$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: oZ3FxEv2S6l0sKfBCNuMrVRiQTAJ3YrRTY2WJQn2KXc= Subject key identifier: 0D:50:58:45:38:A9:E6:18:69:D4:99:C3:7E:9F:14:72:73:BB:4A:44 Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 184EB0CFE28F256442678BC9FF0C1033557D2A4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:07:17 +0000 Manifest this update: Thu 23 Jul 2026 14:02:17 +0000 Manifest next update: Fri 24 Jul 2026 15:14:17 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 2: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: qrPkpKsxjw/ta1/+y70bChxTZnA7ckZD132GGOqYpug=) 3: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4e:b0:cf:e2:8f:25:64:42:67:8b:c9:ff:0c:10:33:55:7d:2a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Jul 23 14:02:17 2026 GMT Not After : Jul 24 15:14:17 2026 GMT Subject: CN=0D50584538A9E61869D499C37E9F147273BB4A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:fa:13:31:00:7f:b8:62:d5:ac:f6:ac:69: b9:ec:5c:b1:fb:90:c0:8b:06:00:90:d2:59:d3:df: d7:37:d1:8d:3b:b4:b2:03:82:db:b8:07:f9:6d:d2: 33:23:d6:e0:a8:96:38:07:c3:95:74:c9:e1:39:71: 33:0e:34:e6:88:f3:dc:55:5a:7d:2e:ea:55:da:67: 69:ab:9d:17:35:6f:ea:08:24:86:00:e7:40:30:a0: 41:ae:38:5e:5b:7d:67:12:60:98:8e:7c:78:15:d7: 27:2d:d3:b7:cf:a6:35:0f:8a:e3:bd:fa:c4:b1:2c: 81:f1:14:7c:c7:65:dd:8d:c2:be:05:06:d7:bb:de: f7:29:1a:38:c9:6f:d0:f7:98:24:60:83:cc:a7:f8: 3f:6a:91:c3:5f:68:7c:9b:a3:64:1e:98:89:86:64: c1:ce:eb:a2:61:05:ad:30:fa:84:14:06:46:52:23: 51:b2:38:11:a4:e4:ef:30:e6:9c:33:92:b9:ba:32: 0b:17:fa:4a:22:77:ca:60:99:cc:a0:44:a5:a9:38: c9:8b:d1:6d:0c:3e:01:41:5d:48:5a:34:bc:c5:d7: 3e:1f:40:d8:a6:bb:08:c8:ea:96:ce:31:37:c0:4a: 4f:db:9d:d4:ee:37:8e:21:56:91:a1:49:1f:61:fb: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:58:45:38:A9:E6:18:69:D4:99:C3:7E:9F:14:72:73:BB:4A:44 X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6a:4a:7a:e3:c8:b0:b4:f2:75:db:c0:b8:48:0a:43:ff:b1: 35:69:06:1d:cd:d6:1b:cf:6b:d9:6a:67:e9:dd:c0:12:c2:53: 8c:49:e4:8d:da:8e:1b:f1:76:42:11:fd:5b:7a:f3:2a:34:6b: fb:db:4e:a9:8b:35:80:f2:45:92:7c:0f:08:46:19:98:68:20: 81:07:96:c1:06:ee:f0:85:22:3c:fb:bc:67:14:18:a7:0a:b6: b4:81:a3:ee:94:00:ba:74:ad:52:1d:15:8b:e4:31:5c:a5:9d: 16:e2:20:46:a0:64:e7:1f:96:ef:bb:ed:33:35:d1:95:18:d8: 8a:f5:62:73:f3:62:07:fb:a0:be:4d:d7:3a:a2:a6:85:e3:36: 09:87:0e:24:92:7f:73:0a:95:95:23:b7:e2:df:f4:de:af:bd: 66:5f:cf:1b:14:f0:0a:63:b7:a3:9c:f6:e5:68:f3:75:9f:3c: 96:db:ab:ce:d0:3e:26:97:a9:d1:da:04:f5:52:4f:c7:19:9f: 1c:13:f7:d1:41:9e:7a:c8:24:78:0e:6d:12:7f:5a:17:de:44: 20:cc:b8:64:2c:b5:13:37:cf:09:48:8a:47:f1:d1:bc:43:8d: d1:7e:c4:78:ac:25:17:ee:d9:07:a7:a7:03:7d:fb:72:37:9e: b5:15:45:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGE6wz+KPJWRCZ4vJ/wwQM1V9Kk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA3MjMxNDAyMTdaFw0yNjA3MjQxNTE0MTdaMDMxMTAvBgNV BAMTKDBENTA1ODQ1MzhBOUU2MTg2OUQ0OTlDMzdFOUYxNDcyNzNCQjRBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdfoTMQB/uGLVrPasabnsXLH7 kMCLBgCQ0lnT39c30Y07tLIDgtu4B/lt0jMj1uColjgHw5V0yeE5cTMONOaI89xV Wn0u6lXaZ2mrnRc1b+oIJIYA50AwoEGuOF5bfWcSYJiOfHgV1yct07fPpjUPiuO9 +sSxLIHxFHzHZd2Nwr4FBte73vcpGjjJb9D3mCRgg8yn+D9qkcNfaHybo2QemImG ZMHO66JhBa0w+oQUBkZSI1GyOBGk5O8w5pwzkrm6MgsX+koid8pgmcygRKWpOMmL 0W0MPgFBXUhaNLzF1z4fQNimuwjI6pbOMTfASk/bndTuN44hVpGhSR9h+62hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVBYRTip5hhp1JnDfp8UcnO7SkQwHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9qSnrjyLC08nXbwLhICkP/sTVpBh3N1hvP a9lqZ+ndwBLCU4xJ5I3ajhvxdkIR/Vt68yo0a/vbTqmLNYDyRZJ8DwhGGZhoIIEH lsEG7vCFIjz7vGcUGKcKtrSBo+6UALp0rVIdFYvkMVylnRbiIEagZOcflu+77TM1 0ZUY2Ir1YnPzYgf7oL5N1zqipoXjNgmHDiSSf3MKlZUjt+Lf9N6vvWZfzxsU8Apj t6Oc9uVo83WfPJbbq87QPiaXqdHaBPVST8cZnxwT99FBnnrIJHgObRJ/WhfeRCDM uGQstRM3zwlIikfx0bxDjdF+xHisJRfu2QenpwN9+3I3nrUVRY0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:09 2026 by rpki-client