$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft File: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft (raw, json) Hash identifier: tlEntRjXFGvxskuoRJLsj1U+DP3NzfVWcCma850L30Q= Subject key identifier: 74:E8:C8:A0:AB:5C:FD:C0:EF:5E:9B:2B:D2:33:48:B0:32:9A:2A:CB Authority key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27 Certificate issuer: /CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27 Certificate serial: 6FDEEE798E6FDD06A439B4B7DD7DE3815699A53C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft Manifest number: BF Signing time: Mon 21 Sep 2026 09:53:53 +0000 Manifest this update: Mon 21 Sep 2026 09:48:53 +0000 Manifest next update: Tue 22 Sep 2026 12:30:53 +0000 Files and hashes: 1: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl (hash: I4MuTM6ZfOYemongXZRy0PNe5Lw7VitZ7COAQPf7BgQ=) 2: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: 7DAQ/qZeFo+VjQFhi1Qi3yS2FazYT4uy2MibUL7GHjo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:de:ee:79:8e:6f:dd:06:a4:39:b4:b7:dd:7d:e3:81:56:99:a5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27 Validity Not Before: Sep 21 09:48:53 2026 GMT Not After : Sep 22 12:30:53 2026 GMT Subject: CN=74E8C8A0AB5CFDC0EF5E9B2BD23348B0329A2ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:e9:de:67:4f:36:81:dd:b2:65:92:24:97: 3a:90:c7:5a:71:26:d4:fd:a6:56:ac:af:52:b1:97: de:af:fa:b2:90:61:b3:11:dd:e1:cd:f3:49:75:53: 57:b3:9a:57:7b:f6:eb:07:12:58:d6:c8:23:09:ca: 80:65:3d:f7:a5:22:96:92:97:51:a2:f4:6d:6b:d4: 7f:d2:6b:e6:c0:92:47:fa:9a:83:30:df:81:47:13: 7d:75:7b:21:81:77:ac:6b:cf:e4:a4:93:b1:09:5a: c9:07:6e:27:a7:ea:66:03:a1:62:51:1f:15:c7:34: 20:6e:86:da:e1:c9:6b:b9:3c:ae:9b:34:a9:9c:aa: 6d:13:8d:0f:b2:4f:8f:c8:6e:81:7b:81:f5:37:90: e2:34:5c:b4:61:df:d5:df:0e:24:ad:ed:6f:41:13: 1f:a3:f5:f1:d6:1a:82:f2:3f:be:2a:4d:de:2d:42: f8:4d:08:82:91:8a:0f:e9:06:e9:05:ad:ac:55:70: c6:0e:57:ec:f9:9a:e9:b3:78:b0:82:1a:6f:d0:5d: fd:69:bb:a4:65:29:88:79:eb:6e:99:6c:19:27:65: 24:bf:35:2f:a1:03:33:9d:3f:4f:f3:be:ff:a9:bc: ba:86:78:f2:4e:bf:3c:5f:2f:25:c7:58:35:08:81: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E8:C8:A0:AB:5C:FD:C0:EF:5E:9B:2B:D2:33:48:B0:32:9A:2A:CB X509v3 Authority Key Identifier: keyid:17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:89:4b:3f:f3:37:9e:11:83:0b:91:e5:78:b8:9b:09:b1:c0: 56:dc:2b:38:27:ef:56:c8:48:86:82:c7:69:72:ca:c0:c0:69: 