$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: OWvJxIaXEbpvJkQUc1Sb5ewsQIbm2n9vdgVIbvdK3FM= Subject key identifier: B5:3A:C1:5B:BD:32:DD:6B:29:52:16:8C:A7:FC:D2:6D:61:97:B6:C7 Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 4FAE146DE57ED1B6EA087C3C991B83D6BC2A39C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 0183 Signing time: Fri 09 May 2025 11:51:16 +0000 Manifest this update: Fri 09 May 2025 11:46:16 +0000 Manifest next update: Mon 12 May 2025 17:12:16 +0000 Files and hashes: 1: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: Q5ncZkPV8NKyeFmrIdQ68t7mI6B+kUsReCqTvJ6hTjE=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=) 3: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ae:14:6d:e5:7e:d1:b6:ea:08:7c:3c:99:1b:83:d6:bc:2a:39:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: May 9 11:46:16 2025 GMT Not After : May 12 17:12:16 2025 GMT Subject: CN=B53AC15BBD32DD6B2952168CA7FCD26D6197B6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:9b:ee:be:06:68:b2:3e:72:c1:ed:71:41: 54:bf:5f:0b:f6:24:c4:d8:ec:a9:01:6c:25:02:bc: 7e:d5:17:51:73:89:a9:81:f0:9c:b9:58:14:81:8d: 5a:f3:ae:24:6b:8c:75:d2:81:7e:b4:52:46:af:73: b2:d3:0f:6e:94:a1:b9:85:37:0a:f1:ff:7b:73:4a: eb:ba:b7:77:ff:ac:25:a1:d2:0c:fb:b2:b8:45:2a: 00:a6:36:d0:0e:25:22:74:be:33:96:3f:78:11:b5: ed:17:17:c8:41:78:8b:67:fb:22:64:4a:df:d5:25: 47:95:5a:bc:61:62:ae:47:62:19:cd:52:c3:bb:e7: 27:63:89:72:ba:0f:e3:4c:c8:ad:ab:8a:65:70:bc: 47:1e:c0:6b:2d:95:22:a8:36:d1:3a:62:72:9b:df: 4b:d4:d9:ff:ca:7a:c5:b1:80:5e:20:9d:73:c4:aa: a7:ee:65:63:26:0d:ea:fa:0e:49:29:e2:3e:c3:8b: 0e:00:4c:35:a9:e5:ad:33:32:e1:88:46:5a:89:fa: 7e:72:4b:b8:65:92:9a:bc:96:5a:17:0b:47:94:ee: cc:e5:f7:4d:de:87:5f:ae:b0:68:43:29:eb:1c:a7: 1b:2e:ae:14:b0:9c:e4:bd:90:36:48:5a:07:ab:31: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3A:C1:5B:BD:32:DD:6B:29:52:16:8C:A7:FC:D2:6D:61:97:B6:C7 X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d3:0d:d8:6a:2e:3f:08:62:a8:e6:33:44:41:48:19:15:55: 52:57:d1:c2:97:c1:4f:85:84:23:6d:32:33:43:36:fa:72:e0: 10:9f:1c:6e:1d:f3:23:d2:43:d8:9a:7d:af:0f:69:16:e0:c1: 1a:cb:96:ee:da:19:d9:56:da:34:13:f6:c4:72:5a:45:6a:c2: 48:f2:17:7c:a8:05:5c:83:25:6b:92:06:67:8c:88:df:c1:8b: bc:c1:c1:21:9c:70:38:6e:e0:ef:37:57:26:de:ea:33:7a:22: ed:33:d6:ad:1e:38:e5:19:f7:65:53:02:06:2e:f6:37:c5:4a: 7d:22:e9:38:58:a9:53:e5:52:2b:f0:55:a4:68:75:fa:7c:65: 25:5c:93:76:9f:48:69:b5:4b:f9:93:97:b5:f4:85:bc:27:cd: d6:16:ec:a4:1a:01:76:d4:f4:46:29:b1:90:12:6c:7c:3b:29: ab:b0:39:da:69:80:49:be:40:96:df:01:0a:ec:bc:5e:c5:38: fa:54:e2:4d:8a:fa:76:d8:f2:c8:1d:86:ba:fb:13:b1:ba:dd: f0:2a:ae:70:c9:ad:7f:ff:e8:b1:28:c4:94:9a:d3:7a:68:4b: af:4b:47:e4:cd:be:6d:e4:98:a7:ec:45:f5:3a:5f:10:00:f0: b4:c2:ad:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT64UbeV+0bbqCHw8mRuD1rwqOcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNTA1MDkxMTQ2MTZaFw0yNTA1MTIxNzEyMTZaMDMxMTAvBgNV BAMTKEI1M0FDMTVCQkQzMkRENkIyOTUyMTY4Q0E3RkNEMjZENjE5N0I2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IZvuvgZosj5ywe1xQVS/Xwv2 JMTY7KkBbCUCvH7VF1FziamB8Jy5WBSBjVrzriRrjHXSgX60Ukavc7LTD26UobmF Nwrx/3tzSuu6t3f/rCWh0gz7srhFKgCmNtAOJSJ0vjOWP3gRte0XF8hBeItn+yJk St/VJUeVWrxhYq5HYhnNUsO75ydjiXK6D+NMyK2rimVwvEcewGstlSKoNtE6YnKb 30vU2f/KesWxgF4gnXPEqqfuZWMmDer6Dkkp4j7Diw4ATDWp5a0zMuGIRlqJ+n5y S7hlkpq8lloXC0eU7szl903eh1+usGhDKescpxsurhSwnOS9kDZIWgerMe9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTrBW70y3WspUhaMp/zSbWGXtscwHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnTDdhqLj8IYqjmM0RBSBkVVVJX0cKXwU+F hCNtMjNDNvpy4BCfHG4d8yPSQ9iafa8PaRbgwRrLlu7aGdlW2jQT9sRyWkVqwkjy F3yoBVyDJWuSBmeMiN/Bi7zBwSGccDhu4O83Vybe6jN6Iu0z1q0eOOUZ92VTAgYu 9jfFSn0i6ThYqVPlUivwVaRodfp8ZSVck3afSGm1S/mTl7X0hbwnzdYW7KQaAXbU 9EYpsZASbHw7KauwOdppgEm+QJbfAQrsvF7FOPpU4k2K+nbY8sgdhrr7E7G63fAq rnDJrX//6LEoxJSa03poS69LR+TNvm3kmKfsRfU6XxAA8LTCrWg= -----END CERTIFICATE-----Generated at Sat May 10 05:39:52 2025 by rpki-client