$ rpki-client -vvf rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft File: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft (raw, json) Hash identifier: Hh5L6jARLD+EL8NV2tGOyvzqIpLonyLAH0OT27QdY08= Subject key identifier: 9B:C0:FA:A0:0A:EF:52:14:4C:03:39:BE:5A:0F:FB:27:43:CB:9E:85 Authority key identifier: 11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 Certificate issuer: /CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Certificate serial: 17A218B97CF8A376163891897ECE5C284986FBDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:51 +0000 Manifest this update: Tue 12 May 2026 22:25:51 +0000 Manifest next update: Wed 13 May 2026 23:10:51 +0000 Files and hashes: 1: 3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (hash: PhJmneFuDWlTXWctD2qR5ZAYy5+ja872YXywtoKMqcg=) 2: 3130332e3133302e362e302f32342d3234203d3e20313338303933.roa (hash: 9glYBsYr2QWSfiwb0WHAYJMulo/TgpJ7re/5Z5a0XvI=) 3: 117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl (hash: zFhANkENiCK5q2L7o/iopqAFT42OorrrSXMKxGW/sAI=) 4: 3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (hash: TTCI25wdl8MT1j/k3SgrRG2ioIhmgTNO/KKrY8EcLOs=) 5: 3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (hash: uXphZOgs1UxDr6rlg7GEi/R0AmZWeoVGQk1F8ZBelwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a2:18:b9:7c:f8:a3:76:16:38:91:89:7e:ce:5c:28:49:86:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117EDB2C7E357D66945E9D85AB0F26462E08B3F7 Validity Not Before: May 12 22:25:51 2026 GMT Not After : May 13 23:10:51 2026 GMT Subject: CN=9BC0FAA00AEF52144C0339BE5A0FFB2743CB9E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:d7:ae:ea:95:86:13:61:d2:f3:d9:53:f5: 01:33:4b:90:01:95:c0:9e:04:a6:45:a3:cd:06:a0: 6c:e7:88:d1:5b:48:9b:0a:d1:c8:7e:57:18:46:97: 28:80:3e:4b:27:0a:01:74:fa:fe:bb:e4:54:c1:54: 98:46:72:ba:77:39:2c:64:31:ab:01:c0:ea:33:bf: 4c:49:2a:ef:4d:e6:f1:05:c2:c8:b7:48:f9:85:71: 40:e0:3f:89:d3:2a:ae:48:14:c5:7d:43:7e:fd:be: 1f:a3:e6:16:d7:a4:ba:36:db:c0:b2:47:23:8f:41: 26:2c:d1:a0:c2:87:b5:3c:22:c8:1b:e6:d7:79:31: f1:18:3d:5b:e1:aa:19:0d:5f:a7:f0:a8:46:c9:48: 1a:4e:f0:6b:b1:c5:69:8a:ce:82:c6:82:da:0b:7f: e0:58:2c:5e:76:6a:5a:82:c3:3f:97:9d:2a:bd:86: 49:9a:ee:00:64:a0:42:e7:f6:b5:a8:f2:f4:9f:c0: 73:27:90:03:37:ac:1a:7b:1c:3a:57:54:22:b6:5b: 04:88:a7:08:7a:33:33:9d:dd:f8:b1:35:01:fc:b9: fb:0a:90:08:1a:e2:24:0a:12:05:9e:f4:5f:7b:3a: d8:6c:2e:ca:e4:b5:e3:82:c6:22:98:07:97:20:a1: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:FA:A0:0A:EF:52:14:4C:03:39:BE:5A:0F:FB:27:43:CB:9E:85 X509v3 Authority Key Identifier: