$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: 6U9YZjCGmJe7Ra3T0Czwetvba717FYg0U5yiZfH1GCw= Subject key identifier: 4B:A6:8A:27:A1:94:3B:59:8A:EA:0E:13:10:F0:DD:96:2E:DE:7C:BD Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 795ECCE4F290204046CD0EF27CBB3F1CCEFC71F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 037E Signing time: Tue 24 Mar 2026 23:41:22 +0000 Manifest this update: Tue 24 Mar 2026 23:36:22 +0000 Manifest next update: Sat 28 Mar 2026 08:31:22 +0000 Files and hashes: 1: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: OTqtkFXP46ctwCG+2glxzKjuwpXYRFBLe/XUm+ZufO8=) 2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 3: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 4: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 5: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: 2wBcOPKUCI6Zp/xtAhOQEAoecnilxu7COOIy78SMgIo=) 6: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: 0aTtvK24bNcmqnpepTgUdZw0ocIUT1z+NlDz+JkEtYE=) 7: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5e:cc:e4:f2:90:20:40:46:cd:0e:f2:7c:bb:3f:1c:ce:fc:71:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Mar 24 23:36:22 2026 GMT Not After : Mar 28 08:31:22 2026 GMT Subject: CN=4BA68A27A1943B598AEA0E1310F0DD962EDE7CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3e:d2:7d:91:40:aa:27:cc:a4:62:be:27:09: 68:e8:c1:6c:5d:f9:e3:07:3b:75:65:b9:86:7e:81: d0:a3:1e:d5:9e:81:46:df:33:a4:14:8f:28:e5:03: 4f:e5:fb:36:11:1a:bf:9c:cc:95:60:11:13:a3:56: 52:8c:f9:13:66:db:88:50:3d:4a:f7:43:a1:ce:5c: a4:21:7a:54:74:7f:bc:68:cb:2c:51:e5:b1:89:b8: 2c:36:e2:4b:86:68:bc:61:c0:5d:f7:f5:75:52:cd: 28:64:35:76:9f:1f:5e:77:4f:dc:c5:6f:8a:1f:45: fc:64:75:f3:36:0f:88:bc:63:3b:eb:59:08:04:c3: a5:7e:78:21:0e:8e:34:af:ca:ca:0c:10:da:c6:6b: c0:af:3d:d8:46:1e:94:ac:39:99:e0:2b:98:7f:38: 7a:34:f1:8f:ef:d1:13:84:f9:b9:64:76:e5:ee:76: 17:ba:11:45:87:c0:98:7e:1f:a3:58:d1:6f:c3:49: 5c:bc:31:af:55:2e:5d:da:57:f7:2f:a7:01:ed:67: 80:15:a8:f1:1b:6b:3b:0a:79:0b:3d:e5:86:9e:4a: 4e:ae:91:23:32:ff:40:2f:ac:29:4e:9e:7a:29:fb: f4:3e:ca:f4:ea:51:b8:84:e4:82:30:3c:dc:43:c5: ef:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:8A:27:A1:94:3B:59:8A:EA:0E:13:10:F0:DD:96:2E:DE:7C:BD X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:f1:4e:07:0e:73:e8:71:f5:81:59:fc:d7:0a:d5:95:4d: 9e:69:22:63:a6:7c:9d:d0:94:ca:04:f3:75:92:63:42:d8:4b: 05:eb:e2:ef:72:c1:8b:cc:2a:12:33:db:7e:bd:3c:e6:d0:19: 72:b4:31:25:2d:9f:26:6d:c5:6b:d0:1c:2d:c4:af:81:f5:e1: 7a:37:3b:1a:88:17:64:a0:e3:96:1c:f1:55:61:9b:94:26:6b: c1:b1:81:bb:e3:b8:cb:09:a0:8b:44:6d:e2:59:9a:10:44:c0: 32:d2:bf:42:f6:ad:bb:5a:80:8e:70:bb:22:0f:11:bb:c8:6c: 6e:f5:b5:bd:d1:16:f0:a6:d1:a7:03:7c:96:0f:05:12:94:70: dc:8a:8c:5e:28:72:c6:70:53:6b:45:a0:d0:61:ec:33:bf:1e: 67:43:1a:ab:17:a7:6e:b8:49:b3:1c:dc:cc:18:a8:aa:08:bc: a4:e2:e7:14:2e:ba:6c:6c:11:65:76:95:72:ac:a2:58:03:6a: c2:cb:99:12:54:3d:89:f6:74:a8:1f:c0:d1:be:dd:76:c9:1c: f1:e0:c7:df:78:06:6a:de:5b:d1:97:5a:57:34:00:31:a0:88: 36:66:57:93:60:cb:37:c1:14:d4:e4:01:b9:92:39:a7:90:ba: cb:f5:84:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeV7M5PKQIEBGzQ7yfLs/HM78cfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNjAzMjQyMzM2MjJaFw0yNjAzMjgwODMxMjJaMDMxMTAvBgNV BAMTKDRCQTY4QTI3QTE5NDNCNTk4QUVBMEUxMzEwRjBERDk2MkVERTdDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuPtJ9kUCqJ8ykYr4nCWjowWxd +eMHO3VluYZ+gdCjHtWegUbfM6QUjyjlA0/l+zYRGr+czJVgEROjVlKM+RNm24hQ PUr3Q6HOXKQhelR0f7xoyyxR5bGJuCw24kuGaLxhwF339XVSzShkNXafH153T9zF b4ofRfxkdfM2D4i8YzvrWQgEw6V+eCEOjjSvysoMENrGa8CvPdhGHpSsOZngK5h/ OHo08Y/v0ROE+blkduXudhe6EUWHwJh+H6NY0W/DSVy8Ma9VLl3aV/cvpwHtZ4AV qPEbazsKeQs95YaeSk6ukSMy/0AvrClOnnop+/Q+yvTqUbiE5IIwPNxDxe9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6aKJ6GUO1mK6g4TEPDdli7efL0wHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+x8U4HDnPocfWBWfzXCtWVTZ5pImOmfJ3Q lMoE83WSY0LYSwXr4u9ywYvMKhIz2369PObQGXK0MSUtnyZtxWvQHC3Er4H14Xo3 OxqIF2Sg45Yc8VVhm5Qma8GxgbvjuMsJoItEbeJZmhBEwDLSv0L2rbtagI5wuyIP EbvIbG71tb3RFvCm0acDfJYPBRKUcNyKjF4ocsZwU2tFoNBh7DO/HmdDGqsXp264 SbMc3MwYqKoIvKTi5xQuumxsEWV2lXKsolgDasLLmRJUPYn2dKgfwNG+3XbJHPHg x994BmreW9GXWlc0ADGgiDZmV5NgyzfBFNTkAbmSOaeQusv1hBk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:51 2026 by rpki-client