$ rpki-client -vvf rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft File: C717817244AB088EAD0E4D76165AD606C58B6BDE.mft (raw, json) Hash identifier: 7hsOl5TdQ15PaolDwkBh1HOtNig5xGdkqFGJlV9HyV0= Subject key identifier: 1C:4B:5F:2E:FA:C6:FF:7B:2B:06:FE:BE:A3:3B:BA:93:7D:2B:F3:D7 Authority key identifier: C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE Certificate issuer: /CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Certificate serial: 4EDDD6492FA9507F530545107C695FED62DC190F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 01:54:05 +0000 Manifest this update: Thu 18 Jun 2026 01:49:05 +0000 Manifest next update: Fri 19 Jun 2026 05:12:05 +0000 Files and hashes: 1: C717817244AB088EAD0E4D76165AD606C58B6BDE.crl (hash: GCKPjyqYL1e92OE0y32kX0UWu4RV2q30DDCtoBzy8+k=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: ibsq14pTeQS2Mg9IUw2PKfJ3Jza0sBMhcbU4/kSfoSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:dd:d6:49:2f:a9:50:7f:53:05:45:10:7c:69:5f:ed:62:dc:19:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Validity Not Before: Jun 18 01:49:05 2026 GMT Not After : Jun 19 05:12:05 2026 GMT Subject: CN=1C4B5F2EFAC6FF7B2B06FEBEA33BBA937D2BF3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:f5:1e:34:f4:7b:77:f7:6b:2e:2f:61:d1: 29:ad:c6:bc:4b:85:d8:3c:8e:88:70:73:d0:ed:2a: b2:14:36:84:1c:97:a2:f3:9b:2e:72:18:2f:b3:26: 87:ce:9b:12:2b:cd:1d:4c:53:c4:44:d7:83:a2:f6: 7c:bc:0c:52:af:96:b9:62:06:96:50:bf:25:2f:c3: cc:d8:7e:2c:95:93:12:b2:62:16:0e:93:4d:a9:2b: 3c:3b:14:2e:66:90:8b:07:c7:5b:48:6e:a4:94:79: 2f:d1:d4:ac:51:39:6e:2e:3b:f2:23:13:65:4f:e3: 1b:d4:5a:bd:83:6f:d1:d8:3a:1a:5d:e2:37:1b:09: b4:46:b0:b4:5d:77:c7:17:d6:25:d2:4c:d5:fc:ff: 62:47:85:90:7e:11:37:89:8f:5a:6d:0d:32:c5:fc: ef:1d:29:8f:c2:8d:a8:76:6b:19:86:0f:42:6b:e9: 70:2c:1d:ab:cd:1f:f4:7a:48:b9:15:e8:cf:5a:9b: 73:aa:bd:45:4b:cf:2a:78:a3:2d:d3:a1:a4:aa:16: 8c:8f:8f:80:7a:f1:34:41:b6:c9:24:ea:6f:fa:7c: 04:ad:5f:45:3d:bb:1e:c9:36:bf:bc:f3:68:03:d2: 26:bb:c9:4b:e6:b4:c9:69:66:f7:ae:ad:7c:d6:6c: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4B:5F:2E:FA:C6:FF:7B:2B:06:FE:BE:A3:3B:BA:93:7D:2B:F3:D7 X509v3 Authority Key Identifier: keyid:C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:13:8c:ce:ba:af:b0:54:aa:29:7c:f7:ae:d5:4f:0c:0a:49: 73:16:18:2c:b4:fa:f9:ec:be:5d:3a:45:b0:96:a9:cc:3d:3d: 2a:e7:68:0b:f1:6b:f4:5a:99:fe:9d:2d:4c:a8:58:24:66:3e: f1:23:d4:0f:2d:6f:c2:92:4b:aa:9c:ef:51:f5:de:5a:de:53: a2:75:60:b2:55:ba:0a:7e:9b:79:57:77:65:f6:c2:e4:df:68: ed:64:c2:1e:d4:eb:0a:d1:a9:2f:17:1b:ba:25:47:44:df:41: 47:4a:ed:83:ab:00:07:ef:20:24:9a:1a:26:6c:40:9c:5f:33: 5b:4d:92:a1:aa:32:db:de:01:69:f6:36:b7:44:78:e0:34:39: cf:f6:3e:e3:5a:bd:85:76:76:09:d0:23:e3:4f:1a:41:13:f2: 01:de:8f:86:fa:8d:d3:99:08:70:f7:78:a7:45:9c:5c:73:6d: 51:c9:33:cb:be:6a:9f:31:a0:2c:75:e0:20:de:92:96:6f:d1: e0:b7:96:bf:b8:68:db:69:60:58:aa:f2:bf:ca:dc:7a:27:aa: 49:67:cc:19:aa:13:66:fe:68:a5:1b:92:be:40:af:dd:2e:06: 6a:f4:94:ff:f3:a9:6a:32:31:23:fd:d4:9f:21:ca:c3:13:9f: fe:29:33:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTt3WSS+pUH9TBUUQfGlf7WLcGQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZD NThCNkJERTAeFw0yNjA2MTgwMTQ5MDVaFw0yNjA2MTkwNTEyMDVaMDMxMTAvBgNV BAMTKDFDNEI1RjJFRkFDNkZGN0IyQjA2RkVCRUEzM0JCQTkzN0QyQkYzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwfUeNPR7d/drLi9h0SmtxrxL hdg8johwc9DtKrIUNoQcl6Lzmy5yGC+zJofOmxIrzR1MU8RE14Oi9ny8DFKvlrli BpZQvyUvw8zYfiyVkxKyYhYOk02pKzw7FC5mkIsHx1tIbqSUeS/R1KxROW4uO/Ij E2VP4xvUWr2Db9HYOhpd4jcbCbRGsLRdd8cX1iXSTNX8/2JHhZB+ETeJj1ptDTLF /O8dKY/Cjah2axmGD0Jr6XAsHavNH/R6SLkV6M9am3OqvUVLzyp4oy3ToaSqFoyP j4B68TRBtskk6m/6fAStX0U9ux7JNr+882gD0ia7yUvmtMlpZveurXzWbIMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEtfLvrG/3srBv6+ozu6k30r89cwHwYDVR0j BBgwFoAUxxeBckSrCI6tDk12FlrWBsWLa94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVjMWUyZjMtNGZiZC00NGJiLTgzZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0 NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZDNThCNkJERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzE3ODE3MjQ0QUIwODhFQUQwRTRENzYxNjVBRDYwNkM1OEI2 QkRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2 MDZDNThCNkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkTjM66r7BUqil8967VTwwKSXMWGCy0+vns vl06RbCWqcw9PSrnaAvxa/Ramf6dLUyoWCRmPvEj1A8tb8KSS6qc71H13lreU6J1 YLJVugp+m3lXd2X2wuTfaO1kwh7U6wrRqS8XG7olR0TfQUdK7YOrAAfvICSaGiZs QJxfM1tNkqGqMtveAWn2NrdEeOA0Oc/2PuNavYV2dgnQI+NPGkET8gHej4b6jdOZ CHD3eKdFnFxzbVHJM8u+ap8xoCx14CDekpZv0eC3lr+4aNtpYFiq8r/K3Honqkln zBmqE2b+aKUbkr5Ar90uBmr0lP/zqWoyMSP91J8hysMTn/4pM1A= -----END CERTIFICATE-----Generated at Thu Jun 18 21:11:09 2026 by rpki-client