$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: 3Srygqicn4V2NWC29OwyTQKptMICq76z2IG0GDIMRPQ= Subject key identifier: CA:28:E6:4F:11:5F:E2:D5:6B:FD:3F:87:9F:0A:B4:53:0C:B7:C1:9E Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 29093E984E82A9843394ED9102F3DC21D9E10937 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 053B Signing time: Wed 25 Mar 2026 01:12:02 +0000 Manifest this update: Wed 25 Mar 2026 01:07:02 +0000 Manifest next update: Sat 28 Mar 2026 05:17:02 +0000 Files and hashes: 1: 323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa (hash: cLkVLv+vK6mcj4WuUAKMOjuXWW7BFHPYNRSpLVGMP1U=) 2: 323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa (hash: vzxPnkksVZcJ0CZ9tDZ5dyPi1kCAeq8TKScOR0f2w9Y=) 3: 323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa (hash: 0jHuQjZuXjUclLGYHYYiSz8XXDbuCdUdap7bcYY7D/U=) 4: 323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa (hash: asRSm/iZTgBSaWKZf/851/YblFfjUE7kb+XhnDf2GjA=) 5: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: cZlOpoe44od96HtUiM1b5K/GotdsUPo/klG9WslC6SA=) 6: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 7: 323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa (hash: 8AGJuasHzMx2A0Z5FMrDF0ItFI5j8FsNffDHrANNPzk=) 8: 323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa (hash: 9HOvzyY5uf3RSlvWhbs3K286WgpBS+cdqK+8tFA4y1E=) 9: 323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa (hash: b048LjXG7Bj6FmjU04I9jx+4VjHctbpMHIoz4fjos0M=) 10: 323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa (hash: SRFJg0vpyyqKeKF1R3zw8dkZHQA/T/+WhtuVLiz2IAY=) 11: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) 12: 323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa (hash: Apikojh/WZyuhxTN0KNy8rD1xo4n1AVmCyXIBJU31/A=) 13: 323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa (hash: uezMtm9yfboQIT5jcCNmn+YeTeFhBFZYzV1MJBfEVkA=) 14: 323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa (hash: jGsShgBdcmu1xFDvQxHLm/DzmZkaJd0+o4fg3Jrx1As=) 15: 323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa (hash: yK5Kt5H9WNZtX/HNNL0bv286Z16/92qoWYRV6znuTLQ=) 16: 323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa (hash: Fjwx5F8zq6Bao0/JJ+bYnmsLorBjg0yTe85cwHjfkt8=) 17: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) 18: 323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa (hash: LtsY6F7RWeW7yw6MfcxK4/FDMV5Uh6YfSStPg96dZtg=) 19: 323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa (hash: NvPPSaT8BwrSe2+lBxElFJmmu54GgVbBcHfUoGBsY20=) 20: 323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa (hash: 35RT49VcdlH2atWjsCg6L0WgE2qQ9S/7bPi9DmsolG0=) 21: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 22: 323430323a383738303a313033313a3a2f34382d3438203d3e203633383539.roa (hash: ZDGtcl7rEMehNcGPUjXPGqQXmm/zm0vKOPolU4kYDiM=) 23: 323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa (hash: Jtpz3rD9Yyq75ZXEV4fiIf87MNhg9y+hSwsJYEZnsqo=) 24: 323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa (hash: H86q0MXuPDiz0d9A8HFLw1Gbla25BLJJwrd8COSuUdo=) 25: 323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa (hash: