$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft File: C17D911AD672A9E8EF418B68655CA512262D505A.mft (raw, json) Hash identifier: BeuAughALmC24K+EDOe10KJk/P6jTKKqMlh+8rS25mQ= Subject key identifier: 30:92:C9:C4:66:25:27:12:4F:A0:66:25:6D:CF:1C:90:F9:D2:8F:05 Authority key identifier: C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A Certificate issuer: /CN=C17D911AD672A9E8EF418B68655CA512262D505A Certificate serial: E73A3A7E8BA9C5E3017012E745A5E2F9E4AF71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:36:30 +0000 Manifest this update: Thu 24 Sep 2026 12:31:30 +0000 Manifest next update: Fri 25 Sep 2026 12:54:30 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: 0+S90gnBbogSaKTlt2isB6tdizuU0JZG2EtWgwTn2ys=) 2: C17D911AD672A9E8EF418B68655CA512262D505A.crl (hash: 2IugI7CSzbXx2c4gUgjXCZ0XlhxHrHrtmU0dqsUrjck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e7:3a:3a:7e:8b:a9:c5:e3:01:70:12:e7:45:a5:e2:f9:e4:af:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C17D911AD672A9E8EF418B68655CA512262D505A Validity Not Before: Sep 24 12:31:30 2026 GMT Not After : Sep 25 12:54:30 2026 GMT Subject: CN=3092C9C4662527124FA066256DCF1C90F9D28F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:a0:30:98:2f:49:6a:01:46:51:17:11:79: 58:79:3a:64:88:6a:f9:bb:09:e0:39:21:19:1e:58: ce:b3:9b:38:55:59:5a:2c:fd:be:5f:a4:53:48:99: a2:a6:77:1c:c8:69:00:1e:a8:20:10:a5:81:c1:3c: 8d:ee:93:34:4f:d0:1b:c4:65:ee:70:08:41:43:81: 10:00:1b:6f:67:7e:c3:b8:4d:12:79:7e:3b:c8:6b: b0:2d:43:6f:71:ce:c9:17:ba:27:20:25:5c:40:1a: 2c:4e:6a:1f:da:79:70:90:fd:3a:26:c7:f2:74:44: 59:b8:99:29:02:89:dc:5e:d3:56:7e:af:be:a9:0b: c3:14:2d:c6:bc:21:0f:ae:5a:66:c1:89:06:0e:0d: de:16:77:98:bd:c7:07:42:60:42:1b:94:d7:9e:5c: a3:9f:72:45:50:06:e8:f2:f9:02:4b:88:ac:e8:06: 82:ce:a3:8d:cb:38:36:00:6d:ad:1e:e5:da:f2:a7: 31:10:50:31:65:00:82:22:40:7c:62:27:49:72:41: c4:f5:22:67:ac:72:ef:6f:1c:89:ff:3a:3a:29:fa: 7d:57:49:81:77:18:b4:48:05:1b:8d:2c:f7:09:18: 65:05:8f:a0:b4:e9:79:b3:ad:f5:41:60:ac:25:81: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:C9:C4:66:25:27:12:4F:A0:66:25:6D:CF:1C:90:F9:D2:8F:05 X509v3 Authority Key Identifier: keyid:C1:7D:91:1A:D6:72:A9:E8:EF:41:8B:68:65:5C:A5:12:26:2D:50:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C17D911AD672A9E8EF418B68655CA512262D505A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/C17D911AD672A9E8EF418B68655CA512262D505A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3d:e1:b7:d7:4c:35:91:ac:71:37:78:13:13:7a:04:56:c1: 