$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft (raw, json) Hash identifier: opRqCl6uHrsJ2u7abvQ7ETAbIURKPiDTFGejl+foEqs= Subject key identifier: BF:3B:97:11:1C:87:C2:55:5E:18:07:0B:74:CD:22:8F:D4:45:96:59 Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB Certificate issuer: /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Certificate serial: 1C5F6A9887EAFF7FB5296720E0C6E4AF74840E02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:14:09 +0000 Manifest this update: Tue 22 Sep 2026 06:09:09 +0000 Manifest next update: Wed 23 Sep 2026 09:07:09 +0000 Files and hashes: 1: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl (hash: 1fmY8XsvFHnm37VlQwrfINdJE+QG+acHgfJ0pu36LzI=) 2: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: u4GGrkPMCSBeQdSFpeeb+BeoQUTIplrdOwR16vFL5xY=) 3: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=) 4: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5f:6a:98:87:ea:ff:7f:b5:29:67:20:e0:c6:e4:af:74:84:0e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Validity Not Before: Sep 22 06:09:09 2026 GMT Not After : Sep 23 09:07:09 2026 GMT Subject: CN=BF3B97111C87C2555E18070B74CD228FD4459659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c0:32:49:fc:e8:e5:62:7a:04:81:5b:b3:a9: a8:22:a6:54:1e:ca:3f:bd:0f:eb:48:fb:8b:d2:a5: 78:e2:5b:22:57:65:b2:59:ac:13:c4:db:e8:6f:0c: 9a:53:f2:66:59:fb:30:26:93:1a:9b:ca:88:d4:76: ec:64:ba:00:33:bc:e0:13:7c:a6:c1:38:76:83:7b: b4:f5:ef:31:db:9c:1e:ae:ec:87:ad:e0:47:33:fb: 0a:9d:f4:dd:ca:76:26:89:ef:ab:db:e0:02:b0:ea: 4c:93:88:81:ed:c5:3e:dc:e7:8f:27:03:1e:84:0e: 1d:69:65:23:cb:2c:0e:40:7d:88:1d:c2:85:55:d7: 87:b4:d5:bd:6b:2e:e2:5f:e7:78:b5:ec:83:bc:60: 81:8e:46:04:60:7b:1e:3c:ef:8b:6c:8f:d4:fc:cf: 02:3c:22:2f:1a:23:2b:07:b4:f3:6d:2b:26:25:df: e3:1c:b2:9b:7a:0b:93:51:5d:7f:9d:d9:f1:0b:bf: e5:b9:8f:64:07:ff:1a:da:08:2f:ab:13:6d:ef:de: e1:fd:a8:ca:85:21:88:52:ca:54:f0:17:d6:63:5b: a1:30:52:d2:af:7b:c3:f2:86:b1:04:74:04:59:36: 3b:87:bb:a5:89:e3:98:67:ea:c6:79:d6:f8:4b:7f: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:97:11:1C:87:C2:55:5E:18:07:0B:74:CD:22:8F:D4:45:96:59 X509v3 Authority Key Identifier: keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7d:3d:b3:6b:a4:a5:07:23:cf:07:19:11:3a:21:3a:df:f5: 1f:14:19:59:c9:93:3e:bf:ab:59:1f:8f:66:04:ee:91:30:34: 62:37:ce:64:72:41:ee:31:f0:fc:c6:04:b4:6b:38:7f:39:79: 90:14:41:e2:9b:5a:e4:09:e3:72:0b:03:d6:fa:1a:dc:95:6c: c2:03:41:8a:46:2c:a6:a6:f0:ff:b3:d4:bb:29:3f:0d:ed:a1: 78:05:fa:e7:73:98:0b:94:74:1b:c4:2a:81:cd:08:04:85:d8: f4:99:5a:34:4a:a7:76:82:02:9e:ae:6f:78:4f:c6:93:d0:19: bf:68:d5:a8:b7:d6:70:19:93:c6:00:4a:2e:60:8a:95:dd:d7: 1a:31:05:b1:c9:c8:38:6e:b3:41:c6:da:27:7a:ff:58:91:44: 9a:e0:f4:12:6e:64:14:53:9b:95:ff:05:01:57:f9:78:77:d0: a7:74:04:e9:e6:89:04:eb:26:69:0b:c8:8e:4d:6d:e0:09:7a: dc:b1:d2:7b:18:99:b3:61:3e:dc:88:31:b3:ac:74:0c:51:fc: 97:41:0b:e8:22:98:28:df:22:2d:04:90:54:46:56:03:02:cf: 2f:0d:ac:01:a9:07:1c:b4:5e:03:a2:c7:b7:5f:b5:85:f0:76: 34:90:f0:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHF9qmIfq/3+1KWcg4Mbkr3SEDgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2QjAy QzEzREVDQjAeFw0yNjA5MjIwNjA5MDlaFw0yNjA5MjMwOTA3MDlaMDMxMTAvBgNV BAMTKEJGM0I5NzExMUM4N0MyNTU1RTE4MDcwQjc0Q0QyMjhGRDQ0NTk2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLwDJJ/OjlYnoEgVuzqagiplQe yj+9D+tI+4vSpXjiWyJXZbJZrBPE2+hvDJpT8mZZ+zAmkxqbyojUduxkugAzvOAT fKbBOHaDe7T17zHbnB6u7Iet4Ecz+wqd9N3KdiaJ76vb4AKw6kyTiIHtxT7c548n Ax6EDh1pZSPLLA5AfYgdwoVV14e01b1rLuJf53i17IO8YIGORgRgex4874tsj9T8 zwI8Ii8aIysHtPNtKyYl3+Mcspt6C5NRXX+d2fELv+W5j2QH/xraCC+rE23v3uH9 qMqFIYhSylTwF9ZjW6EwUtKve8PyhrEEdARZNjuHu6WJ45hn6sZ51vhLf07xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvzuXERyHwlVeGAcLdM0ij9RFllkwHwYDVR0j BBgwFoAUFzvZV93dtj7axYM8A/v2sCwT3sswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcxYmY5ODAtMjRkYS00ODY1LWE5ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdE REREQjYzRURBQzU4MzNDMDNGQkY2QjAyQzEzREVDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzNCRDk1N0RERERCNjNFREFDNTgzM0MwM0ZCRjZCMDJDMTNE RUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2 QjAyQzEzREVDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN9PbNrpKUHI88HGRE6ITrf9R8UGVnJkz6/ q1kfj2YE7pEwNGI3zmRyQe4x8PzGBLRrOH85eZAUQeKbWuQJ43ILA9b6GtyVbMID QYpGLKam8P+z1LspPw3toXgF+udzmAuUdBvEKoHNCASF2PSZWjRKp3aCAp6ub3hP xpPQGb9o1ai31nAZk8YASi5gipXd1xoxBbHJyDhus0HG2id6/1iRRJrg9BJuZBRT m5X/BQFX+Xh30Kd0BOnmiQTrJmkLyI5NbeAJetyx0nsYmbNhPtyIMbOsdAxR/JdB C+gimCjfIi0EkFRGVgMCzy8NrAGpBxy0XgOix7dftYXwdjSQ8Is= -----END CERTIFICATE-----Generated at Tue Sep 22 09:06:56 2026 by rpki-client