$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft File: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft (raw, json) Hash identifier: luhjnFUKdcB+8vUctzSMxBF6TvtpwHQv42pyPE7FlFg= Subject key identifier: 7F:6E:68:BA:1B:6E:F2:91:A1:85:DE:DD:BD:C5:DC:E8:AB:33:39:E9 Authority key identifier: 17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB Certificate issuer: /CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Certificate serial: 1D102B67553099C301C35EB1A5679B3B5566FD37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:51:51 +0000 Manifest this update: Wed 23 Sep 2026 20:46:51 +0000 Manifest next update: Thu 24 Sep 2026 21:16:51 +0000 Files and hashes: 1: 173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl (hash: bZRXYAB1LSfgyEWIzPoRY46LUahhf4FDGHCCPHephRo=) 2: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: u4GGrkPMCSBeQdSFpeeb+BeoQUTIplrdOwR16vFL5xY=) 3: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o77O/i7FZPApyDMVFrPKMkI9xXBxv/ECdKB3uq5eUFw=) 4: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: WE6yzn5zZerVSAjtk4R/8zE12QnoZeSwbNL716L9BEo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:10:2b:67:55:30:99:c3:01:c3:5e:b1:a5:67:9b:3b:55:66:fd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173BD957DDDDB63EDAC5833C03FBF6B02C13DECB Validity Not Before: Sep 23 20:46:51 2026 GMT Not After : Sep 24 21:16:51 2026 GMT Subject: CN=7F6E68BA1B6EF291A185DEDDBDC5DCE8AB3339E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:79:9c:1a:b7:0b:d4:35:80:91:f0:06:96: 72:d0:f8:67:dc:51:f0:43:8e:91:2e:1b:99:39:f7: 60:86:cf:20:b0:0c:8d:2b:c2:e4:f7:00:f4:35:6f: f4:91:b9:aa:34:6a:75:33:2c:d1:69:8d:f4:29:13: b9:9a:a7:b2:a7:0e:a3:1e:21:2e:34:5d:0b:38:63: 76:04:1f:64:25:de:cd:40:d7:d2:52:da:01:ec:19: 8f:73:a3:af:28:fb:ae:7b:c3:5f:d5:4c:d2:e1:cf: 25:0f:5e:6e:e3:21:fe:79:8f:e7:4c:79:dd:fd:e3: 42:3a:03:94:95:4a:2b:e6:9e:c0:b1:2d:fb:fc:41: 84:e5:57:60:03:ad:03:64:9e:40:f8:a3:7e:6a:71: f5:a0:6a:07:a2:9f:02:aa:cb:48:ff:c1:84:5d:22: a6:65:1e:38:0e:79:a8:0a:d6:3e:98:b2:7a:b6:33: d9:c7:f4:59:47:b7:db:1a:06:6a:e2:13:c4:61:af: 81:38:2c:be:c1:dc:54:a5:89:a2:53:92:d1:64:13: 4a:e9:a8:0f:ac:15:42:68:6e:14:57:54:20:d3:58: 30:5d:75:09:b9:f0:b7:04:2b:c5:7f:b5:de:15:ee: d6:91:6c:bc:23:b7:71:83:69:e8:57:c0:4c:62:8d: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6E:68:BA:1B:6E:F2:91:A1:85:DE:DD:BD:C5:DC:E8:AB:33:39:E9 X509v3 Authority Key Identifier: