$ rpki-client -vvvf rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft File: 2817CA07C241F9335DFE7BF74F08903016146551.mft (raw, json) Hash identifier: iWsyXqzYFUMCkjQ4oNKbEaytPALFkUxGblih6t94vGA= Subject key identifier: 11:F0:E2:CB:97:58:C5:06:6F:00:48:A4:6C:5F:6C:3B:22:07:13:D7 Authority key identifier: 28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 Certificate issuer: /CN=2817CA07C241F9335DFE7BF74F08903016146551 Certificate serial: 70BB65D1C362D903E3322B06B0E1FD21808259EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft Manifest number: CD Signing time: Sat 03 Oct 2026 18:38:16 +0000 Manifest this update: Sat 03 Oct 2026 18:33:16 +0000 Manifest next update: Sun 04 Oct 2026 20:18:16 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: aNd3sMubki/QRY6vhkS/b1HBjD1fodR7gVyQrC+rvgs=) 2: 2817CA07C241F9335DFE7BF74F08903016146551.crl (hash: M6n/Q5+UlT1ZHnlTUrTiiBrlsmY8FSn6WLCvem38wXE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 20:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bb:65:d1:c3:62:d9:03:e3:32:2b:06:b0:e1:fd:21:80:82:59:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2817CA07C241F9335DFE7BF74F08903016146551 Validity Not Before: Oct 3 18:33:16 2026 GMT Not After : Oct 4 20:18:16 2026 GMT Subject: CN=11F0E2CB9758C5066F0048A46C5F6C3B220713D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:6d:2c:e6:cb:95:56:5f:d6:e2:ca:27:2d: c4:3b:fa:4b:c6:7a:d0:87:51:9f:65:dd:f8:d6:dc: 70:b7:ad:ca:35:10:ec:68:cd:74:b3:7c:66:ce:9f: 6a:8f:93:14:b8:68:92:9f:6e:e8:c1:3b:6c:39:83: 67:b1:34:a2:d5:a1:50:47:d1:74:b0:3a:31:83:84: 70:bb:a1:00:cc:32:86:ef:ad:7a:55:d6:a9:6f:c4: 7f:4c:f9:18:0a:72:a4:a2:ab:e8:ea:39:00:8f:14: 4c:1c:33:22:44:44:74:af:47:e0:c4:d1:7c:68:5d: f4:a5:69:04:25:cc:e3:0e:58:5e:e2:87:b9:5a:5d: a4:85:9d:90:cc:81:c7:6a:d4:ad:1c:55:7e:87:51: cf:ee:e5:f6:04:37:e7:8a:b1:aa:c1:46:a0:b1:ba: cb:bd:30:cd:09:e4:01:b0:5e:d3:42:db:c2:98:e1: 31:ed:39:f3:89:ef:30:71:57:6d:38:a7:38:57:60: c7:44:61:b4:c1:f6:b2:12:40:75:aa:40:97:3e:2f: 6f:1a:02:ef:db:a1:1a:c9:73:34:81:5d:62:ba:f9: 0b:6e:45:7a:91:8c:f9:29:42:e4:f7:f4:54:ec:f6: a2:4c:6d:ab:f4:c5:80:d7:5c:9a:c8:19:75:f5:6b: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F0:E2:CB:97:58:C5:06:6F:00:48:A4:6C:5F:6C:3B:22:07:13:D7 X509v3 Authority Key Identifier: keyid:28:17:CA:07:C2:41:F9:33:5D:FE:7B:F7:4F:08:90:30:16:14:65:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2817CA07C241F9335DFE7BF74F08903016146551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/2817CA07C241F9335DFE7BF74F08903016146551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:97:e2:55:94:14:52:1e:1e:5e:63:ad:1d:36:e7:13:08:55: 