0a:15:e8:37:9f:81:df:9c:58:72:08:ae:ea:6a:85:e1:a9:70: 69:f0:1c:7f:be:aa:29:1c:f9:2e:b9:6e:bf:97:3b:67:a5:95: a4:9b:58:d0:01:4e:b7:19:ea:54:ee:52:c3:6d:6d:bc:91:6d: 4e:3a:0e:c0:f2:bb:83:7f:6f:a1:1d:6a:0e:ac:12:e8:57:f1: 4d:21:53:ed:ab:3d:18:d0:80:20:46:50:af:15:ac:dd:32:fb: 77:b5:79:70:2b:1b:03:72:2d:cd:3d:39:2d:8d:41:78:4e:88: 0b:4f:51:4b:91:2f:be:be:f3:e4:87:79:76:fb:ce:6d:ce:f5: ac:37:29:e1:08:1a:94:57:ca:85:4b:4c:01:84:c4:5c:ae:e0: 31:33:9b:48:f8:d9:d7:bc:1e:e6:68:4a:be:f7:4c:7c:e1:51: 18:bd:75:58:5b:3a:c2:d7:c7:99:d8:a9:b3:42:46:6d:59:a0: f4:25:26:0d:ae:fe:b6:e6:ee:2d:36:bf:7d:35:ad:25:b4:41: 7e:6b:39:8b:7c:ea:e6:ac:7c:67:f8:bc:f8:82:d7:56:7f:7a: b5:f8:d1:7e:14:c5:c9:e0:de:60:43:8d:83:b9:f5:67:94:ce: 39:6c:5e:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOc6On6LqcXjAXAS50Wl4vnkr3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIy NjJENTA1QTAeFw0yNjA5MjQxMjMxMzBaFw0yNjA5MjUxMjU0MzBaMDMxMTAvBgNV BAMTKDMwOTJDOUM0NjYyNTI3MTI0RkEwNjYyNTZEQ0YxQzkwRjlEMjhGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiaAwmC9JagFGURcReVh5OmSI avm7CeA5IRkeWM6zmzhVWVos/b5fpFNImaKmdxzIaQAeqCAQpYHBPI3ukzRP0BvE Ze5wCEFDgRAAG29nfsO4TRJ5fjvIa7AtQ29xzskXuicgJVxAGixOah/aeXCQ/Tom x/J0RFm4mSkCidxe01Z+r76pC8MULca8IQ+uWmbBiQYODd4Wd5i9xwdCYEIblNee XKOfckVQBujy+QJLiKzoBoLOo43LODYAba0e5drypzEQUDFlAIIiQHxiJ0lyQcT1 Imescu9vHIn/Ojop+n1XSYF3GLRIBRuNLPcJGGUFj6C06XmzrfVBYKwlgYJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJLJxGYlJxJPoGYlbc8ckPnSjwUwHwYDVR0j BBgwFoAUwX2RGtZyqejvQYtoZVylEiYtUFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U4Y2JkYzgtZDE5NS00YzdkLWIzZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFE NjcyQTlFOEVGNDE4QjY4NjU1Q0E1MTIyNjJENTA1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTdEOTExQUQ2NzJBOUU4RUY0MThCNjg2NTVDQTUxMjI2MkQ1 MDVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvQzE3RDkxMUFENjcyQTlFOEVGNDE4QjY4NjU1Q0E1 MTIyNjJENTA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk94bfXTDWRrHE3eBMTegRWwQoV6Defgd+c WHIIrupqheGpcGnwHH++qikc+S65br+XO2ellaSbWNABTrcZ6lTuUsNtbbyRbU46 DsDyu4N/b6Edag6sEuhX8U0hU+2rPRjQgCBGUK8VrN0y+3e1eXArGwNyLc09OS2N QXhOiAtPUUuRL76+8+SHeXb7zm3O9aw3KeEIGpRXyoVLTAGExFyu4DEzm0j42de8 HuZoSr73THzhURi9dVhbOsLXx5nYqbNCRm1ZoPQlJg2u/rbm7i02v301rSW0QX5r OYt86uasfGf4vPiC11Z/erX40X4Uxcng3mBDjYO59WeUzjlsXiY= -----END CERTIFICATE-----Generated at Fri Sep 25 04:45:35 2026 by rpki-client