$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: r70MExVNoSu7zuI7V5G/HHHCYv0+4AOoZEgBFnrViSc= Subject key identifier: 92:64:B8:8E:4B:48:07:05:CC:13:06:CE:7F:E0:A1:60:4A:65:31:81 Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 1E3270AE497F78B4684C3315EF8E57852367F517 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:53:11 +0000 Manifest this update: Tue 02 Jun 2026 14:48:11 +0000 Manifest next update: Wed 03 Jun 2026 18:38:11 +0000 Files and hashes: 1: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: /PHxb6WWGE2TPcGmVHc5oukQLcSEr4uGHZRt1QwtKH4=) 2: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:32:70:ae:49:7f:78:b4:68:4c:33:15:ef:8e:57:85:23:67:f5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Jun 2 14:48:11 2026 GMT Not After : Jun 3 18:38:11 2026 GMT Subject: CN=9264B88E4B480705CC1306CE7FE0A1604A653181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:30:26:bd:c8:1a:5e:57:06:86:19:55:fa: 87:af:7e:57:e6:f4:01:5d:fa:da:6c:c0:f0:4e:7b: 99:6d:db:d7:4f:0b:01:5a:4e:e1:40:32:77:f5:23: 96:f5:6d:aa:f8:42:ba:f5:85:8d:0e:63:5b:67:62: 0f:94:ce:14:56:c9:46:3f:27:59:d5:f6:21:5c:0f: 44:67:02:6c:68:01:3e:55:f8:c4:aa:87:16:b9:cb: b3:59:db:1c:c8:05:22:56:48:27:7a:73:57:dc:58: 3e:3f:12:d6:4a:ee:69:f4:a2:dd:26:d9:98:ea:f4: ae:ec:bc:31:d8:3d:5f:a1:15:53:e2:b4:73:85:99: 78:2d:41:db:13:b1:9c:9c:e6:1a:52:45:37:8d:4f: 8e:23:8b:d7:ca:40:e3:37:43:b3:e8:57:3f:8e:05: 97:54:e9:e2:a6:b7:91:33:95:1d:3e:33:e6:67:39: 6a:42:72:00:a4:d4:ca:dd:41:d2:01:d7:ef:b8:b6: 9c:85:3d:4f:bc:0b:98:2f:44:b3:d2:75:57:86:e5: 14:ff:00:d5:31:a1:04:57:9d:de:0f:dc:a1:54:1c: e9:ad:be:f9:52:c5:7a:99:95:25:7e:83:bc:25:df: 25:13:be:7c:e6:5d:11:89:a1:6c:6a:18:f1:e7:d5: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:64:B8:8E:4B:48:07:05:CC:13:06:CE:7F:E0:A1:60:4A:65:31:81 X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ad:37:df:fa:91:59:89:9a:f3:ea:39:cd:c2:0e:d5:44:f0: 4e:05:df:5a:a4:ed:59:5c:82:c9:7b:93:f6:fe:6f:e8:e2:19: bf:5b:75:93:47:31:f9:c8:03:81:fc:e5:c2:db:f4:bc:56:0b: 18:b8:6e:04:56:ab:24:02:c1:81:38:97:d3:b8:09:58:bc:f6: fb:1b:6c:5f:3c:7f:17:aa:ec:de:92:f9:8a:84:10:d4:f8:46: 41:12:b5:54:4e:de:a9:30:01:56:4a:1c:59:ad:57:bf:b9:d4: bd:0d:cc:df:bc:7f:3c:7f:ad:4f:ac:ad:66:5a:63:8d:ca:ff: 6d:2d:34:c7:55:75:37:0c:ce:c3:45:ac:28:66:43:5a:69:28: 9f:25:6a:05:e1:3c:12:6d:7d:bd:5b:0e:f6:d6:24:d7:c5:28: 0d:e5:d3:02:68:b2:f9:bf:db:53:19:9d:b9:a8:01:a7:06:b1: d0:02:3a:df:79:e2:bb:52:85:a2:98:eb:0b:8e:e7:7e:fa:73: ea:0e:04:ea:66:93:11:10:f9:a8:f0:8b:40:64:b8:6e:eb:96: 5b:c4:c0:51:4b:ec:c8:2c:82:1e:9e:c1:2c:e9:b4:cf:5d:fd: e1:5d:f9:bd:14:8f:ba:15:77:b1:d9:07:e6:95:d1:6d:bb:d1: ab:75:d0:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjJwrkl/eLRoTDMV745XhSNn9RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA2MDIxNDQ4MTFaFw0yNjA2MDMxODM4MTFaMDMxMTAvBgNV BAMTKDkyNjRCODhFNEI0ODA3MDVDQzEzMDZDRTdGRTBBMTYwNEE2NTMxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JzAmvcgaXlcGhhlV+oevflfm 9AFd+tpswPBOe5lt29dPCwFaTuFAMnf1I5b1bar4Qrr1hY0OY1tnYg+UzhRWyUY/ J1nV9iFcD0RnAmxoAT5V+MSqhxa5y7NZ2xzIBSJWSCd6c1fcWD4/EtZK7mn0ot0m 2Zjq9K7svDHYPV+hFVPitHOFmXgtQdsTsZyc5hpSRTeNT44ji9fKQOM3Q7PoVz+O BZdU6eKmt5EzlR0+M+ZnOWpCcgCk1MrdQdIB1++4tpyFPU+8C5gvRLPSdVeG5RT/ ANUxoQRXnd4P3KFUHOmtvvlSxXqZlSV+g7wl3yUTvnzmXRGJoWxqGPHn1aThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkmS4jktIBwXMEwbOf+ChYEplMYEwHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2tN9/6kVmJmvPqOc3CDtVE8E4F31qk7Vlc gsl7k/b+b+jiGb9bdZNHMfnIA4H85cLb9LxWCxi4bgRWqyQCwYE4l9O4CVi89vsb bF88fxeq7N6S+YqEENT4RkEStVRO3qkwAVZKHFmtV7+51L0NzN+8fzx/rU+srWZa Y43K/20tNMdVdTcMzsNFrChmQ1ppKJ8lagXhPBJtfb1bDvbWJNfFKA3l0wJosvm/ 21MZnbmoAacGsdACOt954rtShaKY6wuO5376c+oOBOpmkxEQ+ajwi0BkuG7rllvE wFFL7Mgsgh6ewSzptM9d/eFd+b0Uj7oVd7HZB+aV0W270at10Cs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:34 2026 by rpki-client