$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft File: B17A330780AFD953D1D3338525F941E14E1FC919.mft (raw, json) Hash identifier: luqGMlY07uOgZYXipwLXBLjxWePPbYkCGAQtM8/PL50= Subject key identifier: D1:47:9F:A2:E6:8B:19:D3:DA:A6:92:E5:6A:37:1C:7A:D6:67:B7:46 Authority key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 Certificate issuer: /CN=B17A330780AFD953D1D3338525F941E14E1FC919 Certificate serial: 04D4B4481EBC2357ADEE88B6B6B785F4F681B02D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 09:48:57 +0000 Manifest this update: Sun 19 Jul 2026 09:43:57 +0000 Manifest next update: Mon 20 Jul 2026 12:48:57 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: USfTP+9/4GLbvvoIvIbzRlXyQT6cM8ipPFhCCz3Hhmw=) 2: B17A330780AFD953D1D3338525F941E14E1FC919.crl (hash: shNADHxbpGzxhDpBh4XLSCv8CI2Rk/lp+hNrYLHdZnw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d4:b4:48:1e:bc:23:57:ad:ee:88:b6:b6:b7:85:f4:f6:81:b0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B17A330780AFD953D1D3338525F941E14E1FC919 Validity Not Before: Jul 19 09:43:57 2026 GMT Not After : Jul 20 12:48:57 2026 GMT Subject: CN=D1479FA2E68B19D3DAA692E56A371C7AD667B746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:ca:ae:02:1f:dc:97:01:af:1e:54:88:ea: 16:5c:e3:53:51:e1:0e:b6:8f:1b:53:a3:9b:8c:ee: eb:4f:c1:9a:8b:d2:cc:c0:74:00:10:9a:c6:cd:8e: a0:c1:e1:b9:b0:d9:d3:99:2f:95:69:57:1e:90:c1: 65:48:d4:fd:ba:01:84:39:65:d6:91:d3:5f:d8:ff: 1c:14:94:49:b2:fe:5a:16:8c:58:e8:f2:b7:8e:56: 49:f5:06:6f:d5:d8:42:84:bb:c1:b5:f3:cd:1d:d8: 0a:02:3f:ce:18:01:7c:c8:86:91:b7:54:51:d1:7b: 54:17:d4:d6:63:89:84:29:16:b2:c3:11:70:c4:bf: 0f:43:54:f5:12:34:12:89:16:5b:47:51:41:0e:b1: 96:1a:e9:af:99:d4:b4:61:a4:83:b3:d0:f7:01:fd: 06:8f:40:99:17:ad:2c:48:e8:41:e3:f6:bf:6a:2a: 5d:2f:bf:4b:10:c4:80:6b:c2:75:ef:bc:9f:cd:c8: f1:b6:e2:93:0d:1e:fe:4e:f7:0d:40:fc:42:2f:34: 67:ef:4d:f9:7e:31:15:0e:eb:50:aa:4c:a2:ca:f0: cc:56:0e:ea:ee:f9:f4:a8:d0:cd:39:de:0c:e3:37: 63:bd:bc:84:02:fe:73:66:a7:a5:09:1c:9e:35:61: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:47:9F:A2:E6:8B:19:D3:DA:A6:92:E5:6A:37:1C:7A:D6:67:B7:46 X509v3 Authority Key Identifier: keyid:B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7f:5c:e0:05:54:79:96:05:68:db:1c:67:ba:e2:a1:2e:f7: 42:f0:90:8b:ca:d6:97:e0:df:9b:db:84:42:80:26:9a:56:cf: 14:98:d1:e6:54:d1:35:40:ae:62:66:d3:dd:4f:eb:4c:76:7d: d8:83:06:a2:47:1a:45:ab:f0:bf:7d:71:55:c8:39:08:97:be: 1c:d4:59:9f:60:33:5d:0d:f2:eb:a4:b9:36:b8:79:9d:8c:6d: 4f:86:41:b8:e9:bc:d4:db:f3:9b:c3:f7:07:42:f5:e1:32:45: e6:9d:cb:0b:58:d4:2d:f8:86:0a:ac:c7:b0:c4:09:f6:a7:bd: 08:3a:13:dd:0f:21:be:96:75:ef:53:80:6f:d9:1e:03:46:b4: 9d:63:d2:82:95:f8:17:41:bb:1e:df:62:52:b9:da:1a:e9:6d: e8:a2:59:d0:19:78:e7:f1:ec:71:1a:cb:97:82:47:61:38:25: 8e:d6:69:8f:1d:b2:b2:8f:b1:aa:0d:0a:cb:86:25:d9:31:d5: 1e:7e:b5:b2:70:53:36:0e:64:1e:70:19:63:75:0b:7b:c9:94: 62:cc:78:ae:62:65:db:e8:ae:8d:1b:0e:12:6b:f1:3d:3a:2a: 48:c2:31:8e:bb:c4:b3:73:38:5d:66:d9:3b:ff:d2:6f:34:f0: a6:97:5d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNS0SB68I1et7oi2treF9PaBsC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0 RTFGQzkxOTAeFw0yNjA3MTkwOTQzNTdaFw0yNjA3MjAxMjQ4NTdaMDMxMTAvBgNV BAMTKEQxNDc5RkEyRTY4QjE5RDNEQUE2OTJFNTZBMzcxQzdBRDY2N0I3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxq8quAh/clwGvHlSI6hZc41NR 4Q62jxtTo5uM7utPwZqL0szAdAAQmsbNjqDB4bmw2dOZL5VpVx6QwWVI1P26AYQ5 ZdaR01/Y/xwUlEmy/loWjFjo8reOVkn1Bm/V2EKEu8G1880d2AoCP84YAXzIhpG3 VFHRe1QX1NZjiYQpFrLDEXDEvw9DVPUSNBKJFltHUUEOsZYa6a+Z1LRhpIOz0PcB /QaPQJkXrSxI6EHj9r9qKl0vv0sQxIBrwnXvvJ/NyPG24pMNHv5O9w1A/EIvNGfv Tfl+MRUO61CqTKLK8MxWDuru+fSo0M053gzjN2O9vIQC/nNmp6UJHJ41YalfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UefouaLGdPappLlajccetZnt0YwHwYDVR0j BBgwFoAUsXozB4Cv2VPR0zOFJflB4U4fyRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYyNWI5NjgtMDkyNy00NTk0LTg4N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4 MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0RTFGQzkxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTdBMzMwNzgwQUZEOTUzRDFEMzMzODUyNUY5NDFFMTRFMUZD OTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQx RTE0RTFGQzkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt/XOAFVHmWBWjbHGe64qEu90LwkIvK1pfg 35vbhEKAJppWzxSY0eZU0TVArmJm091P60x2fdiDBqJHGkWr8L99cVXIOQiXvhzU WZ9gM10N8uukuTa4eZ2MbU+GQbjpvNTb85vD9wdC9eEyReadywtY1C34hgqsx7DE CfanvQg6E90PIb6Wde9TgG/ZHgNGtJ1j0oKV+BdBux7fYlK52hrpbeiiWdAZeOfx 7HEay5eCR2E4JY7WaY8dsrKPsaoNCsuGJdkx1R5+tbJwUzYOZB5wGWN1C3vJlGLM eK5iZdvoro0bDhJr8T06KkjCMY67xLNzOF1m2Tv/0m808KaXXXw= -----END CERTIFICATE-----Generated at Sun Jul 19 23:37:44 2026 by rpki-client