$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: Da5Zs5/gQZWo/tvrDu3hMdwY76IV0iLAI3pgkNN2x1k= Subject key identifier: 67:A0:14:0E:B0:1E:62:50:E6:AA:94:66:4B:E6:FE:B3:05:0E:67:32 Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 5E57FC1343BBDDB74C91A620CF468C604F913F90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:37:56 +0000 Manifest this update: Wed 23 Sep 2026 13:32:56 +0000 Manifest next update: Thu 24 Sep 2026 14:27:56 +0000 Files and hashes: 1: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: eXoCHrt1i9TmhJAY8DMzBAF5hY7PC13/sheCzZIm04E=) 2: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) 3: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) 4: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) 5: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:57:fc:13:43:bb:dd:b7:4c:91:a6:20:cf:46:8c:60:4f:91:3f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: Sep 23 13:32:56 2026 GMT Not After : Sep 24 14:27:56 2026 GMT Subject: CN=67A0140EB01E6250E6AA94664BE6FEB3050E6732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:fd:3b:7c:85:9d:c2:45:41:56:19:f2:d5: ec:12:ef:95:ea:2c:a8:9f:c0:68:2d:c1:38:3b:36: 48:dd:a3:63:bd:1c:bf:08:57:92:ac:1f:7e:96:02: 23:f9:c0:eb:cd:77:19:51:30:8e:db:0e:d2:31:3e: f7:f3:be:14:7d:99:6c:04:57:83:8d:7b:57:f6:18: 92:46:f3:cd:9e:57:6d:e8:62:03:78:14:c2:68:66: d7:2e:73:26:be:1c:fe:21:c0:c8:ac:d4:d1:7b:8a: ef:84:6e:ce:09:74:b7:c8:48:b0:5e:41:e2:5f:21: 4d:7c:95:b6:11:21:a2:3f:d2:4b:d0:69:c5:e5:6b: a3:65:86:96:4d:41:0a:96:6d:be:bd:5c:90:16:b4: a3:bc:ce:bd:44:f8:db:15:ef:6a:e1:f1:b8:4b:a3: f5:65:33:74:d3:5d:9b:25:b7:da:87:b1:17:7c:3a: 45:6a:d0:c5:af:d5:62:ef:b6:51:89:53:6b:95:5e: e5:62:61:f3:75:89:b9:b2:74:25:dd:a6:38:dd:a6: de:02:e5:87:1d:2f:66:38:94:83:ea:f7:29:dc:e4: ea:91:45:f5:23:c2:ec:03:9e:1a:59:8f:8c:19:07: e4:2f:74:2e:e6:69:e4:87:cf:bb:da:87:f0:b9:c5: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A0:14:0E:B0:1E:62:50:E6:AA:94:66:4B:E6:FE:B3:05:0E:67:32 X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fc:81:0e:1b:24:95:a9:38:88:b6:ec:ac:75:a7:8f:67:71: ed:d2:2c:63:89:12:ff:19:42:d4:1f:bb:88:38:00:c4:fa:f9: 31:6c:bd:af:97:38:0b:97:e0:8d:74:30:af:e8:74:df:2c:d8: 51:69:7f:1d:eb:a7:8f:a9:0b:10:22:8e:07:c1:62:39:31:8f: c8:2f:b4:d8:75:0a:bf:e9:cc:d0:40:9b:d5:b1:94:a0:92:e1: d8:51:63:15:5f:fb:db:a2:c3:cf:4e:32:21:4e:9d:74:a9:5d: 79:1a:22:4c:d6:d2:81:f4:2c:d6:1c:22:ff:d5:bf:9e:fb:b5: 8c:84:2e:f1:08:df:9a:36:c3:4e:b3:47:54:78:dc:cd:e3:22: 68:46:3f:fe:a2:54:38:32:0c:11:b6:e4:33:b5:7c:32:06:4f: 04:b9:47:eb:f9:1e:0d:8b:81:fb:38:2a:15:6c:38:cf:17:56: 04:bb:9e:6d:5d:98:60:ed:c7:0e:cf:fe:4f:57:8a:30:16:88: 42:ee:1b:e2:d4:32:f7:29:1d:7b:fa:50:76:da:15:55:b8:d7: f8:c0:95:7f:85:64:97:f0:5b:f4:9f:be:8b:6e:60:49:24:97: ff:a2:bc:d0:77:27:7d:21:41:23:2a:bf:14:6f:b7:88:6c:0f: 73:9e:a7:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlf8E0O73bdMkaYgz0aMYE+RP5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjA5MjMxMzMyNTZaFw0yNjA5MjQxNDI3NTZaMDMxMTAvBgNV BAMTKDY3QTAxNDBFQjAxRTYyNTBFNkFBOTQ2NjRCRTZGRUIzMDUwRTY3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQP07fIWdwkVBVhny1ewS75Xq LKifwGgtwTg7Nkjdo2O9HL8IV5KsH36WAiP5wOvNdxlRMI7bDtIxPvfzvhR9mWwE V4ONe1f2GJJG882eV23oYgN4FMJoZtcucya+HP4hwMis1NF7iu+Ebs4JdLfISLBe QeJfIU18lbYRIaI/0kvQacXla6NlhpZNQQqWbb69XJAWtKO8zr1E+NsV72rh8bhL o/VlM3TTXZslt9qHsRd8OkVq0MWv1WLvtlGJU2uVXuViYfN1ibmydCXdpjjdpt4C 5YcdL2Y4lIPq9ync5OqRRfUjwuwDnhpZj4wZB+QvdC7maeSHz7vah/C5xRtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ6AUDrAeYlDmqpRmS+b+swUOZzIwHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr8gQ4bJJWpOIi27Kx1p49nce3SLGOJEv8Z QtQfu4g4AMT6+TFsva+XOAuX4I10MK/odN8s2FFpfx3rp4+pCxAijgfBYjkxj8gv tNh1Cr/pzNBAm9WxlKCS4dhRYxVf+9uiw89OMiFOnXSpXXkaIkzW0oH0LNYcIv/V v577tYyELvEI35o2w06zR1R43M3jImhGP/6iVDgyDBG25DO1fDIGTwS5R+v5Hg2L gfs4KhVsOM8XVgS7nm1dmGDtxw7P/k9XijAWiELuG+LUMvcpHXv6UHbaFVW41/jA lX+FZJfwW/SfvotuYEkkl/+ivNB3J30hQSMqvxRvt4hsD3Oep0A= -----END CERTIFICATE-----Generated at Thu Sep 24 06:03:23 2026 by rpki-client