$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft (raw, json) Hash identifier: K8sHkM/fplNnJAQ+y5oD5z0Vbx7MH2b05iHUAWwveZE= Subject key identifier: 1C:B1:F3:D7:B5:D4:34:BB:D9:EE:7C:6D:4A:10:5E:35:22:4A:A1:16 Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB Certificate issuer: /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Certificate serial: 6313C3EE03579F8C15C1C424D357318E23A6BB98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:02:24 +0000 Manifest this update: Wed 16 Sep 2026 22:57:24 +0000 Manifest next update: Thu 17 Sep 2026 23:31:24 +0000 Files and hashes: 1: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=) 2: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: u4GGrkPMCSBeQdSFpeeb+BeoQUTIplrdOwR16vFL5xY=) 3: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=) 4: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl (hash: pvpj+OyWtgn9EyS5EADiK0NUZYsmPyxf+LoCwHWE1po=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:13:c3:ee:03:57:9f:8c:15:c1:c4:24:d3:57:31:8e:23:a6:bb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Validity Not Before: Sep 16 22:57:24 2026 GMT Not After : Sep 17 23:31:24 2026 GMT Subject: CN=1CB1F3D7B5D434BBD9EE7C6D4A105E35224AA116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:24:a1:5f:53:45:f9:b5:88:e6:3c:f4:a6: bc:2a:a2:de:39:36:81:f0:4f:90:7b:3c:26:84:7d: f7:74:7c:89:21:0d:db:af:47:c9:3b:4b:f7:2a:ed: bf:62:61:f9:8f:ad:54:a5:e4:1c:af:07:7c:75:f6: 96:d4:6a:18:60:d9:5c:c1:0a:76:f5:8a:a1:b3:3c: 2f:74:00:af:ce:50:83:27:0e:14:0c:1e:5a:b8:dd: 5a:61:0b:87:fb:e4:52:96:73:c7:6e:31:b0:c3:96: fd:56:d4:2a:61:c8:9d:4f:09:24:f9:08:e4:b9:08: 05:5d:f0:78:13:b7:ab:1a:e2:17:5c:4b:97:2b:d8: 83:f0:97:4e:92:3c:5a:31:0d:d1:12:17:bd:05:09: 30:0c:36:7e:b9:93:35:e3:16:b5:75:d0:55:d7:24: 17:f9:41:f1:ec:b0:79:e5:2e:54:23:54:5e:42:1e: 52:aa:6a:2d:0a:6d:85:ea:cb:f7:3c:a4:07:31:02: ac:60:e8:6c:4e:1b:a7:41:7a:c8:e0:9f:e3:3a:22: 92:39:c8:ef:0f:78:51:f8:21:92:bf:37:9e:7e:61: c1:e0:2c:e3:c8:30:86:c8:0c:08:ce:fd:15:92:91: 4d:65:31:2c:3c:ac:dd:2e:d8:88:5b:84:a4:68:db: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B1:F3:D7:B5:D4:34:BB:D9:EE:7C:6D:4A:10:5E:35:22:4A:A1:16 X509v3 Authority Key Identifier: keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:48:aa:0a:46:9e:d3:49:f1:ae:4b:14:f4:77:90:c0:7a:9a: 8b:5e:7e:cb:56:68:94:86:ba:40:ea:94:07:60:43:a2:8a:9a: 79:d5:13:10:35:ec:3d:a9:05:ac:65:6f:e4:64:2f:e6:f0:a5: ce:ea:a7:ce:a1:64:3c:7a:39:c2:4e:0f:be:7f:11:e8:03:be: de:a0:96:70:73:ed:7b:ef:c4:a9:fa:13:07:6a:70:b7:99:4f: 8b:65:16:86:8c:fa:c7:a1:f8:f3:6d:af:d5:b0:25:50:e3:41: 7b:3e:58:cc:47:f1:4a:be:0a:d7:60:c8:87:27:33:3f:8f:ac: 98:1e:e5:76:af:30:59:67:6f:30:99:1c:63:e7:d6:51:ba:14: 9f:cb:4f:4b:30:2f:49:2f:64:b1:40:cf:59:d7:ae:d2:20:bb: 03:af:30:a4:6f:3a:19:71:ca:74:7e:6e:ce:6e:03:03:59:cb: fe:1e:e7:c0:6b:4e:01:99:de:1c:d5:da:15:35:b2:9f:2e:a8: a2:de:5f:2c:9d:a0:bc:9d:26:27:62:29:91:d1:0e:29:ad:47: 55:a0:fc:5a:b9:20:db:47:91:12:2a:f2:b5:dd:00:ca:76:d2: 0e:8e:32:e9:36:b8:86:e3:eb:52:20:fb:7e:18:f9:7f:32:e6: 22:f1:46:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxPD7gNXn4wVwcQk01cxjiOmu5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2QjAy QzEzREVDQjAeFw0yNjA5MTYyMjU3MjRaFw0yNjA5MTcyMzMxMjRaMDMxMTAvBgNV BAMTKDFDQjFGM0Q3QjVENDM0QkJEOUVFN0M2RDRBMTA1RTM1MjI0QUExMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7syShX1NF+bWI5jz0prwqot45 NoHwT5B7PCaEffd0fIkhDduvR8k7S/cq7b9iYfmPrVSl5ByvB3x19pbUahhg2VzB Cnb1iqGzPC90AK/OUIMnDhQMHlq43VphC4f75FKWc8duMbDDlv1W1CphyJ1PCST5 COS5CAVd8HgTt6sa4hdcS5cr2IPwl06SPFoxDdESF70FCTAMNn65kzXjFrV10FXX JBf5QfHssHnlLlQjVF5CHlKqai0KbYXqy/c8pAcxAqxg6GxOG6dBesjgn+M6IpI5 yO8PeFH4IZK/N55+YcHgLOPIMIbIDAjO/RWSkU1lMSw8rN0u2IhbhKRo2yPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLHz17XUNLvZ7nxtShBeNSJKoRYwHwYDVR0j BBgwFoAUFzvZV93dtj7axYM8A/v2sCwT3sswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcxYmY5ODAtMjRkYS00ODY1LWE5ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdE REREQjYzRURBQzU4MzNDMDNGQkY2QjAyQzEzREVDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzNCRDk1N0RERERCNjNFREFDNTgzM0MwM0ZCRjZCMDJDMTNE RUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2 QjAyQzEzREVDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJIqgpGntNJ8a5LFPR3kMB6motefstWaJSG ukDqlAdgQ6KKmnnVExA17D2pBaxlb+RkL+bwpc7qp86hZDx6OcJOD75/EegDvt6g lnBz7XvvxKn6EwdqcLeZT4tlFoaM+seh+PNtr9WwJVDjQXs+WMxH8Uq+CtdgyIcn Mz+PrJge5XavMFlnbzCZHGPn1lG6FJ/LT0swL0kvZLFAz1nXrtIguwOvMKRvOhlx ynR+bs5uAwNZy/4e58BrTgGZ3hzV2hU1sp8uqKLeXyydoLydJidiKZHRDimtR1Wg /Fq5INtHkRIq8rXdAMp20g6OMuk2uIbj61Ig+34Y+X8y5iLxRm0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:52:03 2026 by rpki-client