9f:9c:09:ec:52:5b:3f:71:fa:3a:41:3a:38:c1:9b:4f:4e:80: 82:47:f7:e0:3b:bb:7f:99:5c:42:3f:cd:0e:01:b6:0c:fa:61: 89:7a:59:a0:35:3a:c2:9e:99:8d:ef:56:ea:11:17:1d:11:91: 86:55:22:2d:34:4d:d9:e0:1c:93:8a:14:eb:e7:cd:7b:86:2a: 26:04:94:a2:a0:59:65:b9:f1:66:d3:77:a9:cd:8e:06:de:d5: 59:1c:ec:44:c3:25:bd:1f:e3:63:d8:7d:16:5b:7a:53:0a:6c: a9:70:bc:77:f5:8e:15:d1:9a:9f:64:91:9f:8d:01:02:58:55: 76:f9:47:ae:72:d5:1c:7f:d5:5e:aa:99:53:1b:05:75:75:1c: eb:e0:5a:0c:48:6c:5e:12:a7:fc:03:e2:68:60:7d:4d:59:ce: 9d:48:43:ba:75:26:cf:4a:ce:b7:b9:95:28:48:32:f1:1f:eb: 62:50:8c:ad:54:70:f6:4b:8a:a3:e3:c7:a0:15:1e:6e:62:c3: c8:12:9f:41:7b:b3:dc:28:4d:df:3b:0c:4b:2c:2a:0d:85:6c: f5:a7:0b:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb97ueY5v3QakObS33X3jgVaZpTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdGMTJGNENGMTZEQzFCMThEQjc2OTRDQjM0NDFDOEI4 MEUwQUMyNzAeFw0yNjA5MjEwOTQ4NTNaFw0yNjA5MjIxMjMwNTNaMDMxMTAvBgNV BAMTKDc0RThDOEEwQUI1Q0ZEQzBFRjVFOUIyQkQyMzM0OEIwMzI5QTJBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2feneZ082gd2yZZIklzqQx1px JtT9plasr1Kxl96v+rKQYbMR3eHN80l1U1ezmld79usHEljWyCMJyoBlPfelIpaS l1Gi9G1r1H/Sa+bAkkf6moMw34FHE311eyGBd6xrz+Skk7EJWskHbien6mYDoWJR HxXHNCBuhtrhyWu5PK6bNKmcqm0TjQ+yT4/IboF7gfU3kOI0XLRh39XfDiSt7W9B Ex+j9fHWGoLyP74qTd4tQvhNCIKRig/pBukFraxVcMYOV+z5mumzeLCCGm/QXf1p u6RlKYh5626ZbBknZSS/NS+hAzOdP0/zvv+pvLqGePJOvzxfLyXHWDUIgcM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOjIoKtc/cDvXpsr0jNIsDKaKsswHwYDVR0j BBgwFoAUF/EvTPFtwbGNt2lMs0Qci4DgrCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZDc2MjctNDdkNy00ZmQwLWFlMGYtNjNiODczZmUyYzg4LzAvMTdGMTJGNENG MTZEQzFCMThEQjc2OTRDQjM0NDFDOEI4MEUwQUMyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xN0YxMkY0Q0YxNkRDMUIxOERCNzY5NENCMzQ0MUM4QjgwRTBB QzI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvMTdGMTJGNENGMTZEQzFCMThEQjc2OTRDQjM0NDFD OEI4MEUwQUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyJSz/zN54RgwuR5Xi4mwmxwFbcKzgn71bI SIaCx2lyysDAaZ+cCexSWz9x+jpBOjjBm09OgIJH9+A7u3+ZXEI/zQ4Btgz6YYl6 WaA1OsKemY3vVuoRFx0RkYZVIi00TdngHJOKFOvnzXuGKiYElKKgWWW58WbTd6nN jgbe1Vkc7ETDJb0f42PYfRZbelMKbKlwvHf1jhXRmp9kkZ+NAQJYVXb5R65y1Rx/ 1V6qmVMbBXV1HOvgWgxIbF4Sp/wD4mhgfU1Zzp1IQ7p1Js9Kzre5lShIMvEf62JQ jK1UcPZLiqPjx6AVHm5iw8gSn0F7s9woTd87DEssKg2FbPWnC/o= -----END CERTIFICATE-----Generated at Tue Sep 22 05:41:47 2026 by rpki-client