keyid:11:7E:DB:2C:7E:35:7D:66:94:5E:9D:85:AB:0F:26:46:2E:08:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/117EDB2C7E357D66945E9D85AB0F26462E08B3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:31:45:e3:63:44:f9:1c:87:6a:a5:9c:59:4f:83:06:40:2c: d2:4d:11:7a:d4:e1:e0:f5:45:7b:6d:cd:75:14:a9:9e:ba:04: 94:61:1b:6a:96:a0:ba:a7:16:29:dc:18:a8:ee:78:93:a4:2e: 12:b2:29:eb:d3:52:a0:b2:23:0f:1e:b1:69:aa:42:e0:61:1e: 9d:81:78:83:17:c7:c3:d5:80:79:c9:46:f6:63:f5:ec:7b:41: 50:65:b4:e9:24:6d:44:f7:71:37:c0:ab:c3:ac:e8:a0:69:a2: cb:7f:42:65:ea:30:2d:bb:d8:b5:22:0e:0a:1e:a4:f7:c7:46: 9c:88:77:fd:7d:16:62:fa:39:04:e3:2b:54:c0:90:56:e3:4d: 22:8d:23:1a:7d:42:3e:f7:c5:39:72:bc:34:f5:48:4f:22:a7: 96:99:f6:d4:77:49:2a:e4:90:c4:2b:87:b1:1e:fc:ce:93:01: 49:0a:7e:ee:ec:c8:2a:00:0f:2e:34:53:22:73:ce:8d:0d:c3: 83:1b:2a:1d:d6:70:87:f7:c9:d9:be:7d:9d:9f:b4:91:c0:c5: 4c:65:a2:24:a4:20:6b:c7:dd:2a:10:3a:81:4d:1a:b0:3f:31: cf:a0:d0:50:80:77:9d:63:51:c4:4c:14:d0:14:bb:59:fc:9e: bc:d7:7c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6IYuXz4o3YWOJGJfs5cKEmG+9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYy RTA4QjNGNzAeFw0yNjA1MTIyMjI1NTFaFw0yNjA1MTMyMzEwNTFaMDMxMTAvBgNV BAMTKDlCQzBGQUEwMEFFRjUyMTQ0QzAzMzlCRTVBMEZGQjI3NDNDQjlFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVdeu6pWGE2HS89lT9QEzS5AB lcCeBKZFo80GoGzniNFbSJsK0ch+VxhGlyiAPksnCgF0+v675FTBVJhGcrp3OSxk MasBwOozv0xJKu9N5vEFwsi3SPmFcUDgP4nTKq5IFMV9Q379vh+j5hbXpLo228Cy RyOPQSYs0aDCh7U8Isgb5td5MfEYPVvhqhkNX6fwqEbJSBpO8GuxxWmKzoLGgtoL f+BYLF52alqCwz+XnSq9hkma7gBkoELn9rWo8vSfwHMnkAM3rBp7HDpXVCK2WwSI pwh6MzOd3fixNQH8ufsKkAga4iQKEgWe9F97OthsLsrkteOCxiKYB5cgoY2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm8D6oArvUhRMAzm+Wg/7J0PLnoUwHwYDVR0j BBgwFoAUEX7bLH41fWaUXp2Fqw8mRi4Is/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5ZTA2MzYtMWZlMi00ZDNiLThjMzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3 RTM1N0Q2Njk0NUU5RDg1QUIwRjI2NDYyRTA4QjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTdFREIyQzdFMzU3RDY2OTQ1RTlEODVBQjBGMjY0NjJFMDhC M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5ZTA2MzYtMWZlMi00ZDNiLThj MzgtMmRiYjk5MTRlOTEzLzAvMTE3RURCMkM3RTM1N0Q2Njk0NUU5RDg1QUIwRjI2 NDYyRTA4QjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgxReNjRPkch2qlnFlPgwZALNJNEXrU4eD1 RXttzXUUqZ66BJRhG2qWoLqnFincGKjueJOkLhKyKevTUqCyIw8esWmqQuBhHp2B eIMXx8PVgHnJRvZj9ex7QVBltOkkbUT3cTfAq8Os6KBpost/QmXqMC272LUiDgoe pPfHRpyId/19FmL6OQTjK1TAkFbjTSKNIxp9Qj73xTlyvDT1SE8ip5aZ9tR3SSrk kMQrh7Ee/M6TAUkKfu7syCoADy40UyJzzo0Nw4MbKh3WcIf3ydm+fZ2ftJHAxUxl oiSkIGvH3SoQOoFNGrA/Mc+g0FCAd51jUcRMFNAUu1n8nrzXfLc= -----END CERTIFICATE-----Generated at Wed May 13 01:11:20 2026 by rpki-client