9UOSse4 JFG6zMAnklvZ868FsMHGjpOzW9f1KQO5TWuNBJNprgH55dueah+WfoKU9eBITX51 St4mwoFJQcTYyM5j7IYLf82oXqKsSJ0bhAs2brREBuZGcVeYV9w0goSLyftLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQczdr2lQzBNVNNGIbDcHa+KhN4wHwYDVR0j BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2 NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiqfqRrU7ngZwa4Oi/C+Tj/IHeK3dK6LAs/ rkmglY2assrwEWiECYTcWznar6l6x++B/J8TOmbVg3yrZDzlrIv/q2P8pA3lnTgU u5KPcTlLDWhPBuFaZo77ksD2vwKV5qpfGq0mUPi0JyWu0tVJIqFTfbCepz74wkdt aMsX+ODVmb9UTmhE+Swwp/rpC24aMeVFeAYZ4xxne9Yh0vHPwsgieSF2ucXv+A1j g4bZKE3qVN8AwTjmdjwKksGO7s88KpNGxSWHCqWlYsB8SHKGJwr9y6lyLG2gg5y6 y3V+F9FZ+rmbdzOuJdieXOHRbZPfHX/IqzvloTUUVHkX66vBJ0E= -----END CERTIFICATE-----Generated at Fri Sep 25 01:39:59 2026 by rpki-client