$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: 3NyCIZ9BW/8jxQp9jDNuiIZarOYyLQAuS7o09Uwbzdg= Subject key identifier: A0:F1:62:5C:7D:C3:95:4A:EE:07:DF:A3:F0:C0:6D:56:7F:B1:8A:76 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 686BDB2E5E9AA9B4C329437DA437277F689F3E4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04AF Signing time: Sun 29 Jun 2025 21:31:45 +0000 Manifest this update: Sun 29 Jun 2025 21:26:45 +0000 Manifest next update: Thu 03 Jul 2025 00:50:45 +0000 Files and hashes: 1: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: SRwsZydMySikfJ/GCD2mFqd9F0BIlnEhWXoAVYNn6HM=) 2: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: NE2wUm0a6C2swuZO2fV7c2wJLip9VXCrjXFKXV60uIg=) 3: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: 0xS1n+w9VXczMS13QZF1W/J/5uwMSBEtc22dFFlfKPU=) 4: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: vkcujdZ/39Au/wJ2Cd7g42T7SVP95uPuSJkl+n4ENIE=) 5: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: RzoGAVULQKoltyzBYMLW0yi6KDL7goz4wxpNzsi4gCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6b:db:2e:5e:9a:a9:b4:c3:29:43:7d:a4:37:27:7f:68:9f:3e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jun 29 21:26:45 2025 GMT Not After : Jul 3 00:50:45 2025 GMT Subject: CN=A0F1625C7DC3954AEE07DFA3F0C06D567FB18A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:45:11:d9:7e:93:79:ab:94:97:e4:2c:95: 8f:48:be:66:32:f2:f5:0d:49:72:0d:fa:73:dc:8e: 65:f4:f3:fa:42:71:db:1e:0b:20:d2:64:9c:d3:2d: a6:5a:7b:8d:09:43:95:40:9f:2a:00:73:3e:57:b2: 29:25:3e:6e:28:77:2f:b3:ed:cb:16:e2:b6:91:9c: 97:57:4e:e7:cf:20:9f:8c:d5:62:50:00:39:45:97: ca:5a:b2:1f:15:e0:a4:fa:fa:34:13:22:0d:00:a3: ef:7a:17:b1:49:15:ce:61:1c:d3:7a:3c:ee:85:ae: fc:98:40:93:c0:0f:8f:a8:54:82:92:a0:36:ec:ba: 50:45:3a:4a:9a:de:25:e7:d7:5e:5c:dd:a9:ad:a5: f4:0d:71:b8:cd:3a:33:ff:ba:e4:07:6a:ab:7d:98: 7a:4a:c1:3c:a0:5d:58:bd:67:2f:11:ab:c6:ed:9b: 0a:c2:c8:d3:81:5b:a1:6c:da:59:0d:e7:77:28:47: ea:0a:51:53:67:f3:ab:ec:e4:ae:0e:06:c0:81:9c: 7e:d8:a0:37:22:53:57:96:7e:d7:1c:60:cd:4b:22: 7f:f4:14:53:93:8a:2d:8a:2d:49:5a:44:f9:01:c2: 4d:7a:6d:73:49:8e:fc:20:c4:a3:da:19:bf:79:9d: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:62:5C:7D:C3:95:4A:EE:07:DF:A3:F0:C0:6D:56:7F:B1:8A:76 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7e:cb:7b:d0:08:f6:70:8c:1b:c1:f4:02:e9:b5:92:28:67: bd:51:e5:64:9f:7e:5e:4a:39:f7:b6:3f:93:93:6a:62:ce:67: 38:65:bd:43:aa:2e:f0:11:1b:b7:86:73:4f:9e:f3:e9:e4:5d: be:b2:66:95:8a:a2:0e:14:95:20:f8:0f:c1:f8:37:45:7c:4f: ea:1a:68:68:a5:a7:12:24:9c:55:94:0f:6e:eb:e3:3e:a8:15: 4d:fb:96:f6:29:4b:44:6d:57:3d:7b:19:bf:dd:4c:27:9c:ce: eb:fc:ec:76:ac:00:8a:85:43:45:d1:80:10:10:a7:5b:93:e1: bf:de:1f:31:25:f4:39:ac:4a:b1:85:0d:99:32:01:94:d1:63: e2:a3:e2:4f:82:e0:18:3b:cf:33:04:e4:d7:4b:70:e8:a9:55: 27:34:59:b2:e2:1b:f3:73:b1:41:2a:6e:01:27:d8:56:2a:18: 4f:15:75:87:19:4c:fb:d4:99:ff:7f:32:2e:b3:ef:7b:7c:68: 9d:ec:8b:07:4a:ea:d5:5c:b9:be:65:42:bd:de:25:d5:d1:63: 76:c1:a8:fc:2d:23:30:bb:9d:73:e1:bb:0f:08:38:ba:84:2d: de:b3:13:10:56:9a:90:0e:81:4f:e2:a3:21:e5:3d:4c:53:48: 9b:19:5b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGvbLl6aqbTDKUN9pDcnf2ifPk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTA2MjkyMTI2NDVaFw0yNTA3MDMwMDUwNDVaMDMxMTAvBgNV BAMTKEEwRjE2MjVDN0RDMzk1NEFFRTA3REZBM0YwQzA2RDU2N0ZCMThBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwj0UR2X6TeauUl+QslY9IvmYy 8vUNSXIN+nPcjmX08/pCcdseCyDSZJzTLaZae40JQ5VAnyoAcz5XsiklPm4ody+z 7csW4raRnJdXTufPIJ+M1WJQADlFl8pash8V4KT6+jQTIg0Ao+96F7FJFc5hHNN6 PO6FrvyYQJPAD4+oVIKSoDbsulBFOkqa3iXn115c3amtpfQNcbjNOjP/uuQHaqt9 mHpKwTygXVi9Zy8Rq8btmwrCyNOBW6Fs2lkN53coR+oKUVNn86vs5K4OBsCBnH7Y oDciU1eWftccYM1LIn/0FFOTii2KLUlaRPkBwk16bXNJjvwgxKPaGb95nf0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPFiXH3DlUruB9+j8MBtVn+xinYwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ+y3vQCPZwjBvB9ALptZIoZ71R5WSffl5K Ofe2P5OTamLOZzhlvUOqLvARG7eGc0+e8+nkXb6yZpWKog4UlSD4D8H4N0V8T+oa aGilpxIknFWUD27r4z6oFU37lvYpS0RtVz17Gb/dTCeczuv87HasAIqFQ0XRgBAQ p1uT4b/eHzEl9DmsSrGFDZkyAZTRY+Kj4k+C4Bg7zzME5NdLcOipVSc0WbLiG/Nz sUEqbgEn2FYqGE8VdYcZTPvUmf9/Mi6z73t8aJ3siwdK6tVcub5lQr3eJdXRY3bB qPwtIzC7nXPhuw8IOLqELd6zExBWmpAOgU/ioyHlPUxTSJsZWw0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:40:47 2025 by rpki-client