RKKEsjHh5z97kVU5mU+p8a2FB1mdxlEpk6vbiTV6FSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:09:3e:98:4e:82:a9:84:33:94:ed:91:02:f3:dc:21:d9:e1:09:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Mar 25 01:07:02 2026 GMT Not After : Mar 28 05:17:02 2026 GMT Subject: CN=CA28E64F115FE2D56BFD3F879F0AB4530CB7C19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:64:16:31:0a:b0:47:3f:f9:03:dd:09:cf: 88:ee:16:b8:ac:37:79:02:a2:0d:79:59:a8:cf:23: 4f:c3:8c:ac:fc:d9:b5:02:4c:2e:21:c8:df:7f:f2: ed:53:4b:0a:af:a5:fd:33:37:6a:40:b7:10:9f:69: ff:3e:6c:78:bb:05:fa:6b:59:6f:67:9e:aa:d2:a1: b0:5b:4c:25:78:10:91:4b:26:e3:5e:54:d7:32:94: b8:71:d3:de:e4:89:db:7b:62:9b:2d:20:51:92:aa: c3:c5:c4:a3:72:a9:55:51:80:4c:39:02:92:c6:9b: c9:98:c4:04:49:44:49:fb:0a:d6:54:9e:ae:63:1b: 3b:ef:35:5d:b7:ea:fb:93:f5:09:09:37:a7:29:f8: dd:ae:5a:68:75:29:ee:e0:c9:99:0c:91:46:1e:6b: f5:b5:e5:d5:8b:58:dc:b3:88:4a:a1:66:1b:bc:07: 7e:10:da:72:6f:c2:9e:58:a0:3d:78:5e:d2:70:af: b6:94:80:2d:54:af:f7:ca:f1:99:12:b6:78:63:aa: 30:e6:3f:8f:df:c0:e0:2a:a5:60:fa:00:34:16:39: c5:f7:53:7d:ec:e5:3d:36:75:cf:52:70:f0:11:16: 18:60:10:99:44:db:7e:a1:a3:0e:f2:cb:1d:e9:4d: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:28:E6:4F:11:5F:E2:D5:6B:FD:3F:87:9F:0A:B4:53:0C:B7:C1:9E X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:08:53:c5:ac:5f:b0:76:bd:09:22:68:78:60:f2:3b:7a:c3: a4:23:a8:cd:d5:92:f3:1b:fe:2a:f6:21:9e:33:aa:4f:ba:9e: 5b:a4:30:af:f9:5e:0f:61:17:9d:37:c9:d9:50:b4:d7:21:c7: 8f:9b:70:b6:ed:64:b7:dc:13:7a:19:60:df:a0:06:56:32:e6: 0a:26:f3:72:92:01:30:02:ba:cb:52:cb:a1:04:58:46:bc:44: 8d:e5:3f:c2:c3:1b:ca:6d:f1:5b:f9:8e:5d:c2:a9:39:1c:14: 1e:dd:95:b0:d9:b4:1c:d9:dc:a4:33:0b:a8:8a:fa:54:44:a0: 51:7b:12:87:be:9b:23:a9:71:cf:3a:cb:e5:3e:68:e1:20:ab: e5:28:77:80:ce:78:f7:74:b5:7e:9c:23:3a:19:85:44:42:8f: 08:c0:0a:81:e0:73:f4:f0:0e:ac:d2:b0:87:f9:16:69:ee:a1: 7b:cd:1e:f8:cb:a5:95:9c:9c:6f:4a:5d:b6:8b:24:59:a7:a7: 22:01:fb:d9:2f:30:b1:ba:df:20:68:dc:45:2c:6a:99:93:98: ba:c9:67:92:c1:ce:a7:4f:bd:39:d0:63:f9:bf:e1:d5:38:6d: b7:60:5f:3e:02:5a:b4:f0:00:ee:b8:f7:2e:07:f2:4a:92:73: 28:e4:18:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQk+mE6CqYQzlO2RAvPcIdnhCTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAzMjUwMTA3MDJaFw0yNjAzMjgwNTE3MDJaMDMxMTAvBgNV BAMTKENBMjhFNjRGMTE1RkUyRDU2QkZEM0Y4NzlGMEFCNDUzMENCN0MxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxmQWMQqwRz/5A90Jz4juFris N3kCog15WajPI0/DjKz82bUCTC4hyN9/8u1TSwqvpf0zN2pAtxCfaf8+bHi7Bfpr WW9nnqrSobBbTCV4EJFLJuNeVNcylLhx097kidt7YpstIFGSqsPFxKNyqVVRgEw5 ApLGm8mYxARJREn7CtZUnq5jGzvvNV236vuT9QkJN6cp+N2uWmh1Ke7gyZkMkUYe a/W15dWLWNyziEqhZhu8B34Q2nJvwp5YoD14XtJwr7aUgC1Ur/fK8ZkStnhjqjDm P4/fwOAqpWD6ADQWOcX3U33s5T02dc9ScPARFhhgEJlE236how7yyx3pTfVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyijmTxFf4tVr/T+Hnwq0Uwy3wZ4wHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOkIU8WsX7B2vQkiaHhg8jt6w6QjqM3VkvMb /ir2IZ4zqk+6nlukMK/5Xg9hF503ydlQtNchx4+bcLbtZLfcE3oZYN+gBlYy5gom 83KSATACustSy6EEWEa8RI3lP8LDG8pt8Vv5jl3CqTkcFB7dlbDZtBzZ3KQzC6iK +lREoFF7Eoe+myOpcc86y+U+aOEgq+Uod4DOePd0tX6cIzoZhURCjwjACoHgc/Tw DqzSsIf5FmnuoXvNHvjLpZWcnG9KXbaLJFmnpyIB+9kvMLG63yBo3EUsapmTmLrJ Z5LBzqdPvTnQY/m/4dU4bbdgXz4CWrTwAO649y4H8kqScyjkGBQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:20:26 2026 by rpki-client