60:1d:72:97:68:51:d4:42:3a:a2:05:77:f3:94:9d:75:f4:92: da:93:ae:f1:03:29:99:13:0f:16:ff:a8:3a:ea:ae:4d:5e:26: 04:ff:bc:c9:ea:7e:d2:bf:33:6a:ea:b1:62:63:31:1e:1d:62: 0f:0f:f7:3f:3a:17:4f:61:35:9c:4f:8b:69:3e:64:95:9c:8e: 23:ea:33:e7:ac:e1:ef:41:6b:ef:f4:04:72:e7:d8:69:f8:5d: 31:b7:03:32:b7:3a:a3:27:cb:96:05:0a:5e:0b:40:c0:0e:90: b9:52:c3:ea:82:68:8b:72:87:81:08:e6:71:28:17:d1:d3:ca: ee:b7:e2:59:c4:de:93:8e:30:6f:57:ed:64:47:9c:27:1e:62: 43:42:81:04:14:bc:f4:94:65:01:60:29:10:ca:92:60:c7:6d: 6f:e7:f1:32:19:9e:24:5b:e8:82:a0:36:a7:96:27:2e:0f:c1: 54:a2:4f:ae:a3:de:68:ca:a3:91:db:2f:68:d6:4a:c7:9e:35: e3:a4:09:b6:67:2a:ad:d7:6f:fc:fc:59:b5:2a:1b:34:96:0b: 1e:b8:7e:cb:5b:5e:c4:b6:27:89:47:72:11:93:ec:ce:37:3d: 5e:98:91:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLtl0cNi2QPjMisGsOH9IYCCWeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkwMzAx NjE0NjU1MTAeFw0yNjEwMDMxODMzMTZaFw0yNjEwMDQyMDE4MTZaMDMxMTAvBgNV BAMTKDExRjBFMkNCOTc1OEM1MDY2RjAwNDhBNDZDNUY2QzNCMjIwNzEzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OG0s5suVVl/W4sonLcQ7+kvG etCHUZ9l3fjW3HC3rco1EOxozXSzfGbOn2qPkxS4aJKfbujBO2w5g2exNKLVoVBH 0XSwOjGDhHC7oQDMMobvrXpV1qlvxH9M+RgKcqSiq+jqOQCPFEwcMyJERHSvR+DE 0XxoXfSlaQQlzOMOWF7ih7laXaSFnZDMgcdq1K0cVX6HUc/u5fYEN+eKsarBRqCx usu9MM0J5AGwXtNC28KY4THtOfOJ7zBxV204pzhXYMdEYbTB9rISQHWqQJc+L28a Au/boRrJczSBXWK6+QtuRXqRjPkpQuT39FTs9qJMbav0xYDXXJrIGXX1a+B7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEfDiy5dYxQZvAEikbF9sOyIHE9cwHwYDVR0j BBgwFoAUKBfKB8JB+TNd/nv3TwiQMBYUZVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzk1YzFhZTgtZDk3ZC00MDQ4LTlhN2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdD MjQxRjkzMzVERkU3QkY3NEYwODkwMzAxNjE0NjU1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODE3Q0EwN0MyNDFGOTMzNURGRTdCRjc0RjA4OTAzMDE2MTQ2 NTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvMjgxN0NBMDdDMjQxRjkzMzVERkU3QkY3NEYwODkw MzAxNjE0NjU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWX4lWUFFIeHl5jrR025xMIVWAdcpdoUdRC OqIFd/OUnXX0ktqTrvEDKZkTDxb/qDrqrk1eJgT/vMnqftK/M2rqsWJjMR4dYg8P 9z86F09hNZxPi2k+ZJWcjiPqM+es4e9Ba+/0BHLn2Gn4XTG3AzK3OqMny5YFCl4L QMAOkLlSw+qCaItyh4EI5nEoF9HTyu634lnE3pOOMG9X7WRHnCceYkNCgQQUvPSU ZQFgKRDKkmDHbW/n8TIZniRb6IKgNqeWJy4PwVSiT66j3mjKo5HbL2jWSseeNeOk CbZnKq3Xb/z8WbUqGzSWCx64fstbXsS2J4lHchGT7M43PV6YkSU= -----END CERTIFICATE-----Generated at Sun Oct 4 08:35:16 2026 by rpki-client