$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft File: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft (raw, json) Hash identifier: isuB4q+O0QRSeU2O4qCqOzUVvwQOCswD8mFeQ6oeDFM= Subject key identifier: E0:E1:B4:52:62:6B:7A:58:27:FB:D3:DD:C4:98:FB:D8:0E:A2:D0:98 Authority key identifier: 17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27 Certificate issuer: /CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27 Certificate serial: 40A1857C0799760C1BC7AA1A322ADAAD055E7589 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:03:32 +0000 Manifest this update: Wed 23 Sep 2026 13:58:32 +0000 Manifest next update: Thu 24 Sep 2026 16:17:32 +0000 Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: 7DAQ/qZeFo+VjQFhi1Qi3yS2FazYT4uy2MibUL7GHjo=) 2: 17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl (hash: pp+gf6asz8jpOpn426N3DqW9j/5Fzyf8zcSehvZa4B0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a1:85:7c:07:99:76:0c:1b:c7:aa:1a:32:2a:da:ad:05:5e:75:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27 Validity Not Before: Sep 23 13:58:32 2026 GMT Not After : Sep 24 16:17:32 2026 GMT Subject: CN=E0E1B452626B7A5827FBD3DDC498FBD80EA2D098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:4a:72:00:7a:02:98:3a:3c:b8:48:d6:4c: 76:c8:d8:e7:f9:5c:11:d4:30:33:cc:d4:54:c3:60: 34:36:20:f0:43:e7:fa:32:99:db:2c:3a:de:eb:75: 75:cb:fc:5a:d9:b5:06:c0:48:c4:df:2d:95:65:d5: 2f:60:65:a2:04:8a:15:fe:7a:c2:d6:ec:a3:43:d8: 5a:c2:61:78:96:2b:e9:2a:60:1a:28:92:a4:38:c6: a5:74:6b:9c:51:e7:5b:34:c3:28:4f:7e:44:ae:fa: 15:cc:29:d7:6c:d4:4c:a6:f6:4e:1c:72:50:31:d7: 17:8d:79:81:88:12:b9:5b:c5:cc:46:a6:38:e4:a4: 09:3d:a8:d8:0a:44:fa:2d:f5:47:54:0f:82:ae:9f: 19:b9:fc:db:d2:52:8f:0f:8a:be:88:a6:26:42:b3: 65:2d:5a:25:b0:ca:0e:b9:c2:45:ec:ae:a3:43:e2: 96:b2:6b:c8:3f:ea:06:a9:34:48:c5:99:22:d0:2c: b4:58:2c:ad:6c:d2:f7:cd:5e:ab:77:3f:7b:2a:3e: 9a:4c:b0:6e:48:b6:5f:79:09:51:1b:e8:27:60:84: 4e:95:75:85:ca:a3:65:8a:73:c1:c4:e6:a3:34:2b: 1f:b2:ec:fd:dd:14:a1:66:b7:0c:df:81:7b:e3:3b: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:B4:52:62:6B:7A:58:27:FB:D3:DD:C4:98:FB:D8:0E:A2:D0:98 X509v3 Authority Key Identifier: keyid:17:F1:2F:4C:F1:6D:C1:B1:8D:B7:69:4C:B3:44:1C:8B:80:E0:AC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/17F12F4CF16DC1B18DB7694CB3441C8B80E0AC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:80:1f:ec:c7:69:72:53:58:00:39:7f:16:05:53:04:6c:08: 