$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: 4bYJbLZc/1IwGrEpMkzZ89NGc/fv2Lyc1duaIxR0qzI= Subject key identifier: 04:BB:13:69:63:66:FF:50:DE:86:3C:2F:18:2F:9C:A6:0F:4D:36:C5 Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 4BAFBDF5E912FF722A9F0B914CC9E8092B20794A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 21:39:39 +0000 Manifest this update: Mon 02 Nov 2026 21:34:39 +0000 Manifest next update: Wed 04 Nov 2026 00:50:39 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: jSvgJz1QdTdReJJDsR3si3I2akEKYnF7e7mrKh4gl/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:af:bd:f5:e9:12:ff:72:2a:9f:0b:91:4c:c9:e8:09:2b:20:79:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Nov 2 21:34:39 2026 GMT Not After : Nov 4 00:50:39 2026 GMT Subject: CN=04BB13696366FF50DE863C2F182F9CA60F4D36C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:c9:b5:9f:a4:58:30:81:94:fa:2a:2c:66: d9:af:d6:38:55:73:cc:d2:79:81:98:f2:01:b0:2e: a0:d0:0c:db:ac:e6:0c:18:36:ee:d8:8a:ff:9a:b3: d1:a5:94:f6:ba:00:92:30:6c:d7:b8:55:e9:d9:72: e5:4d:48:69:74:07:7e:b8:5d:bb:04:8f:f9:9c:ae: 1f:9f:7c:3c:76:1d:3f:c4:23:9e:c3:60:fc:5b:d9: 4b:1f:f3:ca:3b:0b:0f:70:5c:c7:3b:97:41:69:41: 65:92:91:01:c4:28:e3:42:e7:57:87:7e:47:b8:58: 2b:d4:d8:ae:7a:44:f2:99:b2:96:95:ec:35:50:ba: f9:02:b7:6a:0a:5a:a0:47:85:eb:b1:a9:3f:e7:36: bf:32:15:2b:a4:91:f2:0c:5d:d6:3a:04:68:9d:66: 52:49:02:14:db:61:49:b6:1d:88:0d:2b:0e:7a:82: 6e:6e:7f:ef:8b:40:ea:f8:23:19:f4:fa:d1:27:82: d7:cf:04:cc:81:04:54:3a:a0:b5:4b:39:12:b2:8f: 8e:c4:c0:39:9f:33:9f:71:be:17:a2:4d:a8:25:90: b8:c1:52:67:c9:c4:ee:82:5e:e0:a3:78:b0:cd:53: a8:b2:6b:77:a2:bb:80:8c:91:ca:13:96:8b:e7:56: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:13:69:63:66:FF:50:DE:86:3C:2F:18:2F:9C:A6:0F:4D:36:C5 X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c7:9e:5a:bf:26:ee:46:78:ec:7b:70:16:46:70:05:1c:86: 7e:61:51:24:96:56:e2:c8:de:b1:42:43:c8:92:c9:7f:d8:09: 2a:f7:30:7b:ec:35:8c:7f:e6:ca:8b:37:26:01:fc:24:27:66: ef:ef:5a:32:76:9e:e8:d8:52:af:bd:a6:24:7e:14:96:f3:7d: 11:2b:5b:02:22:02:89:b5:4c:af:9a:bb:b7:1f:45:36:bd:f4: 8c:14:53:73:56:06:85:65:64:ea:51:5a:e3:19:94:ca:8f:c1: 34:4f:3e:32:aa:21:5e:82:ae:33:75:4e:3c:ba:19:8b:0b:ca: 9a:37:cf:24:44:54:0a:83:b9:8b:0f:b4:2e:5a:00:9b:74:41: 45:9c:f8:90:92:60:2b:0b:f9:8f:d0:e8:90:89:ba:f5:6a:f4: 81:61:de:76:84:89:95:64:5c:de:28:3a:e3:dc:57:e2:57:01: 3c:47:fa:d4:51:67:d1:1b:3e:84:57:cb:05:f4:26:2c:6e:85: cf:7f:55:28:09:c7:53:79:51:62:03:12:b0:9f:2f:3d:b4:c1: e4:63:c9:9a:56:f6:86:31:36:4e:28:34:69:f3:79:fb:7c:ef: ab:33:8e:d1:be:f5:bc:78:f6:dd:1c:cf:69:57:0c:39:29:01: ea:48:82:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6+99ekS/3IqnwuRTMnoCSsgeUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjExMDIyMTM0MzlaFw0yNjExMDQwMDUwMzlaMDMxMTAvBgNV BAMTKDA0QkIxMzY5NjM2NkZGNTBERTg2M0MyRjE4MkY5Q0E2MEY0RDM2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxsm1n6RYMIGU+iosZtmv1jhV c8zSeYGY8gGwLqDQDNus5gwYNu7Yiv+as9GllPa6AJIwbNe4VenZcuVNSGl0B364 XbsEj/mcrh+ffDx2HT/EI57DYPxb2Usf88o7Cw9wXMc7l0FpQWWSkQHEKONC51eH fke4WCvU2K56RPKZspaV7DVQuvkCt2oKWqBHheuxqT/nNr8yFSukkfIMXdY6BGid ZlJJAhTbYUm2HYgNKw56gm5uf++LQOr4Ixn0+tEngtfPBMyBBFQ6oLVLORKyj47E wDmfM59xvheiTaglkLjBUmfJxO6CXuCjeLDNU6iya3eiu4CMkcoTlovnVsgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBLsTaWNm/1DehjwvGC+cpg9NNsUwHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjHnlq/Ju5GeOx7cBZGcAUchn5hUSSWVuLI 3rFCQ8iSyX/YCSr3MHvsNYx/5sqLNyYB/CQnZu/vWjJ2nujYUq+9piR+FJbzfREr WwIiAom1TK+au7cfRTa99IwUU3NWBoVlZOpRWuMZlMqPwTRPPjKqIV6CrjN1Tjy6 GYsLypo3zyREVAqDuYsPtC5aAJt0QUWc+JCSYCsL+Y/Q6JCJuvVq9IFh3naEiZVk XN4oOuPcV+JXATxH+tRRZ9EbPoRXywX0Jixuhc9/VSgJx1N5UWIDErCfLz20weRj yZpW9oYxNk4oNGnzeft876szjtG+9bx49t0cz2lXDDkpAepIgkI= -----END CERTIFICATE-----Generated at Tue Nov 3 15:26:39 2026 by rpki-client