$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: uguIUHLXn/fQ9cKt7tD1FT2t12nOXR4zOivADyVbIRE= Subject key identifier: CD:CE:84:A0:D3:9D:75:A7:9F:0A:C8:57:A3:E6:31:8D:3D:04:13:6F Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 17817089BCA4E9832BF1C52A78B2F4C1C8035DDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:06:29 +0000 Manifest this update: Wed 16 Sep 2026 18:01:29 +0000 Manifest next update: Thu 17 Sep 2026 19:46:29 +0000 Files and hashes: 1: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: cjroYfaMyikCrYFqpyORtSqQWVCXMWwPS1z9MKXigg8=) 2: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:81:70:89:bc:a4:e9:83:2b:f1:c5:2a:78:b2:f4:c1:c8:03:5d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: Sep 16 18:01:29 2026 GMT Not After : Sep 17 19:46:29 2026 GMT Subject: CN=CDCE84A0D39D75A79F0AC857A3E6318D3D04136F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:07:6e:96:1c:6d:27:b0:a7:6a:a4:3b:8c: 39:9b:d3:31:25:a3:b3:5d:4d:76:d3:6b:fb:bd:25: cd:c3:c6:24:f2:4b:c3:83:48:53:17:d1:9d:fa:29: fc:61:e8:df:4a:71:7f:88:88:93:7c:87:6d:50:d8: 04:4a:8b:e1:60:f5:d5:4d:3b:1f:64:3b:94:7d:05: f8:ea:8d:cf:42:f6:5a:fb:e8:7a:ec:d3:8f:91:cc: 5e:08:88:c2:fc:43:d2:70:5f:ae:a5:03:bd:32:c3: 93:68:38:e2:2a:72:cc:ec:a0:5c:e1:3b:d1:a1:5d: 98:df:76:0b:5c:73:a5:ed:02:9c:86:f7:b5:52:8f: 69:e2:19:b7:79:6b:a0:67:ba:9a:d3:36:fb:4a:6d: d9:db:06:37:de:91:97:92:bb:9f:1c:b2:ed:7b:29: dd:c7:93:b4:82:11:7d:d5:7b:80:d1:f5:e1:5a:c4: 6d:fd:5b:e7:50:ab:c9:34:17:05:f9:b0:4e:8c:c1: 21:4f:d8:3c:56:a8:3f:83:fd:a4:20:6d:7f:94:85: a8:90:7a:08:e1:ea:f5:ec:18:84:62:4f:1b:ce:dc: 3d:fc:55:2c:49:3a:6e:04:18:50:72:ec:77:09:98: 2e:e8:ba:0b:eb:b4:6e:38:c2:4c:2e:28:f8:22:69: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:84:A0:D3:9D:75:A7:9F:0A:C8:57:A3:E6:31:8D:3D:04:13:6F X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:30:9a:23:15:02:46:31:ab:f5:67:0b:5d:15:d0:78:93:ce: e6:f2:7a:09:d8:12:3b:9b:a0:e5:6e:75:91:ef:b9:c6:a0:0e: b9:dd:b0:2d:63:32:31:d1:80:11:4e:7c:f1:52:5f:b8:ac:8a: 0a:89:9a:35:1a:41:bb:d2:d5:0f:b6:4e:82:e9:9c:a6:1a:76: 10:0e:cc:49:38:61:3e:cd:0d:65:48:d0:72:30:47:d1:d0:53: 89:72:5c:15:cc:2f:59:13:fe:4f:d3:5b:fe:cd:ef:e1:2a:4d: 49:d4:14:df:3d:eb:b8:27:6c:5e:cf:ab:9c:4e:26:2e:bd:1a: de:30:1e:84:82:69:f4:88:87:39:6e:2b:c1:11:c5:8b:db:65: 65:4b:05:3b:7e:2b:a6:a4:54:f0:4c:ee:f9:22:71:c1:5f:ec: 42:48:c9:21:ef:7d:9a:f4:c4:62:a4:63:25:d9:f4:aa:1e:5e: d9:56:80:09:1a:ff:43:f4:46:bd:43:56:14:2d:36:94:4c:2b: 7e:c1:e0:66:90:60:09:fc:45:56:54:69:b9:f3:59:a3:ad:8e: a6:c6:4a:f3:31:83:d6:f8:6c:7d:61:61:e2:dd:c1:5b:d0:30: a0:46:75:34:a3:34:d1:3c:3d:d5:26:70:c8:1b:05:89:b6:43: 19:c7:5b:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4Fwibyk6YMr8cUqeLL0wcgDXd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA5MTYxODAxMjlaFw0yNjA5MTcxOTQ2MjlaMDMxMTAvBgNV BAMTKENEQ0U4NEEwRDM5RDc1QTc5RjBBQzg1N0EzRTYzMThEM0QwNDEzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlygdulhxtJ7CnaqQ7jDmb0zEl o7NdTXbTa/u9Jc3DxiTyS8ODSFMX0Z36Kfxh6N9KcX+IiJN8h21Q2ARKi+Fg9dVN Ox9kO5R9Bfjqjc9C9lr76Hrs04+RzF4IiML8Q9JwX66lA70yw5NoOOIqcszsoFzh O9GhXZjfdgtcc6XtApyG97VSj2niGbd5a6BnuprTNvtKbdnbBjfekZeSu58csu17 Kd3Hk7SCEX3Ve4DR9eFaxG39W+dQq8k0FwX5sE6MwSFP2DxWqD+D/aQgbX+UhaiQ egjh6vXsGIRiTxvO3D38VSxJOm4EGFBy7HcJmC7ougvrtG44wkwuKPgiaULxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzc6EoNOddaefCshXo+YxjT0EE28wHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4wmiMVAkYxq/VnC10V0HiTzubyegnYEjub oOVudZHvucagDrndsC1jMjHRgBFOfPFSX7isigqJmjUaQbvS1Q+2ToLpnKYadhAO zEk4YT7NDWVI0HIwR9HQU4lyXBXML1kT/k/TW/7N7+EqTUnUFN8967gnbF7Pq5xO Ji69Gt4wHoSCafSIhzluK8ERxYvbZWVLBTt+K6akVPBM7vkiccFf7EJIySHvfZr0 xGKkYyXZ9KoeXtlWgAka/0P0Rr1DVhQtNpRMK37B4GaQYAn8RVZUabnzWaOtjqbG SvMxg9b4bH1hYeLdwVvQMKBGdTSjNNE8PdUmcMgbBYm2QxnHWw8= -----END CERTIFICATE-----Generated at Thu Sep 17 08:36:40 2026 by rpki-client