$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: H5qv1TSooY1kJVjTXvC2MvcPai81nVQfqTVuRBxvzls= Subject key identifier: 2C:49:A3:56:D3:0D:A7:EE:1B:D0:36:02:71:33:51:75:C4:6F:D2:71 Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 0FC19F55D2E6BA0ED326FC9600A8DACBD0FF991A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0149 Signing time: Fri 09 May 2025 22:31:52 +0000 Manifest this update: Fri 09 May 2025 22:26:52 +0000 Manifest next update: Tue 13 May 2025 06:27:52 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: xLKvF3L4MYkDbWHwp8ig8ixDY5BzJH44D1COaE+1jyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c1:9f:55:d2:e6:ba:0e:d3:26:fc:96:00:a8:da:cb:d0:ff:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: May 9 22:26:52 2025 GMT Not After : May 13 06:27:52 2025 GMT Subject: CN=2C49A356D30DA7EE1BD0360271335175C46FD271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:66:8f:ef:2f:87:c6:cb:87:ce:92:b0:6f: a9:0d:48:09:ba:48:97:20:1f:3a:e2:b8:a6:32:56: c9:b6:3e:ba:5e:81:81:85:f2:94:75:19:fb:10:f8: 3b:30:1d:c6:93:a4:dc:bb:bc:9b:c7:27:df:6b:b0: 69:65:78:8d:c6:43:55:52:6f:1f:96:91:2e:6e:86: 87:d4:3d:8c:c3:76:73:98:13:22:8b:43:1b:11:f7: 5b:32:f9:10:38:67:41:5a:b3:05:61:e8:77:de:73: be:10:9d:7b:cc:6c:5e:91:3d:70:72:00:69:8b:77: c1:a2:ff:3a:bd:18:45:c3:de:a8:3f:df:04:cc:87: 74:ab:35:bb:3f:95:14:09:af:b2:00:1e:01:82:70: 6f:c3:94:3b:3c:aa:a8:0a:28:d9:b2:0e:ff:e8:39: 3a:4f:44:ab:3f:f9:99:5d:18:06:44:ec:e0:40:71: 18:6a:3f:2c:9b:9e:dc:11:b7:f0:ba:78:a2:60:1d: 12:b0:60:56:bb:aa:e8:30:0b:cf:a9:6c:64:bb:70: 2b:a4:a7:56:bd:3b:c1:5a:06:21:c4:6b:67:de:04: 07:57:73:4e:33:5f:1d:44:4e:76:76:ac:ae:5f:59: 1f:75:26:a9:53:f1:d7:ff:e9:9a:41:53:22:ed:d2: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:49:A3:56:D3:0D:A7:EE:1B:D0:36:02:71:33:51:75:C4:6F:D2:71 X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4c:25:b9:33:00:2b:ef:72:2a:6d:c0:9e:96:52:ed:1e:fd: 2b:9f:ee:fd:57:0a:f8:b1:b8:69:12:93:57:fc:12:42:79:f7: 07:8a:3b:02:55:aa:fd:da:6b:b2:7d:a9:f2:6c:9f:59:8b:36: 76:5a:cb:01:46:c7:29:6b:87:68:f6:48:be:15:8d:ca:76:ae: 3e:7f:b6:bd:11:9d:9e:f5:b3:86:d5:55:22:5e:57:6b:9d:9f: c9:6f:ed:9e:2c:43:38:23:14:da:09:ff:34:a4:ae:37:90:eb: e3:00:80:3c:8e:d9:ab:0b:0a:3e:d0:18:ab:65:cb:b8:fe:37: 52:5e:da:c8:7e:1a:4d:94:6d:df:8d:8f:21:64:db:e6:9c:41: 60:07:b8:47:dc:56:aa:24:b8:65:68:4a:6d:d1:84:61:45:d5: 3f:da:3a:5e:d0:fd:a3:b3:4b:3a:07:cd:42:83:0f:15:7a:42: 88:49:ce:ca:17:8d:f8:9d:eb:86:d3:49:0b:bf:01:0a:c4:4f: 7b:d2:cb:94:15:e6:9f:3b:b7:a0:75:41:08:53:19:8c:2d:9c: 32:fd:80:50:0f:47:65:79:cf:c4:33:a9:14:54:00:ef:a6:f5: 5a:c5:03:22:b6:7c:f6:96:ad:36:3f:18:67:30:34:c7:01:04: 41:3f:fa:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8GfVdLmug7TJvyWAKjay9D/mRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA1MDkyMjI2NTJaFw0yNTA1MTMwNjI3NTJaMDMxMTAvBgNV BAMTKDJDNDlBMzU2RDMwREE3RUUxQkQwMzYwMjcxMzM1MTc1QzQ2RkQyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGK2aP7y+HxsuHzpKwb6kNSAm6 SJcgHzriuKYyVsm2PrpegYGF8pR1GfsQ+DswHcaTpNy7vJvHJ99rsGlleI3GQ1VS bx+WkS5uhofUPYzDdnOYEyKLQxsR91sy+RA4Z0FaswVh6Hfec74QnXvMbF6RPXBy AGmLd8Gi/zq9GEXD3qg/3wTMh3SrNbs/lRQJr7IAHgGCcG/DlDs8qqgKKNmyDv/o OTpPRKs/+ZldGAZE7OBAcRhqPyybntwRt/C6eKJgHRKwYFa7qugwC8+pbGS7cCuk p1a9O8FaBiHEa2feBAdXc04zXx1ETnZ2rK5fWR91JqlT8df/6ZpBUyLt0mzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULEmjVtMNp+4b0DYCcTNRdcRv0nEwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJMJbkzACvvciptwJ6WUu0e/Suf7v1XCvix uGkSk1f8EkJ59weKOwJVqv3aa7J9qfJsn1mLNnZaywFGxylrh2j2SL4Vjcp2rj5/ tr0RnZ71s4bVVSJeV2udn8lv7Z4sQzgjFNoJ/zSkrjeQ6+MAgDyO2asLCj7QGKtl y7j+N1Je2sh+Gk2Ubd+NjyFk2+acQWAHuEfcVqokuGVoSm3RhGFF1T/aOl7Q/aOz SzoHzUKDDxV6QohJzsoXjfid64bTSQu/AQrET3vSy5QV5p87t6B1QQhTGYwtnDL9 gFAPR2V5z8QzqRRUAO+m9VrFAyK2fPaWrTY/GGcwNMcBBEE/+uY= -----END CERTIFICATE-----Generated at Sat May 10 03:45:05 2025 by rpki-client