$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: 36Yf5TZJrHezT1YGlNY4l5rpWQJmAJyvVTNwWl5w5fQ= Subject key identifier: 42:AD:D6:8F:5C:5F:C4:31:CD:88:0B:DB:F7:CF:94:3F:5E:01:8E:9A Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 5757769A5F4A9DECA05C00301FCE9EE45F1D514D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0162 Signing time: Fri 04 Jul 2025 11:51:50 +0000 Manifest this update: Fri 04 Jul 2025 11:46:50 +0000 Manifest next update: Mon 07 Jul 2025 22:56:50 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: c6Stx8X8WaddJdhThnK1BZmsv+elDYyO08x5qKx7ynI=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:57:76:9a:5f:4a:9d:ec:a0:5c:00:30:1f:ce:9e:e4:5f:1d:51:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Jul 4 11:46:50 2025 GMT Not After : Jul 7 22:56:50 2025 GMT Subject: CN=42ADD68F5C5FC431CD880BDBF7CF943F5E018E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:50:8f:5d:23:bf:77:d6:ed:cb:38:75:c2: 9f:02:af:d9:d3:58:5b:18:85:34:0a:55:e3:3b:3c: 1f:c6:54:ed:8f:f3:66:fc:de:eb:c6:d7:99:2c:a5: b1:ab:e1:76:22:d0:4c:d2:bb:78:ab:5e:1a:52:e7: 73:c5:ad:a0:68:be:65:ac:f7:de:cf:1b:fa:97:f7: 47:58:4a:ad:bc:6a:9e:f2:b1:33:36:f9:c2:51:e8: d4:eb:b0:42:67:45:cb:82:d5:8a:2f:da:44:9d:f8: b4:5b:1d:8e:9c:77:0a:dc:4e:1d:eb:66:86:1f:db: 4c:3c:ce:e1:fc:d5:1a:35:b4:1b:1a:fa:93:95:49: ec:77:a4:5a:ea:a7:99:2e:12:da:79:c6:09:bd:26: 17:6f:0b:19:64:f3:d5:4f:63:78:0e:d5:a4:eb:ac: de:4d:c6:69:bf:98:45:17:73:ad:0d:56:11:a6:c3: 41:cb:01:f7:13:06:e0:8a:cf:7a:85:e7:14:5f:d0: f2:8b:50:c5:ac:53:42:19:70:ed:ff:d2:55:82:80: 67:6f:d0:af:89:05:d2:30:5a:6a:a1:b3:e8:45:ae: ea:eb:cb:4d:66:7d:33:3b:8a:5e:f3:a9:e0:c6:9a: b4:a1:b7:aa:60:54:6a:ad:43:ce:f1:02:53:58:ef: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:D6:8F:5C:5F:C4:31:CD:88:0B:DB:F7:CF:94:3F:5E:01:8E:9A X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8e:02:6a:ac:e5:2e:a3:16:8d:f9:2e:2f:1b:d5:44:d8:27: bd:63:7c:a5:56:34:26:fb:eb:3c:93:38:e2:18:6b:35:3b:9f: df:99:c6:66:81:b9:74:fb:c1:7f:4d:8b:48:38:e9:dc:c5:12: b5:0e:3e:e5:08:24:07:66:9b:a5:29:3a:4b:ec:db:73:4b:2c: bc:a2:37:37:81:e9:e8:22:5f:d0:f2:e6:ba:90:23:d7:c0:b9: 9f:98:61:a1:cd:d7:b7:6a:a2:53:45:e4:11:7c:80:96:d8:24: 32:0d:fb:b6:06:25:88:cf:f3:11:52:4f:2c:62:0d:4b:7e:5c: b8:95:33:b4:c6:8f:54:4f:5f:43:37:3f:61:77:43:66:17:1e: f5:a1:1a:f2:6c:a7:3c:f1:af:6e:31:bf:6c:9b:1b:e1:d8:a6: c1:9d:98:8d:b2:b9:f9:db:24:e3:86:f4:67:d4:96:bc:23:57: 57:e3:49:5d:69:5d:b2:79:93:bf:cd:e9:05:65:ab:0a:fc:54: 05:dc:ee:c2:89:08:63:a4:ae:89:b5:fe:fc:62:f1:1f:32:6c: 2a:a4:08:6b:4f:4f:e7:5a:09:a5:5f:c0:f6:8d:be:e7:dd:9b: 45:52:23:e4:30:62:ac:0a:bb:0e:93:43:5e:74:be:65:1b:c0: 93:a2:85:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1d2ml9KneygXAAwH86e5F8dUU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA3MDQxMTQ2NTBaFw0yNTA3MDcyMjU2NTBaMDMxMTAvBgNV BAMTKDQyQURENjhGNUM1RkM0MzFDRDg4MEJEQkY3Q0Y5NDNGNUUwMThFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlFCPXSO/d9btyzh1wp8Cr9nT WFsYhTQKVeM7PB/GVO2P82b83uvG15kspbGr4XYi0EzSu3irXhpS53PFraBovmWs 997PG/qX90dYSq28ap7ysTM2+cJR6NTrsEJnRcuC1Yov2kSd+LRbHY6cdwrcTh3r ZoYf20w8zuH81Ro1tBsa+pOVSex3pFrqp5kuEtp5xgm9JhdvCxlk89VPY3gO1aTr rN5Nxmm/mEUXc60NVhGmw0HLAfcTBuCKz3qF5xRf0PKLUMWsU0IZcO3/0lWCgGdv 0K+JBdIwWmqhs+hFrurry01mfTM7il7zqeDGmrSht6pgVGqtQ87xAlNY76jjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQq3Wj1xfxDHNiAvb98+UP14BjpowHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSOAmqs5S6jFo35Li8b1UTYJ71jfKVWNCb7 6zyTOOIYazU7n9+ZxmaBuXT7wX9Ni0g46dzFErUOPuUIJAdmm6UpOkvs23NLLLyi NzeB6egiX9Dy5rqQI9fAuZ+YYaHN17dqolNF5BF8gJbYJDIN+7YGJYjP8xFSTyxi DUt+XLiVM7TGj1RPX0M3P2F3Q2YXHvWhGvJspzzxr24xv2ybG+HYpsGdmI2yufnb JOOG9GfUlrwjV1fjSV1pXbJ5k7/N6QVlqwr8VAXc7sKJCGOkrom1/vxi8R8ybCqk CGtPT+daCaVfwPaNvufdm0VSI+QwYqwKuw6TQ150vmUbwJOihc4= -----END CERTIFICATE-----Generated at Sat Jul 5 07:50:28 2025 by rpki-client