$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json) Hash identifier: qPkOLBycGF4dlYuy+18sVquxUHz30Ep0x/jm7I8XHF4= Subject key identifier: A6:53:D7:1E:58:AF:8A:1D:B3:E7:D6:5F:07:79:CC:30:FB:7F:96:10 Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A Certificate serial: 7FF061C6FE51E9E19D83284ACDC7EAE492D2575F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:18:37 +0000 Manifest this update: Tue 02 Jun 2026 15:13:37 +0000 Manifest next update: Wed 03 Jun 2026 17:42:37 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=) 2: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: lJyPlc9Bz6grdhmFuGMmwIzKwWG+s71DJ8gFfPEAL2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f0:61:c6:fe:51:e9:e1:9d:83:28:4a:cd:c7:ea:e4:92:d2:57:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A Validity Not Before: Jun 2 15:13:37 2026 GMT Not After : Jun 3 17:42:37 2026 GMT Subject: CN=A653D71E58AF8A1DB3E7D65F0779CC30FB7F9610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:02:11:c6:3f:bf:65:54:62:40:52:3e:e8: 78:8d:52:ec:18:7c:17:f4:e6:d8:2a:41:e2:48:b5: f8:1f:ff:7c:19:9c:5d:33:6a:c9:c5:92:17:c2:f3: 74:f9:22:51:2e:08:c8:e0:ee:d8:b5:6d:e4:f1:14: a3:3b:27:ea:a9:17:a9:1a:2f:ba:06:42:32:be:06: d8:ce:47:a3:38:6b:83:7b:d1:c9:25:26:29:01:f2: fa:42:a2:36:77:e2:ee:ba:99:e1:5a:2c:8f:dc:40: d0:de:a1:ad:d1:23:4b:87:0b:9b:c0:b1:9c:ad:1a: 56:b8:be:a7:df:20:91:5e:65:a6:16:d1:fa:2b:1c: 29:03:40:05:ee:44:16:27:a9:b2:a0:d9:ad:03:96: c7:73:76:11:af:e3:4a:71:0e:37:96:a9:dc:f7:65: 4a:53:d9:e1:e2:8c:e6:66:9f:f6:5d:77:36:3a:4a: a2:14:ab:8e:c1:ce:a1:17:eb:6f:a6:66:61:8c:ab: 63:e2:03:2a:c9:e4:82:e9:7c:79:87:77:98:7e:ef: 36:39:22:7c:19:26:5a:d4:6b:6a:07:c6:ee:8a:3e: 40:a4:d4:f3:da:e6:d7:ff:2c:87:af:b4:5c:22:70: c4:38:99:d7:ef:dd:44:66:a4:06:60:f6:12:35:27: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:53:D7:1E:58:AF:8A:1D:B3:E7:D6:5F:07:79:CC:30:FB:7F:96:10 X509v3 Authority Key Identifier: keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:03:b3:f5:0e:94:72:0c:ce:eb:ec:ae:b1:e2:b8:75:db:4e: cf:ac:3e:59:f1:20:a4:af:f4:c1:d0:f5:dd:14:09:a1:e8:e8: c2:7e:bb:bb:3e:f3:12:ee:d5:47:7c:82:26:2a:42:21:88:37: b5:99:3d:50:8a:ad:bc:df:1c:51:3d:16:1f:13:a2:97:d3:f8: 37:6a:f2:01:c5:bc:78:95:75:62:47:f4:08:3b:9e:e6:5c:62: 31:76:21:13:e2:b4:20:e9:4b:31:01:27:a2:14:f0:60:25:9e: aa:22:15:6c:56:b8:a6:e2:1e:ab:80:6a:36:64:6d:27:64:ae: 13:35:21:fb:ad:bc:a8:80:ac:31:f6:d2:bc:7d:6c:c8:1c:5c: c5:3d:a6:8b:74:8c:b0:95:1c:3c:d4:4a:21:84:34:71:06:7f: cb:31:1c:89:c9:2f:2b:f4:b1:53:b9:68:62:64:2e:96:ca:bb: a7:09:ac:e9:e3:6f:a2:78:8e:88:22:e0:92:09:9c:70:a0:9a: c6:2f:d2:71:e2:f5:d4:24:d3:c1:b4:3d:e7:4d:87:86:40:d2: f8:19:4c:05:23:64:5e:0a:64:5f:3c:36:1a:dc:78:50:9f:4e: 2a:9a:05:94:67:46:61:c6:20:69:12:c2:7a:00:77:68:77:2b: 67:42:35:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/Bhxv5R6eGdgyhKzcfq5JLSV18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIy NjJENTA1QTAeFw0yNjA2MDIxNTEzMzdaFw0yNjA2MDMxNzQyMzdaMDMxMTAvBgNV BAMTKEE2NTNENzFFNThBRjhBMURCM0U3RDY1RjA3NzlDQzMwRkI3Rjk2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbowIRxj+/ZVRiQFI+6HiNUuwY fBf05tgqQeJItfgf/3wZnF0zasnFkhfC83T5IlEuCMjg7ti1beTxFKM7J+qpF6ka L7oGQjK+BtjOR6M4a4N70cklJikB8vpCojZ34u66meFaLI/cQNDeoa3RI0uHC5vA sZytGla4vqffIJFeZaYW0forHCkDQAXuRBYnqbKg2a0DlsdzdhGv40pxDjeWqdz3 ZUpT2eHijOZmn/ZddzY6SqIUq47BzqEX62+mZmGMq2PiAyrJ5ILpfHmHd5h+7zY5 InwZJlrUa2oHxu6KPkCk1PPa5tf/LIevtFwicMQ4mdfv3URmpAZg9hI1J/RnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUplPXHlivih2z59ZfB3nMMPt/lhAwHwYDVR0j BBgwFoAUwX2RGtZyqejvQYtoZVylEiYtUFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2JkYzgtZDE5NS00YzdkLWIzZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFE NjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIyNjJENTA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTdEOTExQUQ2NzJBOUU4RUY0MThCNjg2NTVDQTUxMjI2MkQ1 MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1 MTIyNjJENTA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwDs/UOlHIMzuvsrrHiuHXbTs+sPlnxIKSv 9MHQ9d0UCaHo6MJ+u7s+8xLu1Ud8giYqQiGIN7WZPVCKrbzfHFE9Fh8TopfT+Ddq 8gHFvHiVdWJH9Ag7nuZcYjF2IRPitCDpSzEBJ6IU8GAlnqoiFWxWuKbiHquAajZk bSdkrhM1IfutvKiArDH20rx9bMgcXMU9pot0jLCVHDzUSiGENHEGf8sxHInJLyv0 sVO5aGJkLpbKu6cJrOnjb6J4jogi4JIJnHCgmsYv0nHi9dQk08G0PedNh4ZA0vgZ TAUjZF4KZF88NhrceFCfTiqaBZRnRmHGIGkSwnoAd2h3K2dCNZ0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:35 2026 by rpki-client