$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: 0JwIPWy9stHjoYjuvonyOGOo5J+Srt5zR5Oao8Y6Sw0= Subject key identifier: 9D:68:2A:EC:1A:3F:BF:3B:EC:0B:0B:BC:33:FA:39:79:56:0C:67:DC Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 46EEB3C9D527E4707AF4AE845C2307FDC8401E2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0192 Signing time: Sun 19 Oct 2025 20:51:56 +0000 Manifest this update: Sun 19 Oct 2025 20:46:56 +0000 Manifest next update: Wed 22 Oct 2025 22:43:56 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) 2: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: m4WMrzhd17Ec4Lf1AVfJ7YEMIO8RtFeSREWjgAUJGPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ee:b3:c9:d5:27:e4:70:7a:f4:ae:84:5c:23:07:fd:c8:40:1e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Oct 19 20:46:56 2025 GMT Not After : Oct 22 22:43:56 2025 GMT Subject: CN=9D682AEC1A3FBF3BEC0B0BBC33FA3979560C67DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:2f:34:ff:10:63:9d:ba:8f:d0:4f:53:18:cc: 77:dc:8b:ab:97:d1:2e:5a:01:69:06:2c:f3:0d:9b: 89:e0:96:2e:61:0f:6b:49:c8:7f:2b:bc:4c:aa:ef: 56:59:11:88:ec:01:a9:48:bd:de:db:cb:f1:82:a2: e8:09:41:ab:d4:ef:ff:59:b6:63:2e:fb:f4:e2:81: 9a:30:ba:c1:b5:db:c1:3b:1d:19:60:af:35:85:91: fe:2e:aa:15:16:97:73:0f:47:85:7f:3e:83:bc:bc: 3d:a7:0d:e9:27:bf:70:ec:d7:02:c4:0f:0d:0f:50: 49:38:44:a3:9b:5e:95:0b:b4:14:b8:be:35:02:61: 85:41:85:44:5e:79:77:33:17:d9:e4:6b:b2:c4:3c: c1:27:8d:d7:6d:d2:6c:e8:30:25:90:65:3f:01:fa: 82:10:d0:38:0d:c6:aa:de:67:6a:4b:fe:51:3c:7a: 3c:ac:5c:2a:4f:e8:ea:6f:47:99:b1:d4:79:17:0e: 3d:d9:55:b3:78:d4:f8:b2:ac:44:95:ab:df:d6:fc: ac:f9:14:d9:b8:c4:b2:fe:25:4b:27:b0:c8:90:07: 99:ab:00:a7:a1:e6:df:c1:96:7e:cc:68:c2:f6:62: 95:df:4d:e9:7a:9f:a3:22:74:f6:70:80:04:93:fa: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:68:2A:EC:1A:3F:BF:3B:EC:0B:0B:BC:33:FA:39:79:56:0C:67:DC X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3d:c9:46:55:c5:0c:92:43:41:02:c2:47:33:d4:09:d6:34: ee:2d:60:eb:b7:ff:56:f2:61:36:5c:b5:86:42:6b:26:78:2c: 21:43:53:33:78:f4:dd:12:63:07:01:ac:1a:83:8b:34:cd:27: 9e:f0:f1:67:d0:02:34:65:18:fd:8f:d5:f3:22:db:d7:b8:ce: e3:31:45:70:ba:c7:25:d6:2a:fd:cc:4d:e5:62:07:e9:d9:fc: 4a:64:c1:2e:19:d1:f2:a9:e4:d4:32:7d:b9:60:18:03:83:37: da:e7:e6:70:29:b4:01:d0:ef:4a:05:b4:df:bd:9d:ed:64:69: bc:ee:63:fb:c3:8d:bf:62:88:32:9a:a3:6c:07:05:72:17:63: 4a:c4:ec:e5:24:a8:69:f1:e1:c6:28:0e:90:10:a9:73:3b:6c: 38:c1:a2:5a:36:ad:df:8a:75:0b:8a:ac:4f:17:1f:62:e7:b1: 43:cf:33:f0:95:74:e8:da:cb:b1:15:a0:d3:c1:1b:8d:ce:6f: d6:ce:b6:e5:14:09:0c:18:3e:14:e8:ff:fb:8c:f3:54:df:c4: 3f:26:ae:bb:aa:94:67:4f:cd:81:70:86:81:b0:de:b4:42:26: ec:fd:25:1c:55:8a:64:ac:1d:21:8a:a7:be:8a:78:aa:3c:92: c8:4c:d2:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURu6zydUn5HB69K6EXCMH/chAHiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTEwMTkyMDQ2NTZaFw0yNTEwMjIyMjQzNTZaMDMxMTAvBgNV BAMTKDlENjgyQUVDMUEzRkJGM0JFQzBCMEJCQzMzRkEzOTc5NTYwQzY3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5LzT/EGOduo/QT1MYzHfci6uX 0S5aAWkGLPMNm4ngli5hD2tJyH8rvEyq71ZZEYjsAalIvd7by/GCougJQavU7/9Z tmMu+/TigZowusG128E7HRlgrzWFkf4uqhUWl3MPR4V/PoO8vD2nDeknv3Ds1wLE Dw0PUEk4RKObXpULtBS4vjUCYYVBhUReeXczF9nka7LEPMEnjddt0mzoMCWQZT8B +oIQ0DgNxqreZ2pL/lE8ejysXCpP6OpvR5mx1HkXDj3ZVbN41PiyrESVq9/W/Kz5 FNm4xLL+JUsnsMiQB5mrAKeh5t/Bln7MaML2YpXfTel6n6MidPZwgAST+hhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnWgq7Bo/vzvsCwu8M/o5eVYMZ9wwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG49yUZVxQySQ0ECwkcz1AnWNO4tYOu3/1by YTZctYZCayZ4LCFDUzN49N0SYwcBrBqDizTNJ57w8WfQAjRlGP2P1fMi29e4zuMx RXC6xyXWKv3MTeViB+nZ/EpkwS4Z0fKp5NQyfblgGAODN9rn5nAptAHQ70oFtN+9 ne1kabzuY/vDjb9iiDKao2wHBXIXY0rE7OUkqGnx4cYoDpAQqXM7bDjBolo2rd+K dQuKrE8XH2LnsUPPM/CVdOjay7EVoNPBG43Ob9bOtuUUCQwYPhTo//uM81TfxD8m rruqlGdPzYFwhoGw3rRCJuz9JRxVimSsHSGKp76KeKo8kshM0rw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:36 2025 by rpki-client