$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: AvTyE7G7wh+UDZeqWfI/sW3ky9O1+03rlxjrr7QEX4M= Subject key identifier: DD:56:60:10:32:2D:97:FD:DB:D7:8E:EF:9D:7E:3F:06:B4:AF:45:E4 Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 32B6B15BDAF4DB5B2E23F28AADDE20B312431BA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:27:32 +0000 Manifest this update: Tue 21 Jul 2026 01:22:32 +0000 Manifest next update: Wed 22 Jul 2026 04:38:32 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) 2: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) 4: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) 5: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: 5zdVtS0Wv3fAXwpEtjHf+7mmAQOxXEVD8JDmV58hXlE=) 6: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 7: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b6:b1:5b:da:f4:db:5b:2e:23:f2:8a:ad:de:20:b3:12:43:1b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: Jul 21 01:22:32 2026 GMT Not After : Jul 22 04:38:32 2026 GMT Subject: CN=DD566010322D97FDDBD78EEF9D7E3F06B4AF45E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:23:c3:d0:51:97:1a:6c:3b:c0:4f:32:6b: a0:e9:b8:5a:48:ca:8a:86:b4:66:52:f0:45:6e:5d: 72:f8:a2:e1:5b:05:4d:37:a9:c1:f4:19:0a:05:56: ac:fa:29:94:3c:51:7b:f8:42:e1:76:b6:e5:1b:74: 01:b0:32:7c:03:29:2c:cd:ac:fe:96:c4:71:2a:6c: 39:30:e7:f4:b9:73:cd:aa:6d:02:dc:a6:a5:19:47: b1:45:06:d8:e0:1c:cb:00:8d:db:39:17:71:60:23: 34:5d:e2:e9:cc:f6:d0:af:b1:65:1e:82:9e:34:96: 46:fe:9d:ed:50:a5:ba:05:d8:33:f7:6c:db:b8:dc: a8:c9:f4:cf:54:fc:78:10:09:d5:df:d8:22:77:7f: c5:89:7c:6b:3f:27:6b:93:50:20:bf:73:07:b0:26: 07:bf:fd:47:39:e1:fe:88:e3:9f:81:d9:a7:8c:47: c1:fd:5c:66:45:88:ce:23:13:df:92:e2:80:22:07: a4:cb:b7:7c:88:2c:e8:0c:34:60:d0:95:9d:00:14: 70:c1:30:43:d3:2c:e5:30:c7:4d:00:64:56:0f:2e: ae:01:7e:b2:0a:1c:c8:1d:9b:7c:59:9b:8c:59:27: 92:2c:76:80:91:6a:25:f4:cd:08:e0:b0:44:4f:d0: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:56:60:10:32:2D:97:FD:DB:D7:8E:EF:9D:7E:3F:06:B4:AF:45:E4 X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0f:d9:6f:0f:f9:a1:d8:a6:b9:df:9e:4a:a9:14:16:d3:fe: 40:2d:f8:d0:b8:1c:f4:89:6d:dc:f3:a7:bd:7e:2c:6c:2f:f4: 76:df:8a:34:32:12:ba:52:12:f7:cd:48:07:d8:f1:37:0c:de: b7:59:10:6e:30:20:42:41:c1:41:2a:92:3f:58:e4:e7:73:06: 34:80:3d:8d:f3:d9:22:5a:d1:27:aa:99:c8:01:b3:d6:d8:c1: 90:98:0f:4d:84:ca:e0:b8:a7:65:7e:d6:88:f1:1e:29:c0:a2: 9a:24:61:47:31:c4:34:e0:3a:5b:61:70:cd:2a:d1:d9:f7:77: e4:33:e5:ff:c4:12:df:a8:cf:6f:ee:71:77:19:3b:2d:dc:6f: 43:35:2f:65:75:21:21:53:1c:b7:96:4e:8e:67:48:95:f3:c5: da:f3:fa:8d:9d:92:84:5c:8c:61:99:d0:46:7f:c3:3e:58:b0: 55:86:3d:dc:88:7b:cc:a8:31:9a:1e:46:68:eb:96:49:4a:81: 8a:54:dd:f1:24:c8:51:49:5e:b3:c2:4f:df:2b:37:e7:96:78: 3b:50:c2:24:a0:44:f7:c1:b9:22:b6:c7:56:88:86:a1:6d:b4: 41:d3:af:81:e7:2f:2d:ee:1d:69:db:6e:56:cd:89:6a:b3:4d: 39:c7:20:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMraxW9r021suI/KKrd4gsxJDG6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA3MjEwMTIyMzJaFw0yNjA3MjIwNDM4MzJaMDMxMTAvBgNV BAMTKERENTY2MDEwMzIyRDk3RkREQkQ3OEVFRjlEN0UzRjA2QjRBRjQ1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURyPD0FGXGmw7wE8ya6DpuFpI yoqGtGZS8EVuXXL4ouFbBU03qcH0GQoFVqz6KZQ8UXv4QuF2tuUbdAGwMnwDKSzN rP6WxHEqbDkw5/S5c82qbQLcpqUZR7FFBtjgHMsAjds5F3FgIzRd4unM9tCvsWUe gp40lkb+ne1QpboF2DP3bNu43KjJ9M9U/HgQCdXf2CJ3f8WJfGs/J2uTUCC/cwew Jge//Uc54f6I45+B2aeMR8H9XGZFiM4jE9+S4oAiB6TLt3yILOgMNGDQlZ0AFHDB MEPTLOUwx00AZFYPLq4BfrIKHMgdm3xZm4xZJ5IsdoCRaiX0zQjgsERP0KIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VZgEDItl/3b147vnX4/BrSvReQwHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIP2W8P+aHYprnfnkqpFBbT/kAt+NC4HPSJ bdzzp71+LGwv9HbfijQyErpSEvfNSAfY8TcM3rdZEG4wIEJBwUEqkj9Y5OdzBjSA PY3z2SJa0SeqmcgBs9bYwZCYD02EyuC4p2V+1ojxHinAopokYUcxxDTgOlthcM0q 0dn3d+Qz5f/EEt+oz2/ucXcZOy3cb0M1L2V1ISFTHLeWTo5nSJXzxdrz+o2dkoRc jGGZ0EZ/wz5YsFWGPdyIe8yoMZoeRmjrlklKgYpU3fEkyFFJXrPCT98rN+eWeDtQ wiSgRPfBuSK2x1aIhqFttEHTr4HnLy3uHWnbblbNiWqzTTnHIGI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:00 2026 by rpki-client