$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: oMLs9TTdAr7SucEm2W14d3cXIkf9n/mfVmTXQ8bvV+M= Subject key identifier: 42:9B:1C:0D:A2:3D:82:5A:87:02:22:D0:97:70:EC:50:EA:1A:55:8F Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 60F7AD41C012FB721CFEC86468ED068C059ECE3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:41:52 +0000 Manifest this update: Thu 17 Sep 2026 02:36:52 +0000 Manifest next update: Fri 18 Sep 2026 03:04:52 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) 2: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 3: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: WrnskSponMBs+JtsXx7n9YcUA8gr9GcDnfUnmjaVO6M=) 4: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f7:ad:41:c0:12:fb:72:1c:fe:c8:64:68:ed:06:8c:05:9e:ce:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Sep 17 02:36:52 2026 GMT Not After : Sep 18 03:04:52 2026 GMT Subject: CN=429B1C0DA23D825A870222D09770EC50EA1A558F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:80:33:e1:e3:c2:7c:d0:73:e5:12:a9:d4: fe:a2:ff:6f:43:25:a6:cb:cc:49:89:8e:f6:f8:d0: b3:1a:db:9c:a3:7c:49:c3:be:b3:2b:a9:84:82:e8: 1b:52:f3:8f:86:a4:79:d0:34:c0:83:04:af:c1:84: 71:39:45:40:58:67:3b:ad:c9:74:5b:91:23:37:96: e6:06:3d:18:07:6e:d3:64:7b:33:2e:2e:59:0a:06: 67:6e:6e:32:4b:bc:64:8c:d7:76:fc:36:3f:fa:d7: 44:61:5a:73:4e:a6:c2:59:c7:b8:33:ad:c7:75:db: dd:7e:30:03:8d:ab:cc:d7:90:35:a2:ff:d2:1c:a7: 4a:2a:10:ca:d4:bb:7a:f3:31:d4:15:f4:8f:b4:74: 32:ba:b0:16:c1:c2:bf:9b:84:e8:1d:bc:69:09:b9: 60:c2:e9:07:e6:3a:f0:01:95:b9:d0:04:07:08:6e: 4a:84:c1:2b:69:8f:85:1c:9b:63:05:c9:0c:f4:ae: cb:85:9d:fe:ae:33:24:a4:a1:c9:5c:2f:64:be:b1: 7d:28:57:59:af:8c:77:58:87:cc:36:41:11:3f:39: 78:3d:5e:0b:94:98:87:46:f0:e0:ae:00:e6:35:1a: 41:fa:92:c3:02:a5:c2:af:11:73:ca:9d:02:3c:36: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:1C:0D:A2:3D:82:5A:87:02:22:D0:97:70:EC:50:EA:1A:55:8F X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:87:92:9b:20:9f:70:00:45:7c:ba:18:81:18:a4:37:a6:7c: eb:d9:87:9f:1c:76:91:68:6a:fa:46:ae:fc:0a:5a:4a:25:93: 18:5a:30:ed:56:f3:a8:04:07:e8:ea:d9:34:77:0f:d7:6c:20: 16:f2:17:85:cd:8c:21:c9:79:04:86:85:5a:39:fd:3d:8c:a2: c4:92:1e:44:0b:40:f0:c6:34:40:77:92:ed:d7:46:0d:16:2e: 1b:2b:64:61:61:4e:85:a6:0a:33:ac:de:e1:7c:ac:0a:d7:2c: 6f:5d:a4:ad:26:cf:2b:67:be:68:8d:a3:4c:09:94:63:47:7d: 2e:2b:91:4c:76:59:fa:87:40:97:dd:ab:fc:2e:b9:90:e4:cc: 87:c9:d7:78:2f:2f:e4:c1:77:88:e0:8f:48:0b:e4:af:d7:b4: a0:c7:3f:26:bd:19:87:5f:84:61:40:e8:10:25:f4:2a:aa:c1: 7c:16:e6:2d:5a:6c:aa:82:0a:6d:06:c1:d9:53:a0:4c:55:80: e4:54:51:58:48:85:d1:f7:9e:1d:76:1b:49:89:f2:a5:ed:85: fa:14:7d:66:ff:a9:66:bc:b5:e1:2e:c2:8b:ea:f6:2d:fc:06: d0:5d:4f:6a:5a:9c:05:14:83:f4:b9:40:5f:96:9f:a5:49:1e: 67:82:57:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPetQcAS+3Ic/shkaO0GjAWezj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA5MTcwMjM2NTJaFw0yNjA5MTgwMzA0NTJaMDMxMTAvBgNV BAMTKDQyOUIxQzBEQTIzRDgyNUE4NzAyMjJEMDk3NzBFQzUwRUExQTU1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuoAz4ePCfNBz5RKp1P6i/29D JabLzEmJjvb40LMa25yjfEnDvrMrqYSC6BtS84+GpHnQNMCDBK/BhHE5RUBYZzut yXRbkSM3luYGPRgHbtNkezMuLlkKBmdubjJLvGSM13b8Nj/610RhWnNOpsJZx7gz rcd1291+MAONq8zXkDWi/9Icp0oqEMrUu3rzMdQV9I+0dDK6sBbBwr+bhOgdvGkJ uWDC6QfmOvABlbnQBAcIbkqEwStpj4Ucm2MFyQz0rsuFnf6uMySkoclcL2S+sX0o V1mvjHdYh8w2QRE/OXg9XguUmIdG8OCuAOY1GkH6ksMCpcKvEXPKnQI8NvFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpscDaI9glqHAiLQl3DsUOoaVY8wHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSHkpsgn3AARXy6GIEYpDemfOvZh58cdpFo avpGrvwKWkolkxhaMO1W86gEB+jq2TR3D9dsIBbyF4XNjCHJeQSGhVo5/T2MosSS HkQLQPDGNEB3ku3XRg0WLhsrZGFhToWmCjOs3uF8rArXLG9dpK0mzytnvmiNo0wJ lGNHfS4rkUx2WfqHQJfdq/wuuZDkzIfJ13gvL+TBd4jgj0gL5K/XtKDHPya9GYdf hGFA6BAl9CqqwXwW5i1abKqCCm0GwdlToExVgORUUVhIhdH3nh12G0mJ8qXthfoU fWb/qWa8teEuwovq9i38BtBdT2panAUUg/S5QF+Wn6VJHmeCV2U= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:10 2026 by rpki-client