$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: 6GEVM6oSnP0N0bIOxY3aN6WVWl4eEZd/VAi28cTKYMg= Subject key identifier: E5:30:2F:46:32:64:8B:31:D1:C0:38:9E:B8:CF:8A:52:3B:10:6C:A9 Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 1AD25148501F35F739554DB4F66F8109CFD5D8F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:02:13 +0000 Manifest this update: Thu 17 Sep 2026 02:57:13 +0000 Manifest next update: Fri 18 Sep 2026 05:35:13 +0000 Files and hashes: 1: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: GER0adrRFsSfgRfNKeGxOjTAm6AtT+RfZqXTTSjO3vw=) 2: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) 3: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) 4: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) 5: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 6: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) 7: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d2:51:48:50:1f:35:f7:39:55:4d:b4:f6:6f:81:09:cf:d5:d8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: Sep 17 02:57:13 2026 GMT Not After : Sep 18 05:35:13 2026 GMT Subject: CN=E5302F4632648B31D1C0389EB8CF8A523B106CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:d5:49:54:8f:c5:31:64:99:4f:64:64:3d: 24:22:e9:47:d1:61:8a:10:05:37:eb:a6:fe:f3:d3: 34:c2:52:6c:f2:91:f4:0c:c8:ca:60:33:23:fd:11: e6:d7:06:4b:56:3d:35:79:5d:29:04:ba:c4:a2:c9: 5e:27:ee:fd:ee:b0:8e:7c:24:1f:a2:67:9a:80:ee: d6:8a:b7:de:ad:c3:4c:14:77:34:de:3e:3f:b8:42: 07:08:76:f3:61:e6:4e:e7:63:87:58:4c:4c:e8:20: 1e:44:fb:ef:bb:24:83:5e:fb:60:c6:85:88:ad:45: 33:ae:10:b9:ba:de:ee:0a:64:a9:3e:8a:36:01:57: de:9e:a9:4f:f1:ad:2b:2e:29:ca:5e:b1:28:43:64: 15:4d:69:ed:d4:84:c4:06:31:82:73:e6:4c:29:d9: db:7c:b3:11:24:f9:5b:8a:d7:ac:ba:26:b4:94:5d: f6:6c:b4:e5:c1:47:27:a2:f6:de:06:40:90:ba:da: 05:07:2b:b3:5e:55:12:25:7d:81:0d:0f:dc:52:f7: 3f:b6:9d:35:0c:cd:ff:61:05:53:0d:fd:be:03:7c: 6c:76:10:17:1e:d1:6c:13:a5:3c:8f:10:12:5a:a9: f9:19:50:60:c8:8a:32:91:1c:03:17:99:b1:ce:5b: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:2F:46:32:64:8B:31:D1:C0:38:9E:B8:CF:8A:52:3B:10:6C:A9 X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b1:fc:35:e0:81:eb:60:a4:09:4b:0d:05:ad:ac:32:82:36: 5f:77:c0:d7:b9:13:41:30:cc:06:b6:c5:5f:f2:86:db:5f:89: e3:bc:98:28:29:29:81:40:36:c9:bc:f6:09:1a:a3:59:4c:32: 6d:87:f4:2d:a3:59:be:c0:06:d2:91:2a:6e:e5:52:b0:1d:b0: f8:10:51:fd:f9:ee:12:26:f3:86:59:b8:c0:1d:c4:ca:52:d3: 18:2c:7c:c1:8d:0d:04:1c:f6:34:22:94:40:28:f7:7f:97:4b: c2:d5:a8:89:9e:7e:87:6e:44:ad:23:3e:82:07:dd:7b:ce:22: 86:c2:d0:e8:8c:6d:3b:90:50:d0:c3:4c:2a:f8:15:c3:9b:81: a9:0e:01:44:1a:9a:c2:15:55:1e:ab:80:02:b2:7b:ce:f3:a6: 76:7f:97:26:34:97:42:c7:34:7e:36:fd:02:c0:59:6e:ad:13: 6f:fc:71:f8:ea:f6:4c:9e:13:98:a7:3b:66:7b:ef:21:52:a7: c8:20:96:ff:51:a3:8c:ea:fc:2a:23:45:23:57:4e:7c:52:80: 28:42:33:1d:6d:aa:21:5c:fa:7a:2b:3f:c5:e1:2c:5d:d9:2a: 91:f6:81:05:40:57:b2:d7:26:65:b2:b4:84:d5:b7:31:58:2e: 66:f2:32:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtJRSFAfNfc5VU209m+BCc/V2PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA5MTcwMjU3MTNaFw0yNjA5MTgwNTM1MTNaMDMxMTAvBgNV BAMTKEU1MzAyRjQ2MzI2NDhCMzFEMUMwMzg5RUI4Q0Y4QTUyM0IxMDZDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CtVJVI/FMWSZT2RkPSQi6UfR YYoQBTfrpv7z0zTCUmzykfQMyMpgMyP9EebXBktWPTV5XSkEusSiyV4n7v3usI58 JB+iZ5qA7taKt96tw0wUdzTePj+4QgcIdvNh5k7nY4dYTEzoIB5E+++7JINe+2DG hYitRTOuELm63u4KZKk+ijYBV96eqU/xrSsuKcpesShDZBVNae3UhMQGMYJz5kwp 2dt8sxEk+VuK16y6JrSUXfZstOXBRyei9t4GQJC62gUHK7NeVRIlfYEND9xS9z+2 nTUMzf9hBVMN/b4DfGx2EBce0WwTpTyPEBJaqfkZUGDIijKRHAMXmbHOWxsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5TAvRjJkizHRwDieuM+KUjsQbKkwHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABax/DXggetgpAlLDQWtrDKCNl93wNe5E0Ew zAa2xV/yhttfieO8mCgpKYFANsm89gkao1lMMm2H9C2jWb7ABtKRKm7lUrAdsPgQ Uf357hIm84ZZuMAdxMpS0xgsfMGNDQQc9jQilEAo93+XS8LVqImefoduRK0jPoIH 3XvOIobC0OiMbTuQUNDDTCr4FcObgakOAUQamsIVVR6rgAKye87zpnZ/lyY0l0LH NH42/QLAWW6tE2/8cfjq9kyeE5inO2Z77yFSp8gglv9Ro4zq/CojRSNXTnxSgChC Mx1tqiFc+norP8XhLF3ZKpH2gQVAV7LXJmWytITVtzFYLmbyMmU= -----END CERTIFICATE-----Generated at Thu Sep 17 16:28:17 2026 by rpki-client