$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: GOAvlcdaUjwl8z3BZRaY/ZXNielNjDo9aYX+27hxnsA= Subject key identifier: D5:50:F2:52:F3:F0:B2:F9:30:EC:99:D9:D7:2A:DF:1E:87:F6:4F:A8 Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 6B2202032086869A94D1599B545F9BCA708BD955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 01B2 Signing time: Sat 23 Aug 2025 01:51:19 +0000 Manifest this update: Sat 23 Aug 2025 01:46:19 +0000 Manifest next update: Tue 26 Aug 2025 08:04:19 +0000 Files and hashes: 1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=) 2: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: wDrrzBDccpAdf+Bakn3JYjXFxK0rp4xLihUgr6bBY58=) 3: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:22:02:03:20:86:86:9a:94:d1:59:9b:54:5f:9b:ca:70:8b:d9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Aug 23 01:46:19 2025 GMT Not After : Aug 26 08:04:19 2025 GMT Subject: CN=D550F252F3F0B2F930EC99D9D72ADF1E87F64FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:04:0d:51:14:b0:d2:be:ec:25:41:05:12: 64:48:9d:d7:bb:86:e9:b0:85:bc:98:16:4d:d8:cc: 16:03:34:8c:04:d2:18:83:98:bb:71:18:49:53:96: 28:73:76:43:73:de:60:ff:60:c1:c9:e9:96:92:49: 95:27:18:aa:2e:35:7e:a1:40:00:0c:c3:6a:e3:fc: 57:0d:13:9d:96:68:ab:1c:38:f7:ee:08:db:a5:61: b6:de:f5:62:43:fa:3b:9a:34:21:2f:ff:06:04:f8: 6b:a1:fd:19:1f:83:0d:dd:88:e9:be:06:5c:59:2c: dc:74:9b:78:d3:74:81:d6:09:1c:5f:45:24:24:aa: 26:05:e9:44:74:c5:13:3f:38:a1:f4:c2:20:99:21: 30:c9:67:86:dc:75:4b:5c:69:92:44:04:4b:80:e3: 6d:a3:0a:4a:7e:52:f5:d0:e1:29:83:55:42:6a:9f: 5c:ad:4f:25:e5:76:55:95:a7:ef:48:aa:5d:f8:16: 27:44:5e:31:46:6f:cf:4b:48:9b:d5:7f:2c:84:60: e3:7f:87:22:15:06:95:7f:98:f2:21:eb:2b:04:9a: 86:ec:4d:b6:0d:d3:2d:75:70:72:b9:f0:9c:9f:4d: ab:c5:9e:89:be:f4:72:f6:9c:80:b0:cd:87:50:02: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:F2:52:F3:F0:B2:F9:30:EC:99:D9:D7:2A:DF:1E:87:F6:4F:A8 X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:74:f3:bb:d1:49:14:26:c3:92:ba:42:88:ca:e8:fc:ef:0c: c7:8f:d1:2e:23:a2:dc:e9:d6:00:91:b1:d6:b4:34:f4:f1:d5: 1b:63:98:24:13:62:bb:49:e1:6a:e2:bd:4f:76:52:02:2a:08: 4c:03:f9:f2:42:7c:3d:33:18:8f:b6:33:d1:98:47:56:22:c4: 05:85:df:7e:dc:dc:ed:d5:85:d5:1d:6d:74:ed:1c:6a:b9:6c: a2:c4:d1:04:ab:79:97:6b:24:15:37:76:64:44:1d:4e:a1:74: 36:96:ee:0f:90:e1:62:e6:25:0f:58:66:c7:0f:de:fc:42:be: 55:78:da:bc:96:7b:af:32:24:46:47:36:50:56:eb:1c:e6:51: bd:f8:8a:2d:2e:12:30:28:50:90:8c:ad:94:7d:9d:e9:73:bc: 5a:53:63:0e:f1:b5:04:82:e4:e1:a8:d8:db:fd:f1:2c:5f:32: 9a:ff:c6:b3:4f:8d:00:9b:4c:9e:ff:dc:d3:80:99:e0:7c:18: b7:30:6f:04:20:85:98:13:90:72:f6:e6:99:37:9d:b5:6e:43: 6b:f5:3a:7c:1b:31:e7:8c:d6:e4:ae:fb:14:1c:43:c3:84:de: 2d:c1:b9:b1:93:a4:eb:5c:51:bf:fc:9a:b7:80:10:52:57:22: e3:6f:ca:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayICAyCGhpqU0VmbVF+bynCL2VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNTA4MjMwMTQ2MTlaFw0yNTA4MjYwODA0MTlaMDMxMTAvBgNV BAMTKEQ1NTBGMjUyRjNGMEIyRjkzMEVDOTlEOUQ3MkFERjFFODdGNjRGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFQQNURSw0r7sJUEFEmRInde7 humwhbyYFk3YzBYDNIwE0hiDmLtxGElTlihzdkNz3mD/YMHJ6ZaSSZUnGKouNX6h QAAMw2rj/FcNE52WaKscOPfuCNulYbbe9WJD+juaNCEv/wYE+Guh/Rkfgw3diOm+ BlxZLNx0m3jTdIHWCRxfRSQkqiYF6UR0xRM/OKH0wiCZITDJZ4bcdUtcaZJEBEuA 422jCkp+UvXQ4SmDVUJqn1ytTyXldlWVp+9Iql34FidEXjFGb89LSJvVfyyEYON/ hyIVBpV/mPIh6ysEmobsTbYN0y11cHK58JyfTavFnom+9HL2nICwzYdQAqcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VDyUvPwsvkw7JnZ1yrfHof2T6gwHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd087vRSRQmw5K6QojK6PzvDMeP0S4jotzp 1gCRsda0NPTx1RtjmCQTYrtJ4WrivU92UgIqCEwD+fJCfD0zGI+2M9GYR1YixAWF 337c3O3VhdUdbXTtHGq5bKLE0QSreZdrJBU3dmREHU6hdDaW7g+Q4WLmJQ9YZscP 3vxCvlV42ryWe68yJEZHNlBW6xzmUb34ii0uEjAoUJCMrZR9nelzvFpTYw7xtQSC 5OGo2Nv98SxfMpr/xrNPjQCbTJ7/3NOAmeB8GLcwbwQghZgTkHL25pk3nbVuQ2v1 OnwbMeeM1uSu+xQcQ8OE3i3BubGTpOtcUb/8mreAEFJXIuNvysk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:37 2025 by rpki-client