$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: nBx/G5oKApJkXm09JAKq4KNQTS9/1UW+Th734fIPTzI= Subject key identifier: 38:96:9A:DA:06:F0:5F:1C:DE:05:5A:68:A8:56:F0:C9:B9:8E:44:34 Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 1EECF2D0F7E468506525D90118608D60BC59A513 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 04CF Signing time: Wed 25 Mar 2026 10:00:58 +0000 Manifest this update: Wed 25 Mar 2026 09:55:58 +0000 Manifest next update: Sat 28 Mar 2026 21:34:58 +0000 Files and hashes: 1: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: 4BUZEUszxbkJAKTn89oXRelHnbQyPtwvUjsittAvrxc=) 2: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: kw4LhpaYcfh6iXxYFzGSpGFEN30yJaBdK6+ZdyQs6XM=) 3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: 4nFz268f/uJTcH9+bnn64I8vEEEHTwIdibCbTflD9+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ec:f2:d0:f7:e4:68:50:65:25:d9:01:18:60:8d:60:bc:59:a5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Mar 25 09:55:58 2026 GMT Not After : Mar 28 21:34:58 2026 GMT Subject: CN=38969ADA06F05F1CDE055A68A856F0C9B98E4434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:e5:46:30:6b:8e:7f:16:01:69:7c:05:29: 59:6e:54:34:8e:27:cd:8b:e7:45:96:96:6b:9a:5e: 84:cb:27:98:4e:01:ae:90:c4:29:46:0d:de:d4:af: 87:95:a7:92:ce:d0:f7:06:10:c8:5c:06:35:d9:06: 80:f0:f2:1e:12:88:f1:43:7d:92:fc:ba:33:36:84: 56:3f:15:c3:56:dd:5b:40:fe:7e:77:17:0f:6a:01: d9:f6:61:87:cd:c5:d6:f8:b7:0a:53:a8:10:66:66: ab:9a:18:3d:d8:97:a6:e3:6b:43:bd:a1:20:ec:8e: 96:62:88:f0:a0:7b:54:6b:1b:22:d8:38:35:07:d8: 1e:2b:1c:f6:80:80:1d:79:c4:8d:7f:a6:03:83:ff: fb:93:62:ca:dd:2b:7e:93:e2:bb:62:ab:02:d1:2e: cc:63:fe:93:c0:09:d5:b5:ed:8e:f4:c2:b0:42:1d: 38:0f:42:95:02:d1:5f:dd:c0:8f:ab:68:53:2a:4a: d4:80:db:b3:1e:fd:5e:55:43:41:30:94:c3:f9:dd: d2:12:79:8f:b8:12:3c:1e:73:be:c0:94:86:85:b6: 9e:f6:88:c5:b3:c1:4b:b1:2b:a3:76:36:1e:47:0f: 30:63:56:41:f2:78:4d:fe:38:29:7f:2b:97:0f:cd: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:96:9A:DA:06:F0:5F:1C:DE:05:5A:68:A8:56:F0:C9:B9:8E:44:34 X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:70:09:15:b5:6a:cb:44:98:64:f8:ef:f2:23:5a:e9:2c: 56:c3:61:d0:c3:d0:42:dc:fb:dd:78:c0:e1:1e:a7:b4:af:6c: 11:23:ae:ca:81:2c:64:d0:05:18:41:17:ac:73:63:05:3e:95: b0:d9:bb:1f:37:ce:b5:c0:27:40:42:eb:3e:78:e4:2e:88:37: f3:15:10:76:07:ae:5c:48:0f:d8:2a:37:6e:75:c5:56:c4:7c: 0b:50:82:50:81:e4:f4:eb:a7:b7:8c:ef:84:43:41:5c:31:c2: ef:a5:79:12:87:a5:a9:c2:ec:a1:6d:75:c1:8c:2f:63:3e:2e: e2:0c:77:29:5d:49:6b:d2:d1:ad:fa:60:04:f9:3b:3a:91:9b: 9c:59:20:54:2c:a3:2c:1f:75:9c:aa:b1:60:76:b3:17:42:de: f0:2b:35:d1:66:7f:55:24:3d:3c:f3:48:df:1d:e4:d2:ce:e2: ca:66:a7:69:8a:12:d6:03:4c:6c:9c:25:d4:66:7b:83:a4:d9: e2:8c:60:c9:a6:d8:bf:a5:9b:fe:1c:29:06:83:18:eb:55:0a: 34:70:a3:8a:e3:1a:f9:7a:6a:68:24:9b:cc:aa:57:c4:d7:84: 85:af:7f:d9:1d:ab:c3:a9:4d:48:19:10:93:5d:2d:4b:44:e2: f9:99:c6:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuzy0PfkaFBlJdkBGGCNYLxZpRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNjAzMjUwOTU1NThaFw0yNjAzMjgyMTM0NThaMDMxMTAvBgNV BAMTKDM4OTY5QURBMDZGMDVGMUNERTA1NUE2OEE4NTZGMEM5Qjk4RTQ0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYOVGMGuOfxYBaXwFKVluVDSO J82L50WWlmuaXoTLJ5hOAa6QxClGDd7Ur4eVp5LO0PcGEMhcBjXZBoDw8h4SiPFD fZL8ujM2hFY/FcNW3VtA/n53Fw9qAdn2YYfNxdb4twpTqBBmZquaGD3Yl6bja0O9 oSDsjpZiiPCge1RrGyLYODUH2B4rHPaAgB15xI1/pgOD//uTYsrdK36T4rtiqwLR Lsxj/pPACdW17Y70wrBCHTgPQpUC0V/dwI+raFMqStSA27Me/V5VQ0EwlMP53dIS eY+4Ejwec77AlIaFtp72iMWzwUuxK6N2Nh5HDzBjVkHyeE3+OCl/K5cPza6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJaa2gbwXxzeBVpoqFbwybmORDQwHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkRcAkVtWrLRJhk+O/yI1rpLFbDYdDD0ELc +914wOEep7SvbBEjrsqBLGTQBRhBF6xzYwU+lbDZux83zrXAJ0BC6z545C6IN/MV EHYHrlxID9gqN251xVbEfAtQglCB5PTrp7eM74RDQVwxwu+leRKHpanC7KFtdcGM L2M+LuIMdyldSWvS0a36YAT5OzqRm5xZIFQsoywfdZyqsWB2sxdC3vArNdFmf1Uk PTzzSN8d5NLO4spmp2mKEtYDTGycJdRme4Ok2eKMYMmm2L+lm/4cKQaDGOtVCjRw o4rjGvl6amgkm8yqV8TXhIWvf9kdq8OpTUgZEJNdLUtE4vmZxvk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:43:03 2026 by rpki-client