$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: uAPT0meKGQ3w9dQoJAPBda7kwcN9dg0LA460QTYE7S8= Subject key identifier: 47:E5:08:DC:A7:DB:4D:47:85:0F:C9:C4:A0:9A:AA:C7:B9:10:7E:4E Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 272D8ED26E13CD8B0DCBCE492FBF11B3E931D5B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0212 Signing time: Sat 10 May 2025 07:50:38 +0000 Manifest this update: Sat 10 May 2025 07:45:38 +0000 Manifest next update: Tue 13 May 2025 09:46:38 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: eX5UOAaW3+3WkVwwSv1mpo4OJQeDJIXGXoYcTs0xgrk=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2d:8e:d2:6e:13:cd:8b:0d:cb:ce:49:2f:bf:11:b3:e9:31:d5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: May 10 07:45:38 2025 GMT Not After : May 13 09:46:38 2025 GMT Subject: CN=47E508DCA7DB4D47850FC9C4A09AAAC7B9107E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:69:14:e7:00:c3:50:b5:c1:95:42:0e:fa: 68:f8:53:9a:ef:97:0c:29:83:31:ed:7c:a1:4e:0c: e3:c5:75:52:68:6a:bd:66:bd:9e:b7:27:59:61:23: f2:6d:07:e2:b2:59:03:5c:e1:a9:2a:6d:1e:33:5f: b5:29:4b:4e:f0:4c:f4:4d:da:cc:11:b9:69:38:d8: 4f:84:c0:8a:08:bc:4e:d8:4a:72:5b:e7:f8:31:28: e5:69:a7:c7:c3:93:a9:f7:25:87:55:e9:d6:7f:7e: e1:63:10:77:f0:6a:b1:77:c3:f2:04:ed:79:5c:fa: 78:af:f6:57:80:33:d7:80:f1:7b:16:ae:f5:e6:ec: 0c:21:e1:c2:a7:60:c4:ef:17:2e:1f:73:be:4d:ea: 82:c1:1f:c1:b6:57:75:4e:fd:ab:91:c0:19:b7:d1: 84:45:28:49:cd:4c:da:f4:ab:f8:bb:ab:71:a9:13: ee:44:be:f4:8a:53:9e:7a:0a:04:92:f7:57:19:c2: df:16:37:ed:1d:2f:a1:5e:1e:ff:bb:c6:b6:3c:2d: a1:06:24:0d:04:82:c1:16:59:55:c0:fa:c3:87:81: 3e:f1:2e:3a:f9:63:34:56:71:e2:18:87:e4:b2:60: 7a:3e:1b:fb:fa:de:84:f3:dd:ea:b4:ed:fa:26:99: 9d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E5:08:DC:A7:DB:4D:47:85:0F:C9:C4:A0:9A:AA:C7:B9:10:7E:4E X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:67:08:36:08:10:8f:c2:6a:f9:b3:97:84:17:f8:53:5f:29: c4:ad:54:bc:2f:55:69:f3:d5:b2:8f:d2:74:8e:1e:b8:d2:8a: e1:43:65:8b:dd:dd:70:26:d2:7b:43:ab:e7:cf:87:1a:60:66: 69:50:63:0e:6e:79:88:9b:ea:5f:89:bd:22:19:36:8d:00:f8: a0:f0:81:a5:f8:eb:e0:54:52:f7:b1:93:b5:99:96:f0:c9:04: 04:a7:65:1c:39:cd:a5:66:48:38:25:95:85:34:29:db:0d:05: 5d:92:bb:15:0d:f4:59:cc:f6:5f:3a:14:bf:a1:b7:a6:ce:d8: 33:7a:ba:b9:cc:62:24:94:82:e2:d5:91:5f:c3:bc:40:83:a2: 17:59:a4:5e:d0:89:0a:60:f8:ce:b8:40:1b:3c:af:9e:02:a4: 87:87:f7:b4:9c:71:c0:81:d7:28:f6:09:7b:05:a2:d5:b0:c9: ab:d4:33:f9:94:81:11:2d:f3:98:3a:57:f7:f2:48:c5:ef:d0: 42:0b:e7:82:2f:50:19:f6:44:45:c3:55:0d:04:fc:2c:e5:53: c0:9b:f4:57:21:cf:f7:46:9d:b4:52:10:47:75:93:30:02:b9: 79:51:44:e2:38:8b:95:a3:44:bc:22:58:88:f9:fa:9b:f7:34: 1a:62:6a:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJy2O0m4TzYsNy85JL78Rs+kx1bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA1MTAwNzQ1MzhaFw0yNTA1MTMwOTQ2MzhaMDMxMTAvBgNV BAMTKDQ3RTUwOERDQTdEQjRENDc4NTBGQzlDNEEwOUFBQUM3QjkxMDdFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa8mkU5wDDULXBlUIO+mj4U5rv lwwpgzHtfKFODOPFdVJoar1mvZ63J1lhI/JtB+KyWQNc4akqbR4zX7UpS07wTPRN 2swRuWk42E+EwIoIvE7YSnJb5/gxKOVpp8fDk6n3JYdV6dZ/fuFjEHfwarF3w/IE 7Xlc+niv9leAM9eA8XsWrvXm7Awh4cKnYMTvFy4fc75N6oLBH8G2V3VO/auRwBm3 0YRFKEnNTNr0q/i7q3GpE+5EvvSKU556CgSS91cZwt8WN+0dL6FeHv+7xrY8LaEG JA0EgsEWWVXA+sOHgT7xLjr5YzRWceIYh+SyYHo+G/v63oTz3eq07fommZ0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+UI3KfbTUeFD8nEoJqqx7kQfk4wHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVnCDYIEI/Cavmzl4QX+FNfKcStVLwvVWnz 1bKP0nSOHrjSiuFDZYvd3XAm0ntDq+fPhxpgZmlQYw5ueYib6l+JvSIZNo0A+KDw gaX46+BUUvexk7WZlvDJBASnZRw5zaVmSDgllYU0KdsNBV2SuxUN9FnM9l86FL+h t6bO2DN6urnMYiSUguLVkV/DvECDohdZpF7QiQpg+M64QBs8r54CpIeH97ScccCB 1yj2CXsFotWwyavUM/mUgREt85g6V/fySMXv0EIL54IvUBn2REXDVQ0E/CzlU8Cb 9Fchz/dGnbRSEEd1kzACuXlRROI4i5WjRLwiWIj5+pv3NBpiakw= -----END CERTIFICATE-----Generated at Sat May 10 09:49:39 2025 by rpki-client