$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: w4aDIzvfoTXJtTHlRLu4ZHKy2FHKxcrNksTWCnzRccI= Subject key identifier: DA:E0:70:F1:79:50:3D:FC:B0:69:91:71:48:52:87:CA:C8:93:09:16 Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 47753046BA3F33F0D0B65A43CDFA5AEB9886E9FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: BE Signing time: Tue 22 Sep 2026 00:52:36 +0000 Manifest this update: Tue 22 Sep 2026 00:47:36 +0000 Manifest next update: Wed 23 Sep 2026 03:24:36 +0000 Files and hashes: 1: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) 2: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: 90YCRDbYlTOudkDbVyAWwerkAaKIJYV+HL4cte5T9qc=) 3: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) 4: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) 5: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:75:30:46:ba:3f:33:f0:d0:b6:5a:43:cd:fa:5a:eb:98:86:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: Sep 22 00:47:36 2026 GMT Not After : Sep 23 03:24:36 2026 GMT Subject: CN=DAE070F179503DFCB0699171485287CAC8930916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:e7:3a:a7:f4:ba:84:a1:bf:00:fd:ed:82: 0d:c9:0f:d3:ad:6e:9a:da:f7:2b:46:f4:d6:3e:75: 8e:04:a9:c3:c8:c0:14:9c:2c:34:f4:87:6e:06:35: 89:5b:75:d7:a6:86:83:26:0c:87:6e:b5:86:4c:38: fa:15:be:a3:38:93:28:df:29:1f:0e:e7:c5:a0:c4: 32:ac:17:08:43:eb:8a:89:1c:30:34:0c:76:24:31: dc:92:2c:ce:48:55:e7:57:0d:ff:99:58:87:cf:28: ea:56:4b:00:b0:d0:1e:f0:09:29:3e:f6:3f:99:7a: 0c:a9:03:24:46:3b:cb:22:37:85:9f:30:e1:8f:bd: c9:01:66:48:39:ab:7c:16:7f:aa:af:d5:57:f3:f6: 4c:51:c1:a8:17:18:d3:36:97:be:1f:eb:40:42:d2: 37:07:69:9f:1e:fa:01:37:71:7d:79:ac:79:6e:ed: 6c:4f:c0:11:90:41:94:3a:75:d0:b4:40:06:a6:28: 8f:5d:46:55:36:2a:98:2c:4d:ba:d7:1d:9a:ea:0b: 0b:fe:28:04:41:9e:49:6e:ab:07:d9:56:6c:27:e8: 40:7a:8e:15:86:61:d6:6e:16:7f:dd:85:ac:eb:76: 20:f6:4a:5c:55:fb:43:2d:92:87:9f:4d:c5:e2:cc: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E0:70:F1:79:50:3D:FC:B0:69:91:71:48:52:87:CA:C8:93:09:16 X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:21:5a:a5:70:fa:27:45:50:ef:dd:52:2c:43:e2:ef:87:11: 45:e3:c5:fe:23:57:e3:fd:36:07:61:d5:61:cc:fb:71:af:d1: de:b3:19:1a:06:7d:fb:18:71:98:8b:75:31:98:db:26:f5:c3: f7:9b:3c:ec:f9:e4:14:a9:c6:8a:19:4d:7f:a0:b4:2a:95:23: 64:15:17:b8:d2:0f:ad:63:4d:81:cb:5c:fa:5a:1e:3d:98:91: 40:37:b3:50:82:54:d9:bf:8e:c8:5a:b3:a8:c0:96:3b:7f:ae: 8a:57:03:07:74:12:c9:f6:9a:a6:28:c8:05:0d:ee:fa:64:ec: a7:59:24:c0:73:8d:64:fa:6d:aa:b4:ed:c5:d2:70:a1:51:17: 0b:3b:e3:66:a3:aa:d0:d3:9a:54:ec:5d:31:ff:27:b8:98:ad: e1:14:cd:8e:0f:ea:69:72:82:b9:ab:39:ac:ed:f8:1b:85:b3: 26:7a:3e:a2:2d:8f:b2:89:12:3d:42:31:1c:a4:ea:e9:bb:90: 49:7c:5e:6c:ae:54:08:eb:5f:47:1b:25:b1:53:8b:9e:ea:80: 76:21:6a:47:a2:96:ce:36:be:08:06:68:a1:df:58:b9:ef:f4: a5:7b:52:17:98:0b:ab:fc:1f:d2:e6:f2:b5:bd:3e:9f:fb:b0: 91:9a:44:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3UwRro/M/DQtlpDzfpa65iG6fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjA5MjIwMDQ3MzZaFw0yNjA5MjMwMzI0MzZaMDMxMTAvBgNV BAMTKERBRTA3MEYxNzk1MDNERkNCMDY5OTE3MTQ4NTI4N0NBQzg5MzA5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42+c6p/S6hKG/AP3tgg3JD9Ot bpra9ytG9NY+dY4EqcPIwBScLDT0h24GNYlbddemhoMmDIdutYZMOPoVvqM4kyjf KR8O58WgxDKsFwhD64qJHDA0DHYkMdySLM5IVedXDf+ZWIfPKOpWSwCw0B7wCSk+ 9j+ZegypAyRGO8siN4WfMOGPvckBZkg5q3wWf6qv1Vfz9kxRwagXGNM2l74f60BC 0jcHaZ8e+gE3cX15rHlu7WxPwBGQQZQ6ddC0QAamKI9dRlU2KpgsTbrXHZrqCwv+ KARBnkluqwfZVmwn6EB6jhWGYdZuFn/dhazrdiD2SlxV+0MtkoefTcXizIa/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2uBw8XlQPfywaZFxSFKHysiTCRYwHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIohWqVw+idFUO/dUixD4u+HEUXjxf4jV+P9 Ngdh1WHM+3Gv0d6zGRoGffsYcZiLdTGY2yb1w/ebPOz55BSpxooZTX+gtCqVI2QV F7jSD61jTYHLXPpaHj2YkUA3s1CCVNm/jshas6jAljt/ropXAwd0Esn2mqYoyAUN 7vpk7KdZJMBzjWT6baq07cXScKFRFws742ajqtDTmlTsXTH/J7iYreEUzY4P6mly grmrOazt+BuFsyZ6PqItj7KJEj1CMRyk6um7kEl8XmyuVAjrX0cbJbFTi57qgHYh akeils42vggGaKHfWLnv9KV7UheYC6v8H9Lm8rW9Pp/7sJGaRAw= -----END CERTIFICATE-----Generated at Tue Sep 22 15:05:06 2026 by rpki-client