$ rpki-client -vvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json) Hash identifier: ImWoE+O9V0tVVOjlb7HgRamv90o7jDr/AO7SLJmxHUM= Subject key identifier: 00:84:9C:CC:02:FA:CE:DA:98:D0:91:6E:1A:B2:EE:BD:CA:58:11:45 Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551 Certificate serial: 7F72185C27A46AE787736C52078C9E74E42B435A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:36:13 +0000 Manifest this update: Thu 18 Jun 2026 03:31:13 +0000 Manifest next update: Fri 19 Jun 2026 05:15:13 +0000 Files and hashes: 1: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: VENY5zfRWsGYB887iyU13o9f3/Ymvi7Md4d82IvsosE=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:72:18:5c:27:a4:6a:e7:87:73:6c:52:07:8c:9e:74:e4:2b:43:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551 Validity Not Before: Jun 18 03:31:13 2026 GMT Not After : Jun 19 05:15:13 2026 GMT Subject: CN=00849CCC02FACEDA98D0916E1AB2EEBDCA581145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:2d:fd:87:a6:a0:d4:bb:f4:24:d3:c8:ea: 61:41:1f:cc:42:91:9a:4d:5b:28:c8:47:5d:8c:5f: ba:8e:05:6f:6a:3b:29:4d:f7:e7:f0:ad:c2:df:98: 7a:9a:1e:05:ef:d6:69:f2:be:da:e5:60:08:b1:17: 69:4b:8a:2f:c3:9c:29:df:0a:f3:a5:47:aa:bd:ec: 06:df:5a:e8:55:51:0d:36:89:e7:8c:54:e4:7a:56: dc:c4:00:77:42:de:ba:74:32:3d:fa:18:d4:34:1e: 83:ec:d7:96:57:11:b6:c9:16:48:1f:3a:19:df:5a: d1:eb:0b:5b:5c:b2:68:d1:7b:79:96:78:c1:3f:54: 41:a2:50:d1:6f:66:6f:cf:b1:01:fe:75:36:cf:03: b6:a3:2f:8e:14:fd:10:ba:7d:f2:08:8c:6e:a2:eb: a3:96:67:12:06:de:5e:d9:d5:24:0e:80:b8:d2:af: af:f1:1a:71:8b:45:e8:0f:7f:0b:0b:64:36:c0:c7: 0d:33:84:d1:96:06:77:4b:83:de:5b:15:f2:e2:cd: 6a:42:f5:91:65:0a:f2:e1:f3:34:5c:e5:8d:f6:5e: 7e:8d:c2:b8:89:fb:20:4e:50:7b:6e:44:3f:da:11: d8:87:69:ff:45:2a:03:cd:fe:37:db:fd:fa:e2:a7: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:84:9C:CC:02:FA:CE:DA:98:D0:91:6E:1A:B2:EE:BD:CA:58:11:45 X509v3 Authority Key Identifier: keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:77:20:38:d9:97:f3:4b:66:df:b2:e4:d9:91:68:72:34:1b: f8:63:a3:f4:93:4c:f7:d4:58:52:b1:1c:4a:8b:c6:d2:52:15: 2d:c0:03:d1:78:07:bc:a7:2a:13:eb:53:85:7e:3b:6a:16:12: 47:83:77:3f:c7:d1:5a:58:ea:aa:3c:2e:9d:eb:ba:12:af:f5: 89:e0:7e:a4:d4:ab:2c:1c:10:3b:c9:07:34:3e:53:b2:fb:8e: cc:a7:1d:5c:86:ac:1c:67:48:e6:fd:e2:ef:16:94:42:07:83: c1:15:4a:8d:10:dd:bd:c5:bc:90:a9:c3:c7:b8:a1:05:04:75: 2a:39:87:4c:18:a9:14:eb:83:11:58:ab:e3:05:c8:fa:98:44: 9c:5e:b3:a8:69:3e:15:24:1c:c5:8e:70:59:51:f0:5a:e6:d1: 98:fd:08:01:c2:81:61:37:fc:d0:17:4c:d2:bc:cf:86:8c:dd: 7a:36:27:75:e0:26:f4:a7:4f:0a:15:4b:5b:24:b0:26:e8:33: 61:0d:45:9d:41:1b:4c:a8:42:eb:3e:a3:54:01:9a:0d:76:78: 97:c5:10:18:48:a7:71:9c:48:6c:38:23:8f:dc:b9:70:ad:8d: b9:15:28:72:ed:3e:fe:b7:f4:c8:fc:43:18:94:e2:ab:8c:64: cf:34:56:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3IYXCekaueHc2xSB4yedOQrQ1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx NjE0NjU1MTAeFw0yNjA2MTgwMzMxMTNaFw0yNjA2MTkwNTE1MTNaMDMxMTAvBgNV BAMTKDAwODQ5Q0NDMDJGQUNFREE5OEQwOTE2RTFBQjJFRUJEQ0E1ODExNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAi39h6ag1Lv0JNPI6mFBH8xC kZpNWyjIR12MX7qOBW9qOylN9+fwrcLfmHqaHgXv1mnyvtrlYAixF2lLii/DnCnf CvOlR6q97AbfWuhVUQ02ieeMVOR6VtzEAHdC3rp0Mj36GNQ0HoPs15ZXEbbJFkgf OhnfWtHrC1tcsmjRe3mWeME/VEGiUNFvZm/PsQH+dTbPA7ajL44U/RC6ffIIjG6i 66OWZxIG3l7Z1SQOgLjSr6/xGnGLRegPfwsLZDbAxw0zhNGWBndLg95bFfLizWpC 9ZFlCvLh8zRc5Y32Xn6NwriJ+yBOUHtuRD/aEdiHaf9FKgPN/jfb/frip00zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAISczAL6ztqY0JFuGrLuvcpYEUUwHwYDVR0j BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2 NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIh3IDjZl/NLZt+y5NmRaHI0G/hjo/STTPfU WFKxHEqLxtJSFS3AA9F4B7ynKhPrU4V+O2oWEkeDdz/H0VpY6qo8Lp3ruhKv9Yng fqTUqywcEDvJBzQ+U7L7jsynHVyGrBxnSOb94u8WlEIHg8EVSo0Q3b3FvJCpw8e4 oQUEdSo5h0wYqRTrgxFYq+MFyPqYRJxes6hpPhUkHMWOcFlR8Frm0Zj9CAHCgWE3 /NAXTNK8z4aM3Xo2J3XgJvSnTwoVS1sksCboM2ENRZ1BG0yoQus+o1QBmg12eJfF EBhIp3GcSGw4I4/cuXCtjbkVKHLtPv639Mj8QxiU4quMZM80Vuw= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:24 2026 by rpki-client