7a:a8:e8:9b:09:ec:f9:a1:73:9c:24:52:3f:b2:67:26:50:30: b6:68:17:df:61:c9:fb:f8:7b:92:5b:33:5f:74:cc:f0:ea:e0: 11:d3:14:28:f4:d2:c6:40:e3:bd:f0:2b:ec:de:c2:29:31:03: ce:33:5d:16:be:f2:71:15:92:b7:5b:ee:54:bc:92:60:57:db: f6:27:a7:82:f5:ca:4a:e5:a7:ae:7a:c7:7e:70:e3:39:88:31: 1c:c3:83:78:dd:aa:3f:dd:da:a2:8b:c1:4f:cd:14:7c:06:0f: ac:c8:3f:db:cc:e1:e4:26:cc:6b:4d:9f:13:1e:7b:4d:be:ad: 2b:13:c2:5e:f9:04:db:32:77:45:a1:b8:83:78:09:05:43:9e: 5e:68:83:10:95:e8:5f:71:b1:2f:9a:f3:98:09:60:26:1b:f2: 90:bd:45:e4:e7:af:03:a1:8b:51:1f:dc:b5:23:f7:ac:35:a9: d1:2d:ae:82:7f:ba:f9:03:7b:9e:65:0d:a4:ef:a9:c5:db:d1: cf:7e:61:7e:2d:12:15:2d:7a:5c:a1:39:4a:f3:bc:c2:c2:46: d8:ad:ec:46:0b:65:c9:99:69:15:07:bf:69:12:06:31:7b:63: 3d:33:4f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKGFfAeZdgwbx6oaMirarQVedYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdGMTJGNENGMTZEQzFCMThEQjc2OTRDQjM0NDFDOEI4 MEUwQUMyNzAeFw0yNjA5MjMxMzU4MzJaFw0yNjA5MjQxNjE3MzJaMDMxMTAvBgNV BAMTKEUwRTFCNDUyNjI2QjdBNTgyN0ZCRDNEREM0OThGQkQ4MEVBMkQwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmx0pyAHoCmDo8uEjWTHbI2Of5 XBHUMDPM1FTDYDQ2IPBD5/oymdssOt7rdXXL/FrZtQbASMTfLZVl1S9gZaIEihX+ esLW7KND2FrCYXiWK+kqYBookqQ4xqV0a5xR51s0wyhPfkSu+hXMKdds1Eym9k4c clAx1xeNeYGIErlbxcxGpjjkpAk9qNgKRPot9UdUD4Kunxm5/NvSUo8Pir6IpiZC s2UtWiWwyg65wkXsrqND4paya8g/6gapNEjFmSLQLLRYLK1s0vfNXqt3P3sqPppM sG5Itl95CVEb6CdghE6VdYXKo2WKc8HE5qM0Kx+y7P3dFKFmtwzfgXvjO7IDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OG0UmJrelgn+9PdxJj72A6i0JgwHwYDVR0j BBgwFoAUF/EvTPFtwbGNt2lMs0Qci4DgrCcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZDc2MjctNDdkNy00ZmQwLWFlMGYtNjNiODczZmUyYzg4LzAvMTdGMTJGNENG MTZEQzFCMThEQjc2OTRDQjM0NDFDOEI4MEUwQUMyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xN0YxMkY0Q0YxNkRDMUIxOERCNzY5NENCMzQ0MUM4QjgwRTBB QzI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvMTdGMTJGNENGMTZEQzFCMThEQjc2OTRDQjM0NDFD OEI4MEUwQUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiAH+zHaXJTWAA5fxYFUwRsCHqo6JsJ7Pmh c5wkUj+yZyZQMLZoF99hyfv4e5JbM190zPDq4BHTFCj00sZA473wK+zewikxA84z XRa+8nEVkrdb7lS8kmBX2/Ynp4L1ykrlp656x35w4zmIMRzDg3jdqj/d2qKLwU/N FHwGD6zIP9vM4eQmzGtNnxMee02+rSsTwl75BNsyd0WhuIN4CQVDnl5ogxCV6F9x sS+a85gJYCYb8pC9ReTnrwOhi1Ef3LUj96w1qdEtroJ/uvkDe55lDaTvqcXb0c9+ YX4tEhUtelyhOUrzvMLCRtit7EYLZcmZaRUHv2kSBjF7Yz0zT90= -----END CERTIFICATE-----Generated at Thu Sep 24 02:19:58 2026 by rpki-client