keyid:17:3B:D9:57:DD:DD:B6:3E:DA:C5:83:3C:03:FB:F6:B0:2C:13:DE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/173BD957DDDDB63EDAC5833C03FBF6B02C13DECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:25:fc:14:ac:f4:e2:fe:a8:ed:30:ce:e4:73:9d:b5:58:1a: 28:4a:63:c2:13:9b:dc:b6:49:1a:a3:cb:87:cf:2b:bf:2e:35: b7:a4:82:25:62:5d:d8:3b:f1:f4:f5:25:18:80:5a:04:7a:b4: 55:a0:2e:da:86:62:c2:eb:98:6b:5f:72:85:1f:a6:c5:e4:1a: f7:77:4c:6f:b5:a4:72:14:bc:d7:ed:09:8b:55:01:9d:ff:4a: 4d:f8:9f:7e:62:10:4f:67:88:2d:15:80:c8:47:5b:f1:73:9c: 97:ea:0b:2a:01:8d:bd:e6:0e:47:5c:1e:5d:ed:3d:14:fb:bb: 17:82:4d:03:c7:b2:7d:b2:12:4d:6c:40:0a:68:e8:0b:f1:23: 0a:30:2d:c8:da:b2:56:41:ce:4e:27:33:87:2b:14:87:8c:38: 14:34:1f:61:ee:ab:56:3e:e4:56:b9:9a:6f:4d:42:e5:d7:d2: 3d:a8:2a:16:86:a4:0e:f2:4c:59:37:63:81:94:03:33:64:ad: c7:13:e7:72:05:f1:77:be:fe:9c:7c:58:c0:a1:3b:c9:14:60: e3:ec:e7:5b:b2:ef:9f:c0:59:16:a1:77:8e:ae:c1:d7:20:c0: 58:eb:db:3e:57:61:49:cb:0c:66:10:86:f5:94:d7:23:4b:d3: 4e:a7:b8:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRArZ1UwmcMBw16xpWebO1Vm/TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2QjAy QzEzREVDQjAeFw0yNjA5MjMyMDQ2NTFaFw0yNjA5MjQyMTE2NTFaMDMxMTAvBgNV BAMTKDdGNkU2OEJBMUI2RUYyOTFBMTg1REVEREJEQzVEQ0U4QUIzMzM5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsHmcGrcL1DWAkfAGlnLQ+Gfc UfBDjpEuG5k592CGzyCwDI0rwuT3APQ1b/SRuao0anUzLNFpjfQpE7map7KnDqMe IS40XQs4Y3YEH2Ql3s1A19JS2gHsGY9zo68o+657w1/VTNLhzyUPXm7jIf55j+dM ed3940I6A5SVSivmnsCxLfv8QYTlV2ADrQNknkD4o35qcfWgageinwKqy0j/wYRd IqZlHjgOeagK1j6Ysnq2M9nH9FlHt9saBmriE8Rhr4E4LL7B3FSliaJTktFkE0rp qA+sFUJobhRXVCDTWDBddQm58LcEK8V/td4V7taRbLwjt3GDaehXwExijVNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf25ouhtu8pGhhd7dvcXc6KszOekwHwYDVR0j BBgwFoAUFzvZV93dtj7axYM8A/v2sCwT3sswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcxYmY5ODAtMjRkYS00ODY1LWE5ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdE REREQjYzRURBQzU4MzNDMDNGQkY2QjAyQzEzREVDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzNCRDk1N0RERERCNjNFREFDNTgzM0MwM0ZCRjZCMDJDMTNE RUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvMTczQkQ5NTdEREREQjYzRURBQzU4MzNDMDNGQkY2 QjAyQzEzREVDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8l/BSs9OL+qO0wzuRznbVYGihKY8ITm9y2 SRqjy4fPK78uNbekgiViXdg78fT1JRiAWgR6tFWgLtqGYsLrmGtfcoUfpsXkGvd3 TG+1pHIUvNftCYtVAZ3/Sk34n35iEE9niC0VgMhHW/FznJfqCyoBjb3mDkdcHl3t PRT7uxeCTQPHsn2yEk1sQApo6AvxIwowLcjaslZBzk4nM4crFIeMOBQ0H2Huq1Y+ 5Fa5mm9NQuXX0j2oKhaGpA7yTFk3Y4GUAzNkrccT53IF8Xe+/px8WMChO8kUYOPs 51uy75/AWRahd46uwdcgwFjr2z5XYUnLDGYQhvWU1yNL006nuLE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:46:02 2026 by rpki-client