$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json) Hash identifier: t7rTSbGZQdbAAujXQKIO2N63tVyj72X2BbkKaam5HC4= Subject key identifier: 60:D8:2E:4A:75:DE:AB:F4:B4:00:F0:C5:8E:0E:98:85:3B:FD:7F:0B Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A Certificate serial: 5563ACA25A8DF315BF0C6FAFD154D4ADF3A26151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 09:53:50 +0000 Manifest this update: Tue 22 Sep 2026 09:48:50 +0000 Manifest next update: Wed 23 Sep 2026 10:04:50 +0000 Files and hashes: 1: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: 1EnKfkxi+My6VhfxbmY2xkYnLDXk3I9/YT0K3+nfQLo=) 2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:63:ac:a2:5a:8d:f3:15:bf:0c:6f:af:d1:54:d4:ad:f3:a2:61:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A Validity Not Before: Sep 22 09:48:50 2026 GMT Not After : Sep 23 10:04:50 2026 GMT Subject: CN=60D82E4A75DEABF4B400F0C58E0E98853BFD7F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:67:19:db:72:74:91:95:13:7c:ca:c3:3e: 1c:ee:d0:c3:91:36:bf:2d:77:04:6c:f8:e4:26:ef: 75:79:8c:c6:d8:ca:64:f8:38:bb:67:a9:0f:94:92: 32:61:26:27:36:51:90:b6:3c:13:db:13:1a:b4:88: bd:cb:c4:03:5b:f5:18:26:b8:57:af:b0:00:57:3d: 6c:57:13:f0:44:f8:37:0e:50:4b:25:57:1e:17:04: 27:a2:bd:27:de:2f:53:87:91:2e:40:8f:9d:e0:35: 43:6f:5c:09:87:a3:24:e6:1c:17:25:9d:1d:b1:d8: ae:39:87:fb:f5:b7:b1:be:c4:78:e0:7e:0f:05:38: 2f:1d:ae:16:cc:5e:e7:66:a5:82:81:a8:67:5b:97: c5:99:de:1d:46:8e:47:f7:d1:c0:da:dc:0d:1d:21: c3:55:b9:b4:b6:8b:ae:47:11:12:31:8a:49:38:9b: cc:c2:4e:e2:a6:11:19:df:6f:e1:c3:2a:65:c4:6a: 1c:ed:7e:94:74:92:24:79:6b:44:42:f5:de:68:46: d6:7a:8a:70:79:82:a8:8a:fd:cc:e5:af:7b:1b:5b: 07:72:a3:94:64:ac:4f:08:9e:5f:57:3b:42:ab:fe: 6d:c8:bd:ca:a7:2e:0c:c2:aa:10:9c:55:82:d3:b5: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D8:2E:4A:75:DE:AB:F4:B4:00:F0:C5:8E:0E:98:85:3B:FD:7F:0B X509v3 Authority Key Identifier: keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d3:a2:ee:90:d3:25:c6:75:07:7f:51:44:0f:11:b1:f4:f4: 42:f9:7e:1a:59:d5:9f:14:41:9f:82:88:4a:e0:bf:10:27:cb: 37:6a:79:17:7a:8d:f3:76:99:90:5a:15:d9:c4:f5:f1:6d:5c: f9:cb:9f:2e:c5:b4:aa:66:ec:32:5c:9f:08:91:4d:02:75:fc: 32:27:10:70:1f:2c:83:70:b5:b4:12:9f:bd:fe:a6:4c:97:a4: 7d:4f:f3:a2:42:cb:7f:db:ff:0a:1a:fd:7a:47:05:6f:1d:61: 86:87:f9:b1:34:1d:8b:35:d0:f7:cc:40:cf:8b:21:dc:7c:fd: ed:cd:5a:2a:95:9e:84:0d:13:f8:9f:c0:64:96:35:30:e9:29: 5e:70:2d:c9:78:c8:71:32:31:3e:e0:c6:61:e9:b4:c1:4f:d5: 34:b6:18:8c:50:66:02:2d:bf:9c:f8:98:68:d7:18:aa:9d:a9: 44:7b:43:fb:61:22:da:f5:b6:02:6c:95:1b:aa:e7:a9:d5:27: 2e:4d:2f:23:7c:95:1a:7d:cb:e0:d4:c4:26:cb:2d:98:ab:9b: 25:a2:c4:f9:a8:4f:8b:dd:e1:de:1d:8d:9e:6c:ed:25:81:6e: f4:8b:98:da:ea:78:78:90:19:ed:3e:d9:99:ed:4c:26:d3:6c: f9:ff:42:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWOsolqN8xW/DG+v0VTUrfOiYVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIy NjJENTA1QTAeFw0yNjA5MjIwOTQ4NTBaFw0yNjA5MjMxMDA0NTBaMDMxMTAvBgNV BAMTKDYwRDgyRTRBNzVERUFCRjRCNDAwRjBDNThFMEU5ODg1M0JGRDdGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdGcZ23J0kZUTfMrDPhzu0MOR Nr8tdwRs+OQm73V5jMbYymT4OLtnqQ+UkjJhJic2UZC2PBPbExq0iL3LxANb9Rgm uFevsABXPWxXE/BE+DcOUEslVx4XBCeivSfeL1OHkS5Aj53gNUNvXAmHoyTmHBcl nR2x2K45h/v1t7G+xHjgfg8FOC8drhbMXudmpYKBqGdbl8WZ3h1Gjkf30cDa3A0d IcNVubS2i65HERIxikk4m8zCTuKmERnfb+HDKmXEahztfpR0kiR5a0RC9d5oRtZ6 inB5gqiK/czlr3sbWwdyo5RkrE8Inl9XO0Kr/m3IvcqnLgzCqhCcVYLTtSmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNguSnXeq/S0APDFjg6YhTv9fwswHwYDVR0j BBgwFoAUwX2RGtZyqejvQYtoZVylEiYtUFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2JkYzgtZDE5NS00YzdkLWIzZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFE NjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIyNjJENTA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTdEOTExQUQ2NzJBOUU4RUY0MThCNjg2NTVDQTUxMjI2MkQ1 MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1 MTIyNjJENTA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLTou6Q0yXGdQd/UUQPEbH09EL5fhpZ1Z8U QZ+CiErgvxAnyzdqeRd6jfN2mZBaFdnE9fFtXPnLny7FtKpm7DJcnwiRTQJ1/DIn EHAfLINwtbQSn73+pkyXpH1P86JCy3/b/woa/XpHBW8dYYaH+bE0HYs10PfMQM+L Idx8/e3NWiqVnoQNE/ifwGSWNTDpKV5wLcl4yHEyMT7gxmHptMFP1TS2GIxQZgIt v5z4mGjXGKqdqUR7Q/thItr1tgJslRuq56nVJy5NLyN8lRp9y+DUxCbLLZirmyWi xPmoT4vd4d4djZ5s7SWBbvSLmNrqeHiQGe0+2ZntTCbTbPn/QrE= -----END CERTIFICATE-----Generated at Tue Sep 22 14:20:54 2026 by rpki-client