$ rpki-client -vvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft (raw, json) Hash identifier: iLUautl8UK9MgvbxEWj7TwiVoTxFP0trYHsqdQ6/R2A= Subject key identifier: 85:51:9A:A2:C5:26:47:F6:75:38:B8:64:74:F6:A7:BD:E7:CF:FB:16 Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB Certificate issuer: /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Certificate serial: 32F370A70E46740C93017A93E7D4473F023F5C04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:03:02 +0000 Manifest this update: Tue 12 May 2026 17:58:02 +0000 Manifest next update: Wed 13 May 2026 21:08:02 +0000 Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: u4GGrkPMCSBeQdSFpeeb+BeoQUTIplrdOwR16vFL5xY=) 2: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=) 3: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=) 4: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl (hash: hW/LYa0n+8kkKPAGRbc6Ooisxm6DGrUq3oC1QA6Pa6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f3:70:a7:0e:46:74:0c:93:01:7a:93:e7:d4:47:3f:02:3f:5c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Validity Not Before: May 12 17:58:02 2026 GMT Not After : May 13 21:08:02 2026 GMT Subject: CN=85519AA2C52647F67538B86474F6A7BDE7CFFB16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:31:12:31:00:e0:ff:fc:03:44:4a:02:af:5b: 80:b3:26:68:70:62:90:8d:e0:96:8d:3c:9e:c9:31: c4:04:df:95:39:41:71:51:6c:ac:2a:2a:65:df:74: 35:7c:c0:0b:55:e3:e0:80:d1:1c:d7:47:46:ea:34: b8:11:39:f7:ee:71:da:6a:e4:ce:49:76:d0:9c:c0: 65:54:41:64:d6:f3:8e:db:85:dc:3f:6d:ec:eb:6f: 1f:9f:5e:5c:96:05:34:c5:1f:00:ad:9f:90:4c:0d: 9c:07:47:2e:c1:9d:72:2f:82:ae:2d:c0:bc:88:fa: b1:e1:54:cc:fb:12:88:54:92:bf:87:1e:83:f2:e4: 3f:a4:f7:20:22:b4:86:d1:68:a2:0e:e4:d0:0d:74: 57:3b:76:c1:ff:5a:de:2e:15:92:cc:be:4e:20:73: 0b:99:72:42:71:19:22:d5:9c:c8:1d:f1:98:75:74: 3e:ef:d8:97:ea:c4:58:99:0a:ae:73:49:2e:4c:25: 95:18:7f:36:1d:f4:57:46:ca:b4:d4:42:90:8a:ab: 69:ce:b1:a4:a1:e8:c4:90:97:d9:0f:0d:a4:ba:bf: d3:1c:15:21:73:04:44:29:f2:aa:5f:50:7b:08:cc: 89:33:2d:26:58:3f:25:e1:05:c3:d3:0b:f0:2d:d4: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:9A:A2:C5:26:47:F6:75:38:B8:64:74:F6:A7:BD:E7:CF:FB:16 X509v3 Authority Key Identifier: keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a4:bd:99:4f:3f:cb:16:dc:be:41:3b:53:43:e5:0e:19:25: cb:88:8a:f0:11:91:0e:3d:1a:68:1d:01:cd:fb:0b:56:0f:31: 75:7d:76:ef:b4:e8:c1:67:68:50:c4:4f:03:7a:68:d4:86:de: 9c:18:60:1d:f5:54:14:26:f4:4e:4c:09:43:07:fe:cc:19:c4: 14:38:09:f4:88:aa:96:4e:20:58:40:16:ad:bf:4a:cd:7e:13: 18:6c:96:09:11:81:3d:95:fd:f9:83:ae:4d:ee:7b:00:b4:0d: bd:99:f4:35:49:b8:a2:fb:39:fd:76:9e:26:71:ef:06:76:ee: bc:21:ca:ac:ca:f4:96:9d:c7:2f:6f:fa:74:9d:e6:e1:03:cf: f3:41:7a:f5:54:37:e9:29:59:5f:4d:02:62:9c:23:61:9b:7f: b8:e8:1d:b5:5e:aa:10:c6:51:74:a1:61:3e:bf:90:71:e8:98: 00:a8:36:a0:40:dd:6e:39:20:17:8b:48:c8:54:31:26:2a:d1: 18:7d:f5:f9:6c:4d:d3:59:02:1e:d9:2a:8a:88:30:40:21:c4: e3:bc:ec:5a:5c:fa:53:7c:3c:84:9a:af:7f:4c:e8:7a:11:f7: bb:1e:15:05:20:da:f5:45:66:5c:e4:e7:3c:03:6a:8c:26:12: f3:0f:bd:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvNwpw5GdAyTAXqT59RHPwI/XAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2QjAy QzEzREVDQjAeFw0yNjA1MTIxNzU4MDJaFw0yNjA1MTMyMTA4MDJaMDMxMTAvBgNV BAMTKDg1NTE5QUEyQzUyNjQ3RjY3NTM4Qjg2NDc0RjZBN0JERTdDRkZCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMRIxAOD//ANESgKvW4CzJmhw YpCN4JaNPJ7JMcQE35U5QXFRbKwqKmXfdDV8wAtV4+CA0RzXR0bqNLgROffucdpq 5M5JdtCcwGVUQWTW847bhdw/bezrbx+fXlyWBTTFHwCtn5BMDZwHRy7BnXIvgq4t wLyI+rHhVMz7EohUkr+HHoPy5D+k9yAitIbRaKIO5NANdFc7dsH/Wt4uFZLMvk4g cwuZckJxGSLVnMgd8Zh1dD7v2JfqxFiZCq5zSS5MJZUYfzYd9FdGyrTUQpCKq2nO saSh6MSQl9kPDaS6v9McFSFzBEQp8qpfUHsIzIkzLSZYPyXhBcPTC/At1LWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVGaosUmR/Z1OLhkdPanvefP+xYwHwYDVR0j BBgwFoAUFzvZV93dtj7axYM8A/v2sCwT3sswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcxYmY5ODAtMjRkYS00ODY1LWE5ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdE REREQjYzRURBQzU4MzNDMDNGQkY2QjAyQzEzREVDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzNCRDk1N0RERERCNjNFREFDNTgzM0MwM0ZCRjZCMDJDMTNE RUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2 QjAyQzEzREVDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGekvZlPP8sW3L5BO1ND5Q4ZJcuIivARkQ49 GmgdAc37C1YPMXV9du+06MFnaFDETwN6aNSG3pwYYB31VBQm9E5MCUMH/swZxBQ4 CfSIqpZOIFhAFq2/Ss1+ExhslgkRgT2V/fmDrk3uewC0Db2Z9DVJuKL7Of12niZx 7wZ27rwhyqzK9Jadxy9v+nSd5uEDz/NBevVUN+kpWV9NAmKcI2Gbf7joHbVeqhDG UXShYT6/kHHomACoNqBA3W45IBeLSMhUMSYq0Rh99flsTdNZAh7ZKoqIMEAhxOO8 7Fpc+lN8PISar39M6HoR97seFQUg2vVFZlzk5zwDaowmEvMPvcA= -----END CERTIFICATE-----Generated at Wed May 13 02:58:40 2026 by rpki-client