$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft File: 17742FC0C74368833EBF6E2F4739E40851DF22B3.mft (raw, json) Hash identifier: ZVBkVLvSCP9n+r5OXxWcOUYeRxwFjYDzgVMeLlbn89w= Subject key identifier: DD:47:25:42:A7:A9:5E:33:EA:24:8C:46:0E:32:3C:AD:E9:78:74:2B Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 Certificate issuer: /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Certificate serial: 331A085A16C67AD3BBD9F838AD237D4CCC9A9FC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 05:22:03 +0000 Manifest this update: Fri 25 Sep 2026 05:17:03 +0000 Manifest next update: Sat 26 Sep 2026 07:24:03 +0000 Files and hashes: 1: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: tmbAEyLE76tgjDcNY4wBMI0dIrm2Dzy73Jh2pXp1CnI=) 2: 17742FC0C74368833EBF6E2F4739E40851DF22B3.crl (hash: GxssuxecjIC+CZT/njpI9L7475OoBE9h9ZBfHvH2VdM=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: 6EOQrI9w7hileq2P5mQW6OqeyxIwHgc1DUCMquQFgz0=) 4: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: 61KCr4LZw95H2JYGRIw9ZEj1S0o3FwUcbepM7R2Azqk=) 5: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=) 6: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 9iOGSPVwdIzM06Nv1aCnsZni2w9fn0oDKaUrH+7kG4w=) 7: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: 6Gm0rr1a95ME07Ou0hVRMcp6qwVMepybNRK8xJtQ8ZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1a:08:5a:16:c6:7a:d3:bb:d9:f8:38:ad:23:7d:4c:cc:9a:9f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3 Validity Not Before: Sep 25 05:17:03 2026 GMT Not After : Sep 26 07:24:03 2026 GMT Subject: CN=DD472542A7A95E33EA248C460E323CADE978742B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:1f:50:65:05:f9:0c:01:fa:d4:17:b6:90: 71:37:00:67:e0:62:53:7e:3e:33:0f:b2:a3:29:b4: 99:4d:e0:0e:00:a7:fd:fc:62:b5:c5:79:15:66:97: a3:57:7f:b6:08:92:bc:78:34:a2:84:79:22:c4:4a: 32:1d:cc:78:03:79:54:5d:a9:21:87:17:ba:7a:2c: 36:62:80:c9:50:cb:f5:32:fb:1e:7f:c3:a9:d4:e9: af:cf:4f:49:e8:36:5a:87:98:68:c3:1d:6a:5c:58: fb:02:4a:7d:98:fb:22:c2:cf:f3:92:09:e5:6c:41: d8:27:db:75:7e:5f:eb:ab:f1:fe:22:b7:6e:e4:78: fb:12:42:9d:87:cc:2a:4b:d7:0f:eb:6f:cd:27:85: aa:ea:2f:ea:44:7a:bc:25:3d:6b:5e:02:99:33:8b: 8f:3e:9c:98:53:7b:56:d8:01:e7:fd:86:12:65:3b: 93:a6:cc:18:e2:32:8d:22:f1:0c:ea:f3:be:85:ea: f9:a7:a8:00:60:fd:a8:eb:6d:1b:8b:98:a3:45:7d: 10:c5:16:52:dc:e3:1d:72:88:ff:08:7f:5d:41:a0: be:c4:2d:07:07:3b:d3:c9:1e:71:6a:5a:c4:ad:aa: 78:bd:29:6a:7f:8b:30:01:f4:86:2b:56:58:13:4a: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:47:25:42:A7:A9:5E:33:EA:24:8C:46:0E:32:3C:AD:E9:78:74:2B