$ rpki-client -vvvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json) Hash identifier: BziydmChJ3oDCkgd5+9Mjbh0Ftyw0o2ohrX3Xbclf7I= Subject key identifier: 85:2B:B3:87:8C:8B:0E:77:07:AE:46:7C:84:24:29:03:4B:F5:A9:6C Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551 Certificate serial: 0675BD34F15DC1D9E077CB7A49064EB2E3AD77AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 10:01:00 +0000 Manifest this update: Thu 17 Sep 2026 09:56:00 +0000 Manifest next update: Fri 18 Sep 2026 11:03:00 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=) 2: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: 0TQIsQ4hY5C4TWFNq/ZYQGueRHp6BzHYyzmfZLDObPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:75:bd:34:f1:5d:c1:d9:e0:77:cb:7a:49:06:4e:b2:e3:ad:77:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551 Validity Not Before: Sep 17 09:56:00 2026 GMT Not After : Sep 18 11:03:00 2026 GMT Subject: CN=852BB3878C8B0E7707AE467C842429034BF5A96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:83:77:ea:18:d7:aa:e1:13:70:cd:5e:98: f5:05:39:39:d9:6a:3a:ad:21:1d:cc:f9:35:ba:0c: 86:cf:c2:61:9a:3b:d9:0f:3d:0b:dd:46:8e:2b:70: c8:10:c5:d3:50:50:e2:c0:0d:15:82:dd:d4:0e:f5: 16:ca:35:9c:44:bf:6d:97:b0:d4:27:a1:0a:00:8d: 5d:9a:d5:0b:7d:b1:aa:7e:ac:85:ad:ca:1c:fc:29: 38:9a:b4:f7:8a:2b:cd:c9:c3:f0:93:b1:e2:39:d9: ed:ab:0f:ff:00:54:54:2c:f3:4a:e4:d2:23:95:f8: 04:19:51:9c:2f:3b:d5:c6:e5:ec:d4:63:d5:c0:15: 16:88:85:b3:0a:9b:9d:b9:53:ac:21:02:e7:b2:40: 20:31:54:3c:aa:b0:09:d3:bd:1b:05:d0:02:1a:d7: c3:75:6f:6d:11:e4:fa:d1:f4:ff:75:f9:3a:44:39: 90:5c:31:3b:ab:2a:48:77:61:a3:f0:33:e8:ad:e2: 4d:3d:81:b5:c8:38:c2:80:51:6f:64:45:12:d8:82: b1:54:c6:4a:bf:fe:fc:46:73:d5:26:45:da:96:34: fe:98:29:41:52:b9:5c:a9:4a:df:22:69:a8:b2:d7: aa:92:1a:59:a6:f2:3a:17:15:27:80:f1:80:d0:43: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2B:B3:87:8C:8B:0E:77:07:AE:46:7C:84:24:29:03:4B:F5:A9:6C X509v3 Authority Key Identifier: keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d4:43:c3:7a:3a:62:e9:e3:70:89:0c:89:4b:41:ef:f6:d9: a1:ea:6e:04:5a:17:ca:74:cc:8a:48:95:d0:83:78:c0:93:8f: 3f:59:d6:ce:da:5e:82:57:f5:b9:32:0b:ae:f3:f1:33:11:a9: d0:c6:7d:4a:7b:82:c0:fa:87:f2:2a:ba:f6:06:02:6d:d1:bf: fa:b8:7c:8d:89:dd:ad:fd:00:13:b0:4c:78:78:b2:26:2d:37: b0:cf:3a:e2:21:7f:6e:fb:0f:e9:6b:ee:54:89:99:fd:c8:5a: ef:ed:7a:7a:22:07:50:0e:a0:fa:c9:d2:4c:72:01:e1:a0:82: 06:e8:b3:03:97:ed:9f:2e:be:0c:9b:b1:aa:1b:60:e4:60:81: 2e:b0:d9:e4:44:f7:73:3e:09:b6:53:bc:98:d7:f4:63:93:01: 94:e4:90:ed:da:e4:af:69:b6:99:64:5d:48:c0:5a:11:b6:fd: b5:77:9b:d3:e2:7c:52:21:9b:24:74:48:1e:de:e1:2e:40:f9: 4d:b4:57:d8:16:fe:78:86:30:33:4e:c4:e4:f5:93:e1:3d:fc: 66:94:b4:0a:91:f0:b9:e7:7c:01:9c:43:61:7e:49:80:ae:a8: 82:73:e4:d2:4b:e5:ae:6a:49:5a:c6:3f:33:8b:32:6f:ef:28: d6:5e:32:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnW9NPFdwdngd8t6SQZOsuOtd6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx NjE0NjU1MTAeFw0yNjA5MTcwOTU2MDBaFw0yNjA5MTgxMTAzMDBaMDMxMTAvBgNV BAMTKDg1MkJCMzg3OEM4QjBFNzcwN0FFNDY3Qzg0MjQyOTAzNEJGNUE5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyN4N36hjXquETcM1emPUFOTnZ ajqtIR3M+TW6DIbPwmGaO9kPPQvdRo4rcMgQxdNQUOLADRWC3dQO9RbKNZxEv22X sNQnoQoAjV2a1Qt9sap+rIWtyhz8KTiatPeKK83Jw/CTseI52e2rD/8AVFQs80rk 0iOV+AQZUZwvO9XG5ezUY9XAFRaIhbMKm525U6whAueyQCAxVDyqsAnTvRsF0AIa 18N1b20R5PrR9P91+TpEOZBcMTurKkh3YaPwM+it4k09gbXIOMKAUW9kRRLYgrFU xkq//vxGc9UmRdqWNP6YKUFSuVypSt8iaaiy16qSGlmm8joXFSeA8YDQQweNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSuzh4yLDncHrkZ8hCQpA0v1qWwwHwYDVR0j BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2 NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLUQ8N6OmLp43CJDIlLQe/22aHqbgRaF8p0 zIpIldCDeMCTjz9Z1s7aXoJX9bkyC67z8TMRqdDGfUp7gsD6h/IquvYGAm3Rv/q4 fI2J3a39ABOwTHh4siYtN7DPOuIhf277D+lr7lSJmf3IWu/tenoiB1AOoPrJ0kxy AeGgggboswOX7Z8uvgybsaobYORggS6w2eRE93M+CbZTvJjX9GOTAZTkkO3a5K9p tplkXUjAWhG2/bV3m9PifFIhmyR0SB7e4S5A+U20V9gW/niGMDNOxOT1k+E9/GaU tAqR8LnnfAGcQ2F+SYCuqIJz5NJL5a5qSVrGPzOLMm/vKNZeMjo= -----END CERTIFICATE-----Generated at Thu Sep 17 16:49:45 2026 by rpki-client