$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: HhyLSrL4y1CMAk0ahTS/cRWTp9JlYvnWJi5mMVn/vmo= Subject key identifier: 3B:D5:CF:55:5D:71:EB:3A:E8:97:C1:8B:DF:CA:BA:E3:7E:E5:36:F6 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 23BAEBF2D6DC1B57F0FEB2CE20B40493CE22D35F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0229 Signing time: Mon 30 Jun 2025 12:00:38 +0000 Manifest this update: Mon 30 Jun 2025 11:55:38 +0000 Manifest next update: Thu 03 Jul 2025 19:51:38 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: 4TPE7sBICL8Bfi1GE+vUie7VcaEUxyJDEKWlTTR6zb8=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ba:eb:f2:d6:dc:1b:57:f0:fe:b2:ce:20:b4:04:93:ce:22:d3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Jun 30 11:55:38 2025 GMT Not After : Jul 3 19:51:38 2025 GMT Subject: CN=3BD5CF555D71EB3AE897C18BDFCABAE37EE536F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:62:77:e4:cf:6c:e8:09:3b:6c:aa:d3:3c: f1:6b:81:ac:f8:b3:75:f6:29:e5:a0:82:e2:e4:6a: 85:cd:e8:20:94:c9:13:f0:ee:70:91:3f:0c:32:72: 7e:a2:49:17:64:eb:3c:67:15:74:a7:ba:34:45:c7: 31:7b:f9:a1:b9:84:c0:32:00:d0:35:a4:dc:ec:8d: 57:37:e0:c6:71:5f:f1:a2:a9:f7:c3:72:91:4f:aa: 8a:9a:3c:76:5e:3c:18:ea:2a:47:f9:10:e5:bc:42: 4d:b8:b8:8d:0b:f3:91:c2:a3:d4:a7:af:16:43:50: ab:2b:3f:ac:e9:c6:da:31:9d:42:44:23:d9:a3:63: e1:27:63:ed:bc:d5:01:12:a1:a1:fc:38:4e:0b:e9: d6:64:16:2c:d6:3b:53:14:61:b5:ff:4e:78:17:bb: df:8d:a8:c5:e4:80:80:a2:12:0d:6c:ec:41:10:ad: 4b:07:2e:2c:ef:3e:30:4f:bb:e6:3f:fb:cf:c2:76: 46:4a:bd:e2:c8:c2:f8:d6:08:06:94:ea:b3:d5:ad: 45:d1:d5:ca:89:72:d1:54:31:c2:d9:45:8a:ea:38: 28:bd:e9:32:e5:86:fe:b5:78:2f:da:80:9d:3c:9b: d0:03:03:79:01:d3:fe:c7:51:00:5f:79:cb:14:0a: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D5:CF:55:5D:71:EB:3A:E8:97:C1:8B:DF:CA:BA:E3:7E:E5:36:F6 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:05:23:b5:d1:36:49:0c:78:82:9e:ea:fd:64:24:a7:bb:75: bb:ee:4c:09:0d:f2:60:b2:ca:93:4a:88:b7:b6:4e:61:fb:b4: 12:d4:01:bd:09:a4:9a:51:76:a8:88:f9:34:b4:c9:42:d4:6f: 81:ad:84:36:f8:20:72:44:26:79:e1:87:cd:ce:90:98:18:f8: 44:dd:a3:02:81:8e:43:c5:00:39:c0:8e:10:b5:0f:a4:a2:70: 90:5a:cf:1f:37:56:2c:b1:44:27:07:15:4c:a4:2f:c9:db:31: 51:86:5c:6f:86:41:ed:dc:06:7a:fd:b1:e4:d8:5b:3c:28:c3: a9:ca:be:81:e6:4b:f2:99:d0:c8:ab:63:a4:a8:f4:af:26:0e: 75:fb:78:b4:a3:99:d7:d9:53:5f:8b:b6:3f:77:be:25:06:c0: d0:f3:1a:7d:52:ad:39:92:61:3c:33:8d:2c:d2:44:a3:09:2f: eb:97:a2:e9:90:32:01:b0:80:9e:dd:db:9f:25:6a:23:8a:1e: 85:db:e5:1e:a3:86:9f:a2:e6:d5:86:f8:79:5f:42:12:30:f0: 0f:32:36:8e:61:ee:ce:43:d5:ef:3b:08:bd:58:a1:6b:b7:b9: 34:86:69:99:84:af:fc:eb:30:98:16:6c:0e:a7:fc:ec:8a:20: 3f:4e:81:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7rr8tbcG1fw/rLOILQEk84i018wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA2MzAxMTU1MzhaFw0yNTA3MDMxOTUxMzhaMDMxMTAvBgNV BAMTKDNCRDVDRjU1NUQ3MUVCM0FFODk3QzE4QkRGQ0FCQUUzN0VFNTM2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFM2J35M9s6Ak7bKrTPPFrgaz4 s3X2KeWgguLkaoXN6CCUyRPw7nCRPwwycn6iSRdk6zxnFXSnujRFxzF7+aG5hMAy ANA1pNzsjVc34MZxX/GiqffDcpFPqoqaPHZePBjqKkf5EOW8Qk24uI0L85HCo9Sn rxZDUKsrP6zpxtoxnUJEI9mjY+EnY+281QESoaH8OE4L6dZkFizWO1MUYbX/TngX u9+NqMXkgICiEg1s7EEQrUsHLizvPjBPu+Y/+8/CdkZKveLIwvjWCAaU6rPVrUXR 1cqJctFUMcLZRYrqOCi96TLlhv61eC/agJ08m9ADA3kB0/7HUQBfecsUCmttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9XPVV1x6zrol8GL38q6437lNvYwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwFI7XRNkkMeIKe6v1kJKe7dbvuTAkN8mCy ypNKiLe2TmH7tBLUAb0JpJpRdqiI+TS0yULUb4GthDb4IHJEJnnhh83OkJgY+ETd owKBjkPFADnAjhC1D6SicJBazx83ViyxRCcHFUykL8nbMVGGXG+GQe3cBnr9seTY Wzwow6nKvoHmS/KZ0MirY6So9K8mDnX7eLSjmdfZU1+Ltj93viUGwNDzGn1SrTmS YTwzjSzSRKMJL+uXoumQMgGwgJ7d258laiOKHoXb5R6jhp+i5tWG+HlfQhIw8A8y No5h7s5D1e87CL1YoWu3uTSGaZmEr/zrMJgWbA6n/OyKID9Ogdk= -----END CERTIFICATE-----Generated at Mon Jun 30 22:40:13 2025 by rpki-client