$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: PzMgLZ07tDWpEFguVzWw60i/LpSdTLr5gwz3PzYvvwk= Subject key identifier: A4:D5:E1:99:EE:1F:CA:35:4A:D4:EE:6A:73:84:8C:AB:EE:E5:89:64 Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 4FD46BF13D607A36DCAB6735D9CDF802F1357FD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:49 +0000 Manifest this update: Tue 12 May 2026 18:59:48 +0000 Manifest next update: Wed 13 May 2026 22:26:48 +0000 Files and hashes: 1: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: mFFu11PRNjuENsrGMWZz0ntJTEZ3utg91qqCFf7qEjs=) 2: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d4:6b:f1:3d:60:7a:36:dc:ab:67:35:d9:cd:f8:02:f1:35:7f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: May 12 18:59:48 2026 GMT Not After : May 13 22:26:48 2026 GMT Subject: CN=A4D5E199EE1FCA354AD4EE6A73848CABEEE58964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:0a:46:1e:39:48:2b:c6:b2:e0:ac:1b:d4: c6:30:91:8f:f4:c9:4d:af:2b:12:a6:22:8f:33:29: 82:2e:9e:2c:70:18:a8:c7:62:77:6d:85:3a:28:85: 47:3e:72:b0:6c:35:4f:4a:6d:ad:39:e8:68:04:ad: 30:a3:ef:48:53:9c:97:a9:5e:c2:e3:4f:ac:60:7e: aa:3f:37:90:df:80:3f:5c:9e:c1:4d:b3:de:da:32: 75:97:9b:8d:07:fb:1d:3c:b7:04:14:bc:6d:ab:be: d7:24:84:c7:10:8c:1e:58:f8:0b:34:74:1f:bb:47: 85:6c:b6:5f:d8:0e:66:3c:07:43:a2:26:bb:dc:52: 9e:de:49:91:e1:0a:11:04:c2:cb:f4:21:be:6a:7b: a4:af:7f:58:6a:1c:f6:ec:a8:51:46:46:ae:6f:a1: 54:91:81:4d:ad:0e:f3:fb:f2:74:04:79:cf:92:99: 48:64:ad:65:56:27:d1:39:60:a3:77:3c:44:70:d3: 79:37:19:04:07:6b:c4:a6:3c:ad:ad:11:0a:9b:7d: ac:80:4d:7b:f4:ff:7f:08:04:7e:8e:8f:46:28:35: c2:8c:83:bb:5b:f8:71:e2:27:00:52:36:54:07:01: 78:79:55:02:8c:63:ea:71:27:2c:ff:3a:a1:7c:0d: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D5:E1:99:EE:1F:CA:35:4A:D4:EE:6A:73:84:8C:AB:EE:E5:89:64 X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a5:21:f0:ac:ae:d4:e1:68:31:26:f1:39:61:1f:d4:c5:79: 02:25:2f:fb:48:db:73:b1:a4:5f:a6:77:7a:41:94:70:29:e4: ce:17:3e:e9:f6:7e:db:57:65:26:e8:1f:a9:49:6c:b2:77:55: 3e:af:01:02:6e:8b:e9:38:73:98:f9:0f:95:95:86:93:90:d2: b2:bd:f4:a3:b6:48:15:b5:6b:c6:33:25:29:63:2a:bf:bd:d4: fc:68:d9:74:34:f6:65:57:91:74:39:04:58:57:a4:46:69:cf: f3:f5:3c:57:fa:8d:b8:b9:cf:8d:be:ac:d1:2d:fb:33:81:ff: ad:26:70:ae:8a:25:fd:b7:da:55:27:b0:66:ea:b7:67:6f:67: 15:de:d5:35:65:28:50:a1:48:c5:e6:28:af:be:c4:40:72:dd: 98:62:d4:4d:70:38:a4:2d:32:c0:80:73:ca:9b:36:d5:52:be: 4c:e7:73:99:03:f1:ee:4e:87:39:69:e0:3f:9c:8b:ef:95:41: 1f:de:c7:91:03:f9:0d:e9:d7:0f:5c:ee:f7:f6:43:4a:a0:99: b4:23:de:ca:9c:ca:bd:1b:c7:79:cf:54:bf:c7:84:7a:00:49: d3:2d:cd:10:85:31:df:05:c3:0f:86:e9:77:b7:8b:93:60:ce: a9:a5:4d:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9Rr8T1gejbcq2c12c34AvE1f9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA1MTIxODU5NDhaFw0yNjA1MTMyMjI2NDhaMDMxMTAvBgNV BAMTKEE0RDVFMTk5RUUxRkNBMzU0QUQ0RUU2QTczODQ4Q0FCRUVFNTg5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nQpGHjlIK8ay4Kwb1MYwkY/0 yU2vKxKmIo8zKYIunixwGKjHYndthToohUc+crBsNU9Kba056GgErTCj70hTnJep XsLjT6xgfqo/N5DfgD9cnsFNs97aMnWXm40H+x08twQUvG2rvtckhMcQjB5Y+As0 dB+7R4Vstl/YDmY8B0OiJrvcUp7eSZHhChEEwsv0Ib5qe6Svf1hqHPbsqFFGRq5v oVSRgU2tDvP78nQEec+SmUhkrWVWJ9E5YKN3PERw03k3GQQHa8SmPK2tEQqbfayA TXv0/38IBH6Oj0YoNcKMg7tb+HHiJwBSNlQHAXh5VQKMY+pxJyz/OqF8DWDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpNXhme4fyjVK1O5qc4SMq+7liWQwHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKulIfCsrtThaDEm8TlhH9TFeQIlL/tI23Ox pF+md3pBlHAp5M4XPun2fttXZSboH6lJbLJ3VT6vAQJui+k4c5j5D5WVhpOQ0rK9 9KO2SBW1a8YzJSljKr+91Pxo2XQ09mVXkXQ5BFhXpEZpz/P1PFf6jbi5z42+rNEt +zOB/60mcK6KJf232lUnsGbqt2dvZxXe1TVlKFChSMXmKK++xEBy3Zhi1E1wOKQt MsCAc8qbNtVSvkznc5kD8e5Ohzlp4D+ci++VQR/ex5ED+Q3p1w9c7vf2Q0qgmbQj 3sqcyr0bx3nPVL/HhHoASdMtzRCFMd8Fww+G6Xe3i5NgzqmlTQY= -----END CERTIFICATE-----Generated at Wed May 13 00:44:29 2026 by rpki-client