$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json) Hash identifier: KrWRimyAu4s2nbSLOU5yiM32RaoJpX2mP0nrAqFOBSU= Subject key identifier: 9F:69:6F:E3:76:00:00:1F:05:9F:4A:91:68:0C:80:4E:D2:A5:69:A7 Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A Certificate serial: 5E6865AF92E9E4991FDD1D618A5C16F5FA94C2F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:50:51 +0000 Manifest this update: Thu 17 Sep 2026 09:45:51 +0000 Manifest next update: Fri 18 Sep 2026 10:01:51 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=) 2: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: ooAlO8nW0Gkjbx16Gp2bMRiTxjj8fMeeYokPLXUTmfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:68:65:af:92:e9:e4:99:1f:dd:1d:61:8a:5c:16:f5:fa:94:c2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A Validity Not Before: Sep 17 09:45:51 2026 GMT Not After : Sep 18 10:01:51 2026 GMT Subject: CN=9F696FE37600001F059F4A91680C804ED2A569A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:81:74:2e:fc:05:8e:e5:c3:00:ad:35:77: 87:35:86:de:7b:16:cd:75:ca:13:85:bd:08:a7:b0: a5:b0:f2:28:b2:64:8a:24:5f:e0:39:a1:bf:38:6b: 02:c1:c8:1a:8a:54:f3:82:a2:1a:0c:4c:4f:84:94: 0c:fa:4d:91:ca:f1:36:6b:16:6a:35:85:52:90:dc: 2f:c9:e2:bd:ec:c4:09:5f:0a:cf:71:d6:17:f5:54: b4:50:f9:ba:84:3b:84:3a:93:dd:b5:0c:09:ca:75: 69:2c:01:51:3d:f8:53:8f:d7:0e:8d:7e:24:2b:46: 46:69:d3:9c:06:c8:0d:a8:68:13:eb:a2:34:54:fb: ea:ed:79:12:95:0e:79:67:d7:3e:53:c6:69:aa:50: 84:39:c7:52:cf:f6:8f:19:c4:af:f9:fb:17:ef:ae: 71:9c:5b:8c:ea:01:bc:08:30:d6:89:5f:d8:98:69: 56:51:a7:e7:c4:41:0e:08:01:49:fb:d5:c9:af:fa: aa:cf:15:a2:59:de:07:f6:c5:e0:8f:bd:16:4d:28: 22:e4:7c:fe:cc:6e:e8:86:31:82:23:3f:ca:2a:4e: 89:22:6d:f7:cf:61:2a:5d:91:de:a6:72:9f:79:de: a0:a2:67:28:18:c2:e3:92:3f:44:fd:03:1d:7b:69: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:6F:E3:76:00:00:1F:05:9F:4A:91:68:0C:80:4E:D2:A5:69:A7 X509v3 Authority Key Identifier: keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:71:f5:7e:8e:ee:a0:b9:4c:f6:0b:f6:d3:e0:b0:29:a5: 35:12:19:a2:d3:b7:2e:28:4d:15:cf:6e:af:4b:d6:a7:e2:46: 61:c2:72:e9:8d:db:40:eb:7d:c5:1c:32:69:90:20:1f:80:5b: 2d:bf:69:de:e9:11:ad:eb:0b:de:08:9d:bc:21:7b:3c:f7:24: 11:e6:7c:24:e0:94:b7:23:32:90:f3:71:59:37:8a:80:9c:b8: e2:e7:76:f5:46:d2:e3:44:8d:9e:95:f5:75:9d:86:57:69:a3: 2e:1c:a1:1a:e4:31:52:b1:2f:a1:07:e5:41:02:25:2f:d7:cf: 2e:29:26:4f:8b:fe:4c:48:b1:36:30:31:5c:0f:11:88:f5:58: 73:51:b0:10:8a:de:29:0f:40:b6:5b:8c:54:f4:82:db:a4:22: 6f:7c:7b:ee:3d:9a:06:df:7f:55:71:e7:56:82:7b:c3:18:c6: ad:c1:56:b3:6f:f1:69:af:9c:c8:7e:b3:2b:04:86:1b:25:ea: 98:2f:97:d1:2e:11:1a:73:ff:b8:00:39:0f:71:5d:7a:19:8e: 1d:e2:ed:4d:7c:01:5a:2c:60:81:ed:2d:31:2c:01:7f:29:42: d5:3e:cc:7c:b3:81:e4:e5:07:e6:4a:f9:1d:9b:b3:c9:28:66: 49:bc:16:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmhlr5Lp5Jkf3R1hilwW9fqUwvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIy NjJENTA1QTAeFw0yNjA5MTcwOTQ1NTFaFw0yNjA5MTgxMDAxNTFaMDMxMTAvBgNV BAMTKDlGNjk2RkUzNzYwMDAwMUYwNTlGNEE5MTY4MEM4MDRFRDJBNTY5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTvoF0LvwFjuXDAK01d4c1ht57 Fs11yhOFvQinsKWw8iiyZIokX+A5ob84awLByBqKVPOCohoMTE+ElAz6TZHK8TZr Fmo1hVKQ3C/J4r3sxAlfCs9x1hf1VLRQ+bqEO4Q6k921DAnKdWksAVE9+FOP1w6N fiQrRkZp05wGyA2oaBProjRU++rteRKVDnln1z5TxmmqUIQ5x1LP9o8ZxK/5+xfv rnGcW4zqAbwIMNaJX9iYaVZRp+fEQQ4IAUn71cmv+qrPFaJZ3gf2xeCPvRZNKCLk fP7MbuiGMYIjP8oqTokibffPYSpdkd6mcp953qCiZygYwuOSP0T9Ax17aZBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn2lv43YAAB8Fn0qRaAyATtKlaacwHwYDVR0j BBgwFoAUwX2RGtZyqejvQYtoZVylEiYtUFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2JkYzgtZDE5NS00YzdkLWIzZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFE NjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIyNjJENTA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTdEOTExQUQ2NzJBOUU4RUY0MThCNjg2NTVDQTUxMjI2MkQ1 MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1 MTIyNjJENTA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAvcfV+ju6guUz2C/bT4LAppTUSGaLTty4o TRXPbq9L1qfiRmHCcumN20DrfcUcMmmQIB+AWy2/ad7pEa3rC94Inbwhezz3JBHm fCTglLcjMpDzcVk3ioCcuOLndvVG0uNEjZ6V9XWdhldpoy4coRrkMVKxL6EH5UEC JS/Xzy4pJk+L/kxIsTYwMVwPEYj1WHNRsBCK3ikPQLZbjFT0gtukIm98e+49mgbf f1Vx51aCe8MYxq3BVrNv8WmvnMh+sysEhhsl6pgvl9EuERpz/7gAOQ9xXXoZjh3i 7U18AVosYIHtLTEsAX8pQtU+zHyzgeTlB+ZK+R2bs8koZkm8Fnc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:22 2026 by rpki-client