$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: 3eShGH2F+VzoS6YWMuutluejBVe202XLdD2FuJHb3KA= Subject key identifier: 4D:34:0F:63:2B:90:B2:9B:74:D4:5E:F2:89:C5:25:DC:86:CE:47:FC Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 2CD2F3ADA2D89616A106F75163EE47267110D1F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:23 +0000 Manifest this update: Fri 24 Jul 2026 03:18:23 +0000 Manifest next update: Sat 25 Jul 2026 04:55:23 +0000 Files and hashes: 1: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) 2: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) 4: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: II4B4Zx/n4CHBkF3WEg66yZpW6J/9mq5OkbUCAjkCFk=) 5: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) 6: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 7: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d2:f3:ad:a2:d8:96:16:a1:06:f7:51:63:ee:47:26:71:10:d1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: Jul 24 03:18:23 2026 GMT Not After : Jul 25 04:55:23 2026 GMT Subject: CN=4D340F632B90B29B74D45EF289C525DC86CE47FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:e6:8d:47:77:f4:5b:49:70:29:e1:fb:2a: cc:c5:62:77:b9:8a:c3:64:f3:49:6c:bb:2b:c7:b5: 19:92:25:cd:48:9b:d4:7d:7d:bc:23:1c:b9:9c:21: 42:7a:bb:01:13:87:40:ec:bd:31:c0:da:c4:84:b7: 96:6a:bb:1f:6b:51:8d:d3:2f:ae:6f:3c:5a:d7:75: 20:e7:8c:dc:5a:e4:c1:25:9e:aa:60:87:11:93:c3: d7:2d:48:5a:e1:42:3b:6e:ca:08:13:bf:b7:57:0e: 30:a7:9e:50:70:62:a1:3a:c8:7b:81:58:bb:91:5b: 52:31:39:40:0e:2d:46:a3:5b:c1:55:f9:db:7b:fb: 5e:c6:a1:58:7b:06:70:62:24:8c:db:aa:ea:77:44: 7e:51:13:1b:9c:43:4d:47:73:5b:cf:41:66:ce:3a: d5:e7:25:2a:36:d1:0d:ea:5c:da:a0:84:40:33:6c: e7:13:c1:75:89:cc:b7:4a:0b:1c:17:db:b4:a5:25: 83:bd:ac:1c:d0:03:e2:ff:e1:c4:d9:3d:c8:38:d1: 82:84:a4:68:65:45:f8:d0:f9:97:c6:21:b0:e3:28: b1:d6:e7:df:f2:09:5e:14:48:c2:a2:63:0d:9c:00: 64:42:39:fa:e9:01:34:55:f3:85:d0:df:26:37:43: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:34:0F:63:2B:90:B2:9B:74:D4:5E:F2:89:C5:25:DC:86:CE:47:FC X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d3:a0:32:62:a1:35:54:1c:d9:43:d4:b2:62:2c:a1:0a:0a: df:db:07:61:bc:ee:42:93:d3:3a:0c:d4:ad:1a:31:5d:d2:d3: 46:fc:90:af:46:17:65:cd:28:7b:a4:e3:b5:30:29:da:ae:cc: 00:43:34:1d:a5:c9:96:a3:cf:e6:3d:aa:ff:d5:75:dc:eb:a6: 6a:1d:87:85:7f:43:c6:e2:cd:d0:8b:2e:8b:1d:71:35:78:8b: 51:83:fc:6a:e6:2c:b4:cc:5e:96:c0:07:7f:d5:5a:22:a4:cc: 5e:05:0b:ee:c4:81:31:b8:89:92:4b:64:c9:86:98:0b:a0:b9: 97:d0:fe:b5:72:91:9c:21:77:6a:3b:0f:bd:d3:56:52:07:3b: 97:8a:04:d8:ae:12:d5:76:cd:cd:fd:f0:53:d8:85:19:65:da: e1:3c:02:16:04:60:a3:5b:e0:2a:64:03:b1:f6:b4:d6:8c:f4: 86:74:49:63:91:78:a3:04:dc:60:3f:ad:38:8b:ff:27:63:83: dd:94:34:54:0b:4e:85:2c:5c:87:28:9a:62:63:c6:05:77:67: 36:35:9a:2e:97:0f:b9:ef:ad:da:84:05:da:9d:a1:52:d4:fe: 30:85:3a:4a:d3:39:1c:0a:24:ec:e3:7b:fa:86:d6:3b:ee:44: 35:ea:09:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNLzraLYlhahBvdRY+5HJnEQ0fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA3MjQwMzE4MjNaFw0yNjA3MjUwNDU1MjNaMDMxMTAvBgNV BAMTKDREMzQwRjYzMkI5MEIyOUI3NEQ0NUVGMjg5QzUyNURDODZDRTQ3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdN+aNR3f0W0lwKeH7KszFYne5 isNk80lsuyvHtRmSJc1Im9R9fbwjHLmcIUJ6uwETh0DsvTHA2sSEt5Zqux9rUY3T L65vPFrXdSDnjNxa5MElnqpghxGTw9ctSFrhQjtuyggTv7dXDjCnnlBwYqE6yHuB WLuRW1IxOUAOLUajW8FV+dt7+17GoVh7BnBiJIzbqup3RH5RExucQ01Hc1vPQWbO OtXnJSo20Q3qXNqghEAzbOcTwXWJzLdKCxwX27SlJYO9rBzQA+L/4cTZPcg40YKE pGhlRfjQ+ZfGIbDjKLHW59/yCV4USMKiYw2cAGRCOfrpATRV84XQ3yY3Q6A9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTQPYyuQspt01F7yicUl3IbOR/wwHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXToDJioTVUHNlD1LJiLKEKCt/bB2G87kKT 0zoM1K0aMV3S00b8kK9GF2XNKHuk47UwKdquzABDNB2lyZajz+Y9qv/Vddzrpmod h4V/Q8bizdCLLosdcTV4i1GD/GrmLLTMXpbAB3/VWiKkzF4FC+7EgTG4iZJLZMmG mAuguZfQ/rVykZwhd2o7D73TVlIHO5eKBNiuEtV2zc398FPYhRll2uE8AhYEYKNb 4CpkA7H2tNaM9IZ0SWOReKME3GA/rTiL/ydjg92UNFQLToUsXIcommJjxgV3ZzY1 mi6XD7nvrdqEBdqdoVLU/jCFOkrTORwKJOzje/qG1jvuRDXqCec= -----END CERTIFICATE-----Generated at Fri Jul 24 11:22:26 2026 by rpki-client