$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft File: B17A330780AFD953D1D3338525F941E14E1FC919.mft (raw, json) Hash identifier: fSx7MKiMwdLj17G6HAKzHGxy0HLm2cx7l9gC+IruaE4= Subject key identifier: A2:FE:9B:7A:9F:59:5F:C5:B8:CB:B8:E9:1F:DF:1E:93:0D:E2:9D:D5 Authority key identifier: B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 Certificate issuer: /CN=B17A330780AFD953D1D3338525F941E14E1FC919 Certificate serial: 4C81C30D048522628BADD3F98B3E26C19B7E376C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 19:38:22 +0000 Manifest this update: Sun 27 Sep 2026 19:33:22 +0000 Manifest next update: Mon 28 Sep 2026 21:20:22 +0000 Files and hashes: 1: B17A330780AFD953D1D3338525F941E14E1FC919.crl (hash: yFdUuy08FvLg2eXHgg2gSJoU3Z95X4bt0tXv2aEZmhE=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: USfTP+9/4GLbvvoIvIbzRlXyQT6cM8ipPFhCCz3Hhmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:81:c3:0d:04:85:22:62:8b:ad:d3:f9:8b:3e:26:c1:9b:7e:37:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B17A330780AFD953D1D3338525F941E14E1FC919 Validity Not Before: Sep 27 19:33:22 2026 GMT Not After : Sep 28 21:20:22 2026 GMT Subject: CN=A2FE9B7A9F595FC5B8CBB8E91FDF1E930DE29DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:78:2e:b9:71:1a:22:ce:e6:bf:29:5b:6f: bc:32:82:85:ec:17:38:54:52:ac:35:74:f3:38:83: b5:f3:04:f0:c7:4e:7f:3f:3d:82:0d:50:55:d8:e0: 51:de:6b:d8:95:06:03:a7:59:8b:bc:bf:cf:df:d0: 35:b1:a2:e4:96:93:f9:80:f1:00:c2:4e:86:3b:8e: d3:91:77:ec:8f:66:03:c2:34:bf:0e:ca:e6:68:1b: 69:bf:93:e9:b6:a3:9d:d0:47:18:d9:c6:59:21:07: 96:30:3b:70:dd:1d:4e:82:82:50:de:81:64:a8:ad: 58:20:4c:e6:d7:5b:96:bc:23:a0:22:75:5a:0c:74: 97:4f:cd:b1:ce:d8:ac:33:e0:3d:33:8f:a8:c1:76: fa:ba:a4:5d:cc:c6:51:fe:3a:9b:95:e0:c6:4a:42: b4:f1:27:97:60:6a:70:09:0b:8d:37:2c:d9:a3:f3: 23:75:06:52:a6:94:84:9a:41:17:f2:d4:a2:92:42: d1:fa:d1:8a:e0:72:e5:18:f9:50:0e:8e:91:39:5e: c7:62:ae:67:52:6d:df:8e:65:56:31:fa:21:f4:f1: ef:58:8b:40:11:04:12:b2:d5:43:47:4c:8c:09:4a: f1:01:5a:fa:ba:4c:8c:d6:7a:ef:e5:9c:11:62:c1: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FE:9B:7A:9F:59:5F:C5:B8:CB:B8:E9:1F:DF:1E:93:0D:E2:9D:D5 X509v3 Authority Key Identifier: keyid:B1:7A:33:07:80:AF:D9:53:D1:D3:33:85:25:F9:41:E1:4E:1F:C9:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B17A330780AFD953D1D3338525F941E14E1FC919.