$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: R9cgwbp85SxvCkXLWdOw84bYJG8XsA/j69DLrWh8qY0= Subject key identifier: D7:CA:1F:91:95:D0:FD:29:57:9C:16:AA:D8:2D:F1:17:99:29:57:7A Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 5E5E40D6451BFD635FDD0A6E04BCFD992E934E82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 0211 Signing time: Wed 25 Mar 2026 16:11:29 +0000 Manifest this update: Wed 25 Mar 2026 16:06:29 +0000 Manifest next update: Sun 29 Mar 2026 03:50:29 +0000 Files and hashes: 1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 9XvG7lgnGTa2TMybG5m34Ghm7U76tWIWHi96o5X/RSg=) 2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: BBYheiBkB3dBiiEhGQeh9Khilzpm4R8TSiKBpkInNLE=) 3: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: RdJsCp6CWZB3mwswUDRJqRrxeuhPeOKbvedHW5Kk8oE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5e:40:d6:45:1b:fd:63:5f:dd:0a:6e:04:bc:fd:99:2e:93:4e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Mar 25 16:06:29 2026 GMT Not After : Mar 29 03:50:29 2026 GMT Subject: CN=D7CA1F9195D0FD29579C16AAD82DF1179929577A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:ef:ac:71:eb:65:52:b8:25:ee:3f:6c:12: 04:bc:a8:d5:b4:ff:c8:4b:ea:5d:78:47:24:b3:70: 39:b5:ef:8b:f2:8b:fb:49:1d:ea:62:d1:cc:57:92: cb:09:ab:3f:4b:91:6e:ab:c3:2f:e6:29:0f:49:43: 5f:6f:3e:c4:d8:ef:b3:89:6c:36:7c:42:1a:57:f7: 00:43:a1:55:52:c5:40:dd:78:4d:77:4b:c6:31:c0: 76:d8:24:6d:c9:5c:71:71:2d:aa:11:e3:21:09:ec: 2c:a1:01:44:f2:9b:d1:da:24:2f:0e:6e:56:fa:ad: 0b:6f:7d:e4:ec:b3:01:0f:50:2b:cc:0e:80:b0:c3: a7:95:49:b5:f4:0a:52:5b:2b:e4:7b:09:87:6c:d2: a6:13:18:57:41:0d:74:d9:d3:fc:e3:1e:1a:b4:84: c0:1f:84:fd:b7:cb:56:97:6a:0e:e1:58:76:5d:4c: 24:48:b2:82:81:7b:5e:d8:0f:bb:2a:17:23:8d:b3: b1:cd:f2:9a:e3:f8:0c:ed:29:cb:5f:50:1c:22:8c: 77:47:de:dc:8d:ce:41:74:88:82:49:52:ec:41:9c: 54:74:c5:0a:8b:11:82:0d:19:42:3e:6b:f7:af:80: 13:f8:96:1e:be:70:4e:13:a0:ce:9f:91:4d:e9:96: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CA:1F:91:95:D0:FD:29:57:9C:16:AA:D8:2D:F1:17:99:29:57:7A X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7e:61:c4:f4:05:cd:6a:a4:48:6c:90:5a:95:9e:5d:6b:ce: da:d8:0c:7f:8d:1e:8d:20:f7:ab:c6:a1:1a:ad:f5:2b:e9:ba: cf:2e:3d:58:e1:e8:fd:2d:f8:00:47:70:60:a8:0e:05:29:7c: 9c:92:d7:98:29:8b:a0:58:3d:a7:95:45:32:70:ab:d2:dc:d7: c6:91:2f:25:4e:d5:c9:d8:59:c4:d2:d5:4b:09:58:5b:c5:89: 43:0f:3e:12:32:79:72:37:03:51:50:72:6c:8d:9b:f7:3f:53: 62:cc:aa:11:1b:d7:6b:ef:4d:1c:60:9a:77:22:0b:6c:0a:ef: ec:97:f6:a2:e6:a8:ac:97:70:52:22:b5:d4:b7:5c:b5:5a:db: a5:f7:08:10:84:d8:39:fc:ed:ac:b7:29:84:0f:40:15:38:06: a0:ba:31:01:97:ae:2e:6f:ce:f3:75:85:61:a4:58:5d:11:10: a3:e5:00:6f:b1:a3:03:95:8d:7e:42:46:06:ee:63:57:09:24: 1d:c7:a5:e4:77:49:4a:fc:b7:b8:71:8a:b0:9a:7b:79:b7:9f: e2:52:63:2c:f2:99:54:1c:c1:38:7f:06:ee:39:e7:fd:e4:c0: 80:8e:28:1f:72:bf:83:61:98:f8:e5:b7:40:5a:3b:36:86:99: a0:cc:31:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXl5A1kUb/WNf3QpuBLz9mS6TToIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNjAzMjUxNjA2MjlaFw0yNjAzMjkwMzUwMjlaMDMxMTAvBgNV BAMTKEQ3Q0ExRjkxOTVEMEZEMjk1NzlDMTZBQUQ4MkRGMTE3OTkyOTU3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfe+scetlUrgl7j9sEgS8qNW0 /8hL6l14RySzcDm174vyi/tJHepi0cxXkssJqz9LkW6rwy/mKQ9JQ19vPsTY77OJ bDZ8QhpX9wBDoVVSxUDdeE13S8YxwHbYJG3JXHFxLaoR4yEJ7CyhAUTym9HaJC8O blb6rQtvfeTsswEPUCvMDoCww6eVSbX0ClJbK+R7CYds0qYTGFdBDXTZ0/zjHhq0 hMAfhP23y1aXag7hWHZdTCRIsoKBe17YD7sqFyONs7HN8prj+AztKctfUBwijHdH 3tyNzkF0iIJJUuxBnFR0xQqLEYINGUI+a/evgBP4lh6+cE4ToM6fkU3plugFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU18ofkZXQ/SlXnBaq2C3xF5kpV3owHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9+YcT0Bc1qpEhskFqVnl1rztrYDH+NHo0g 96vGoRqt9Svpus8uPVjh6P0t+ABHcGCoDgUpfJyS15gpi6BYPaeVRTJwq9Lc18aR LyVO1cnYWcTS1UsJWFvFiUMPPhIyeXI3A1FQcmyNm/c/U2LMqhEb12vvTRxgmnci C2wK7+yX9qLmqKyXcFIitdS3XLVa26X3CBCE2Dn87ay3KYQPQBU4BqC6MQGXri5v zvN1hWGkWF0REKPlAG+xowOVjX5CRgbuY1cJJB3HpeR3SUr8t7hxirCae3m3n+JS YyzymVQcwTh/Bu455/3kwICOKB9yv4NhmPjlt0BaOzaGmaDMMaw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:56 2026 by rpki-client