$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json) Hash identifier: y9RGn2af4rH9Z8ZbOh4QKE4JTtTzDns+fNZit/HVDh4= Subject key identifier: 1B:D8:5D:46:60:09:A5:23:A5:A7:32:79:C7:97:2A:15:44:B8:DD:9E Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A Certificate serial: 6B707469CC6F6B8B8105B8B45B67C2986AD297AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 14:05:48 +0000 Manifest this update: Wed 04 Nov 2026 14:00:48 +0000 Manifest next update: Thu 05 Nov 2026 17:30:48 +0000 Files and hashes: 1: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: r/IB1H156I/29KjRr1zzQ5hNmWq4nOMheW/Ecs+4i9U=) 2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:70:74:69:cc:6f:6b:8b:81:05:b8:b4:5b:67:c2:98:6a:d2:97:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A Validity Not Before: Nov 4 14:00:48 2026 GMT Not After : Nov 5 17:30:48 2026 GMT Subject: CN=1BD85D466009A523A5A73279C7972A1544B8DD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:c7:72:64:70:e9:8d:c3:0d:38:8a:93:cf: 6f:87:fe:7a:38:35:50:1c:67:be:3b:4a:71:17:38: a7:c5:66:8f:e0:bb:35:a1:89:ff:79:99:be:fc:ae: 99:41:cd:27:d8:de:44:82:bf:5d:ae:aa:a3:82:6d: 68:b8:d7:e9:67:0d:2c:be:6a:9a:7b:3c:e2:f4:74: ec:50:f4:39:c3:a3:30:06:f1:1c:b8:d1:20:ec:4f: 9a:1a:35:a7:3c:df:3f:cb:2c:f6:4e:4f:bd:c1:10: bc:49:e7:20:5c:70:83:e5:db:e4:9d:2a:d1:ec:fb: f7:ac:b4:7d:67:4b:76:38:ea:ab:6a:6b:55:c8:82: e3:46:e6:f7:90:63:18:42:90:c8:25:a0:8f:8c:a8: c9:e2:d3:3d:0e:d0:b6:2a:3d:f0:ba:c6:0f:49:bd: 91:4a:2e:a2:5a:e5:08:60:67:c9:55:6a:7a:d1:35: ef:ca:5c:10:fd:99:94:72:88:3c:e5:c3:ac:46:22: 2d:e8:fe:0e:59:e9:48:db:c3:66:61:90:7f:5d:3e: a5:c8:e3:5b:40:20:c7:b4:24:29:85:fa:40:96:4e: 2b:21:a0:4d:26:68:81:5e:98:52:36:42:87:b0:5b: 91:d5:13:17:4c:2e:3e:74:8e:ee:b6:37:35:43:f0: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:5D:46:60:09:A5:23:A5:A7:32:79:C7:97:2A:15:44:B8:DD:9E X509v3 Authority Key Identifier: keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5d:56:4e:b4:2d:23:29:42:52:bd:ae:20:7c:7d:3d:5e:d8: 2c:07:a2:7f:3b:f6:b8:6b:c9:43:15:b5:84:ad:db:61:48:99: 3c:6f:52:94:ad:20:83:6a:0f:9c:e6:36:1c:5e:0d:d7:14:1e: d2:0a:05:e4:f3:85:1b:5c:1a:13:93:f5:33:1d:66:0e:2f:16: 9a:d7:7c:e3:73:22:4a:35:9d:cc:4a:04:7a:92:a0:56:78:db: ce:7e:b8:96:68:89:20:78:be:4e:e7:bc:db:f8:01:ba:cf:76: 14:d9:87:28:59:3b:75:d8:03:c6:dc:bf:76:ef:34:cc:c2:27: 4f:a1:cd:9c:5c:ec:e9:d4:fe:c5:ed:8c:f5:6b:b9:16:ec:34: a1:05:03:46:21:1b:9d:7f:4c:aa:a1:f7:ad:a0:a6:2d:9a:1d: 3b:e7:94:90:98:3c:44:ad:f2:99:c0:57:da:43:62:46:b7:22: 63:de:a6:2c:ab:cd:32:31:b2:59:cd:2d:50:6e:18:d8:bf:3c: 97:5c:7b:24:a6:bd:44:e9:c2:65:16:57:a8:e3:20:a4:47:26: 3d:1f:33:87:48:11:eb:65:7f:fc:bd:19:68:4a:0d:bc:9d:6e: de:19:fe:99:4a:5e:e2:bc:41:6c:c1:e9:f8:77:08:49:2c:39: 72:af:3e:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa3B0acxva4uBBbi0W2fCmGrSl68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIy NjJENTA1QTAeFw0yNjExMDQxNDAwNDhaFw0yNjExMDUxNzMwNDhaMDMxMTAvBgNV BAMTKDFCRDg1RDQ2NjAwOUE1MjNBNUE3MzI3OUM3OTcyQTE1NDRCOEREOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg0MdyZHDpjcMNOIqTz2+H/no4 NVAcZ747SnEXOKfFZo/guzWhif95mb78rplBzSfY3kSCv12uqqOCbWi41+lnDSy+ app7POL0dOxQ9DnDozAG8Ry40SDsT5oaNac83z/LLPZOT73BELxJ5yBccIPl2+Sd KtHs+/estH1nS3Y46qtqa1XIguNG5veQYxhCkMgloI+MqMni0z0O0LYqPfC6xg9J vZFKLqJa5QhgZ8lVanrRNe/KXBD9mZRyiDzlw6xGIi3o/g5Z6Ujbw2ZhkH9dPqXI 41tAIMe0JCmF+kCWTishoE0maIFemFI2QoewW5HVExdMLj50ju62NzVD8DMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9hdRmAJpSOlpzJ5x5cqFUS43Z4wHwYDVR0j BBgwFoAUwX2RGtZyqejvQYtoZVylEiYtUFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2JkYzgtZDE5NS00YzdkLWIzZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFE NjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIyNjJENTA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTdEOTExQUQ2NzJBOUU4RUY0MThCNjg2NTVDQTUxMjI2MkQ1 MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1 MTIyNjJENTA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFdVk60LSMpQlK9riB8fT1e2CwHon879rhr yUMVtYSt22FImTxvUpStIINqD5zmNhxeDdcUHtIKBeTzhRtcGhOT9TMdZg4vFprX fONzIko1ncxKBHqSoFZ4285+uJZoiSB4vk7nvNv4AbrPdhTZhyhZO3XYA8bcv3bv NMzCJ0+hzZxc7OnU/sXtjPVruRbsNKEFA0YhG51/TKqh962gpi2aHTvnlJCYPESt 8pnAV9pDYka3ImPepiyrzTIxslnNLVBuGNi/PJdceySmvUTpwmUWV6jjIKRHJj0f M4dIEetlf/y9GWhKDbydbt4Z/plKXuK8QWzB6fh3CEksOXKvPsE= -----END CERTIFICATE-----Generated at Wed Nov 4 21:21:39 2026 by rpki-client