$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: E0U+1jzLd5FDBc7BhsRgoVB+X+aF6kEo9iN9DVTsRBI= Subject key identifier: 1A:B6:2D:32:52:F6:05:A1:FA:22:A8:D1:34:94:39:A0:BF:F6:19:0E Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 1812AA1325C1AB251F9B5505392F06919361B3C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 01D7 Signing time: Tue 24 Mar 2026 06:42:09 +0000 Manifest this update: Tue 24 Mar 2026 06:37:09 +0000 Manifest next update: Fri 27 Mar 2026 10:04:09 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: qOpIl3QvMN6T7sQOaVl3lR9ScvbAwPP8qCtTfqsJoPc=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:12:aa:13:25:c1:ab:25:1f:9b:55:05:39:2f:06:91:93:61:b3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Mar 24 06:37:09 2026 GMT Not After : Mar 27 10:04:09 2026 GMT Subject: CN=1AB62D3252F605A1FA22A8D1349439A0BFF6190E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:bb:cb:ec:1d:77:6d:a7:78:99:5b:c5:5a: 60:14:c9:b0:d0:6e:08:0f:83:f4:30:38:ae:81:6d: 92:38:aa:0d:2a:4a:e9:b7:e9:0c:b9:7d:75:f8:02: ef:5d:45:c8:eb:8e:8a:0e:03:c1:4e:29:91:da:1e: da:9d:c2:ef:5c:a1:f0:89:25:2e:8b:f0:be:9b:2c: 4e:e3:05:f1:89:4e:aa:cb:cc:6b:a4:bc:7d:f5:13: ee:a0:47:b0:67:d8:ad:30:45:96:d1:90:ca:bf:ce: bb:f3:68:34:d6:51:e6:eb:04:0f:fa:97:05:c0:ae: fa:60:1e:7c:32:c5:43:99:28:ea:73:ad:45:b7:e8: 41:c0:a8:7b:d5:e2:60:6f:7b:c6:cd:8e:d1:b9:07: aa:75:6e:d7:cc:fd:f7:1d:36:ec:24:5c:6f:50:3f: 4f:19:bc:bd:56:8a:48:07:cf:7a:8a:bb:09:1f:a7: 9b:1a:34:0c:78:74:49:b4:3f:91:f0:c4:58:fb:c9: 76:df:5c:93:4a:b9:0e:1f:c6:ad:b0:5f:2f:c7:67: e8:a6:ed:f7:7e:4d:5a:78:ca:b3:63:09:a5:bc:c8: 45:09:7f:b7:4e:4d:44:16:3b:bf:bf:ca:91:98:ae: 47:c7:b8:ab:78:6b:21:cb:84:86:d3:b9:af:12:c7: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B6:2D:32:52:F6:05:A1:FA:22:A8:D1:34:94:39:A0:BF:F6:19:0E X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0b:d0:a6:f2:c0:e5:a4:bd:71:04:cb:6e:00:58:9f:93:45: 96:ab:e3:7b:2e:82:ca:8c:40:4a:c7:8b:9e:c4:02:22:1f:73: b2:30:68:3c:41:cb:61:1f:20:18:22:f8:c9:44:b9:8c:fe:ae: 5f:fc:b9:f0:2e:1e:83:f8:d4:0f:40:81:b5:b7:e8:43:90:07: 86:9f:b4:2b:9e:7b:1a:5e:f1:30:a3:17:6e:eb:95:d6:4a:74: f6:ef:9e:d2:37:0d:77:a0:a0:e7:3a:f2:e3:0f:0a:a2:2a:c0: 57:9f:1d:9b:8a:b3:9b:5d:98:6f:5b:3a:cf:de:94:fb:b6:40: 9e:96:b2:7a:a5:98:3f:f2:1e:9f:b3:16:be:49:67:74:a2:d3: 1f:6b:d3:c7:90:62:c7:7d:bf:78:bf:f4:4d:a4:aa:fb:e7:d2: f4:57:9a:26:80:52:1b:87:49:21:68:3c:aa:85:cc:cd:f4:10: 28:38:cc:4e:5f:6d:86:27:ac:d3:02:a2:7e:bc:ef:08:31:c6: c7:e1:bd:2b:35:98:be:6a:66:99:6d:40:9f:9a:50:17:ca:cf: c3:83:bd:b9:51:56:9f:51:05:83:7b:05:d0:dd:f0:6d:df:b2: 4e:dc:0d:c7:8e:8d:91:17:20:9c:0c:76:22:bb:f0:9d:3d:b7: 75:ff:6b:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBKqEyXBqyUfm1UFOS8GkZNhs8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNjAzMjQwNjM3MDlaFw0yNjAzMjcxMDA0MDlaMDMxMTAvBgNV BAMTKDFBQjYyRDMyNTJGNjA1QTFGQTIyQThEMTM0OTQzOUEwQkZGNjE5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JbvL7B13bad4mVvFWmAUybDQ bggPg/QwOK6BbZI4qg0qSum36Qy5fXX4Au9dRcjrjooOA8FOKZHaHtqdwu9cofCJ JS6L8L6bLE7jBfGJTqrLzGukvH31E+6gR7Bn2K0wRZbRkMq/zrvzaDTWUebrBA/6 lwXArvpgHnwyxUOZKOpzrUW36EHAqHvV4mBve8bNjtG5B6p1btfM/fcdNuwkXG9Q P08ZvL1WikgHz3qKuwkfp5saNAx4dEm0P5HwxFj7yXbfXJNKuQ4fxq2wXy/HZ+im 7fd+TVp4yrNjCaW8yEUJf7dOTUQWO7+/ypGYrkfHuKt4ayHLhIbTua8SxzktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrYtMlL2BaH6IqjRNJQ5oL/2GQ4wHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcL0KbywOWkvXEEy24AWJ+TRZar43sugsqM QErHi57EAiIfc7IwaDxBy2EfIBgi+MlEuYz+rl/8ufAuHoP41A9AgbW36EOQB4af tCueexpe8TCjF27rldZKdPbvntI3DXegoOc68uMPCqIqwFefHZuKs5tdmG9bOs/e lPu2QJ6WsnqlmD/yHp+zFr5JZ3Si0x9r08eQYsd9v3i/9E2kqvvn0vRXmiaAUhuH SSFoPKqFzM30ECg4zE5fbYYnrNMCon687wgxxsfhvSs1mL5qZpltQJ+aUBfKz8OD vblRVp9RBYN7BdDd8G3fsk7cDceOjZEXIJwMdiK78J09t3X/a+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:36 2026 by rpki-client