$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: 29CMgRJSeTFxGn5MF0UGKQqNeBXUnTkF0VBEG9+BRSE= Subject key identifier: 69:04:74:80:A0:F0:31:BE:79:78:89:59:BD:14:B8:E4:6E:51:1A:6C Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 60E0FFA6F977E6314AFE85843321C2F33DE4129E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 15:31:59 +0000 Manifest this update: Wed 02 Sep 2026 15:26:59 +0000 Manifest next update: Thu 03 Sep 2026 19:05:59 +0000 Files and hashes: 1: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) 2: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: 12O3BjbW5T2NrRbHDJk/BqhR9dwAERHGck5aDre79Mw=) 3: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) 4: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) 5: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e0:ff:a6:f9:77:e6:31:4a:fe:85:84:33:21:c2:f3:3d:e4:12:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: Sep 2 15:26:59 2026 GMT Not After : Sep 3 19:05:59 2026 GMT Subject: CN=69047480A0F031BE79788959BD14B8E46E511A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:ff:63:86:ea:0c:ff:70:2c:7a:76:63:8d: ee:91:d5:c7:0d:f0:a4:03:b4:55:43:83:0f:12:01: 8a:34:46:0e:dc:6d:37:96:72:a1:2d:46:f3:99:a2: aa:0c:63:62:45:1e:09:26:eb:8a:76:bd:92:6f:01: fe:d4:60:9b:c9:9d:25:9c:26:78:56:35:79:0a:69: 5f:75:24:69:ab:5e:5a:2a:44:2e:c9:4d:a8:95:59: 45:09:b0:14:ca:7e:68:0d:aa:ea:7f:78:26:5a:e3: af:42:64:15:74:b8:84:32:f7:90:3d:81:de:86:42: 4c:1a:b8:d3:ab:ac:82:01:73:0a:74:e1:bd:be:df: 83:15:72:68:8c:43:d0:73:49:ab:22:1c:bd:6d:73: 15:f0:59:26:29:ab:e4:e4:e8:ba:b3:97:49:98:8a: aa:cb:ae:da:f2:5e:63:a0:af:cf:26:83:01:74:f0: 3e:8d:fe:53:f4:8e:7a:4d:ad:3b:5f:b6:33:0f:64: b1:51:5a:bb:af:f3:75:b3:f1:56:91:c2:f5:f9:19: ac:ce:7a:fa:2e:7f:15:e5:0d:48:fa:0e:2c:9b:07: 12:45:34:cb:48:27:dc:fe:ca:2d:ed:bf:be:fb:ea: 22:00:db:f8:04:20:65:54:3e:77:ef:0d:41:fa:53: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:04:74:80:A0:F0:31:BE:79:78:89:59:BD:14:B8:E4:6E:51:1A:6C X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1a:57:10:12:a6:6a:b0:2b:1d:25:7a:a9:86:5f:41:e2:82: 38:df:64:da:f2:6d:09:64:df:5f:a2:0b:fe:16:07:c9:f4:ab: c0:90:2b:c8:95:f0:30:12:05:10:82:c8:3b:cc:8b:dd:72:bd: 13:7f:6b:3c:60:50:38:79:85:5d:5e:ea:07:68:4a:63:8c:a9: 33:7b:3e:37:00:fa:ce:fd:3a:d4:6f:26:34:51:11:23:94:ab: 90:e3:f6:15:6f:0b:f0:1b:ac:a0:0b:93:c0:59:36:20:2b:a1: 80:6f:30:08:2a:4f:7c:27:61:77:6b:f9:b1:68:32:98:e5:6c: e4:e1:17:55:ac:42:e2:ef:8e:a2:fe:43:63:a8:94:3f:a9:f7: a3:58:e5:28:09:d4:62:22:53:28:1e:c5:d5:e8:be:ae:39:23: 55:35:82:dc:22:ce:2c:e8:52:cc:51:f2:81:22:3b:9c:6d:85: 97:33:4a:66:5f:09:45:77:3a:f5:b2:a5:68:47:bb:0d:8b:d2: 54:b1:2c:ff:e9:dd:85:47:25:38:ca:55:1b:f9:4d:cc:ed:b6: 2b:c3:84:83:61:ec:9f:41:c9:49:53:5c:6b:82:30:42:fe:d5: 09:8b:5a:53:23:63:b7:eb:fa:3e:d3:3c:71:12:c6:59:17:18: 5b:95:10:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOD/pvl35jFK/oWEMyHC8z3kEp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjA5MDIxNTI2NTlaFw0yNjA5MDMxOTA1NTlaMDMxMTAvBgNV BAMTKDY5MDQ3NDgwQTBGMDMxQkU3OTc4ODk1OUJEMTRCOEU0NkU1MTFBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXO/9jhuoM/3AsenZjje6R1ccN 8KQDtFVDgw8SAYo0Rg7cbTeWcqEtRvOZoqoMY2JFHgkm64p2vZJvAf7UYJvJnSWc JnhWNXkKaV91JGmrXloqRC7JTaiVWUUJsBTKfmgNqup/eCZa469CZBV0uIQy95A9 gd6GQkwauNOrrIIBcwp04b2+34MVcmiMQ9BzSasiHL1tcxXwWSYpq+Tk6Lqzl0mY iqrLrtryXmOgr88mgwF08D6N/lP0jnpNrTtftjMPZLFRWruv83Wz8VaRwvX5GazO evoufxXlDUj6DiybBxJFNMtIJ9z+yi3tv7776iIA2/gEIGVUPnfvDUH6U+cxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQR0gKDwMb55eIlZvRS45G5RGmwwHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgaVxASpmqwKx0leqmGX0HigjjfZNrybQlk 31+iC/4WB8n0q8CQK8iV8DASBRCCyDvMi91yvRN/azxgUDh5hV1e6gdoSmOMqTN7 PjcA+s79OtRvJjRRESOUq5Dj9hVvC/AbrKALk8BZNiAroYBvMAgqT3wnYXdr+bFo MpjlbOThF1WsQuLvjqL+Q2OolD+p96NY5SgJ1GIiUygexdXovq45I1U1gtwizizo UsxR8oEiO5xthZczSmZfCUV3OvWypWhHuw2L0lSxLP/p3YVHJTjKVRv5TczttivD hINh7J9ByUlTXGuCMEL+1QmLWlMjY7fr+j7TPHESxlkXGFuVEPM= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:27 2026 by rpki-client