$ rpki-client -vvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: PE6YJR3i2VODHL6NR6s5wqC3zbkwj17egpGGyAKyK4o= Subject key identifier: 91:A4:3E:82:E9:EB:38:4C:71:1E:49:93:DD:A4:5A:04:B8:A4:64:C3 Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 1C1D101B3F6284302FE43A5FC988091E17C8A053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:27:14 +0000 Manifest this update: Tue 12 May 2026 17:22:14 +0000 Manifest next update: Wed 13 May 2026 20:45:14 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: erJ404Bdfg1+4iucDcE6M4zk8jaMyBcRYsw5Nepqj+c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1d:10:1b:3f:62:84:30:2f:e4:3a:5f:c9:88:09:1e:17:c8:a0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: May 12 17:22:14 2026 GMT Not After : May 13 20:45:14 2026 GMT Subject: CN=91A43E82E9EB384C711E4993DDA45A04B8A464C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:88:48:38:99:20:f8:fc:22:a3:b0:4b:25: fc:6d:64:20:f3:75:2b:45:80:58:ee:d4:1e:25:ed: 0b:0f:fa:d9:57:fb:31:43:bf:6b:4f:d0:2c:ba:27: 9f:5f:ad:8d:78:d5:ac:3f:89:93:e8:19:72:21:4c: 88:62:8f:32:be:2a:d2:4b:76:70:8f:fa:7b:08:b1: dc:b3:59:a9:4a:da:fa:60:06:da:cc:6a:ab:a3:d6: 6e:84:5d:10:86:aa:43:f1:68:4d:74:5e:33:a1:6f: c8:aa:82:d1:65:83:96:01:28:52:c6:e0:18:82:e7: a0:e4:f1:f4:47:2d:89:dc:5d:8d:6b:9e:63:f1:6c: d2:9e:40:40:20:8d:01:37:a7:7e:66:e9:6f:cd:9e: 05:b0:c9:26:89:b0:79:85:bc:1a:95:ad:d3:ae:60: 16:48:8d:16:7b:c6:b2:41:e9:de:12:04:02:19:e7: ca:45:84:b2:0b:94:cc:c8:49:39:74:10:06:6c:a2: e5:07:a7:a2:9c:e0:69:09:2c:98:8b:6e:0c:55:ad: b8:27:c1:c2:b2:23:53:4c:3c:11:80:51:a8:c0:bc: 98:e2:ed:6e:a6:c4:1e:a0:2f:e9:dc:b7:5b:c8:e4: 69:b9:f6:d8:ff:f7:3c:60:23:b4:fa:c0:ca:94:5c: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:3E:82:E9:EB:38:4C:71:1E:49:93:DD:A4:5A:04:B8:A4:64:C3 X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fb:5c:0c:42:36:be:6a:94:a9:6e:7b:ad:a4:ad:44:6d:75: 87:1a:ec:71:56:87:8e:eb:8d:98:ae:a1:88:80:a8:2c:16:4a: 1a:05:bb:e4:b4:01:a4:2a:7f:9b:2f:cd:8b:05:6c:59:e9:7e: 76:f3:fe:21:2c:1a:86:ef:75:c5:7b:d6:0b:95:f0:a6:8c:c6: b3:e4:f5:db:da:9f:4b:26:97:96:dc:61:a5:52:69:75:97:03: b3:e5:0f:e7:44:a7:f1:71:77:e7:05:b4:79:4e:92:17:2a:15: 36:7c:c3:45:4b:bc:f1:63:e0:40:fe:0d:2d:15:45:bc:13:54: 20:99:55:0a:cf:28:e7:c8:96:b2:48:34:37:fa:5d:43:f7:ce: 8e:4f:8e:98:eb:7a:c8:e7:c8:9f:c7:ab:13:af:ea:ae:87:3d: 08:cb:37:cc:c7:14:2d:9a:18:62:3e:19:a8:db:15:5d:53:48: ac:b9:33:2a:dc:44:05:bd:64:3a:9b:6f:70:02:12:e8:6e:e5: 4d:7a:30:e1:d2:b7:50:c0:12:e4:4b:ca:84:27:7c:7f:d8:14: 13:e7:11:16:3b:0e:ad:94:31:8f:d4:dd:9a:52:a9:b1:11:0a: e9:73:0d:f5:48:2d:d2:7a:46:8e:ab:59:cd:44:96:74:fd:b8: 0d:0d:ec:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHB0QGz9ihDAv5DpfyYgJHhfIoFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA1MTIxNzIyMTRaFw0yNjA1MTMyMDQ1MTRaMDMxMTAvBgNV BAMTKDkxQTQzRTgyRTlFQjM4NEM3MTFFNDk5M0REQTQ1QTA0QjhBNDY0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSIhIOJkg+Pwio7BLJfxtZCDz dStFgFju1B4l7QsP+tlX+zFDv2tP0Cy6J59frY141aw/iZPoGXIhTIhijzK+KtJL dnCP+nsIsdyzWalK2vpgBtrMaquj1m6EXRCGqkPxaE10XjOhb8iqgtFlg5YBKFLG 4BiC56Dk8fRHLYncXY1rnmPxbNKeQEAgjQE3p35m6W/NngWwySaJsHmFvBqVrdOu YBZIjRZ7xrJB6d4SBAIZ58pFhLILlMzISTl0EAZsouUHp6Kc4GkJLJiLbgxVrbgn wcKyI1NMPBGAUajAvJji7W6mxB6gL+nct1vI5Gm59tj/9zxgI7T6wMqUXMJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaQ+gunrOExxHkmT3aRaBLikZMMwHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr7XAxCNr5qlKlue62krURtdYca7HFWh47r jZiuoYiAqCwWShoFu+S0AaQqf5svzYsFbFnpfnbz/iEsGobvdcV71guV8KaMxrPk 9dvan0sml5bcYaVSaXWXA7PlD+dEp/Fxd+cFtHlOkhcqFTZ8w0VLvPFj4ED+DS0V RbwTVCCZVQrPKOfIlrJINDf6XUP3zo5PjpjresjnyJ/HqxOv6q6HPQjLN8zHFC2a GGI+GajbFV1TSKy5MyrcRAW9ZDqbb3ACEuhu5U16MOHSt1DAEuRLyoQnfH/YFBPn ERY7Dq2UMY/U3ZpSqbERCulzDfVILdJ6Ro6rWc1ElnT9uA0N7BI= -----END CERTIFICATE-----Generated at Tue May 12 22:52:03 2026 by rpki-client