$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: uwJ8bRYyBl73TY+L6Shh+UdPEEgTwycWxF2CSrO0eOo= Subject key identifier: AC:27:C4:65:3B:75:77:47:27:F7:BE:3C:5C:74:D7:4D:F1:30:2E:A7 Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 7D1460A442A9514DA6AC1B1E2E41B70D9D3B7A98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:38:25 +0000 Manifest this update: Mon 21 Sep 2026 13:33:25 +0000 Manifest next update: Tue 22 Sep 2026 14:33:25 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) 3: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 4: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: Ax241mAeU8y6PURcu9ytpEH2rsUohsem1K9heQlZs6A=) 5: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) 6: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) 7: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:14:60:a4:42:a9:51:4d:a6:ac:1b:1e:2e:41:b7:0d:9d:3b:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: Sep 21 13:33:25 2026 GMT Not After : Sep 22 14:33:25 2026 GMT Subject: CN=AC27C4653B75774727F7BE3C5C74D74DF1302EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:d9:f7:b0:fc:3f:3b:21:d4:65:bc:d1:af: 3d:87:ef:3b:18:92:e5:f4:54:fe:fb:8e:34:de:d2: 48:cc:1d:79:91:16:09:ca:17:90:51:c9:45:de:d1: 78:a4:69:10:83:01:ac:20:a9:be:60:cc:45:10:84: 47:0c:52:c8:f8:0b:c5:6c:37:b6:c2:c1:d8:8c:e5: 3d:a2:ec:01:09:78:02:0b:24:f5:b6:2e:a8:3b:16: c6:74:00:59:8b:61:14:d0:78:13:d6:60:1d:de:ba: dc:70:d2:0f:c2:1c:12:e9:f5:b4:44:7a:b6:bd:ce: a2:5d:5f:9d:44:64:db:29:36:8a:9e:5a:a6:97:d0: 9d:31:d2:43:3c:c7:4e:2a:04:4f:da:82:9c:24:31: c7:ab:5c:6c:18:a3:86:d8:62:a6:81:8b:d7:ed:63: f5:f9:de:0c:58:06:a8:57:5f:bc:f8:c2:67:0e:3e: 41:7f:03:c8:d7:cf:c8:47:d0:90:d3:e0:21:ec:4e: b6:71:f2:3a:d8:0e:e1:54:28:ad:84:4b:a6:7d:b2: d7:57:fd:3e:10:09:bc:3a:3c:f6:62:08:f9:e0:e9: 8b:c7:91:4a:d2:8f:5f:5a:a2:9a:93:2d:f7:12:dd: a9:92:fe:aa:de:38:00:e1:8c:b7:d5:9f:dd:83:c0: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:27:C4:65:3B:75:77:47:27:F7:BE:3C:5C:74:D7:4D:F1:30:2E:A7 X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:08:f5:2d:88:1d:fe:3d:0c:b0:2e:21:2d:3b:22:d5:f2:34: 23:f7:d4:53:bc:57:64:8a:95:b0:59:92:2b:60:4d:a8:7f:ca: 67:f0:b8:dd:f3:fd:62:be:97:1e:93:6d:fd:a9:9a:5d:ef:38: c9:1d:b5:3b:e6:69:4f:65:fd:e9:da:6a:a2:b3:04:de:38:7c: 88:71:8a:86:8b:a2:69:c7:6e:b9:7e:56:1a:16:99:22:f5:ec: bd:2f:e9:f3:84:07:20:d0:d5:27:fc:8f:df:2b:96:f7:3d:12: 24:f9:9b:a1:e1:1d:fa:6f:a1:a5:e9:64:69:e0:a3:ae:37:95: cd:83:af:20:de:8a:2a:c8:b2:d8:5b:94:f4:98:c7:23:cd:ef: 2a:9f:6e:5d:8c:d3:2b:0b:01:bd:2e:2e:3f:4e:ee:f5:a2:82: d6:8e:4c:b6:26:47:77:47:ca:9f:d0:7b:0c:ee:1c:47:91:fc: d4:cb:21:2a:d0:d2:38:67:69:38:40:f3:d1:65:b0:7c:16:fe: 9c:bd:ec:d8:c9:f3:b4:69:7c:ad:fc:b6:6c:7c:2c:89:a5:69: d0:92:32:61:d1:c6:61:91:7f:da:b2:0b:71:26:0d:78:f4:48: 22:db:52:f9:fb:02:26:05:3d:24:dd:cc:de:50:ed:de:2b:cf: 88:2a:7c:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRRgpEKpUU2mrBseLkG3DZ07epgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA5MjExMzMzMjVaFw0yNjA5MjIxNDMzMjVaMDMxMTAvBgNV BAMTKEFDMjdDNDY1M0I3NTc3NDcyN0Y3QkUzQzVDNzRENzRERjEzMDJFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKktn3sPw/OyHUZbzRrz2H7zsY kuX0VP77jjTe0kjMHXmRFgnKF5BRyUXe0XikaRCDAawgqb5gzEUQhEcMUsj4C8Vs N7bCwdiM5T2i7AEJeAILJPW2Lqg7FsZ0AFmLYRTQeBPWYB3eutxw0g/CHBLp9bRE era9zqJdX51EZNspNoqeWqaX0J0x0kM8x04qBE/agpwkMcerXGwYo4bYYqaBi9ft Y/X53gxYBqhXX7z4wmcOPkF/A8jXz8hH0JDT4CHsTrZx8jrYDuFUKK2ES6Z9stdX /T4QCbw6PPZiCPng6YvHkUrSj19aopqTLfcS3amS/qreOADhjLfVn92DwBJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrCfEZTt1d0cn9748XHTXTfEwLqcwHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgI9S2IHf49DLAuIS07ItXyNCP31FO8V2SK lbBZkitgTah/ymfwuN3z/WK+lx6Tbf2pml3vOMkdtTvmaU9l/enaaqKzBN44fIhx ioaLomnHbrl+VhoWmSL17L0v6fOEByDQ1Sf8j98rlvc9EiT5m6HhHfpvoaXpZGng o643lc2DryDeiirIsthblPSYxyPN7yqfbl2M0ysLAb0uLj9O7vWigtaOTLYmR3dH yp/QewzuHEeR/NTLISrQ0jhnaThA89FlsHwW/py97NjJ87RpfK38tmx8LImladCS MmHRxmGRf9qyC3EmDXj0SCLbUvn7AiYFPSTdzN5Q7d4rz4gqfFQ= -----END CERTIFICATE-----Generated at Mon Sep 21 23:48:41 2026 by rpki-client