$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: /XU28tKW6hAUmtke2rcx9EDAiuVcliuSccRg9NeFWtY= Subject key identifier: 82:46:A6:22:C8:C6:C2:72:5C:3D:4B:A4:60:26:5A:84:1E:C8:9F:66 Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 2901C58D154453E37948F68F22A4E97221736241 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:20:35 +0000 Manifest this update: Mon 20 Jul 2026 15:15:35 +0000 Manifest next update: Tue 21 Jul 2026 15:33:35 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 2: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) 3: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: sCDQjgahJb1SndaVR2u3C/E9p4GmmlyvDzdRd/JHdAA=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:01:c5:8d:15:44:53:e3:79:48:f6:8f:22:a4:e9:72:21:73:62:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Jul 20 15:15:35 2026 GMT Not After : Jul 21 15:33:35 2026 GMT Subject: CN=8246A622C8C6C2725C3D4BA460265A841EC89F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:3d:89:6a:41:e7:40:ff:07:b1:6a:58:65: 4c:f8:28:57:92:8c:83:05:cf:d5:f6:35:73:f2:76: f2:96:19:39:12:2b:e8:1b:5d:2f:a7:1c:d4:91:aa: c2:32:a7:9b:47:45:93:09:d3:9a:c1:61:cc:c6:1f: c9:94:fc:75:88:40:9d:cd:63:dd:a8:52:06:44:f9: c4:8a:e8:fc:eb:31:16:cf:33:bb:e1:a4:a6:27:2d: dc:0c:1f:54:9d:22:c5:17:f1:9e:c2:98:87:e4:2f: 8a:8c:dc:a4:23:1b:81:a7:b7:3a:52:c6:00:4e:97: 9b:b5:d2:1d:4a:22:33:88:6d:1c:f1:0e:1f:16:61: 55:bf:9d:b6:4e:d0:57:1c:f1:11:16:65:86:99:8b: cb:9a:49:25:a4:1e:49:65:a8:3c:a8:86:24:02:e3: 2e:36:69:df:a1:f5:3a:67:d5:52:6f:0d:3c:42:7e: e6:90:20:50:4a:70:50:8f:cd:59:19:90:e4:95:f5: 57:fd:1c:bb:70:af:39:e5:21:3d:95:7b:ec:16:9c: b4:cb:3c:8f:0c:3e:f2:a7:06:92:03:3d:6e:16:50: 58:5a:08:7e:9f:16:0a:19:22:30:19:93:50:b4:b8: 74:e4:b3:d0:e9:db:1f:74:8a:33:c2:c9:99:ca:74: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:46:A6:22:C8:C6:C2:72:5C:3D:4B:A4:60:26:5A:84:1E:C8:9F:66 X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c3:78:0c:90:d3:97:c7:a0:cf:77:5e:e3:4e:46:93:de:f5: 2a:7a:03:4a:91:46:52:66:4f:86:94:64:7e:88:0a:b2:e6:02: 99:e5:5b:5b:18:72:b8:83:26:25:f0:f9:2c:2a:81:89:e2:77: d2:5e:b5:0e:5f:f4:39:ed:e4:31:0f:03:31:0c:16:80:9b:02: a7:e8:6b:82:a9:af:da:b0:d4:e5:4d:91:fd:bf:dd:b0:e1:a1: 9f:49:be:e6:31:8d:10:df:a5:ae:9d:60:c3:08:a4:87:7b:29: f9:24:d5:76:db:32:25:0a:2e:e6:22:6b:91:69:0d:23:23:03: 3a:8c:9a:a4:46:1c:fc:a6:78:af:4a:4e:aa:a5:38:09:be:84: a7:e9:be:42:75:59:62:76:0a:77:88:1b:68:de:b0:e3:a6:c0: 58:cc:47:1a:4b:a1:9d:95:8f:9c:13:95:aa:74:c3:f1:42:7a: 22:5d:35:16:6d:22:0c:e0:af:6d:72:35:8d:1a:17:0b:31:96: b4:68:2a:41:66:82:22:8a:5b:2f:55:13:81:90:1d:d7:76:0a: 7a:71:50:98:cc:41:b4:4f:95:e8:75:ad:55:bf:78:6d:39:b7: 93:9e:71:d6:d2:03:b7:0c:55:56:a4:d0:44:f8:a9:3a:63:7b: 0c:df:10:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQHFjRVEU+N5SPaPIqTpciFzYkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA3MjAxNTE1MzVaFw0yNjA3MjExNTMzMzVaMDMxMTAvBgNV BAMTKDgyNDZBNjIyQzhDNkMyNzI1QzNENEJBNDYwMjY1QTg0MUVDODlGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqez2JakHnQP8HsWpYZUz4KFeS jIMFz9X2NXPydvKWGTkSK+gbXS+nHNSRqsIyp5tHRZMJ05rBYczGH8mU/HWIQJ3N Y92oUgZE+cSK6PzrMRbPM7vhpKYnLdwMH1SdIsUX8Z7CmIfkL4qM3KQjG4GntzpS xgBOl5u10h1KIjOIbRzxDh8WYVW/nbZO0Fcc8REWZYaZi8uaSSWkHkllqDyohiQC 4y42ad+h9Tpn1VJvDTxCfuaQIFBKcFCPzVkZkOSV9Vf9HLtwrznlIT2Ve+wWnLTL PI8MPvKnBpIDPW4WUFhaCH6fFgoZIjAZk1C0uHTks9Dp2x90ijPCyZnKdGpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkamIsjGwnJcPUukYCZahB7In2YwHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPDeAyQ05fHoM93XuNORpPe9Sp6A0qRRlJm T4aUZH6ICrLmApnlW1sYcriDJiXw+SwqgYnid9JetQ5f9Dnt5DEPAzEMFoCbAqfo a4Kpr9qw1OVNkf2/3bDhoZ9JvuYxjRDfpa6dYMMIpId7Kfkk1XbbMiUKLuYia5Fp DSMjAzqMmqRGHPymeK9KTqqlOAm+hKfpvkJ1WWJ2CneIG2jesOOmwFjMRxpLoZ2V j5wTlap0w/FCeiJdNRZtIgzgr21yNY0aFwsxlrRoKkFmgiKKWy9VE4GQHdd2Cnpx UJjMQbRPleh1rVW/eG05t5OecdbSA7cMVVak0ET4qTpjewzfEDk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:29:21 2026 by rpki-client