$ rpki-client -vvf rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft File: C717817244AB088EAD0E4D76165AD606C58B6BDE.mft (raw, json) Hash identifier: s1YizaKquWvEvJIVGQ7tAP9H1PoRr79MRgP1nzDHRRI= Subject key identifier: 41:50:E6:1D:43:B4:AF:3C:BE:98:B5:CB:E0:63:4E:04:56:AE:1C:9C Authority key identifier: C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE Certificate issuer: /CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Certificate serial: 75B9B6D8DD6C0F8052D2B3F2311971E0D6B6C550 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:47:36 +0000 Manifest this update: Fri 24 Jul 2026 06:42:36 +0000 Manifest next update: Sat 25 Jul 2026 06:48:36 +0000 Files and hashes: 1: C717817244AB088EAD0E4D76165AD606C58B6BDE.crl (hash: aZNwOxOnW7agINHjOwePqSnCAB743WaBnYrnyTKGYmo=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: ibsq14pTeQS2Mg9IUw2PKfJ3Jza0sBMhcbU4/kSfoSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b9:b6:d8:dd:6c:0f:80:52:d2:b3:f2:31:19:71:e0:d6:b6:c5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Validity Not Before: Jul 24 06:42:36 2026 GMT Not After : Jul 25 06:48:36 2026 GMT Subject: CN=4150E61D43B4AF3CBE98B5CBE0634E0456AE1C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:f5:9c:d9:91:03:cf:d7:e1:c3:7b:77:f3: 8f:89:56:69:52:7e:ba:9b:d2:0c:7b:3b:59:32:0f: 1e:21:a1:6f:c4:c1:10:8f:a3:46:39:7c:84:5d:23: 24:67:9e:13:45:dc:12:82:f1:13:67:2f:76:d0:17: 6d:b9:27:42:40:2d:ae:4e:49:ef:01:77:23:92:4b: cb:57:b5:79:dc:39:4b:4b:a9:65:66:03:1b:8c:79: 42:8f:e4:8d:88:c2:45:9e:62:3c:d4:97:38:4f:5c: c9:1a:06:a8:fe:21:02:81:0e:00:a6:0a:65:dc:58: 64:e1:25:cb:50:c9:48:b9:cd:0d:0a:06:e1:fb:51: 01:f4:39:f0:2b:fb:3e:be:78:e8:e8:1a:73:64:7d: ef:dc:b7:73:ea:43:cc:1a:ce:78:18:40:e1:a0:e6: 02:a1:a8:47:90:0f:c3:7d:0e:8a:01:d3:47:be:ad: e3:55:f3:7b:a8:fe:b7:86:19:d0:33:a5:06:4e:45: 48:6f:dc:13:49:c7:c6:20:a2:0e:8c:a9:50:c5:2d: 43:77:18:17:d5:5b:23:66:0d:53:61:87:a1:5b:6f: 35:10:f2:8d:e7:20:f1:a4:78:91:aa:18:08:18:bc: fc:ea:eb:b3:38:8c:63:38:12:85:34:d6:2b:1b:02: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:E6:1D:43:B4:AF:3C:BE:98:B5:CB:E0:63:4E:04:56:AE:1C:9C X509v3 Authority Key Identifier: keyid:C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9d:ad:d9:8a:93:e9:d0:91:de:d0:9b:e9:90:9b:87:e7:b0: a3:70:b2:d2:8a:0a:79:36:9c:02:10:a6:81:c6:62:41:99:b4: 16:3f:d3:0c:b2:97:8d:ad:39:e2:b3:21:ad:54:a6:51:54:a8: d5:f9:c9:9b:f3:02:9a:42:d6:62:87:c8:d2:03:6e:65:e0:0f: 75:82:57:53:e0:b6:38:49:de:e4:83:25:6b:ea:e4:0c:72:42: be:fa:2f:fb:3f:18:14:72:b5:5d:d9:43:70:7b:d1:08:67:bc: ed:9b:aa:a3:0d:d0:4d:81:e1:4c:68:50:23:de:a4:de:00:7a: 7a:88:cf:2a:a4:5f:01:76:9c:0e:7c:e4:c4:a3:91:e1:66:a3: d0:5b:d0:01:67:39:79:df:ef:bb:36:53:bd:64:19:6f:7c:11: 7c:03:ce:73:5a:be:0f:6a:81:eb:aa:6b:58:8e:f7:87:c5:b7: 97:55:0d:10:84:fe:05:6e:f0:b6:b0:df:fb:c6:51:65:62:3c: f5:83:b8:b7:44:ed:6c:66:a0:31:97:49:fe:8a:02:f8:8e:91: 5c:db:46:31:07:31:a7:e0:89:df:9f:14:b3:d7:dd:d5:4d:10: ab:31:70:2e:7f:eb:06:90:f4:d4:3e:a5:1e:44:b0:f7:56:45: f9:ee:1d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbm22N1sD4BS0rPyMRlx4Na2xVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZD NThCNkJERTAeFw0yNjA3MjQwNjQyMzZaFw0yNjA3MjUwNjQ4MzZaMDMxMTAvBgNV BAMTKDQxNTBFNjFENDNCNEFGM0NCRTk4QjVDQkUwNjM0RTA0NTZBRTFDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LvWc2ZEDz9fhw3t384+JVmlS frqb0gx7O1kyDx4hoW/EwRCPo0Y5fIRdIyRnnhNF3BKC8RNnL3bQF225J0JALa5O Se8BdyOSS8tXtXncOUtLqWVmAxuMeUKP5I2IwkWeYjzUlzhPXMkaBqj+IQKBDgCm CmXcWGThJctQyUi5zQ0KBuH7UQH0OfAr+z6+eOjoGnNkfe/ct3PqQ8wazngYQOGg 5gKhqEeQD8N9DooB00e+reNV83uo/reGGdAzpQZORUhv3BNJx8Ygog6MqVDFLUN3 GBfVWyNmDVNhh6FbbzUQ8o3nIPGkeJGqGAgYvPzq67M4jGM4EoU01isbAv87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVDmHUO0rzy+mLXL4GNOBFauHJwwHwYDVR0j BBgwFoAUxxeBckSrCI6tDk12FlrWBsWLa94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVjMWUyZjMtNGZiZC00NGJiLTgzZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0 NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZDNThCNkJERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzE3ODE3MjQ0QUIwODhFQUQwRTRENzYxNjVBRDYwNkM1OEI2 QkRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2 MDZDNThCNkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSdrdmKk+nQkd7Qm+mQm4fnsKNwstKKCnk2 nAIQpoHGYkGZtBY/0wyyl42tOeKzIa1UplFUqNX5yZvzAppC1mKHyNIDbmXgD3WC V1PgtjhJ3uSDJWvq5AxyQr76L/s/GBRytV3ZQ3B70QhnvO2bqqMN0E2B4UxoUCPe pN4AenqIzyqkXwF2nA585MSjkeFmo9Bb0AFnOXnf77s2U71kGW98EXwDznNavg9q geuqa1iO94fFt5dVDRCE/gVu8Law3/vGUWViPPWDuLdE7WxmoDGXSf6KAviOkVzb RjEHMafgid+fFLPX3dVNEKsxcC5/6waQ9NQ+pR5EsPdWRfnuHcg= -----END CERTIFICATE-----Generated at Fri Jul 24 11:20:47 2026 by rpki-client