$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: BMUf6+eQ5r312M0l6XynDv2LZKdbGNH6IQ4Xoi98ndY= Subject key identifier: D0:55:5F:72:61:5D:6E:8A:CC:25:C0:E1:BC:A9:C4:4F:F3:0D:CF:AD Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 5DD7239908C57C157E1080F385DB618F99A28ED4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0240 Signing time: Thu 21 Aug 2025 20:10:45 +0000 Manifest this update: Thu 21 Aug 2025 20:05:45 +0000 Manifest next update: Sun 24 Aug 2025 21:13:45 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: gBBp7+yLOO2e/YEnsmaEW1wzY3FkrhrIwUV+0uRmk9s=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d7:23:99:08:c5:7c:15:7e:10:80:f3:85:db:61:8f:99:a2:8e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Aug 21 20:05:45 2025 GMT Not After : Aug 24 21:13:45 2025 GMT Subject: CN=D0555F72615D6E8ACC25C0E1BCA9C44FF30DCFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:39:cc:a6:17:fa:de:62:27:e1:4c:9d:c1: b6:23:b3:09:7a:9d:61:8c:7b:ec:f5:37:a6:a1:87: 96:79:38:d7:d9:de:2a:dc:06:3a:1b:d9:dc:e0:98: 17:d1:40:ef:fe:56:77:0b:21:70:91:93:d1:8c:ac: ca:58:97:17:eb:ee:1f:d5:f7:1d:3a:bb:8c:c5:5b: 5a:53:74:29:a2:df:e1:f7:ad:28:48:8b:64:11:de: c5:a0:21:8b:c0:45:61:b3:4f:70:d6:2c:cc:58:e7: f1:5b:25:ad:86:81:2b:97:dc:fb:db:73:a5:46:c2: f6:5d:a5:47:69:f4:01:52:41:88:4b:a4:79:c7:5e: 62:15:e2:19:70:f7:5e:94:ff:a1:3b:aa:33:89:87: 5f:a0:79:35:66:b7:f6:89:0c:a7:df:55:97:85:a6: 7a:84:e2:e0:1c:1f:0e:8d:b9:f8:8d:fc:fe:9a:bd: 9a:2a:ef:d4:9e:21:17:c1:36:53:2c:c4:35:ae:33: 7a:50:f2:2a:80:a7:dc:0b:99:ff:a3:76:4c:10:95: 9a:1d:43:22:ea:b2:a8:b1:44:89:5d:58:9a:d3:fe: 16:0e:36:2d:90:db:df:97:84:26:4f:c8:10:50:cf: 05:80:a5:5d:27:89:40:81:e8:88:38:82:a5:7a:1c: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:55:5F:72:61:5D:6E:8A:CC:25:C0:E1:BC:A9:C4:4F:F3:0D:CF:AD X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:08:ec:4a:df:df:be:40:b1:c9:e5:08:84:65:c8:e2:47:a7: 10:a7:fb:47:41:22:1d:d6:3b:2e:9c:3b:c6:e3:cf:6c:b0:87: 35:41:11:63:35:9a:17:d3:b6:06:66:09:21:90:bb:84:15:6d: dc:cf:4a:e4:fb:fd:a4:b4:9c:80:f2:b1:70:00:fe:54:74:e9: 93:9b:5c:42:2a:7c:f2:20:81:8d:89:3d:65:74:53:06:b6:1e: 40:a5:ea:d3:e9:2b:9c:09:cf:a2:94:5a:43:f2:3e:3a:ec:e5: 7a:d7:97:93:ce:de:61:85:62:4b:ee:97:3b:c1:70:15:72:37: 49:b7:52:5a:95:35:b6:53:84:d1:14:c6:d8:fe:7e:7e:ab:db: 2a:f7:6c:69:e2:3e:65:fe:7f:b4:8c:dc:df:b0:d6:86:f4:0c: 36:4c:d8:a7:d1:a7:a9:20:20:c8:61:e3:cd:a8:fe:c5:d7:df: 28:c8:e5:10:b4:c4:bf:2d:80:13:4a:08:72:6d:d4:67:5b:e1: dd:20:53:c4:fa:ad:4c:4e:a3:86:74:87:48:57:92:18:d0:d1: ba:0f:6b:a0:37:73:93:0c:34:25:97:09:e0:9d:93:0b:cb:89: 0e:39:4e:68:d8:a0:ab:3d:f6:b6:93:37:65:48:32:51:d1:2f: 7b:4a:d0:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdcjmQjFfBV+EIDzhdthj5mijtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA4MjEyMDA1NDVaFw0yNTA4MjQyMTEzNDVaMDMxMTAvBgNV BAMTKEQwNTU1RjcyNjE1RDZFOEFDQzI1QzBFMUJDQTlDNDRGRjMwRENGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5znMphf63mIn4UydwbYjswl6 nWGMe+z1N6ahh5Z5ONfZ3ircBjob2dzgmBfRQO/+VncLIXCRk9GMrMpYlxfr7h/V 9x06u4zFW1pTdCmi3+H3rShIi2QR3sWgIYvARWGzT3DWLMxY5/FbJa2GgSuX3Pvb c6VGwvZdpUdp9AFSQYhLpHnHXmIV4hlw916U/6E7qjOJh1+geTVmt/aJDKffVZeF pnqE4uAcHw6NufiN/P6avZoq79SeIRfBNlMsxDWuM3pQ8iqAp9wLmf+jdkwQlZod QyLqsqixRIldWJrT/hYONi2Q29+XhCZPyBBQzwWApV0niUCB6Ig4gqV6HIevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0FVfcmFdborMJcDhvKnET/MNz60wHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYI7Erf375AscnlCIRlyOJHpxCn+0dBIh3W Oy6cO8bjz2ywhzVBEWM1mhfTtgZmCSGQu4QVbdzPSuT7/aS0nIDysXAA/lR06ZOb XEIqfPIggY2JPWV0Uwa2HkCl6tPpK5wJz6KUWkPyPjrs5XrXl5PO3mGFYkvulzvB cBVyN0m3UlqVNbZThNEUxtj+fn6r2yr3bGniPmX+f7SM3N+w1ob0DDZM2KfRp6kg IMhh482o/sXX3yjI5RC0xL8tgBNKCHJt1Gdb4d0gU8T6rUxOo4Z0h0hXkhjQ0boP a6A3c5MMNCWXCeCdkwvLiQ45TmjYoKs99raTN2VIMlHRL3tK0GU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:46 2025 by rpki-client