$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft File: B17A330780AFD953D1D3338525F941E14E1FC919.mft (raw, json) Hash identifier: 2JGPNh+4Z7Zk0sjsa3VRVv4jCzd7yyrPGZ2pnnSmxC8= Subject key identifier: 7E:12:D9:28:EC:67:16:8D:0A:AA:6A:E7:23:DB:C7:87:BC:96:70:A4 Authority key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 Certificate issuer: /CN=B17A330780AFD953D1D3338525F941E14E1FC919 Certificate serial: 410963B8F258B2E2078460B2CF9ACA1AA1D0CD6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft Manifest number: EC Signing time: Mon 26 Oct 2026 16:30:59 +0000 Manifest this update: Mon 26 Oct 2026 16:25:59 +0000 Manifest next update: Tue 27 Oct 2026 16:41:59 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: USfTP+9/4GLbvvoIvIbzRlXyQT6cM8ipPFhCCz3Hhmw=) 2: B17A330780AFD953D1D3338525F941E14E1FC919.crl (hash: LGX3oWtfih+IBcqIOYZbESfQMJUy6QyuLe9WTfpzfrk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 16:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:09:63:b8:f2:58:b2:e2:07:84:60:b2:cf:9a:ca:1a:a1:d0:cd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B17A330780AFD953D1D3338525F941E14E1FC919 Validity Not Before: Oct 26 16:25:59 2026 GMT Not After : Oct 27 16:41:59 2026 GMT Subject: CN=7E12D928EC67168D0AAA6AE723DBC787BC9670A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:1a:46:a5:a0:ba:cb:68:05:e3:fc:66:85: 95:18:cb:da:20:f6:71:e1:f5:61:5b:6d:7c:fd:ec: 42:68:f9:01:e9:6c:3f:90:10:e5:75:01:ff:b0:d0: 40:b7:0d:e9:45:6e:ad:66:87:51:ab:4f:df:77:a0: cc:cc:1f:98:5b:13:0a:2a:e2:3c:42:de:ff:93:86: 58:19:56:e9:89:26:6a:04:f2:1f:27:3a:2b:c1:0b: c0:27:cb:3d:dd:fb:74:b6:36:a7:e6:08:61:d0:4f: 96:5d:36:c6:ee:b1:e3:7a:83:91:52:02:f6:b1:2c: fc:f4:1d:b8:2a:a5:02:5d:44:f8:56:4e:b2:c9:fc: 3f:6c:cd:2a:08:fb:34:6d:55:fa:a8:14:2f:89:6f: 2d:0b:26:99:af:65:b2:af:cd:11:9e:54:34:c5:a5: f7:81:15:8d:fc:fd:98:4a:f9:0d:d5:a4:19:9e:55: 83:5f:3c:83:5a:53:8d:af:e2:28:6b:ce:14:7f:67: 30:b7:d7:34:e7:74:17:76:b1:5e:8f:a2:35:10:2e: 6c:8c:3f:0e:eb:bf:a9:96:0f:b3:0b:a5:19:7a:24: d5:57:f8:53:ff:ee:61:f1:d0:2b:b7:c5:1b:ed:54: b7:85:41:63:1f:ea:b6:c2:ce:84:d8:a1:5a:35:6c: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:D9:28:EC:67:16:8D:0A:AA:6A:E7:23:DB:C7:87:BC:96:70:A4 X509v3 Authority Key Identifier: keyid:B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:65:1a:61:75:52:4f:f0:4f:d0:af:5a:44:5f:dd:8d:f2:69: 3f:06:23:7f:50:e1:79:db:64:aa:41:e8:8b:8c:50:c5:d7:53: 98:7e:9c:5c:8b:24:59:83:2f:d5:84:31:2b:1a:38:09:7a:4d: 98:74:9c:18:bf:bf:5a:2a:a5:d2:6a:3f:47:19:c8:fc:c8:7d: 7b:54:a7:8a:0e:30:9c:74:67:16:72:60:f7:e5:26:45:04:99: 5c:26:3c:3a:47:8f:4a:b8:73:06:76:7e:e7:36:5d:25:10:fc: 66:2a:9d:f4:49:00:a3:90:36:cd:e2:8d:54:2d:4f:8c:93:da: 40:29:6c:a8:d8:ca:c2:9d:dd:b9:6b:a6:ce:43:6a:51:d7:f1: 2c:47:4a:3b:8a:f4:ef:30:ae:88:b1:8d:e7:e3:1b:3b:80:fb: f2:a7:89:1c:74:4a:75:d2:44:a8:ba:7c:fc:38:78:5d:f2:eb: 00:57:15:25:2a:a5:87:1e:7c:96:d9:7d:e0:e0:ac:16:82:fd: 58:2d:96:1b:f3:e2:3b:45:a4:2c:9f:29:81:03:1f:c5:ce:1e: 40:43:15:d4:bf:99:06:3d:62:9c:b9:9e:13:d5:d4:93:49:ff: c2:7f:06:56:0a:89:af:e5:c4:5c:42:df:4c:3a:f5:06:a2:80: 3e:7d:31:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQljuPJYsuIHhGCyz5rKGqHQzW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0 RTFGQzkxOTAeFw0yNjEwMjYxNjI1NTlaFw0yNjEwMjcxNjQxNTlaMDMxMTAvBgNV BAMTKDdFMTJEOTI4RUM2NzE2OEQwQUFBNkFFNzIzREJDNzg3QkM5NjcwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSBpGpaC6y2gF4/xmhZUYy9og 9nHh9WFbbXz97EJo+QHpbD+QEOV1Af+w0EC3DelFbq1mh1GrT993oMzMH5hbEwoq 4jxC3v+ThlgZVumJJmoE8h8nOivBC8Anyz3d+3S2NqfmCGHQT5ZdNsbuseN6g5FS AvaxLPz0HbgqpQJdRPhWTrLJ/D9szSoI+zRtVfqoFC+Jby0LJpmvZbKvzRGeVDTF pfeBFY38/ZhK+Q3VpBmeVYNfPINaU42v4ihrzhR/ZzC31zTndBd2sV6PojUQLmyM Pw7rv6mWD7MLpRl6JNVX+FP/7mHx0Cu3xRvtVLeFQWMf6rbCzoTYoVo1bATXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhLZKOxnFo0KqmrnI9vHh7yWcKQwHwYDVR0j BBgwFoAUsXozB4Cv2VPR0zOFJflB4U4fyRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYyNWI5NjgtMDkyNy00NTk0LTg4N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4 MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0RTFGQzkxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTdBMzMwNzgwQUZEOTUzRDFEMzMzODUyNUY5NDFFMTRFMUZD OTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQx RTE0RTFGQzkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZlGmF1Uk/wT9CvWkRf3Y3yaT8GI39Q4Xnb ZKpB6IuMUMXXU5h+nFyLJFmDL9WEMSsaOAl6TZh0nBi/v1oqpdJqP0cZyPzIfXtU p4oOMJx0ZxZyYPflJkUEmVwmPDpHj0q4cwZ2fuc2XSUQ/GYqnfRJAKOQNs3ijVQt T4yT2kApbKjYysKd3blrps5DalHX8SxHSjuK9O8wroixjefjGzuA+/KniRx0SnXS RKi6fPw4eF3y6wBXFSUqpYcefJbZfeDgrBaC/Vgtlhvz4jtFpCyfKYEDH8XOHkBD FdS/mQY9Ypy5nhPV1JNJ/8J/BlYKia/lxFxC30w69QaigD59MaI= -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:34 2026 by rpki-client