$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: WrNDoB4XNkTA4JsO/4uqe7En/8vm7O8BXyd3iP+HTbE= Subject key identifier: B2:8E:40:62:1C:02:EF:B2:C2:2C:F4:C9:B2:8F:67:C0:11:47:3D:BD Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 111732540D0E1A3B3F60E9FDF983FD24007326DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: F8 Signing time: Tue 24 Mar 2026 19:51:10 +0000 Manifest this update: Tue 24 Mar 2026 19:46:10 +0000 Manifest next update: Sat 28 Mar 2026 03:51:10 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: gzXm2H1SRhJOnW165GmOJoJuVcF7cAXPU5ZcWnDj+6k=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) 3: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: +Q4DutQ+91OGpV/r6RGyqR+z4xaP3nkw6XzqUssNUNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:17:32:54:0d:0e:1a:3b:3f:60:e9:fd:f9:83:fd:24:00:73:26:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Mar 24 19:46:10 2026 GMT Not After : Mar 28 03:51:10 2026 GMT Subject: CN=B28E40621C02EFB2C22CF4C9B28F67C011473DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:aa:53:2d:7a:61:e4:f6:05:50:40:5e:7e: f6:6f:b9:66:c7:ad:0c:e8:da:e4:9c:3d:2f:3b:03: 35:15:9c:72:86:d5:c9:12:26:d7:02:1e:06:9d:34: 98:15:61:c7:7e:55:38:fc:bc:26:7c:09:bc:6d:05: 3e:2e:3a:31:78:d2:62:02:31:b2:46:91:db:3d:0e: bf:4a:53:76:ed:62:c4:5e:5d:8f:82:1e:3d:b9:d5: c9:a5:a6:49:92:68:0f:09:05:d8:5f:00:43:d2:b1: 78:77:75:d1:6e:d6:30:db:8c:38:ad:63:48:19:8f: c3:ca:0f:59:47:92:1d:a3:39:9b:ee:cc:fc:1f:13: 05:98:e0:21:8c:b8:e2:70:43:07:23:18:41:27:39: 69:f5:d8:7d:72:02:79:8b:37:0b:c4:42:b2:25:35: bb:f6:83:05:de:ff:a9:97:11:43:9f:fe:00:95:8f: 8d:90:12:15:5b:ce:fb:f8:90:d3:9e:06:8f:00:39: 31:34:8d:4d:34:6d:0c:c7:6a:1e:7a:d4:d4:3f:19: 12:a3:e4:6b:a4:4b:41:ae:74:83:3e:db:8f:84:2f: 82:19:0e:4e:0d:9b:0c:03:2c:60:8d:d3:f8:9b:b6: e2:18:24:19:73:c3:18:2e:3e:cf:7c:dc:19:f7:df: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:40:62:1C:02:EF:B2:C2:2C:F4:C9:B2:8F:67:C0:11:47:3D:BD X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:23:cb:da:f6:a5:63:34:83:fd:05:ad:53:ce:2e:3c:85:cc: 5c:3d:06:48:f1:49:82:4b:3e:33:26:f2:c6:12:28:56:46:55: a3:f1:f4:47:fa:60:dc:7a:02:80:19:8d:71:ee:e5:4e:84:9c: be:a8:05:d2:42:7e:cf:aa:c6:a5:e7:0b:6f:b2:55:79:69:0d: 74:66:a4:49:b8:94:7d:61:8b:b1:1a:28:40:b1:01:f1:94:e5: e3:3b:39:b7:f5:77:05:35:2d:8e:aa:72:04:88:a4:50:7f:28: d4:25:15:51:e4:03:64:a4:a9:7d:7d:c0:6d:ab:c3:d8:27:3a: 96:41:d0:bd:55:50:8b:72:08:4d:83:7c:11:e1:46:3b:12:38: ce:01:93:74:d3:3e:72:f3:e2:74:c7:dd:2e:aa:08:d6:ed:4f: 1e:91:30:8e:67:34:3a:ab:82:b1:6d:63:fd:45:01:7f:b4:21: bb:8b:ee:28:2b:62:ca:dd:a4:33:21:7d:d9:73:0b:8e:17:77: 75:b2:1e:0b:8e:ba:1d:99:d9:29:62:5f:d1:2e:b0:d0:78:d0: eb:e0:21:a1:21:b1:02:0a:55:ca:8c:bf:29:98:ab:4d:32:9b: 0b:8e:50:cf:0b:93:86:10:4e:e7:86:f5:35:0f:d9:ce:71:7d: a9:c4:3c:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERcyVA0OGjs/YOn9+YP9JABzJt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNjAzMjQxOTQ2MTBaFw0yNjAzMjgwMzUxMTBaMDMxMTAvBgNV BAMTKEIyOEU0MDYyMUMwMkVGQjJDMjJDRjRDOUIyOEY2N0MwMTE0NzNEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHapTLXph5PYFUEBefvZvuWbH rQzo2uScPS87AzUVnHKG1ckSJtcCHgadNJgVYcd+VTj8vCZ8CbxtBT4uOjF40mIC MbJGkds9Dr9KU3btYsReXY+CHj251cmlpkmSaA8JBdhfAEPSsXh3ddFu1jDbjDit Y0gZj8PKD1lHkh2jOZvuzPwfEwWY4CGMuOJwQwcjGEEnOWn12H1yAnmLNwvEQrIl Nbv2gwXe/6mXEUOf/gCVj42QEhVbzvv4kNOeBo8AOTE0jU00bQzHah561NQ/GRKj 5GukS0GudIM+24+EL4IZDk4NmwwDLGCN0/ibtuIYJBlzwxguPs983Bn33wFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUso5AYhwC77LCLPTJso9nwBFHPb0wHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8jy9r2pWM0g/0FrVPOLjyFzFw9BkjxSYJL PjMm8sYSKFZGVaPx9Ef6YNx6AoAZjXHu5U6EnL6oBdJCfs+qxqXnC2+yVXlpDXRm pEm4lH1hi7EaKECxAfGU5eM7Obf1dwU1LY6qcgSIpFB/KNQlFVHkA2SkqX19wG2r w9gnOpZB0L1VUItyCE2DfBHhRjsSOM4Bk3TTPnLz4nTH3S6qCNbtTx6RMI5nNDqr grFtY/1FAX+0IbuL7igrYsrdpDMhfdlzC44Xd3WyHguOuh2Z2SliX9EusNB40Ovg IaEhsQIKVcqMvymYq00ymwuOUM8Lk4YQTueG9TUP2c5xfanEPKg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:48 2026 by rpki-client