$ rpki-client -vvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft (raw, json) Hash identifier: Aie4LADs5QbWvOTjeGKM6FU5dr0t0K2tpAH3O60Fc/8= Subject key identifier: 6B:4D:CF:3F:8C:E4:A3:74:F5:7D:8B:31:BD:D2:F2:B3:56:58:AA:2C Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB Certificate issuer: /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Certificate serial: 4AC586E39282933EE7FA914B79C2414BC63888BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:03:47 +0000 Manifest this update: Tue 02 Jun 2026 22:58:47 +0000 Manifest next update: Thu 04 Jun 2026 01:15:47 +0000 Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: u4GGrkPMCSBeQdSFpeeb+BeoQUTIplrdOwR16vFL5xY=) 2: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=) 3: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl (hash: LmZHj4U7TryRk1aNoy4lHSaXE+eKpVuraSwZB85ISbU=) 4: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c5:86:e3:92:82:93:3e:e7:fa:91:4b:79:c2:41:4b:c6:38:88:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Validity Not Before: Jun 2 22:58:47 2026 GMT Not After : Jun 4 01:15:47 2026 GMT Subject: CN=6B4DCF3F8CE4A374F57D8B31BDD2F2B35658AA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:2e:7d:ba:48:d8:cb:1b:e4:c2:19:38:2e: 1e:3a:4f:68:9a:3f:ef:71:25:d5:3b:97:00:62:d5: 9d:d1:6e:ed:a1:c5:4c:a7:04:ba:67:ad:2b:e3:19: 1b:81:96:e8:c8:66:bc:c6:6b:c1:0a:46:a2:03:0c: 46:3a:6b:5d:e1:f4:16:42:bd:04:31:56:48:3b:f2: ba:4a:6d:db:45:9d:1e:d2:f9:78:40:b5:d5:62:28: 5d:4b:44:64:98:4d:80:52:ba:c4:36:cb:48:71:49: a9:a9:02:74:d5:e5:52:88:d0:6f:39:b1:cf:2c:25: 3f:55:02:d1:ee:27:7a:52:ad:f2:42:ba:df:a8:eb: 06:07:45:7c:db:4b:49:62:49:ab:a5:7f:55:39:b9: 13:b1:7f:5b:b8:19:0e:7f:4c:4d:83:a4:28:f6:b3: b1:82:f6:ba:f0:20:51:90:40:74:f4:7c:f8:a8:a2: 8f:a4:0d:03:f9:23:0a:4c:55:5e:f7:8d:b6:3d:83: 6c:9d:c1:f7:17:1f:23:82:8d:cf:7b:cf:23:a9:55: eb:81:39:88:e2:c4:2e:7d:58:90:af:ac:2f:29:d5: b5:73:06:c3:f4:49:28:73:7f:33:31:a2:8f:ff:78: c6:74:0e:63:8e:bf:c1:83:e4:1c:31:41:2e:a7:0c: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4D:CF:3F:8C:E4:A3:74:F5:7D:8B:31:BD:D2:F2:B3:56:58:AA:2C X509v3 Authority Key Identifier: keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:c5:15:5b:eb:40:02:50:7b:d1:b5:56:4a:ed:40:b5:7b:9c: 85:dd:65:f3:33:43:82:53:c6:c0:4e:a0:73:31:db:e1:ba:af: 1b:6a:37:3f:41:db:fd:1a:d9:ee:2b:12:01:da:e3:09:43:ef: a6:8d:c6:49:69:5f:2e:c7:b1:ed:a9:64:28:19:32:ab:e9:e1: 79:e8:97:35:e4:22:31:b8:a5:36:f3:df:73:b1:09:e8:c6:db: cc:95:14:d6:70:75:15:60:ea:81:27:cd:47:0c:b7:12:e6:3a: 1c:c3:23:c4:66:f4:6f:be:91:94:f6:1a:bc:db:a9:52:2b:29: 44:82:ee:fd:81:57:f7:96:76:5c:45:b8:9a:89:06:9f:ba:49: e7:ea:5c:a2:b1:d4:e6:52:7c:21:2e:c4:2c:16:56:0d:3c:5f: f9:41:e1:98:d5:b0:8d:75:54:aa:cb:05:f4:03:cd:d7:e7:3c: c3:55:bb:95:fa:1a:ce:4a:3e:bc:7b:a1:9a:1d:f4:82:ab:b0: f7:f3:04:bb:6e:2d:8e:fb:ca:8f:ef:d1:4f:36:6f:3c:30:c2: eb:57:3a:46:fe:3e:67:d7:32:7c:a9:8d:da:2d:27:a3:36:ad: 54:52:80:62:a1:c5:40:59:17:9d:ef:ce:8b:12:65:73:1f:bb: de:7d:18:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsWG45KCkz7n+pFLecJBS8Y4iL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2QjAy QzEzREVDQjAeFw0yNjA2MDIyMjU4NDdaFw0yNjA2MDQwMTE1NDdaMDMxMTAvBgNV BAMTKDZCNERDRjNGOENFNEEzNzRGNTdEOEIzMUJERDJGMkIzNTY1OEFBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZC59ukjYyxvkwhk4Lh46T2ia P+9xJdU7lwBi1Z3Rbu2hxUynBLpnrSvjGRuBlujIZrzGa8EKRqIDDEY6a13h9BZC vQQxVkg78rpKbdtFnR7S+XhAtdViKF1LRGSYTYBSusQ2y0hxSampAnTV5VKI0G85 sc8sJT9VAtHuJ3pSrfJCut+o6wYHRXzbS0liSaulf1U5uROxf1u4GQ5/TE2DpCj2 s7GC9rrwIFGQQHT0fPiooo+kDQP5IwpMVV73jbY9g2ydwfcXHyOCjc97zyOpVeuB OYjixC59WJCvrC8p1bVzBsP0SShzfzMxoo//eMZ0DmOOv8GD5BwxQS6nDKtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa03PP4zko3T1fYsxvdLys1ZYqiwwHwYDVR0j BBgwFoAUFzvZV93dtj7axYM8A/v2sCwT3sswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcxYmY5ODAtMjRkYS00ODY1LWE5ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdE REREQjYzRURBQzU4MzNDMDNGQkY2QjAyQzEzREVDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzNCRDk1N0RERERCNjNFREFDNTgzM0MwM0ZCRjZCMDJDMTNE RUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2 QjAyQzEzREVDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3FFVvrQAJQe9G1VkrtQLV7nIXdZfMzQ4JT xsBOoHMx2+G6rxtqNz9B2/0a2e4rEgHa4wlD76aNxklpXy7Hse2pZCgZMqvp4Xno lzXkIjG4pTbz33OxCejG28yVFNZwdRVg6oEnzUcMtxLmOhzDI8Rm9G++kZT2Grzb qVIrKUSC7v2BV/eWdlxFuJqJBp+6SefqXKKx1OZSfCEuxCwWVg08X/lB4ZjVsI11 VKrLBfQDzdfnPMNVu5X6Gs5KPrx7oZod9IKrsPfzBLtuLY77yo/v0U82bzwwwutX Okb+PmfXMnypjdotJ6M2rVRSgGKhxUBZF53vzosSZXMfu959GDw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:06 2026 by rpki-client