$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft File: B17A330780AFD953D1D3338525F941E14E1FC919.mft (raw, json) Hash identifier: pXD/BcDocSA6tpujMkMBJ0HMUU/ukVXvm8EX3nT2kRk= Subject key identifier: 26:94:F5:07:7B:3E:02:E6:A0:68:78:83:D8:AF:AD:3A:28:E1:C1:DB Authority key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 Certificate issuer: /CN=B17A330780AFD953D1D3338525F941E14E1FC919 Certificate serial: 250B82D39F62671FDA2DA667C7DA3D745C3B2F5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:04:17 +0000 Manifest this update: Tue 02 Jun 2026 19:59:17 +0000 Manifest next update: Wed 03 Jun 2026 20:33:17 +0000 Files and hashes: 1: B17A330780AFD953D1D3338525F941E14E1FC919.crl (hash: CYJoj0a8Aq7afp9Q5Dpn3KbsE15wxrhFRiIYT25G+kU=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: USfTP+9/4GLbvvoIvIbzRlXyQT6cM8ipPFhCCz3Hhmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0b:82:d3:9f:62:67:1f:da:2d:a6:67:c7:da:3d:74:5c:3b:2f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B17A330780AFD953D1D3338525F941E14E1FC919 Validity Not Before: Jun 2 19:59:17 2026 GMT Not After : Jun 3 20:33:17 2026 GMT Subject: CN=2694F5077B3E02E6A0687883D8AFAD3A28E1C1DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:3c:ca:7c:cc:04:dc:eb:fe:50:fa:94:6c: 0f:35:63:ac:b7:08:af:0f:8e:80:96:bb:78:fd:ef: 24:01:77:95:64:6d:f6:b0:ea:6f:a3:02:50:1a:84: d0:a8:3b:7e:85:30:e9:cc:42:68:de:92:d4:58:20: 28:74:42:5f:be:9c:21:63:6f:9b:7f:65:20:e2:f2: a5:74:a4:c7:dc:08:82:37:6f:93:cf:20:7b:d2:02: 13:28:46:69:de:68:ab:33:9c:9f:6f:d5:27:ce:a3: 46:f7:47:f0:0a:8f:84:eb:e4:9d:3e:14:d1:7d:b9: 11:2a:35:6d:19:d8:05:07:c1:3e:31:34:2d:7f:26: cf:43:9f:60:67:5f:a2:90:13:fc:ed:0f:26:88:53: 03:47:9a:3a:27:50:85:23:04:74:a3:24:a2:61:52: db:c8:5f:75:6d:b3:51:f8:6a:2e:dd:e3:54:de:ca: a1:56:d6:84:60:7c:32:67:c3:ef:8d:3a:36:9c:d4: 80:82:be:e3:57:ee:13:0e:86:d4:aa:eb:60:5f:6f: a9:0f:e5:b7:30:4f:53:f8:9b:79:f9:b2:b1:24:e6: 41:58:c9:1b:3c:a8:a6:3e:07:4a:05:64:dc:95:e9: 5c:a5:55:00:89:fa:c9:63:85:b3:ac:49:70:aa:4a: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:94:F5:07:7B:3E:02:E6:A0:68:78:83:D8:AF:AD:3A:28:E1:C1:DB X509v3 Authority Key Identifier: keyid:B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fa:a0:2e:83:49:c5:58:bd:5f:8e:b0:77:64:4e:8d:16:39: a7:d2:cc:3f:00:45:ac:90:ed:cf:b8:f7:89:5c:bb:07:bb:c3: 23:aa:49:34:5f:d3:6a:15:0d:81:e8:97:30:e5:1c:8c:a3:44: 3d:30:02:a2:e1:69:aa:ae:62:a2:db:83:ec:28:ea:4b:39:7a: 0c:33:24:90:f4:a0:39:ca:00:79:58:90:7f:eb:41:af:f6:1a: 77:b8:d7:2e:05:f2:07:16:25:1b:ac:65:f1:51:1a:04:c8:00: e5:75:e2:44:91:9d:2c:f1:77:e7:d1:5a:59:37:db:c3:2e:b6: e6:62:9e:1e:6f:65:c4:a2:31:2d:e8:e0:5c:76:bc:14:f3:ed: fc:dc:33:af:83:de:ed:9c:07:2f:6f:86:b6:6b:4c:80:9c:34: 5d:67:49:0b:cc:25:eb:8b:8c:05:a1:ff:f3:cf:ca:fa:95:79: a3:79:e4:4e:eb:a2:84:b0:aa:e6:03:c3:14:36:4c:fd:11:9d: 9e:29:62:12:79:1d:16:8b:65:83:c9:ae:15:3c:c7:09:09:c6: 76:c2:71:b4:e4:bb:26:17:80:3b:22:00:84:55:21:e1:01:1a: 5b:0a:22:21:ed:09:3a:0a:f6:dd:8b:c5:58:26:5a:ab:a3:77: 39:a9:39:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQuC059iZx/aLaZnx9o9dFw7L10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0 RTFGQzkxOTAeFw0yNjA2MDIxOTU5MTdaFw0yNjA2MDMyMDMzMTdaMDMxMTAvBgNV BAMTKDI2OTRGNTA3N0IzRTAyRTZBMDY4Nzg4M0Q4QUZBRDNBMjhFMUMxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgDzKfMwE3Ov+UPqUbA81Y6y3 CK8PjoCWu3j97yQBd5Vkbfaw6m+jAlAahNCoO36FMOnMQmjektRYICh0Ql++nCFj b5t/ZSDi8qV0pMfcCII3b5PPIHvSAhMoRmneaKsznJ9v1SfOo0b3R/AKj4Tr5J0+ FNF9uREqNW0Z2AUHwT4xNC1/Js9Dn2BnX6KQE/ztDyaIUwNHmjonUIUjBHSjJKJh UtvIX3Vts1H4ai7d41TeyqFW1oRgfDJnw++NOjac1ICCvuNX7hMOhtSq62Bfb6kP 5bcwT1P4m3n5srEk5kFYyRs8qKY+B0oFZNyV6VylVQCJ+sljhbOsSXCqSvC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJpT1B3s+AuagaHiD2K+tOijhwdswHwYDVR0j BBgwFoAUsXozB4Cv2VPR0zOFJflB4U4fyRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYyNWI5NjgtMDkyNy00NTk0LTg4N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4 MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0RTFGQzkxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTdBMzMwNzgwQUZEOTUzRDFEMzMzODUyNUY5NDFFMTRFMUZD OTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQx RTE0RTFGQzkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH36oC6DScVYvV+OsHdkTo0WOafSzD8ARayQ 7c+494lcuwe7wyOqSTRf02oVDYHolzDlHIyjRD0wAqLhaaquYqLbg+wo6ks5egwz JJD0oDnKAHlYkH/rQa/2Gne41y4F8gcWJRusZfFRGgTIAOV14kSRnSzxd+fRWlk3 28MutuZinh5vZcSiMS3o4Fx2vBTz7fzcM6+D3u2cBy9vhrZrTICcNF1nSQvMJeuL jAWh//PPyvqVeaN55E7rooSwquYDwxQ2TP0RnZ4pYhJ5HRaLZYPJrhU8xwkJxnbC cbTkuyYXgDsiAIRVIeEBGlsKIiHtCToK9t2LxVgmWqujdzmpOeI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:15 2026 by rpki-client