$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: ecNwipOpIUKvUqWtbfGhuWeJRYHEeYOhav3QGQGImi0= Subject key identifier: 2D:B6:58:52:47:A8:F4:72:93:9D:BA:C1:DA:AB:76:EA:5F:3E:3A:11 Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 5332A2333820601122947DCACF4D4B17808DBFC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:26:52 +0000 Manifest this update: Wed 17 Jun 2026 07:21:52 +0000 Manifest next update: Thu 18 Jun 2026 08:45:52 +0000 Files and hashes: 1: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 2: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) 3: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) 4: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) 5: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) 6: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: 2cyhEB3NwxXmpbIugr789cmBnKtabL7z6wSrtW6xa18=) 7: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:32:a2:33:38:20:60:11:22:94:7d:ca:cf:4d:4b:17:80:8d:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: Jun 17 07:21:52 2026 GMT Not After : Jun 18 08:45:52 2026 GMT Subject: CN=2DB6585247A8F472939DBAC1DAAB76EA5F3E3A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:29:59:b9:e4:2a:b5:ff:b6:b0:45:81:49: 58:3a:d0:a1:91:42:c1:2d:74:d2:7e:1b:a6:09:9e: 36:78:0c:e4:52:5a:c7:cd:6c:00:00:43:e9:de:7a: c5:ec:18:d9:48:6b:9f:4d:30:e8:37:bb:7e:63:c9: ed:ce:10:cf:93:9f:c4:9b:1f:c4:d8:9e:5d:99:ca: 7c:50:20:de:5a:92:d2:4d:50:50:a7:22:4f:28:a4: 2c:db:0b:73:d2:fe:cc:89:e0:e1:27:e4:79:a1:78: 63:12:6f:f3:1b:ef:97:70:ff:e1:61:b8:22:36:c0: ca:af:aa:58:4b:d5:cf:44:65:41:64:d7:e6:b0:c0: ce:ae:e8:0b:bd:09:67:d9:52:42:58:7c:38:46:3c: 6a:72:4c:1f:e5:20:cd:fa:64:5f:14:d0:5b:c3:ed: d7:bd:d0:0b:48:bb:ef:5e:77:52:8a:26:8e:0e:5d: 86:75:e6:8f:6f:3c:ca:09:9c:4d:ba:12:60:1f:62: 9c:73:fc:44:95:64:38:f1:e7:36:3d:aa:b1:64:55: 06:c7:74:7f:0d:b8:46:b1:10:6e:bf:cf:f6:94:5f: 44:7d:e4:2c:05:43:b0:e9:0b:42:77:be:a0:41:c3: fd:92:ed:1f:94:a9:8e:42:ef:e8:c5:29:0f:b2:b7: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:58:52:47:A8:F4:72:93:9D:BA:C1:DA:AB:76:EA:5F:3E:3A:11 X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:aa:52:c0:4d:72:33:f6:db:0e:7e:ea:fb:d7:a5:15:9e:ab: 95:00:da:aa:00:7d:c1:8a:fe:75:8e:99:ef:40:bf:9c:45:d3: 06:09:75:e3:5f:c9:0f:16:c4:75:3a:7f:80:05:e1:39:15:a5: d0:8b:af:dc:3f:70:4a:59:c7:6f:77:2d:df:42:ed:65:cb:1e: 4b:20:f9:b9:da:b9:d0:7d:d3:9f:c4:ad:12:16:e4:ad:7c:7b: 2d:5e:2a:8b:23:5d:39:da:eb:f4:b3:88:85:28:10:27:3a:2a: 62:60:78:01:cc:da:f7:57:bf:80:6b:35:93:ae:4d:30:23:4b: 83:4b:2b:75:c0:d0:88:bd:4b:5f:e7:9d:29:94:47:2a:cf:0f: b0:64:1b:16:cb:c0:aa:03:3b:94:88:ad:81:14:78:a7:98:9f: 7e:d6:df:c7:17:a6:85:b6:a5:94:3c:6b:8f:ad:ce:0b:0f:10: 1a:25:32:74:be:20:47:b1:f1:5a:f2:f3:2d:68:94:2c:df:dc: 25:6d:39:ce:6e:22:9d:ed:ac:af:10:2b:df:f7:2b:9d:b6:2f: dc:c5:d1:d6:58:fe:c3:e3:0e:73:57:39:22:12:ce:cd:0b:78: 87:79:1c:b3:bb:88:b3:1b:61:fd:31:66:91:6f:fb:5d:bd:a4: 33:0f:c2:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzKiMzggYBEilH3Kz01LF4CNv8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA2MTcwNzIxNTJaFw0yNjA2MTgwODQ1NTJaMDMxMTAvBgNV BAMTKDJEQjY1ODUyNDdBOEY0NzI5MzlEQkFDMURBQUI3NkVBNUYzRTNBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OilZueQqtf+2sEWBSVg60KGR QsEtdNJ+G6YJnjZ4DORSWsfNbAAAQ+neesXsGNlIa59NMOg3u35jye3OEM+Tn8Sb H8TYnl2ZynxQIN5aktJNUFCnIk8opCzbC3PS/syJ4OEn5HmheGMSb/Mb75dw/+Fh uCI2wMqvqlhL1c9EZUFk1+awwM6u6Au9CWfZUkJYfDhGPGpyTB/lIM36ZF8U0FvD 7de90AtIu+9ed1KKJo4OXYZ15o9vPMoJnE26EmAfYpxz/ESVZDjx5zY9qrFkVQbH dH8NuEaxEG6/z/aUX0R95CwFQ7DpC0J3vqBBw/2S7R+UqY5C7+jFKQ+yt0e/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbZYUkeo9HKTnbrB2qt26l8+OhEwHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWqUsBNcjP22w5+6vvXpRWeq5UA2qoAfcGK /nWOme9Av5xF0wYJdeNfyQ8WxHU6f4AF4TkVpdCLr9w/cEpZx293Ld9C7WXLHksg +bnaudB905/ErRIW5K18ey1eKosjXTna6/SziIUoECc6KmJgeAHM2vdXv4BrNZOu TTAjS4NLK3XA0Ii9S1/nnSmURyrPD7BkGxbLwKoDO5SIrYEUeKeYn37W38cXpoW2 pZQ8a4+tzgsPEBolMnS+IEex8Vry8y1olCzf3CVtOc5uIp3trK8QK9/3K522L9zF 0dZY/sPjDnNXOSISzs0LeId5HLO7iLMbYf0xZpFv+129pDMPwqo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:05 2026 by rpki-client