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/B17A330780AFD953D1D3338525F941E14E1FC919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:01:ab:ba:2c:16:9f:f1:36:65:52:9e:14:96:f1:d6:c9:eb: 61:dc:15:b8:42:8b:79:b1:0d:dd:12:09:a6:5c:5b:8c:aa:a6: a4:41:c4:92:7d:3b:91:24:f4:48:51:ff:c0:83:3e:16:33:b6: cb:4d:73:e2:f6:bc:19:4c:26:38:3d:41:1d:3d:50:70:d8:4f: b4:2a:d9:b2:0a:0a:0f:a6:3c:19:3f:b1:f4:84:62:e5:1e:de: ac:95:24:cb:0b:80:af:8e:69:29:e1:05:be:de:27:ad:59:83: 44:31:5b:9a:33:87:ed:78:bc:11:15:94:66:f1:61:d7:3b:89: 8a:4c:35:81:54:2b:dc:d0:1a:e2:58:be:d1:e2:6f:fe:b3:2c: 41:47:9b:54:06:60:60:01:57:d9:2d:13:bd:17:b9:60:ae:74: bf:97:41:d0:e2:40:c9:82:dd:2b:27:57:f6:a3:35:3c:02:ea: 92:57:d8:d4:37:ee:b9:eb:96:4d:a3:f5:ea:51:4e:27:8b:05: 03:ae:50:60:37:2d:f1:32:96:94:bc:9d:e1:99:ea:c9:81:9c: ff:45:ed:c2:c9:44:e1:68:68:a0:7f:29:21:60:2f:3d:2d:5c: de:6f:26:94:ca:db:1c:61:27:19:bd:86:c3:3e:b2:c2:98:f1: eb:8d:3b:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIHDDQSFImKLrdP5iz4mwZt+N2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0 RTFGQzkxOTAeFw0yNjA5MjcxOTMzMjJaFw0yNjA5MjgyMTIwMjJaMDMxMTAvBgNV BAMTKEEyRkU5QjdBOUY1OTVGQzVCOENCQjhFOTFGREYxRTkzMERFMjlERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpnguuXEaIs7mvylbb7wygoXs FzhUUqw1dPM4g7XzBPDHTn8/PYINUFXY4FHea9iVBgOnWYu8v8/f0DWxouSWk/mA 8QDCToY7jtORd+yPZgPCNL8OyuZoG2m/k+m2o53QRxjZxlkhB5YwO3DdHU6CglDe gWSorVggTObXW5a8I6AidVoMdJdPzbHO2Kwz4D0zj6jBdvq6pF3MxlH+OpuV4MZK QrTxJ5dganAJC403LNmj8yN1BlKmlISaQRfy1KKSQtH60YrgcuUY+VAOjpE5Xsdi rmdSbd+OZVYx+iH08e9Yi0ARBBKy1UNHTIwJSvEBWvq6TIzWeu/lnBFiwUbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUov6bep9ZX8W4y7jpH98ekw3indUwHwYDVR0j BBgwFoAUsXozB4Cv2VPR0zOFJflB4U4fyRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYyNWI5NjgtMDkyNy00NTk0LTg4N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4 MEFGRDk1M0QxRDMzMzg1MjVGOTQxRTE0RTFGQzkxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTdBMzMwNzgwQUZEOTUzRDFEMzMzODUyNUY5NDFFMTRFMUZD OTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvQjE3QTMzMDc4MEFGRDk1M0QxRDMzMzg1MjVGOTQx RTE0RTFGQzkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgBq7osFp/xNmVSnhSW8dbJ62HcFbhCi3mx Dd0SCaZcW4yqpqRBxJJ9O5Ek9EhR/8CDPhYztstNc+L2vBlMJjg9QR09UHDYT7Qq 2bIKCg+mPBk/sfSEYuUe3qyVJMsLgK+OaSnhBb7eJ61Zg0QxW5ozh+14vBEVlGbx Ydc7iYpMNYFUK9zQGuJYvtHib/6zLEFHm1QGYGABV9ktE70XuWCudL+XQdDiQMmC 3SsnV/ajNTwC6pJX2NQ37rnrlk2j9epRTieLBQOuUGA3LfEylpS8neGZ6smBnP9F 7cLJROFoaKB/KSFgLz0tXN5vJpTK2xxhJxm9hsM+ssKY8euNO1Y= -----END CERTIFICATE-----Generated at Sun Sep 27 23:44:49 2026 by rpki-client