X509v3 Authority Key Identifier: keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ae:6f:6d:0e:8e:3a:62:da:f4:2e:cd:35:c3:fe:59:1a:8e: af:e3:e0:f6:14:30:14:06:dd:04:ff:38:80:56:df:61:d2:ff: a9:42:55:92:f9:c3:3a:1f:7f:b7:7a:89:c6:b4:68:a6:ad:ee: 52:d5:77:21:33:a6:f3:34:29:6d:38:e9:f2:31:ce:ef:35:3c: dd:b2:71:f6:06:07:6a:50:a3:e4:11:de:bd:c6:85:52:47:ce: 07:d6:8b:c0:d1:a0:56:cb:1d:83:b1:30:4f:12:79:58:f8:84: 1a:09:c1:b5:b3:7a:b8:d5:fb:88:a5:36:ec:ac:5a:97:77:b0: 6f:35:9d:a7:74:cd:ef:b9:a0:26:78:4a:60:99:30:93:0d:ea: 9b:ad:c9:04:9a:0d:1c:4a:76:86:41:87:bd:7c:bd:ba:8a:df: 52:ef:87:08:cb:e7:9b:97:7a:9f:d4:f9:8b:bb:2b:46:4b:62: f9:86:0a:c1:96:63:0f:b5:a8:b2:3d:a1:03:9b:2a:73:a9:8b: da:25:a9:57:c3:6e:3f:8f:43:8b:09:fc:3a:99:cf:53:07:65: 5d:1f:37:43:62:87:55:94:e1:28:ce:3b:8f:1c:a6:51:fa:5d: 41:09:a0:69:be:b2:57:ed:6e:78:e2:ca:3e:e0:94:bc:cf:eb: 5a:1b:44:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxoIWhbGetO72fg4rSN9TMyan8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1 MURGMjJCMzAeFw0yNjA5MjUwNTE3MDNaFw0yNjA5MjYwNzI0MDNaMDMxMTAvBgNV BAMTKERENDcyNTQyQTdBOTVFMzNFQTI0OEM0NjBFMzIzQ0FERTk3ODc0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ux9QZQX5DAH61Be2kHE3AGfg YlN+PjMPsqMptJlN4A4Ap/38YrXFeRVml6NXf7YIkrx4NKKEeSLESjIdzHgDeVRd qSGHF7p6LDZigMlQy/Uy+x5/w6nU6a/PT0noNlqHmGjDHWpcWPsCSn2Y+yLCz/OS CeVsQdgn23V+X+ur8f4it27kePsSQp2HzCpL1w/rb80nharqL+pEerwlPWteApkz i48+nJhTe1bYAef9hhJlO5OmzBjiMo0i8Qzq876F6vmnqABg/ajrbRuLmKNFfRDF FlLc4x1yiP8If11BoL7ELQcHO9PJHnFqWsStqni9KWp/izAB9IYrVlgTSgDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UclQqepXjPqJIxGDjI8rel4dCswHwYDVR0j BBgwFoAUF3QvwMdDaIM+v24vRznkCFHfIrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAyNzhiN2QtNDdlZC00ODYwLWFiM2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBD NzQzNjg4MzNFQkY2RTJGNDczOUU0MDg1MURGMjJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzc0MkZDMEM3NDM2ODgzM0VCRjZFMkY0NzM5RTQwODUxREYy MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvMTc3NDJGQzBDNzQzNjg4MzNFQkY2RTJGNDczOUU0 MDg1MURGMjJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyub20Ojjpi2vQuzTXD/lkajq/j4PYUMBQG 3QT/OIBW32HS/6lCVZL5wzoff7d6ica0aKat7lLVdyEzpvM0KW046fIxzu81PN2y cfYGB2pQo+QR3r3GhVJHzgfWi8DRoFbLHYOxME8SeVj4hBoJwbWzerjV+4ilNuys Wpd3sG81nad0ze+5oCZ4SmCZMJMN6putyQSaDRxKdoZBh718vbqK31LvhwjL55uX ep/U+Yu7K0ZLYvmGCsGWYw+1qLI9oQObKnOpi9olqVfDbj+PQ4sJ/DqZz1MHZV0f N0Nih1WU4SjOO48cplH6XUEJoGm+slftbnjiyj7glLzP61obRNQ= -----END CERTIFICATE-----Generated at Fri Sep 25 21:25:27 2026 by rpki-client