$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft File: 817CF087D3254B3FE406AD59EF90AE84006DC70B.mft (raw, json) Hash identifier: 0Wgr7VquWyJsNFvd/QnIrNK/lQE/2NYf2bTzzi8c7K0= Subject key identifier: 70:4B:2A:56:BD:66:33:2B:EA:D0:B3:64:D8:6E:25:82:DA:F6:97:D8 Authority key identifier: 81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B Certificate issuer: /CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Certificate serial: 76E0EEB3FF4D6867CBA2D4654A0BDA70DA73514D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 12:26:09 +0000 Manifest this update: Thu 24 Sep 2026 12:21:09 +0000 Manifest next update: Fri 25 Sep 2026 16:15:09 +0000 Files and hashes: 1: 817CF087D3254B3FE406AD59EF90AE84006DC70B.crl (hash: A6Q9ZV1jqwK/ZuhK/oJY2HvuXl260HG3xyY5XFEkse8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e0:ee:b3:ff:4d:68:67:cb:a2:d4:65:4a:0b:da:70:da:73:51:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817CF087D3254B3FE406AD59EF90AE84006DC70B Validity Not Before: Sep 24 12:21:09 2026 GMT Not After : Sep 25 16:15:09 2026 GMT Subject: CN=704B2A56BD66332BEAD0B364D86E2582DAF697D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:c4:65:c8:23:d5:f7:ae:36:8d:4e:81:f9: 60:be:e3:82:ba:65:cd:ff:99:3c:8d:d5:c5:29:0a: 85:db:76:ce:3c:1e:ba:1c:96:97:71:89:74:55:15: 29:2e:2d:03:58:25:e6:fe:d7:22:db:cd:8d:8f:2c: 8b:0c:2a:cf:a3:ef:c1:82:43:9b:1d:16:d2:13:c4: 7d:9b:b9:23:31:14:32:ae:08:36:22:0f:f3:ee:7e: 5d:68:7a:73:21:8c:f2:40:9b:f7:5c:09:21:13:3b: 65:71:07:1a:01:e2:99:f2:7e:98:64:aa:9a:66:88: 0a:4b:ed:1c:0b:5e:4c:93:46:5c:ce:a6:b4:79:2f: f8:7c:8b:27:5a:91:0d:de:4e:39:97:da:8b:39:53: 0f:70:08:df:a7:d6:0c:53:4f:20:1a:3a:8c:50:d4: 97:ef:d3:23:73:eb:66:e5:6f:04:e8:50:5c:0b:71: d0:63:e6:63:92:be:77:70:a2:2d:31:8f:04:7f:55: 60:ad:58:13:7d:1f:08:ce:5c:98:0f:5c:78:10:ab: 1a:4f:6c:2b:87:de:59:34:f3:ff:68:89:02:1b:ca: d4:96:14:10:78:d8:89:45:8e:a9:07:01:1a:5b:62: 9c:80:d6:21:38:ca:36:ac:37:fa:1d:07:7b:67:5e: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4B:2A:56:BD:66:33:2B:EA:D0:B3:64:D8:6E:25:82:DA:F6:97:D8 X509v3 Authority Key Identifier: keyid:81:7C:F0:87:D3:25:4B:3F:E4:06:AD:59:EF:90:AE:84:00:6D:C7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/817CF087D3254B3FE406AD59EF90AE84006DC70B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7c:b4:00:53:31:9e:44:ef:9d:01:f4:ba:40:02:cf:39:2d: 31:35:77:59:19:d3:a6:a5:eb:2a:5d:58:90:a2:c8:98:5a:4d: c3:87:11:08:bd:b1:7c:19:f6:1a:ed:73:36:88:a9:96:ed:12: 25:25:30:20:f5:7a:b8:cd:9a:50:2e:0d:0c:ec:e5:07:a6:dd: 13:ba:31:ae:d2:fc:6a:31:12:ba:df:cf:d1:92:a7:ae:9a:02: e0:d9:e3:00:ff:5b:89:96:88:a1:7e:a4:08:34:72:90:dd:a5: e8:69:bc:70:f7:9e:e7:04:28:cd:43:3c:77:2d:75:a4:7b:19: dc:82:cd:c2:d0:9c:ef:d1:ee:c2:2e:35:70:36:62:79:bb:dd: 62:b4:c4:d5:9e:af:56:e8:24:1b:50:15:0a:1f:82:d0:d0:6d: 2d:bc:68:5a:88:18:82:d0:14:a3:10:de:b4:20:9b:a5:99:23: 6d:ee:8f:fc:e4:5d:d4:4c:19:3d:b4:a1:3a:0c:00:6c:78:04: 78:00:a4:4a:c1:59:2c:9d:80:a0:45:f1:85:27:69:18:75:f9: f9:8b:b2:6e:b0:5d:f6:72:7f:fb:21:2a:0f:74:02:d2:11:5e: 82:db:db:83:35:79:7c:26:8e:18:ff:d3:15:a6:2c:52:09:d8: f8:2b:c8:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUduDus/9NaGfLotRlSgvacNpzUU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFFODQw MDZEQzcwQjAeFw0yNjA5MjQxMjIxMDlaFw0yNjA5MjUxNjE1MDlaMDMxMTAvBgNV BAMTKDcwNEIyQTU2QkQ2NjMzMkJFQUQwQjM2NEQ4NkUyNTgyREFGNjk3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PcRlyCPV9642jU6B+WC+44K6 Zc3/mTyN1cUpCoXbds48HroclpdxiXRVFSkuLQNYJeb+1yLbzY2PLIsMKs+j78GC Q5sdFtITxH2buSMxFDKuCDYiD/Pufl1oenMhjPJAm/dcCSETO2VxBxoB4pnyfphk qppmiApL7RwLXkyTRlzOprR5L/h8iydakQ3eTjmX2os5Uw9wCN+n1gxTTyAaOoxQ 1Jfv0yNz62blbwToUFwLcdBj5mOSvndwoi0xjwR/VWCtWBN9HwjOXJgPXHgQqxpP bCuH3lk08/9oiQIbytSWFBB42IlFjqkHARpbYpyA1iE4yjasN/odB3tnXsA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcEsqVr1mMyvq0LNk2G4lgtr2l9gwHwYDVR0j BBgwFoAUgXzwh9MlSz/kBq1Z75CuhABtxwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdE MzI1NEIzRkU0MDZBRDU5RUY5MEFFODQwMDZEQzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTdDRjA4N0QzMjU0QjNGRTQwNkFENTlFRjkwQUU4NDAwNkRD NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvODE3Q0YwODdEMzI1NEIzRkU0MDZBRDU5RUY5MEFF ODQwMDZEQzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFx8tABTMZ5E750B9LpAAs85LTE1d1kZ06al 6ypdWJCiyJhaTcOHEQi9sXwZ9hrtczaIqZbtEiUlMCD1erjNmlAuDQzs5Qem3RO6 Ma7S/GoxErrfz9GSp66aAuDZ4wD/W4mWiKF+pAg0cpDdpehpvHD3nucEKM1DPHct daR7GdyCzcLQnO/R7sIuNXA2Ynm73WK0xNWer1boJBtQFQofgtDQbS28aFqIGILQ FKMQ3rQgm6WZI23uj/zkXdRMGT20oToMAGx4BHgApErBWSydgKBF8YUnaRh1+fmL sm6wXfZyf/shKg90AtIRXoLb24M1eXwmjhj/0xWmLFIJ2PgryEQ= -----END CERTIFICATE-----Generated at Thu Sep 24 19:42:07 2026 by rpki-client