$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: toXAHl9VRu3QaoFKc4ElqhXwSd90qhMsyZ67dT+yeeE= Subject key identifier: 6E:2D:0A:26:F1:FB:2D:DD:F9:89:26:F8:67:99:25:9B:F1:27:C7:9C Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 5CD685DC798B852A293E758ADB4EEE14791D83EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 0498 Signing time: Fri 09 May 2025 14:51:46 +0000 Manifest this update: Fri 09 May 2025 14:46:46 +0000 Manifest next update: Mon 12 May 2025 21:10:46 +0000 Files and hashes: 1: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: MECrs2QjyAB/tWI86JGLctf4dkbX+tDPAYgwCVZhv0s=) 2: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: SRwsZydMySikfJ/GCD2mFqd9F0BIlnEhWXoAVYNn6HM=) 3: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: vkcujdZ/39Au/wJ2Cd7g42T7SVP95uPuSJkl+n4ENIE=) 4: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: 0xS1n+w9VXczMS13QZF1W/J/5uwMSBEtc22dFFlfKPU=) 5: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: RzoGAVULQKoltyzBYMLW0yi6KDL7goz4wxpNzsi4gCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d6:85:dc:79:8b:85:2a:29:3e:75:8a:db:4e:ee:14:79:1d:83:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: May 9 14:46:46 2025 GMT Not After : May 12 21:10:46 2025 GMT Subject: CN=6E2D0A26F1FB2DDDF98926F86799259BF127C79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:6e:9a:85:29:55:40:d3:27:cf:20:8d:5a: 82:87:76:01:87:9f:37:f6:20:c9:35:b1:4c:0b:ed: 07:c1:94:55:bb:6c:4b:30:19:3f:f4:6b:e6:2f:26: 7a:56:83:dc:f2:85:6c:a5:89:45:03:73:28:87:9f: 2e:d9:50:2a:f2:70:da:ec:39:e1:79:7a:5f:70:b3: b3:33:ff:75:67:53:0d:90:9a:62:9a:53:89:a6:f7: 08:a6:73:5e:e2:2c:e2:c2:e4:99:b1:96:02:47:cb: 16:00:3e:df:b1:bb:a5:86:87:c1:1a:3f:78:dd:f4: 9c:56:85:69:33:a2:35:b8:a3:b6:81:27:88:54:c5: e5:62:f5:e1:f4:77:80:dc:c7:1b:b7:9e:6f:85:bc: 7f:25:37:54:76:9b:6c:8f:12:2e:59:5a:45:cc:6a: 34:37:03:d8:08:1a:b7:d3:4d:1b:5c:a3:a2:f7:09: de:9d:3e:cd:95:35:e2:c0:40:f7:5a:14:36:3c:53: 64:a4:2c:f6:d4:80:50:07:f0:82:0f:08:08:75:75: 68:22:c7:90:ec:c7:98:da:31:27:a4:60:c9:96:f2: 9c:93:29:ab:46:f5:44:3d:a4:04:6a:5f:43:27:9e: 2e:90:eb:8b:07:bb:38:25:df:e8:c9:f3:8e:16:ab: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2D:0A:26:F1:FB:2D:DD:F9:89:26:F8:67:99:25:9B:F1:27:C7:9C X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:39:b3:2c:84:d4:1b:09:e8:b9:1f:c1:c9:0d:19:fb:5f:f3: c9:48:d4:8f:8f:05:1b:47:e2:b8:48:48:b9:44:3c:2d:cc:b5: cd:fc:15:23:53:7f:ee:b8:ef:88:f6:46:41:5f:ad:76:d8:6a: cc:51:55:a9:f2:5e:c8:eb:52:71:09:0d:87:c0:55:a6:0a:0e: 7e:46:1a:56:d1:96:16:38:ac:f6:bd:ae:de:76:c0:a1:4f:f6: 6f:e4:1b:e3:ff:88:89:49:b0:03:bd:31:9f:0b:b7:f8:e6:10: b6:2d:8c:f8:28:32:b7:42:76:46:ef:70:39:68:13:5d:58:92: 29:62:3c:f2:ac:8d:d4:4a:dc:3a:97:2c:ed:0f:88:8f:fa:14: 6e:06:a9:60:8a:f7:d0:2c:08:03:73:b8:e1:77:c7:31:02:fc: 03:eb:a1:d6:54:64:a8:80:98:c0:ca:ee:fc:c5:04:90:be:6b: fc:37:de:e2:c7:c6:41:24:6f:a9:1d:1e:4f:28:ea:24:04:7e: 7a:86:88:49:94:f2:06:5d:bb:d4:22:ef:e3:27:6f:d2:6f:c6: e2:ec:60:87:bb:a1:bc:57:16:98:0b:09:ef:9c:47:3c:49:4e: 92:dc:99:50:97:19:bc:cb:09:45:09:a0:39:dc:59:65:6e:b1: 92:8e:93:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNaF3HmLhSopPnWK207uFHkdg+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTA1MDkxNDQ2NDZaFw0yNTA1MTIyMTEwNDZaMDMxMTAvBgNV BAMTKDZFMkQwQTI2RjFGQjJERERGOTg5MjZGODY3OTkyNTlCRjEyN0M3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zm6ahSlVQNMnzyCNWoKHdgGH nzf2IMk1sUwL7QfBlFW7bEswGT/0a+YvJnpWg9zyhWyliUUDcyiHny7ZUCrycNrs OeF5el9ws7Mz/3VnUw2QmmKaU4mm9wimc17iLOLC5JmxlgJHyxYAPt+xu6WGh8Ea P3jd9JxWhWkzojW4o7aBJ4hUxeVi9eH0d4Dcxxu3nm+FvH8lN1R2m2yPEi5ZWkXM ajQ3A9gIGrfTTRtco6L3Cd6dPs2VNeLAQPdaFDY8U2SkLPbUgFAH8IIPCAh1dWgi x5Dsx5jaMSekYMmW8pyTKatG9UQ9pARqX0Mnni6Q64sHuzgl3+jJ844Wq4MfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbi0KJvH7Ld35iSb4Z5klm/Enx5wwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH45syyE1BsJ6LkfwckNGftf88lI1I+PBRtH 4rhISLlEPC3Mtc38FSNTf+6474j2RkFfrXbYasxRVanyXsjrUnEJDYfAVaYKDn5G GlbRlhY4rPa9rt52wKFP9m/kG+P/iIlJsAO9MZ8Lt/jmELYtjPgoMrdCdkbvcDlo E11YkiliPPKsjdRK3DqXLO0PiI/6FG4GqWCK99AsCANzuOF3xzEC/AProdZUZKiA mMDK7vzFBJC+a/w33uLHxkEkb6kdHk8o6iQEfnqGiEmU8gZdu9Qi7+Mnb9JvxuLs YIe7obxXFpgLCe+cRzxJTpLcmVCXGbzLCUUJoDncWWVusZKOk6Y= -----END CERTIFICATE-----Generated at Sat May 10 10:08:52 2025 by rpki-client