$ rpki-client -vvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json) Hash identifier: oPUjK0SXyzw44TXw5inLdXGxHMeX4LSfqIyTqIuFGVc= Subject key identifier: DF:9A:D8:C5:4C:4E:55:03:23:AD:9D:46:9A:1F:16:9D:75:47:A3:D6 Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551 Certificate serial: 3E8140EFDB9F8431CE0B2D7B18311D6E24E369CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:36 +0000 Manifest this update: Tue 12 May 2026 18:54:36 +0000 Manifest next update: Wed 13 May 2026 20:59:36 +0000 Files and hashes: 1: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: mRJE1AfBc9XpZcYNAZdtXD5vzIe0+MzR11tdkfwZ7XA=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:81:40:ef:db:9f:84:31:ce:0b:2d:7b:18:31:1d:6e:24:e3:69:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551 Validity Not Before: May 12 18:54:36 2026 GMT Not After : May 13 20:59:36 2026 GMT Subject: CN=DF9AD8C54C4E550323AD9D469A1F169D7547A3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:93:b4:08:ff:6f:37:5a:4d:55:eb:e0:4a: b5:9c:2e:af:1b:bc:82:0a:41:50:24:20:8c:63:76: 8c:e5:02:36:cf:e7:c2:32:86:32:43:b6:1f:f7:4b: 9f:b4:5b:50:89:38:81:db:ca:be:f5:99:b7:f0:5e: f7:af:73:c8:0b:f9:bf:3e:6c:3a:0d:a5:9c:bc:ed: 1d:f7:69:4c:04:a4:ce:46:ef:0c:56:88:71:1b:e0: 12:b1:df:a7:41:ff:6d:08:80:95:f3:5b:fa:60:44: 42:7c:67:0c:2e:8a:2f:26:36:f8:42:58:61:f9:d0: 5a:6f:16:28:f5:8b:78:33:e8:e6:fc:b3:03:40:5e: 02:aa:8d:22:75:7b:79:88:c8:07:74:28:a6:6c:5c: 8c:9a:3a:2d:a3:17:6d:f4:50:7f:fb:e5:12:98:25: 3d:60:94:09:e6:06:53:75:9b:0f:4a:9c:ff:11:7e: 96:3f:e5:11:53:d5:3d:65:0e:0d:0a:14:f6:28:ea: d9:c4:76:3c:3c:9b:80:96:ea:97:be:2c:aa:f2:13: 44:70:27:85:65:74:6d:99:ae:72:76:a6:9a:ba:f2: 9c:2d:ff:ee:a0:c9:28:ca:b9:3f:c7:52:31:de:f8: 59:f4:2e:b0:00:cc:1b:7d:e0:be:14:f2:fe:91:bd: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9A:D8:C5:4C:4E:55:03:23:AD:9D:46:9A:1F:16:9D:75:47:A3:D6 X509v3 Authority Key Identifier: keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2d:0e:81:3b:bc:f9:79:74:a8:63:0b:de:58:3f:34:e8:69: 53:d8:33:51:2f:c2:c8:67:e5:bd:58:1e:dd:d3:2d:d2:7e:c2: ac:64:f1:19:b4:1a:7e:73:92:f6:60:97:78:fc:26:ea:e3:8d: b1:c1:2e:c4:f9:24:34:c2:1d:b4:46:fb:be:4d:49:f5:06:6f: a0:c5:97:0f:65:79:a2:ed:b7:53:0e:a9:e7:b5:ee:cb:51:09: 09:9a:29:58:80:8e:01:06:24:c0:c5:3e:ee:23:f6:37:ad:64: ba:5f:56:86:70:c6:51:99:04:d8:c7:9b:d9:b0:89:e8:8f:99: b7:5b:af:8b:93:aa:9d:4d:a9:1c:f6:c6:69:b4:f1:8c:d9:54: 3f:e4:0e:cb:d9:85:ad:79:ac:1e:5a:ba:2a:43:2a:74:03:cf: b6:5b:eb:47:0a:d4:00:5f:76:05:82:98:f2:6e:cf:6c:8a:19: a3:fd:01:db:04:7d:09:3b:45:f4:7c:e5:f8:c9:20:2f:8c:57: 1c:22:3f:25:eb:d9:a5:33:99:ab:6f:6b:2c:a4:32:de:35:1a: c0:ca:89:44:a9:44:04:dc:9c:e3:f9:bd:55:5c:9f:60:f5:c3: 20:fc:63:62:c9:77:56:54:1e:17:3f:de:bf:68:b3:41:c4:bd: 0e:f1:2b:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoFA79ufhDHOCy17GDEdbiTjac8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx NjE0NjU1MTAeFw0yNjA1MTIxODU0MzZaFw0yNjA1MTMyMDU5MzZaMDMxMTAvBgNV BAMTKERGOUFEOEM1NEM0RTU1MDMyM0FEOUQ0NjlBMUYxNjlENzU0N0EzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HZO0CP9vN1pNVevgSrWcLq8b vIIKQVAkIIxjdozlAjbP58IyhjJDth/3S5+0W1CJOIHbyr71mbfwXvevc8gL+b8+ bDoNpZy87R33aUwEpM5G7wxWiHEb4BKx36dB/20IgJXzW/pgREJ8Zwwuii8mNvhC WGH50FpvFij1i3gz6Ob8swNAXgKqjSJ1e3mIyAd0KKZsXIyaOi2jF230UH/75RKY JT1glAnmBlN1mw9KnP8RfpY/5RFT1T1lDg0KFPYo6tnEdjw8m4CW6pe+LKryE0Rw J4VldG2ZrnJ2ppq68pwt/+6gySjKuT/HUjHe+Fn0LrAAzBt94L4U8v6RvRlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35rYxUxOVQMjrZ1Gmh8WnXVHo9YwHwYDVR0j BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2 NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAtDoE7vPl5dKhjC95YPzToaVPYM1Evwshn 5b1YHt3TLdJ+wqxk8Rm0Gn5zkvZgl3j8JurjjbHBLsT5JDTCHbRG+75NSfUGb6DF lw9leaLtt1MOqee17stRCQmaKViAjgEGJMDFPu4j9jetZLpfVoZwxlGZBNjHm9mw ieiPmbdbr4uTqp1NqRz2xmm08YzZVD/kDsvZha15rB5auipDKnQDz7Zb60cK1ABf dgWCmPJuz2yKGaP9AdsEfQk7RfR85fjJIC+MVxwiPyXr2aUzmatvayykMt41GsDK iUSpRATcnOP5vVVcn2D1wyD8Y2LJd1ZUHhc/3r9os0HEvQ7xKzU= -----END CERTIFICATE-----Generated at Wed May 13 04:00:06 2026 by rpki-client