$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft File: 0171EAA218774432ABC9A9D090D868F4943C2BC9.mft (raw, json) Hash identifier: s16qHIXZz89wzO632snIV1j+uZL2rB1yDGGkXTHeDLg= Subject key identifier: 36:28:97:B1:F1:A2:C0:70:B7:4F:A3:1E:83:62:25:D4:25:F1:D4:1B Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Certificate serial: 5D38BC3E160989958F579E661407BF8468C9877A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:31:24 +0000 Manifest this update: Wed 23 Sep 2026 20:26:24 +0000 Manifest next update: Thu 24 Sep 2026 21:19:24 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: uz7vD6uKih8Tb7MYai/UMVuRJwMkfdUo7tpBij+DNyE=) 2: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=) 3: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=) 4: 0171EAA218774432ABC9A9D090D868F4943C2BC9.crl (hash: X0Ek5E/51kvOVV/dr/Z9eGoZrHAvn2aNpkG3AdAsgdI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:38:bc:3e:16:09:89:95:8f:57:9e:66:14:07:bf:84:68:c9:87:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9 Validity Not Before: Sep 23 20:26:24 2026 GMT Not After : Sep 24 21:19:24 2026 GMT Subject: CN=362897B1F1A2C070B74FA31E836225D425F1D41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:c9:de:ed:49:19:23:17:ea:d2:0e:f0:78: c2:02:b7:fe:a3:06:3a:bd:8c:ef:2f:46:af:d6:19: c4:c3:8d:f4:e0:db:86:e6:40:aa:66:67:a8:cf:0a: 42:5f:ce:63:b0:4f:65:41:bb:a7:b8:f7:33:87:0d: 14:5f:26:7d:70:95:76:df:a2:b3:74:c8:3a:04:22: d3:da:0b:6b:6d:95:23:5c:65:ae:4c:d7:d8:ea:1a: bb:6f:57:d1:5b:4b:c8:47:06:c0:d0:3b:1e:5a:06: 0c:76:15:03:20:b0:33:1c:d1:e9:10:47:89:96:03: 9c:f1:f4:58:e9:59:68:12:07:35:96:86:2c:ee:f4: 43:e1:ac:c4:32:95:80:ea:ac:84:23:f4:d5:a4:5f: 68:98:11:55:cc:41:b2:40:a7:de:e0:5c:22:49:90: d8:a1:bf:01:24:d1:3f:c7:2f:91:16:53:ab:dd:9a: 0e:ba:b9:9c:9a:b2:51:d2:0c:d9:1a:44:ea:69:69: 12:e2:a9:f6:34:0e:f7:b9:09:cb:a7:70:84:87:54: dd:35:ba:fa:f0:21:18:89:76:10:3c:42:eb:ce:45: dd:32:f8:9f:b6:c9:f0:1f:ab:28:c9:19:88:0f:ad: da:18:32:3f:46:08:1f:e7:de:a0:d6:51:38:a2:20: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:28:97:B1:F1:A2:C0:70:B7:4F:A3:1E:83:62:25:D4:25:F1:D4:1B X509v3 Authority Key Identifier: keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:fe:73:bf:6e:40:37:72:94:3f:76:40:84:2f:41:49:2d: 05:79:53:12:cc:5a:06:d4:c5:0d:98:d7:e8:1f:48:06:f5:ba: c4:c8:5a:08:67:79:3b:05:e7:40:ab:3b:c3:3a:d3:4f:fc:72: 2b:43:db:84:ee:08:d5:6e:68:63:12:44:6f:48:f5:00:f3:ce: 78:81:07:e2:bf:55:3d:bb:2d:db:96:f1:77:97:c4:f6:b2:89: af:c6:45:a9:a5:07:1d:ef:d1:cc:cb:84:34:50:11:a9:97:73: 4f:45:cc:f6:3a:30:e3:10:44:9d:07:a9:61:dc:c2:55:60:98: a4:20:73:33:42:a9:ff:b1:56:fe:89:49:1d:95:0c:05:02:25: bb:4d:9c:aa:4c:38:7b:be:91:b6:df:1a:c9:3d:ff:c4:75:2e: 06:fd:76:00:8c:f8:7f:4f:20:ad:a9:e2:25:05:89:57:f1:c7: 90:59:bf:03:e0:dc:18:5a:2a:5a:a7:41:09:e4:dc:b7:74:67: 4f:e3:e4:ab:cc:d7:8f:46:bc:4d:b2:7c:d6:c7:8e:6e:e9:05: 2f:a1:f0:47:1b:69:ba:28:02:6a:c8:63:7e:3e:f4:52:fc:a3: 5b:38:67:3b:8b:d6:cf:bb:52:77:01:13:55:a1:6d:c2:2a:fc: 8e:04:a3:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTi8PhYJiZWPV55mFAe/hGjJh3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5 NDNDMkJDOTAeFw0yNjA5MjMyMDI2MjRaFw0yNjA5MjQyMTE5MjRaMDMxMTAvBgNV BAMTKDM2Mjg5N0IxRjFBMkMwNzBCNzRGQTMxRTgzNjIyNUQ0MjVGMUQ0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJ8ne7UkZIxfq0g7weMICt/6j Bjq9jO8vRq/WGcTDjfTg24bmQKpmZ6jPCkJfzmOwT2VBu6e49zOHDRRfJn1wlXbf orN0yDoEItPaC2ttlSNcZa5M19jqGrtvV9FbS8hHBsDQOx5aBgx2FQMgsDMc0ekQ R4mWA5zx9FjpWWgSBzWWhizu9EPhrMQylYDqrIQj9NWkX2iYEVXMQbJAp97gXCJJ kNihvwEk0T/HL5EWU6vdmg66uZyaslHSDNkaROppaRLiqfY0Dve5CcuncISHVN01 uvrwIRiJdhA8QuvORd0y+J+2yfAfqyjJGYgPrdoYMj9GCB/n3qDWUTiiIM8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNiiXsfGiwHC3T6Meg2Il1CXx1BswHwYDVR0j BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4 RjQ5NDNDMkJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQr/nO/bkA3cpQ/dkCEL0FJLQV5UxLMWgbU xQ2Y1+gfSAb1usTIWghneTsF50CrO8M600/8citD24TuCNVuaGMSRG9I9QDzzniB B+K/VT27LduW8XeXxPayia/GRamlBx3v0czLhDRQEamXc09FzPY6MOMQRJ0HqWHc wlVgmKQgczNCqf+xVv6JSR2VDAUCJbtNnKpMOHu+kbbfGsk9/8R1Lgb9dgCM+H9P IK2p4iUFiVfxx5BZvwPg3BhaKlqnQQnk3Ld0Z0/j5KvM149GvE2yfNbHjm7pBS+h 8EcbabooAmrIY34+9FL8o1s4ZzuL1s+7UncBE1WhbcIq/I4Eoz4= -----END CERTIFICATE-----Generated at Thu Sep 24 02:18:07 2026 by rpki-client