$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: 7YQnTJy/b9dVzb2CuW/wtRjrrBUQ3nDxhEjk7TAXkpI= Subject key identifier: 4E:68:50:6C:CB:A2:43:85:AB:96:7E:F0:3A:09:26:75:76:3A:C2:1F Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 5284BDC57155981BADC098B8675D504089384FD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:56:27 +0000 Manifest this update: Mon 21 Sep 2026 07:51:27 +0000 Manifest next update: Tue 22 Sep 2026 08:50:27 +0000 Files and hashes: 1: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) 2: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) 3: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) 4: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: Ld+IzJ7nvXIftsGRsxxo/rHrXipcC4SipZ+5at8yIhA=) 5: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:84:bd:c5:71:55:98:1b:ad:c0:98:b8:67:5d:50:40:89:38:4f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: Sep 21 07:51:27 2026 GMT Not After : Sep 22 08:50:27 2026 GMT Subject: CN=4E68506CCBA24385AB967EF03A092675763AC21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:16:34:29:6c:2b:f6:7e:35:d1:5c:19:c0:87: c6:7d:8e:e0:25:9e:bd:56:36:55:d6:56:1e:b6:96: fd:91:4d:5c:4b:09:f8:a5:17:74:23:54:eb:a1:11: c6:e5:64:bc:7f:af:a2:38:e9:24:e3:e5:c9:94:d2: c3:53:cc:47:13:cf:23:44:76:8d:0f:9b:fe:5a:7f: fc:c3:80:51:21:c2:f7:1a:73:1b:bf:f8:c9:9c:f0: 7a:ec:5f:0d:ae:22:ea:e8:41:dd:c1:52:6a:ae:64: 69:48:cc:a9:6d:c0:57:13:bd:bc:f8:70:7c:92:44: 4a:77:ac:fd:68:43:ce:41:8d:2e:df:34:2e:cf:16: 83:cf:90:43:1f:8e:51:69:60:a0:42:7a:be:73:82: 58:b4:f8:6e:72:1b:c6:1f:73:77:e3:ca:fe:e0:41: 16:d1:38:2b:fe:19:77:6d:96:5f:40:b3:1a:5e:79: 17:06:d1:b7:57:a1:c8:49:0a:13:74:9e:16:4e:50: f1:66:51:2c:e3:e0:c1:78:8a:2b:ae:34:6c:44:30: 18:5f:b5:28:81:c3:ca:3d:e4:26:aa:e8:85:a4:b0: 93:69:4f:df:4c:03:f0:9e:38:84:cc:6b:f3:bc:e8: 5b:9d:ff:46:2a:3a:c4:b6:75:28:a3:f0:11:63:f1: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:68:50:6C:CB:A2:43:85:AB:96:7E:F0:3A:09:26:75:76:3A:C2:1F X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:05:4b:e4:99:2c:7d:1a:cf:d7:78:30:6f:9e:7e:48:22:66: 69:7b:88:54:9c:01:94:1b:66:0c:c5:a5:18:6b:16:72:a7:59: 44:f1:ad:16:12:cd:3d:64:47:55:00:85:15:09:39:8f:1e:c3: e2:11:91:e1:c7:22:a9:3d:82:8c:25:db:ec:5f:c7:e4:69:25: a5:75:e8:12:a8:4e:8b:ee:f2:aa:bc:09:e8:56:d8:99:15:7b: 01:00:0e:c4:1f:3a:11:a2:21:cf:8d:50:7b:bb:3a:99:75:ec: 51:3b:df:cf:45:e1:1e:c2:90:0a:9c:a9:19:6e:25:cf:5e:dc: 57:3e:f7:ff:1a:7e:27:ac:53:0c:d9:9c:d4:d2:a7:99:e3:be: ee:02:fb:80:0d:1e:f5:a0:27:0a:74:75:47:cf:68:f9:87:a0: 18:52:af:f6:f6:0e:03:86:b2:3d:39:3f:e5:8d:01:3c:88:83: 7c:32:7d:a4:5c:f9:29:ca:45:0f:71:26:43:34:74:aa:d1:61: 1d:44:3e:ca:84:1b:55:36:10:2e:e1:7b:d4:91:10:f6:f1:2c: ba:4a:17:4e:dd:74:a5:63:d6:ff:37:79:da:2a:63:77:e6:c0: 5d:1b:36:56:40:ef:a6:d1:29:e7:c6:f5:50:2d:3a:40:39:34: 9e:9e:17:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUoS9xXFVmButwJi4Z11QQIk4T9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjA5MjEwNzUxMjdaFw0yNjA5MjIwODUwMjdaMDMxMTAvBgNV BAMTKDRFNjg1MDZDQ0JBMjQzODVBQjk2N0VGMDNBMDkyNjc1NzYzQUMyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrFjQpbCv2fjXRXBnAh8Z9juAl nr1WNlXWVh62lv2RTVxLCfilF3QjVOuhEcblZLx/r6I46STj5cmU0sNTzEcTzyNE do0Pm/5af/zDgFEhwvcacxu/+Mmc8HrsXw2uIuroQd3BUmquZGlIzKltwFcTvbz4 cHySREp3rP1oQ85BjS7fNC7PFoPPkEMfjlFpYKBCer5zgli0+G5yG8Yfc3fjyv7g QRbROCv+GXdtll9AsxpeeRcG0bdXochJChN0nhZOUPFmUSzj4MF4iiuuNGxEMBhf tSiBw8o95Caq6IWksJNpT99MA/CeOITMa/O86Fud/0YqOsS2dSij8BFj8f51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTmhQbMuiQ4Wrln7wOgkmdXY6wh8wHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwFS+SZLH0az9d4MG+efkgiZml7iFScAZQb ZgzFpRhrFnKnWUTxrRYSzT1kR1UAhRUJOY8ew+IRkeHHIqk9gowl2+xfx+RpJaV1 6BKoTovu8qq8CehW2JkVewEADsQfOhGiIc+NUHu7Opl17FE7389F4R7CkAqcqRlu Jc9e3Fc+9/8afiesUwzZnNTSp5njvu4C+4ANHvWgJwp0dUfPaPmHoBhSr/b2DgOG sj05P+WNATyIg3wyfaRc+SnKRQ9xJkM0dKrRYR1EPsqEG1U2EC7he9SREPbxLLpK F07ddKVj1v83edoqY3fmwF0bNlZA76bRKefG9VAtOkA5NJ6eF2I= -----END CERTIFICATE-----Generated at Mon Sep 21 21:54:37 2026 by rpki-client