$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: 8sdEsiX7KkwUuXvXmnZ6h2u2FSSJoBg0XObfhFW4WlE= Subject key identifier: F9:69:A8:F3:A6:CF:C1:47:7B:98:AD:90:8B:25:BE:F2:92:61:7A:7B Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 56A01E940096CFAC7B596E826215BD171E457C63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 16:39:40 +0000 Manifest this update: Wed 16 Sep 2026 16:34:40 +0000 Manifest next update: Thu 17 Sep 2026 20:24:40 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: EClRhneIZyWy2cn/KloCPr9F3roy2l42VylJtbbtNwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a0:1e:94:00:96:cf:ac:7b:59:6e:82:62:15:bd:17:1e:45:7c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Sep 16 16:34:40 2026 GMT Not After : Sep 17 20:24:40 2026 GMT Subject: CN=F969A8F3A6CFC1477B98AD908B25BEF292617A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:32:a0:92:e6:f3:21:92:b3:e7:99:b5:0f: 1a:fe:3d:57:40:b5:c2:c7:df:e8:ca:7f:5f:77:46: f0:ce:58:bb:f4:a6:37:eb:22:20:42:0c:41:6c:87: e3:15:c5:9f:7c:ba:3f:7f:50:c3:75:a4:df:3c:dc: 04:75:78:94:9a:7b:c1:b7:92:2c:ab:0b:da:b0:66: f1:c4:76:c9:40:e1:41:9e:36:32:ef:d6:2a:13:77: 92:62:c2:8e:2e:1a:8b:67:fa:f5:c8:87:23:f0:06: 17:4a:28:dd:da:c6:a5:28:af:85:13:59:07:db:51: da:07:ea:70:68:8b:b1:b1:7d:b6:ed:6b:c6:8d:08: 38:e7:c6:04:12:3a:32:ab:b7:61:c7:00:22:0c:db: 3a:3a:58:ae:5e:e8:76:db:b7:cc:7f:4b:84:4f:4b: bf:c7:93:77:85:f6:79:a4:04:92:1b:d5:a4:fc:f7: 9e:17:44:e4:8c:20:53:95:c8:8f:ca:96:66:30:e8: 56:6a:83:bd:c1:18:6b:d6:ac:13:bf:0c:bb:2b:1b: 6e:f7:35:11:21:f9:41:50:a8:95:29:2e:bc:67:07: 3c:3f:79:72:04:37:b2:9c:ba:b8:d4:f8:86:e9:d4: 0e:be:c0:a2:70:eb:da:ef:70:9f:5a:19:df:08:a0: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:69:A8:F3:A6:CF:C1:47:7B:98:AD:90:8B:25:BE:F2:92:61:7A:7B X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ba:e8:3a:26:87:89:22:95:59:18:68:a1:b6:a3:8e:cb:84: 0f:4a:0e:2c:26:e1:fc:28:00:75:05:bb:9c:75:f4:6e:43:2c: 88:bc:0c:8c:9f:d7:44:7f:90:e2:d6:21:42:4a:f5:92:28:40: ff:5c:7f:9f:1b:4b:50:89:75:6d:8e:2a:01:36:83:ee:2b:40: 46:1b:88:af:7d:83:40:e4:58:77:64:3c:25:28:6a:a1:b4:32: 3e:da:e8:97:bd:e4:47:56:20:74:96:78:c2:bf:61:07:83:9c: de:ab:6b:52:49:37:26:06:78:99:93:7b:96:99:a6:ee:28:ac: a2:16:cd:48:b9:87:32:08:de:97:2f:7a:37:6a:2f:86:a4:9a: 8e:96:42:f4:08:87:67:64:3a:ce:db:2d:66:fe:ac:e1:34:7a: 77:74:ac:40:54:dd:25:19:f6:1b:13:31:4f:43:09:79:0a:7b: df:bf:c4:6c:33:68:08:c2:13:07:18:04:76:5c:70:34:94:04: 86:18:7d:e9:08:7c:7b:f3:40:01:1a:6f:d1:34:9b:c3:9a:f0: a9:31:b5:af:77:1c:01:ad:a2:bd:bc:c2:c6:17:b7:4f:06:6a: 70:cb:10:76:df:f4:f2:8c:81:04:06:fe:ac:49:8a:d4:31:74: fd:48:ce:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqAelACWz6x7WW6CYhW9Fx5FfGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA5MTYxNjM0NDBaFw0yNjA5MTcyMDI0NDBaMDMxMTAvBgNV BAMTKEY5NjlBOEYzQTZDRkMxNDc3Qjk4QUQ5MDhCMjVCRUYyOTI2MTdBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqzKgkubzIZKz55m1Dxr+PVdA tcLH3+jKf193RvDOWLv0pjfrIiBCDEFsh+MVxZ98uj9/UMN1pN883AR1eJSae8G3 kiyrC9qwZvHEdslA4UGeNjLv1ioTd5Jiwo4uGotn+vXIhyPwBhdKKN3axqUor4UT WQfbUdoH6nBoi7Gxfbbta8aNCDjnxgQSOjKrt2HHACIM2zo6WK5e6Hbbt8x/S4RP S7/Hk3eF9nmkBJIb1aT8954XROSMIFOVyI/KlmYw6FZqg73BGGvWrBO/DLsrG273 NREh+UFQqJUpLrxnBzw/eXIEN7KcurjU+Ibp1A6+wKJw69rvcJ9aGd8IoFOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Wmo86bPwUd7mK2QiyW+8pJhenswHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK666Domh4kilVkYaKG2o47LhA9KDiwm4fwo AHUFu5x19G5DLIi8DIyf10R/kOLWIUJK9ZIoQP9cf58bS1CJdW2OKgE2g+4rQEYb iK99g0DkWHdkPCUoaqG0Mj7a6Je95EdWIHSWeMK/YQeDnN6ra1JJNyYGeJmTe5aZ pu4orKIWzUi5hzII3pcvejdqL4akmo6WQvQIh2dkOs7bLWb+rOE0end0rEBU3SUZ 9hsTMU9DCXkKe9+/xGwzaAjCEwcYBHZccDSUBIYYfekIfHvzQAEab9E0m8Oa8Kkx ta93HAGtor28wsYXt08GanDLEHbf9PKMgQQG/qxJitQxdP1Izv0= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:53 2026 by rpki-client