$ rpki-client -vvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json) Hash identifier: Km0cZIC/B9UXptARkhLpb894qSghPbN+/Rf/mKB9N1o= Subject key identifier: C7:4A:50:29:6A:E2:0E:1C:B7:9F:62:84:17:E1:B5:FC:EC:43:DA:05 Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551 Certificate serial: 67A8CA47E07F2E0598FEF217D48129C109164726 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 19:00:27 +0000 Manifest this update: Sun 02 Aug 2026 18:55:27 +0000 Manifest next update: Mon 03 Aug 2026 21:51:27 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=) 2: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: XToCmN2geb/KT/1qEVQyv6Rmt82D9w7YrA5zIONiEmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a8:ca:47:e0:7f:2e:05:98:fe:f2:17:d4:81:29:c1:09:16:47:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551 Validity Not Before: Aug 2 18:55:27 2026 GMT Not After : Aug 3 21:51:27 2026 GMT Subject: CN=C74A50296AE20E1CB79F628417E1B5FCEC43DA05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:0e:88:f6:1b:bf:81:91:67:d9:f1:cd:9e: 9d:d5:26:e0:40:39:cf:b7:4a:31:6a:c2:b2:fa:43: 09:4b:11:cd:a9:74:e6:6c:c1:6d:17:d1:9b:0b:13: 76:22:42:0f:e7:99:81:70:5a:3e:ab:62:d0:f8:3a: 23:a5:91:4d:45:95:12:6a:ef:ec:e3:10:ec:e2:30: 19:45:7f:76:f5:a1:b6:b1:60:c5:46:79:22:e3:b0: 94:41:eb:d3:45:e2:c5:12:5e:2d:50:2a:d3:ac:d4: 1e:82:40:5d:41:71:7f:06:30:ae:29:bf:5e:a0:53: 5d:18:bc:91:9d:89:01:6a:62:c6:1b:f1:a4:b5:41: 0c:ef:2c:19:c8:58:61:4e:7f:03:01:97:b2:dc:9a: 1b:d7:44:ed:40:79:4f:9d:eb:ff:12:89:1c:44:a9: f9:8f:a1:65:ab:e8:0d:b4:e9:5f:56:1f:7f:c0:2d: d9:a3:52:31:da:c4:78:50:11:9e:88:af:9a:11:00: c6:8c:ae:19:f4:c2:6d:7d:df:6b:24:34:9a:aa:bc: 79:e5:44:26:5c:6e:11:0e:3c:3f:66:00:55:87:72: 6c:6a:44:55:a8:eb:75:95:8b:ac:54:8b:c8:7d:ed: da:f6:62:3e:04:37:b9:6a:3a:10:44:c4:06:f0:28: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4A:50:29:6A:E2:0E:1C:B7:9F:62:84:17:E1:B5:FC:EC:43:DA:05 X509v3 Authority Key Identifier: keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d6:2d:12:ff:8f:1e:cf:cd:1d:cf:8e:04:bd:fc:56:77:f2: 44:e1:a6:03:47:d1:be:4e:5d:c6:8a:a1:86:7b:2e:61:14:09: 6b:d7:1e:76:a9:b4:7c:e2:14:dc:39:fe:b0:72:99:f9:cf:bd: 26:ee:44:38:2f:83:44:ae:bd:70:39:ea:c8:3c:02:13:32:7f: d1:b9:db:a1:e5:3c:d1:91:15:ec:cc:cb:24:fb:4c:bd:ae:e4: 7a:ba:4e:e9:05:4d:44:ed:08:5a:be:c3:c2:12:1a:99:d6:15: ce:14:cc:d9:4f:ed:77:1a:ed:dd:db:45:b8:76:e9:18:81:24: 86:39:46:49:b8:32:9b:75:45:f8:9b:05:ac:12:b7:33:5c:b4: cb:a0:8f:a9:a0:88:39:d9:83:bb:73:18:d1:eb:90:b2:38:48: 9e:4f:20:d4:f6:cc:84:18:a2:b9:77:0d:42:65:44:90:29:13: 40:7e:1e:47:f0:0e:82:d0:a6:5b:ca:bd:e7:83:4e:3d:94:ad: 6f:13:b3:cd:1a:95:67:21:66:e2:3b:78:ca:07:76:c6:be:3e: d9:07:3b:70:ca:cf:19:3a:a2:1a:63:06:8a:b5:08:1c:e5:89: 87:0d:9d:55:5f:47:9a:80:3d:0b:65:77:f0:7e:df:94:80:14: c0:56:52:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6jKR+B/LgWY/vIX1IEpwQkWRyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx NjE0NjU1MTAeFw0yNjA4MDIxODU1MjdaFw0yNjA4MDMyMTUxMjdaMDMxMTAvBgNV BAMTKEM3NEE1MDI5NkFFMjBFMUNCNzlGNjI4NDE3RTFCNUZDRUM0M0RBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR5g6I9hu/gZFn2fHNnp3VJuBA Oc+3SjFqwrL6QwlLEc2pdOZswW0X0ZsLE3YiQg/nmYFwWj6rYtD4OiOlkU1FlRJq 7+zjEOziMBlFf3b1obaxYMVGeSLjsJRB69NF4sUSXi1QKtOs1B6CQF1BcX8GMK4p v16gU10YvJGdiQFqYsYb8aS1QQzvLBnIWGFOfwMBl7LcmhvXRO1AeU+d6/8SiRxE qfmPoWWr6A206V9WH3/ALdmjUjHaxHhQEZ6Ir5oRAMaMrhn0wm1932skNJqqvHnl RCZcbhEOPD9mAFWHcmxqRFWo63WVi6xUi8h97dr2Yj4EN7lqOhBExAbwKDqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0pQKWriDhy3n2KEF+G1/OxD2gUwHwYDVR0j BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2 NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzWLRL/jx7PzR3PjgS9/FZ38kThpgNH0b5O XcaKoYZ7LmEUCWvXHnaptHziFNw5/rBymfnPvSbuRDgvg0SuvXA56sg8AhMyf9G5 26HlPNGRFezMyyT7TL2u5Hq6TukFTUTtCFq+w8ISGpnWFc4UzNlP7Xca7d3bRbh2 6RiBJIY5Rkm4Mpt1RfibBawStzNctMugj6mgiDnZg7tzGNHrkLI4SJ5PINT2zIQY orl3DUJlRJApE0B+HkfwDoLQplvKveeDTj2UrW8Ts80alWchZuI7eMoHdsa+PtkH O3DKzxk6ohpjBoq1CBzliYcNnVVfR5qAPQtld/B+35SAFMBWUvg= -----END CERTIFICATE-----Generated at Sun Aug 2 22:48:28 2026 by rpki-client