$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: 0fL14Wmqc25nvnWVdu2ZDTeYe8jCi32KDdDq1PmXPDQ= Subject key identifier: 5B:D4:49:28:B5:7F:A4:EA:25:83:4C:99:8B:D6:0C:A2:D2:92:70:EB Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 017C24AB5A5D70ACEB160A061A26781895F81802 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 01D4 Signing time: Tue 17 Mar 2026 12:12:13 +0000 Manifest this update: Tue 17 Mar 2026 12:07:13 +0000 Manifest next update: Fri 20 Mar 2026 19:46:13 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: ZUG5svzFeWsuA5KZ5YwPS/4IGoyUJOD3EAVnKH1tm4w=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 19:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7c:24:ab:5a:5d:70:ac:eb:16:0a:06:1a:26:78:18:95:f8:18:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Mar 17 12:07:13 2026 GMT Not After : Mar 20 19:46:13 2026 GMT Subject: CN=5BD44928B57FA4EA25834C998BD60CA2D29270EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:1e:d3:91:61:d1:7d:7c:22:6c:41:23:b9: 17:93:55:9a:9a:d9:dc:a3:45:1a:45:c0:30:d2:56: 95:62:8d:8a:0d:93:bf:41:2e:7a:ef:03:b0:c6:36: dc:cf:2a:1a:68:41:cb:48:33:04:4e:ed:17:34:5a: 0c:9e:06:ed:38:48:46:1e:5d:cb:20:2d:0f:fb:70: 5b:dd:5c:4d:73:3e:d3:ee:e7:01:01:83:8c:cf:48: ac:96:c3:8a:06:42:8a:25:ab:23:11:bf:41:1a:b3: 3f:29:ef:58:37:01:08:29:94:c3:33:b9:45:2f:e8: 68:e8:3d:eb:4e:e3:0c:4b:37:85:39:29:60:dd:72: 20:8d:1c:a9:78:4f:34:53:15:3d:4d:bc:28:cb:79: bd:cf:7f:1e:9e:bb:d3:d1:c7:82:9d:c6:83:6a:3f: ff:73:bc:c6:33:ed:b1:d7:b5:f9:76:4a:86:6f:a0: 35:b5:7a:db:4e:4c:f2:05:d4:54:5d:86:2c:c0:7d: 9e:a4:be:d0:bf:e8:0a:a7:40:a5:87:7b:95:08:97: 81:ee:57:00:9c:66:7c:9f:d8:90:18:6b:73:64:a8: bf:74:8e:09:f8:03:49:cd:de:bc:0c:9f:69:33:af: e2:d6:df:2f:09:dd:ac:6f:fe:fa:39:b1:0d:ca:81: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D4:49:28:B5:7F:A4:EA:25:83:4C:99:8B:D6:0C:A2:D2:92:70:EB X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b9:6d:11:c6:d5:bf:2b:29:a0:39:86:99:de:3d:a9:89:26: ef:22:2a:5a:28:28:76:33:da:b8:16:88:60:36:fd:f0:d8:84: 65:0e:30:c8:f6:2f:15:ad:e1:55:9d:f9:d0:3e:4d:1d:96:f8: 53:53:60:7e:9c:a6:9d:08:44:88:12:63:85:18:fd:c5:41:f2: 09:fd:81:4d:5b:23:86:4a:0e:aa:f9:80:38:21:09:3e:b7:00: f5:4f:c0:c1:9f:e0:16:f6:32:09:76:cf:d3:0d:b0:51:24:2c: c6:3c:ee:6f:93:db:74:6b:dc:1a:7d:f3:bc:3a:2c:a4:4b:8a: 2c:cf:7b:da:c5:08:7b:ab:67:e6:51:9e:c7:11:fc:bd:06:ba: a6:02:7a:51:aa:c6:ab:0a:30:96:f2:75:98:fd:bf:dc:df:ff: b3:f5:b4:a9:4e:5e:d2:9f:d8:ba:0e:e2:6b:7e:5c:26:7d:27: 14:7b:86:7c:d9:2e:1e:f6:c9:2a:7f:73:a9:c0:af:09:60:8a: 84:ca:e0:06:b0:17:ec:28:c3:5b:30:7a:30:54:4a:25:dc:53: 79:26:67:5c:bf:55:92:37:d3:b2:f6:2a:12:80:78:eb:b6:52: 18:76:0c:90:7a:f5:3b:84:de:61:eb:c0:67:8e:92:12:cf:6e: 1a:5b:60:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXwkq1pdcKzrFgoGGiZ4GJX4GAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNjAzMTcxMjA3MTNaFw0yNjAzMjAxOTQ2MTNaMDMxMTAvBgNV BAMTKDVCRDQ0OTI4QjU3RkE0RUEyNTgzNEM5OThCRDYwQ0EyRDI5MjcwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJh7TkWHRfXwibEEjuReTVZqa 2dyjRRpFwDDSVpVijYoNk79BLnrvA7DGNtzPKhpoQctIMwRO7Rc0WgyeBu04SEYe XcsgLQ/7cFvdXE1zPtPu5wEBg4zPSKyWw4oGQoolqyMRv0Easz8p71g3AQgplMMz uUUv6GjoPetO4wxLN4U5KWDdciCNHKl4TzRTFT1NvCjLeb3Pfx6eu9PRx4KdxoNq P/9zvMYz7bHXtfl2SoZvoDW1ettOTPIF1FRdhizAfZ6kvtC/6AqnQKWHe5UIl4Hu VwCcZnyf2JAYa3NkqL90jgn4A0nN3rwMn2kzr+LW3y8J3axv/vo5sQ3KgXHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9RJKLV/pOolg0yZi9YMotKScOswHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFC5bRHG1b8rKaA5hpnePamJJu8iKlooKHYz 2rgWiGA2/fDYhGUOMMj2LxWt4VWd+dA+TR2W+FNTYH6cpp0IRIgSY4UY/cVB8gn9 gU1bI4ZKDqr5gDghCT63APVPwMGf4Bb2Mgl2z9MNsFEkLMY87m+T23Rr3Bp987w6 LKRLiizPe9rFCHurZ+ZRnscR/L0GuqYCelGqxqsKMJbydZj9v9zf/7P1tKlOXtKf 2LoO4mt+XCZ9JxR7hnzZLh72ySp/c6nArwlgioTK4AawF+wow1swejBUSiXcU3km Z1y/VZI307L2KhKAeOu2Uhh2DJB69TuE3mHrwGeOkhLPbhpbYNs= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client