$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: epgx+5iYL4RJ1yDClbdP7gX+frVs+hNqPthW/Nkcn3E= Subject key identifier: 15:54:93:57:9A:58:EA:5C:61:46:01:CB:86:23:54:8B:29:85:5A:72 Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 4810B74D5DB8AFAF9F11A31B0B0B182B82FF8834 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:14 +0000 Manifest this update: Tue 12 May 2026 20:53:14 +0000 Manifest next update: Wed 13 May 2026 21:01:14 +0000 Files and hashes: 1: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 2: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) 3: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) 4: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) 5: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: y8mLaP60TCJKlIi7fUJ7NcVvj9SKYoCYe3h/G1iE7MU=) 6: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) 7: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:10:b7:4d:5d:b8:af:af:9f:11:a3:1b:0b:0b:18:2b:82:ff:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: May 12 20:53:14 2026 GMT Not After : May 13 21:01:14 2026 GMT Subject: CN=155493579A58EA5C614601CB8623548B29855A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:66:84:26:80:b8:df:11:bc:80:59:87:60: e3:c8:49:0b:f0:04:42:25:af:73:8b:db:05:11:88: 5b:4a:34:4b:db:a5:e8:27:e0:fe:d7:58:c3:d1:91: e7:ad:b8:b5:21:71:6e:95:f8:e9:ab:bc:c9:7d:54: 3c:c7:2d:a1:ee:0f:e7:40:91:a3:18:e3:0a:af:a2: 09:b1:b3:6d:37:11:ec:91:d6:24:89:9e:d0:b6:97: 3a:f0:cd:c3:08:7c:65:8f:74:14:65:d4:72:d5:01: 1e:74:19:50:59:1e:c7:99:25:44:50:3d:2a:79:96: e3:d2:54:68:7a:e6:12:6a:bc:d2:c2:e8:0b:8b:a4: 50:d4:9b:48:eb:2f:10:ab:cf:a1:53:0f:c3:81:81: 4c:35:5c:c6:58:bf:65:cf:2f:c3:a3:8a:c2:cb:21: 61:8e:02:da:0e:fb:b7:d4:10:21:29:78:79:f5:c9: 1e:86:9b:76:96:99:c6:72:fd:c3:76:24:a0:4b:82: 51:bd:f5:28:df:ca:2f:94:9b:5d:29:8b:6a:f8:64: 60:3b:31:59:83:a1:21:1f:8d:e0:d9:30:d9:81:52: 12:0f:eb:5a:93:db:4c:4a:61:93:ef:4c:f6:ea:f3: 7b:c4:d1:52:f2:de:62:86:52:e9:17:5e:b4:5c:b3: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:93:57:9A:58:EA:5C:61:46:01:CB:86:23:54:8B:29:85:5A:72 X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:93:32:7d:bb:ad:7b:77:26:74:64:7d:9f:22:ea:4d:c8:a6: cc:c9:e3:23:41:cd:64:68:93:3c:33:d1:ab:45:48:82:ae:6e: cc:b9:c3:43:05:81:cc:47:df:8e:63:88:fc:ae:88:2e:57:dc: ab:15:3a:b9:12:21:70:31:1f:5a:7b:de:02:28:43:66:8c:4c: a8:d5:b3:a9:87:ca:fc:a3:6a:26:4d:ea:29:d3:8d:9b:59:23: b9:0e:e4:c1:22:2f:13:0f:c4:62:b7:fc:2b:74:09:53:dc:5b: 81:8e:2e:89:68:24:58:29:9a:c1:14:e1:0b:de:48:28:57:4f: ca:c4:90:ec:97:89:e7:85:fd:f9:38:51:60:f7:7a:28:17:df: 59:ff:65:d8:ae:24:c3:d7:9f:e5:6e:1e:43:21:ee:5a:e9:a5: 8b:e3:51:2e:34:aa:2a:6d:de:04:71:d3:4a:fc:55:8d:69:b3: b2:85:09:d5:67:0e:e7:9b:52:c1:6a:f0:4e:0f:75:e6:1f:bd: f9:3d:31:cb:06:5d:b1:86:10:b3:c7:1c:9e:8d:ec:b2:7f:44: ec:46:35:78:42:7e:9b:b9:79:34:2a:4f:77:8f:27:1f:f6:f7: 2e:e4:72:66:75:15:40:92:c8:a3:aa:1f:ec:75:92:b7:0c:f4: 5a:bb:04:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBC3TV24r6+fEaMbCwsYK4L/iDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA1MTIyMDUzMTRaFw0yNjA1MTMyMTAxMTRaMDMxMTAvBgNV BAMTKDE1NTQ5MzU3OUE1OEVBNUM2MTQ2MDFDQjg2MjM1NDhCMjk4NTVBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqGaEJoC43xG8gFmHYOPISQvw BEIlr3OL2wURiFtKNEvbpegn4P7XWMPRkeetuLUhcW6V+OmrvMl9VDzHLaHuD+dA kaMY4wqvogmxs203EeyR1iSJntC2lzrwzcMIfGWPdBRl1HLVAR50GVBZHseZJURQ PSp5luPSVGh65hJqvNLC6AuLpFDUm0jrLxCrz6FTD8OBgUw1XMZYv2XPL8OjisLL IWGOAtoO+7fUECEpeHn1yR6Gm3aWmcZy/cN2JKBLglG99Sjfyi+Um10pi2r4ZGA7 MVmDoSEfjeDZMNmBUhIP61qT20xKYZPvTPbq83vE0VLy3mKGUukXXrRcs3rrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVSTV5pY6lxhRgHLhiNUiymFWnIwHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSTMn27rXt3JnRkfZ8i6k3IpszJ4yNBzWRo kzwz0atFSIKubsy5w0MFgcxH345jiPyuiC5X3KsVOrkSIXAxH1p73gIoQ2aMTKjV s6mHyvyjaiZN6inTjZtZI7kO5MEiLxMPxGK3/Ct0CVPcW4GOLoloJFgpmsEU4Qve SChXT8rEkOyXieeF/fk4UWD3eigX31n/ZdiuJMPXn+VuHkMh7lrppYvjUS40qipt 3gRx00r8VY1ps7KFCdVnDuebUsFq8E4PdeYfvfk9McsGXbGGELPHHJ6N7LJ/ROxG NXhCfpu5eTQqT3ePJx/29y7kcmZ1FUCSyKOqH+x1krcM9Fq7BGY= -----END CERTIFICATE-----Generated at Wed May 13 02:47:59 2026 by rpki-client