$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: T4KxmlbriSiR+2pzO/HlJf8943X9Jkli1RYk0N+1sHU= Subject key identifier: E2:44:5F:98:12:C1:6B:21:A2:AE:0D:65:09:CC:19:EF:50:C0:17:97 Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 53F48F03FCEC5C7F93433103A921FAE601C8CF0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 13:09:32 +0000 Manifest this update: Mon 02 Nov 2026 13:04:32 +0000 Manifest next update: Tue 03 Nov 2026 14:18:32 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) 2: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 3: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: oUaA8vbmxMP8ZgRVOgvvn8/o3HoUTwAYpL8Mevl7i7g=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:8f:03:fc:ec:5c:7f:93:43:31:03:a9:21:fa:e6:01:c8:cf:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Nov 2 13:04:32 2026 GMT Not After : Nov 3 14:18:32 2026 GMT Subject: CN=E2445F9812C16B21A2AE0D6509CC19EF50C01797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:6f:d1:f4:c1:f8:45:8a:c0:76:54:16:41: e3:28:4d:12:90:43:e0:cb:36:0b:04:f5:43:d2:1d: 29:46:00:46:46:a6:04:94:8e:4c:c8:93:15:10:92: 78:df:6e:37:e0:24:bb:1e:c1:71:51:56:32:74:3a: 04:49:4e:d1:4b:76:c0:b4:2e:ce:16:93:ff:ae:c1: 2f:90:b0:22:a9:14:b7:76:6d:87:ad:7a:20:e3:ec: 18:9d:b4:d7:75:c5:bd:b3:85:c8:f5:63:e0:4d:e7: cf:49:82:2e:2a:4a:ea:5e:29:87:2f:21:ce:71:50: 53:a0:0a:92:a6:d4:e5:ea:36:83:9d:6b:6b:8d:28: af:bc:25:20:31:98:67:97:88:f2:7b:22:65:2d:55: cf:4a:1a:44:e2:ac:ba:72:9c:0e:5f:7a:5d:5d:a0: 3b:c9:f2:5e:a2:b3:49:48:b2:8a:54:d2:3c:9b:e2: 23:75:a9:57:34:90:b8:1d:c0:df:c0:46:82:5a:a7: 7d:56:74:d4:91:f0:17:ca:e1:da:bc:82:fe:19:ac: 29:3c:81:bc:31:65:9f:b5:69:91:0c:70:56:b5:20: 4c:69:37:33:bd:78:27:61:60:89:63:07:ae:f0:64: 8d:01:6f:a0:65:42:0c:8f:7e:23:b1:93:5a:a3:50: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:5F:98:12:C1:6B:21:A2:AE:0D:65:09:CC:19:EF:50:C0:17:97 X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1b:28:c9:c5:a7:5f:3c:7f:1d:54:cc:fd:86:b4:b9:69:7c: 15:03:64:1b:36:1b:44:bd:c1:05:3b:9f:e1:1a:1d:50:d2:46: 32:8e:17:a5:69:9c:25:55:36:5b:e1:91:37:6f:3b:43:96:ec: 6a:85:54:fd:9d:7a:8f:df:88:05:61:61:2c:70:8d:24:cc:26: 05:4e:70:b0:35:c6:1a:a6:00:f4:bf:af:58:54:a1:44:bb:c7: e2:ea:3f:08:08:fd:25:24:7f:af:a8:2c:83:93:b2:ac:1f:82: 5b:a8:bd:78:65:6d:72:9f:88:08:aa:e3:d0:f0:84:60:47:1a: bf:fe:dd:14:c7:68:31:bd:90:01:0f:ae:25:b5:e2:be:c3:1c: 1b:77:ae:f5:72:af:80:3d:62:56:87:05:9a:b7:5f:f4:66:92: f1:3a:bb:94:67:a2:5f:4e:f3:ab:47:69:a5:cb:b5:4e:cd:c1: f9:a5:43:8b:48:4d:e9:5b:97:2e:55:ce:cf:33:bf:c9:a4:c8: 33:dc:7f:51:22:68:14:b2:4e:19:9b:46:d2:65:9f:03:7d:34: ec:b2:67:65:d0:40:c7:27:9c:65:ef:06:e9:5e:f4:ee:18:54: 99:d1:c2:23:5b:84:83:18:c1:c5:ca:ca:f2:97:79:b4:a6:46: c7:6d:5c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/SPA/zsXH+TQzEDqSH65gHIzw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjExMDIxMzA0MzJaFw0yNjExMDMxNDE4MzJaMDMxMTAvBgNV BAMTKEUyNDQ1Rjk4MTJDMTZCMjFBMkFFMEQ2NTA5Q0MxOUVGNTBDMDE3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCos2/R9MH4RYrAdlQWQeMoTRKQ Q+DLNgsE9UPSHSlGAEZGpgSUjkzIkxUQknjfbjfgJLsewXFRVjJ0OgRJTtFLdsC0 Ls4Wk/+uwS+QsCKpFLd2bYeteiDj7BidtNd1xb2zhcj1Y+BN589Jgi4qSupeKYcv Ic5xUFOgCpKm1OXqNoOda2uNKK+8JSAxmGeXiPJ7ImUtVc9KGkTirLpynA5fel1d oDvJ8l6is0lIsopU0jyb4iN1qVc0kLgdwN/ARoJap31WdNSR8BfK4dq8gv4ZrCk8 gbwxZZ+1aZEMcFa1IExpNzO9eCdhYIljB67wZI0Bb6BlQgyPfiOxk1qjUBKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kRfmBLBayGirg1lCcwZ71DAF5cwHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwbKMnFp188fx1UzP2GtLlpfBUDZBs2G0S9 wQU7n+EaHVDSRjKOF6VpnCVVNlvhkTdvO0OW7GqFVP2deo/fiAVhYSxwjSTMJgVO cLA1xhqmAPS/r1hUoUS7x+LqPwgI/SUkf6+oLIOTsqwfgluovXhlbXKfiAiq49Dw hGBHGr/+3RTHaDG9kAEPriW14r7DHBt3rvVyr4A9YlaHBZq3X/RmkvE6u5Rnol9O 86tHaaXLtU7NwfmlQ4tITelbly5Vzs8zv8mkyDPcf1EiaBSyThmbRtJlnwN9NOyy Z2XQQMcnnGXvBule9O4YVJnRwiNbhIMYwcXKyvKXebSmRsdtXCc= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:57 2026 by rpki-client