$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: xebf2ZyrNb5g4AIWUOcktRiDo+T9Mp++K/DtFBqelhU= Subject key identifier: C2:E3:35:5A:4E:62:9D:F4:8A:95:D1:FA:61:CE:E2:78:CE:EA:B8:9E Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 4870BA712CA96BC566B376C733C47209BA1C08BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0178 Signing time: Sat 23 Aug 2025 02:31:56 +0000 Manifest this update: Sat 23 Aug 2025 02:26:56 +0000 Manifest next update: Tue 26 Aug 2025 09:38:56 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) 2: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: EfvT5Pdv6x+eQP9sx6vy/UZbchn+Lv8P6zGo0l2An+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:70:ba:71:2c:a9:6b:c5:66:b3:76:c7:33:c4:72:09:ba:1c:08:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Aug 23 02:26:56 2025 GMT Not After : Aug 26 09:38:56 2025 GMT Subject: CN=C2E3355A4E629DF48A95D1FA61CEE278CEEAB89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:4f:22:87:32:66:d3:89:56:e3:29:1a:b1: 25:4c:39:51:0f:18:e2:6d:99:ff:61:fe:3e:e8:29: 8c:89:97:da:3f:c2:13:fa:52:ad:b7:3f:d9:90:03: a4:ab:9a:7e:49:b9:0d:8d:b3:ba:7b:88:c2:8e:d7: 60:76:3f:52:f2:e8:7a:15:b9:35:02:a0:11:16:99: 8e:23:d2:64:4d:e5:4e:84:8c:d3:a6:2d:91:3d:c8: c8:a3:20:a9:74:f3:dc:4f:11:da:eb:f4:07:fb:0c: b3:23:32:97:4c:bb:1b:80:1a:13:9b:a8:b0:a2:3b: be:e5:0e:6d:56:3c:a2:51:af:d7:52:ae:43:88:18: 2b:02:aa:4d:03:07:0b:12:98:60:7a:bf:50:f5:fa: 36:b8:c0:3b:0b:03:fd:4a:ae:09:62:69:7b:95:07: 18:d6:47:2f:92:3e:bb:ac:6a:65:6f:a5:a9:e0:03: d9:81:cd:cb:df:77:91:38:ef:cb:4f:33:6e:16:03: f1:89:e6:75:e5:ea:be:4c:b2:ea:8d:93:f7:48:96: e1:4b:56:22:7f:bc:84:17:8a:62:d0:f7:ea:7f:cf: 18:51:3c:c8:65:f5:05:d5:9d:5b:2c:87:f8:63:f4: 91:b8:42:e2:8d:fd:ac:de:b2:3e:92:89:2e:93:44: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E3:35:5A:4E:62:9D:F4:8A:95:D1:FA:61:CE:E2:78:CE:EA:B8:9E X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c6:b8:17:ad:61:87:65:63:6b:34:55:83:9a:df:23:26:dd: b8:e2:67:70:a5:40:70:37:e5:41:e8:28:b4:96:2d:57:62:43: 81:96:3d:b0:4f:b1:d1:f0:40:da:91:53:31:40:75:72:68:45: a6:a3:12:22:5d:9c:36:49:55:33:d0:e2:b7:7b:f2:20:34:ce: fa:86:55:ab:1a:1d:43:0a:ac:ca:fb:45:a8:dc:6a:c9:01:0d: a6:45:c7:79:80:ae:a5:0d:c5:e5:69:16:f1:6b:94:e0:a4:57: 80:31:e2:3d:68:8f:c5:c5:ee:74:0f:fd:b4:51:fb:76:d1:6c: 57:7e:e9:12:06:83:92:f4:d7:af:00:f3:3e:cf:23:f5:76:e3: 65:40:fe:d8:ef:a0:43:fc:c7:1d:fe:30:c0:14:51:68:fb:80: 24:47:ea:93:8d:04:5f:55:76:19:42:88:4c:ec:d1:34:03:50: da:04:0f:cd:9e:a7:c3:94:ef:44:97:53:84:84:e9:e1:51:24: 78:25:d7:39:9a:a1:9f:d7:a6:3d:67:ad:3a:a7:82:29:ef:31: bc:85:fb:62:2b:2e:b8:58:bf:8a:ef:1f:44:3f:7d:53:9e:a6: 98:cc:c4:0c:5a:16:e9:b6:22:df:7b:e8:f4:93:d2:a4:ed:a2: 79:c7:b4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHC6cSypa8Vms3bHM8RyCbocCLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA4MjMwMjI2NTZaFw0yNTA4MjYwOTM4NTZaMDMxMTAvBgNV BAMTKEMyRTMzNTVBNEU2MjlERjQ4QTk1RDFGQTYxQ0VFMjc4Q0VFQUI4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEU8ihzJm04lW4ykasSVMOVEP GOJtmf9h/j7oKYyJl9o/whP6Uq23P9mQA6Srmn5JuQ2Ns7p7iMKO12B2P1Ly6HoV uTUCoBEWmY4j0mRN5U6EjNOmLZE9yMijIKl089xPEdrr9Af7DLMjMpdMuxuAGhOb qLCiO77lDm1WPKJRr9dSrkOIGCsCqk0DBwsSmGB6v1D1+ja4wDsLA/1KrgliaXuV BxjWRy+SPrusamVvpangA9mBzcvfd5E478tPM24WA/GJ5nXl6r5MsuqNk/dIluFL ViJ/vIQXimLQ9+p/zxhRPMhl9QXVnVssh/hj9JG4QuKN/azesj6SiS6TRCIRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwuM1Wk5infSKldH6Yc7ieM7quJ4wHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTGuBetYYdlY2s0VYOa3yMm3bjiZ3ClQHA3 5UHoKLSWLVdiQ4GWPbBPsdHwQNqRUzFAdXJoRaajEiJdnDZJVTPQ4rd78iA0zvqG VasaHUMKrMr7RajcaskBDaZFx3mArqUNxeVpFvFrlOCkV4Ax4j1oj8XF7nQP/bRR +3bRbFd+6RIGg5L0168A8z7PI/V242VA/tjvoEP8xx3+MMAUUWj7gCRH6pONBF9V dhlCiEzs0TQDUNoED82ep8OU70SXU4SE6eFRJHgl1zmaoZ/Xpj1nrTqnginvMbyF +2IrLrhYv4rvH0Q/fVOeppjMxAxaFum2It976PST0qTtonnHtMg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:22 2025 by rpki-client