$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: nwfP5p6m9HXkAsGwZNwn6VcLyNT/5DV7kLzOsSkFm68= Subject key identifier: 16:21:0F:E6:CE:8B:1D:40:D3:3F:F4:81:B1:54:87:91:53:16:18:85 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 7DAF570799CF270BB7477CC69785B3248DFF9B10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04E2 Signing time: Sat 18 Oct 2025 06:41:49 +0000 Manifest this update: Sat 18 Oct 2025 06:36:49 +0000 Manifest next update: Tue 21 Oct 2025 16:23:49 +0000 Files and hashes: 1: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 2: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: X8amEVjuOVWXkwIc9Kltqfr0eHTkU6CJZIsXtxfUzHE=) 3: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) 4: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) 5: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:af:57:07:99:cf:27:0b:b7:47:7c:c6:97:85:b3:24:8d:ff:9b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Oct 18 06:36:49 2025 GMT Not After : Oct 21 16:23:49 2025 GMT Subject: CN=16210FE6CE8B1D40D33FF481B154879153161885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:e6:81:fb:8e:f9:1f:3f:e2:72:01:8b:7a: b3:79:77:08:a1:d1:0b:20:f6:fc:50:6c:e2:ad:59: 7e:39:52:2a:9e:4b:a1:96:18:f9:a4:d3:d6:17:e1: e0:dd:c4:2c:65:e1:2b:c7:1d:41:cd:5b:ad:b4:db: 3a:f2:fb:1f:13:ee:99:20:9e:d7:0b:45:ee:18:67: 10:53:ff:8b:8d:52:c2:a6:06:f9:33:50:36:42:3c: 86:9d:f7:f5:39:d6:69:5c:02:10:ee:45:41:43:c0: d8:da:38:dd:65:73:62:24:e7:4e:84:d5:12:8c:9b: c5:d7:34:45:71:63:73:f3:51:6e:44:a9:4f:cc:f9: 53:7b:fe:56:fb:fc:04:02:14:b9:20:0b:69:81:04: 2a:dd:6a:d9:ae:54:31:e0:e3:a5:d6:75:7a:b6:8f: 40:f2:fb:1b:37:b3:3d:c5:4a:17:07:e4:11:c3:f5: 7f:8a:37:99:d0:dd:f5:b7:4c:49:de:9f:4b:2e:ae: 8a:79:64:cc:5b:32:44:54:d3:8f:33:f7:13:72:74: e3:c9:4d:b3:65:50:f7:dd:fb:20:7b:ad:64:0f:81: 49:db:2f:6d:6d:64:d5:44:d6:d3:ab:68:7d:84:f5: 6d:c8:7f:b8:12:ff:b9:83:c3:88:9d:ae:b6:59:26: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:0F:E6:CE:8B:1D:40:D3:3F:F4:81:B1:54:87:91:53:16:18:85 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d8:74:d5:b7:ea:12:4e:a7:06:ec:7f:94:9a:f3:21:3d:fe: 54:2e:a2:5e:61:b5:71:f6:62:57:2c:77:8d:a2:1b:ae:58:6b: eb:4a:65:4c:f6:a2:38:0a:90:61:e7:ee:b6:22:51:47:ce:59: db:c2:3f:e1:b8:48:59:26:fd:45:b3:d4:b6:df:2c:84:75:41: c3:97:f8:5b:c1:f8:95:0a:7b:be:c3:a8:7c:c6:04:fc:cd:ae: 6b:ab:1d:66:9f:4d:03:22:43:76:8d:8e:32:0e:a5:91:b8:45: fd:d5:78:58:2c:d9:32:dd:d7:28:b1:7e:da:07:7e:16:9c:58: b4:a4:1b:0c:b4:0d:7f:69:88:27:a2:bb:d1:34:cf:3e:e5:72: bd:f8:ef:22:47:83:d7:c0:22:e4:40:69:99:2d:84:4a:95:67: bc:c4:06:fb:2e:0f:da:38:f2:17:be:9e:14:23:d1:a2:15:84: 70:eb:e6:74:e3:9d:2b:f7:0c:e8:07:cc:73:a3:87:8e:2d:06: dc:58:6d:bf:52:b0:30:1d:ff:d7:87:da:7e:8d:4d:76:1e:b9: 48:54:bc:52:fb:55:39:ad:6b:0e:ec:95:ab:7b:32:bf:1f:ee: a9:b3:06:c8:ae:59:64:b0:e5:82:59:e7:e4:6c:53:e5:40:63: 85:33:12:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa9XB5nPJwu3R3zGl4WzJI3/mxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTEwMTgwNjM2NDlaFw0yNTEwMjExNjIzNDlaMDMxMTAvBgNV BAMTKDE2MjEwRkU2Q0U4QjFENDBEMzNGRjQ4MUIxNTQ4NzkxNTMxNjE4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOuaB+475Hz/icgGLerN5dwih 0Qsg9vxQbOKtWX45UiqeS6GWGPmk09YX4eDdxCxl4SvHHUHNW6202zry+x8T7pkg ntcLRe4YZxBT/4uNUsKmBvkzUDZCPIad9/U51mlcAhDuRUFDwNjaON1lc2Ik506E 1RKMm8XXNEVxY3PzUW5EqU/M+VN7/lb7/AQCFLkgC2mBBCrdatmuVDHg46XWdXq2 j0Dy+xs3sz3FShcH5BHD9X+KN5nQ3fW3TEnen0surop5ZMxbMkRU048z9xNydOPJ TbNlUPfd+yB7rWQPgUnbL21tZNVE1tOraH2E9W3If7gS/7mDw4idrrZZJq+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFiEP5s6LHUDTP/SBsVSHkVMWGIUwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7YdNW36hJOpwbsf5Sa8yE9/lQuol5htXH2 Ylcsd42iG65Ya+tKZUz2ojgKkGHn7rYiUUfOWdvCP+G4SFkm/UWz1LbfLIR1QcOX +FvB+JUKe77DqHzGBPzNrmurHWafTQMiQ3aNjjIOpZG4Rf3VeFgs2TLd1yixftoH fhacWLSkGwy0DX9piCeiu9E0zz7lcr347yJHg9fAIuRAaZkthEqVZ7zEBvsuD9o4 8he+nhQj0aIVhHDr5nTjnSv3DOgHzHOjh44tBtxYbb9SsDAd/9eH2n6NTXYeuUhU vFL7VTmtaw7slat7Mr8f7qmzBsiuWWSw5YJZ5+RsU+VAY4UzEhk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:23 2025 by rpki-client