$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: 3inK5nl+nRQIHLKUDpilE+N4OjlVyZ97jIBtY8uJoSI= Subject key identifier: 8F:9D:92:B6:FE:30:E1:2F:18:68:0F:8B:E5:4C:74:CA:9B:5D:5D:6E Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 2E299479FA33BBE0E541B0078A18261F8DBB5AC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: FB Signing time: Wed 04 Nov 2026 20:04:01 +0000 Manifest this update: Wed 04 Nov 2026 19:59:01 +0000 Manifest next update: Thu 05 Nov 2026 20:37:01 +0000 Files and hashes: 1: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: yFRP3RcE97bJUrCtbE9ppOHT7Dt9Vy/ed2F+S+vKlXs=) 2: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:29:94:79:fa:33:bb:e0:e5:41:b0:07:8a:18:26:1f:8d:bb:5a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Nov 4 19:59:01 2026 GMT Not After : Nov 5 20:37:01 2026 GMT Subject: CN=8F9D92B6FE30E12F18680F8BE54C74CA9B5D5D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:1b:8b:90:4c:14:d4:48:f9:ec:b0:0d:8a: 7f:0d:d1:17:7e:a4:8b:e3:b2:da:6a:8e:7d:85:a6: df:4b:f0:af:65:42:3e:92:3f:f7:34:d8:0d:b4:ca: 73:55:fa:39:bc:c2:20:53:57:52:05:a5:f7:95:08: dd:fc:0b:93:02:86:d8:6f:f4:3d:26:4e:1b:12:7c: ee:90:e7:f8:2c:42:06:62:03:ce:4e:e9:2e:7b:16: 0a:a7:72:62:de:37:e6:6d:ca:75:07:9f:18:a4:8d: 64:46:d9:2d:d3:25:75:bb:ad:56:71:51:38:2b:69: 39:4d:bd:26:38:bf:35:ec:5d:b6:5f:5e:29:3c:af: 9a:e6:ef:29:12:5c:68:23:64:26:a0:6a:7e:d9:a4: ee:16:14:9e:22:ce:23:f3:d7:ea:42:38:0e:5e:fe: 11:ec:78:5d:d5:55:c3:a5:7a:c6:f5:54:ce:76:c7: 3b:10:27:4e:7a:fb:29:36:89:4a:df:95:f0:4f:a2: 62:5c:ec:cd:1c:3c:7f:38:23:8e:60:29:46:1e:3c: 07:cb:3b:80:d1:23:31:61:d8:77:20:8b:05:39:e2: 1b:2d:01:ce:6c:4f:34:45:bb:4a:4b:0e:1f:38:4b: 1c:3f:3e:1d:91:a2:cb:b3:6d:0f:87:33:44:fd:04: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9D:92:B6:FE:30:E1:2F:18:68:0F:8B:E5:4C:74:CA:9B:5D:5D:6E X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3e:31:db:f2:ab:c9:dd:10:56:a4:45:46:1c:32:4d:7f:6a: c2:2b:ca:e6:6c:ea:0c:05:e3:2c:59:f3:7a:04:fd:61:6f:5b: 86:a2:1b:81:b8:42:0e:12:85:da:c0:78:bf:b3:f9:77:b0:21: ca:67:f8:36:09:83:9e:a8:3d:1c:f0:36:64:9a:26:9f:e4:fb: 36:1a:aa:7a:6c:58:00:93:d1:29:a7:3c:c9:d2:ae:a0:5a:9f: 68:fd:db:a0:b4:ef:ab:8b:82:bf:bf:f7:20:c1:63:1b:9c:56: c0:91:10:6e:e2:3f:73:34:ba:d4:0c:ae:03:b9:39:58:25:4e: 1d:c9:59:a3:d3:57:a9:21:e9:39:1d:b5:3a:a1:15:95:84:3c: d6:24:62:3a:9a:ac:59:12:5e:61:24:7d:02:c4:25:33:c9:0d: b2:aa:cb:6a:9a:3b:97:c2:f2:46:66:f5:37:90:70:9f:77:10: 59:63:31:17:12:8f:24:cc:f1:7d:5f:e3:e2:7f:37:86:14:36: fe:e6:89:25:e9:ea:8e:c4:a4:ba:06:c2:38:54:28:03:66:8b: 4a:34:92:8b:ef:66:2e:47:4a:0b:84:52:5e:e8:c0:45:3a:35: ac:83:d1:6c:aa:39:c3:b6:c8:1a:7c:29:e4:97:fb:9f:6c:99: 6e:2e:cb:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULimUefozu+DlQbAHihgmH427WsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjExMDQxOTU5MDFaFw0yNjExMDUyMDM3MDFaMDMxMTAvBgNV BAMTKDhGOUQ5MkI2RkUzMEUxMkYxODY4MEY4QkU1NEM3NENBOUI1RDVENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntRuLkEwU1Ej57LANin8N0Rd+ pIvjstpqjn2Fpt9L8K9lQj6SP/c02A20ynNV+jm8wiBTV1IFpfeVCN38C5MChthv 9D0mThsSfO6Q5/gsQgZiA85O6S57FgqncmLeN+ZtynUHnxikjWRG2S3TJXW7rVZx UTgraTlNvSY4vzXsXbZfXik8r5rm7ykSXGgjZCagan7ZpO4WFJ4iziPz1+pCOA5e /hHseF3VVcOlesb1VM52xzsQJ056+yk2iUrflfBPomJc7M0cPH84I45gKUYePAfL O4DRIzFh2HcgiwU54hstAc5sTzRFu0pLDh84Sxw/Ph2RosuzbQ+HM0T9BDbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj52Stv4w4S8YaA+L5Ux0yptdXW4wHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk+Mdvyq8ndEFakRUYcMk1/asIryuZs6gwF 4yxZ83oE/WFvW4aiG4G4Qg4ShdrAeL+z+XewIcpn+DYJg56oPRzwNmSaJp/k+zYa qnpsWACT0SmnPMnSrqBan2j926C076uLgr+/9yDBYxucVsCREG7iP3M0utQMrgO5 OVglTh3JWaPTV6kh6TkdtTqhFZWEPNYkYjqarFkSXmEkfQLEJTPJDbKqy2qaO5fC 8kZm9TeQcJ93EFljMRcSjyTM8X1f4+J/N4YUNv7miSXp6o7EpLoGwjhUKANmi0o0 kovvZi5HSguEUl7owEU6NayD0WyqOcO2yBp8KeSX+59smW4uy2k= -----END CERTIFICATE-----Generated at Thu Nov 5 01:17:11 2026 by rpki-client