$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: 3c2ZS6dE2TnVque5IodvzJAK8NsdHWhYGOoQdaAr+8s= Subject key identifier: CC:19:64:72:BB:6D:88:28:C8:7E:2D:75:38:69:0A:63:CC:A5:0A:8F Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 6B27F015319A227D99C0AF22E55DC6948A72CCC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 02EA Signing time: Wed 07 May 2025 13:21:11 +0000 Manifest this update: Wed 07 May 2025 13:16:11 +0000 Manifest next update: Sat 10 May 2025 17:05:11 +0000 Files and hashes: 1: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: PcPRTu3DiANhfVrrQT3SmAu6ntl9hf2ou9If72Mn9jM=) 2: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: 04XRabDVfE4dREWxVqPX68ogqw6CjteNT+yHxPoaMWA=) 3: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 7M6efsLhqxjG1H0m8nrpYOTdTc1BnME2E5kel00NXYw=) 4: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: gB4EZJoHK905CwR/L43FWO/EADXfayVlG7nyunRWHhU=) 5: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: lPotcf7YU+xOCDeuMjZ1tnsipDHrIbOt+27H0Jh76mQ=) 6: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: 8aTJRu9foQFYsb9vuOMv9v2Z6K/Xnx4JbU5S1Q47rNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 17:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:27:f0:15:31:9a:22:7d:99:c0:af:22:e5:5d:c6:94:8a:72:cc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: May 7 13:16:11 2025 GMT Not After : May 10 17:05:11 2025 GMT Subject: CN=CC196472BB6D8828C87E2D7538690A63CCA50A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:74:73:1c:83:36:23:9f:d9:5f:c5:cd:8f: 46:23:34:72:ff:4b:fc:08:b1:a1:7c:ca:6e:dc:df: 63:b9:e4:34:44:81:8d:47:33:64:bc:23:44:aa:ea: d9:ad:84:25:44:b3:9a:46:e3:67:5d:99:b9:36:09: c5:98:89:65:ab:24:03:a5:a9:47:21:6b:8c:d7:00: b1:86:ca:fa:73:89:b8:76:e8:13:c0:80:0a:a8:db: 84:44:9e:51:e2:d7:52:16:24:55:52:a8:17:3c:8c: 91:65:75:aa:e1:91:3f:d1:59:30:cf:9f:c9:b0:d5: 61:8c:75:86:20:0a:e6:21:4d:5a:7c:4f:8f:c9:56: 00:2c:30:1f:76:5f:d2:4b:25:87:3d:ca:cd:c1:6b: b6:7d:ee:74:b4:dd:4f:67:f1:86:9b:9a:60:f8:a8: 9e:f2:c7:81:d1:37:33:9c:58:73:22:0d:db:83:71: 33:18:99:5f:58:32:67:fd:e2:08:06:9f:e2:39:a2: 2c:ad:46:21:22:2a:eb:a9:f7:28:6d:a2:02:64:87: ce:67:6c:59:1d:af:ee:a8:4a:66:b8:61:90:ab:06: 7d:08:64:7c:11:cc:aa:33:af:4c:0a:b5:8f:e0:4e: 80:98:7f:af:cc:67:56:eb:58:59:c0:aa:8b:b6:5c: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:19:64:72:BB:6D:88:28:C8:7E:2D:75:38:69:0A:63:CC:A5:0A:8F X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5a:0f:55:30:86:b3:78:ba:20:3d:50:81:0b:8e:b3:05:ad: 90:f1:08:1e:44:20:93:6b:95:24:19:59:8c:07:4c:25:35:67: a4:5c:62:8f:86:54:b9:54:fb:75:ef:54:33:d5:b6:bc:a4:81: 9d:1e:48:a5:46:d1:04:37:96:3e:bd:59:5b:5c:11:48:dd:c0: 1b:0e:b0:94:38:88:62:a9:96:5c:c6:ef:3a:c0:b1:aa:c0:4c: 97:a2:d6:bb:1f:64:98:3a:98:90:46:fe:d9:dd:e1:2e:43:c6: cf:4c:33:08:1f:33:99:a8:81:20:67:82:49:17:e6:0e:cc:df: 8d:03:bb:a9:d9:74:a9:ac:20:f5:30:08:7d:65:27:cb:db:6a: 3d:9f:7a:d0:2a:bd:6e:96:85:60:50:a3:67:84:c6:fd:c8:88: 87:c8:27:e8:6c:bd:c1:78:37:5b:33:7f:ff:c6:59:5a:5d:36: 07:4c:fe:e8:e1:5d:1b:5f:67:50:a1:94:1a:7d:f4:48:74:f7: 24:2a:3e:e5:14:74:63:13:34:fc:e9:2e:e8:1d:18:60:2f:12: c0:c5:83:c5:1a:03:6b:7a:d3:3a:e1:5a:7d:6e:23:3e:63:e3: 4d:f6:d5:6c:6e:3c:01:a0:4e:8a:5a:9a:c5:7b:02:d2:29:69: 44:e0:40:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayfwFTGaIn2ZwK8i5V3GlIpyzMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTA1MDcxMzE2MTFaFw0yNTA1MTAxNzA1MTFaMDMxMTAvBgNV BAMTKENDMTk2NDcyQkI2RDg4MjhDODdFMkQ3NTM4NjkwQTYzQ0NBNTBBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIenRzHIM2I5/ZX8XNj0YjNHL/ S/wIsaF8ym7c32O55DREgY1HM2S8I0Sq6tmthCVEs5pG42ddmbk2CcWYiWWrJAOl qUcha4zXALGGyvpzibh26BPAgAqo24REnlHi11IWJFVSqBc8jJFldarhkT/RWTDP n8mw1WGMdYYgCuYhTVp8T4/JVgAsMB92X9JLJYc9ys3Ba7Z97nS03U9n8YabmmD4 qJ7yx4HRNzOcWHMiDduDcTMYmV9YMmf94ggGn+I5oiytRiEiKuup9yhtogJkh85n bFkdr+6oSma4YZCrBn0IZHwRzKozr0wKtY/gToCYf6/MZ1brWFnAqou2XNXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzBlkcrttiCjIfi11OGkKY8ylCo8wHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9aD1UwhrN4uiA9UIELjrMFrZDxCB5EIJNr lSQZWYwHTCU1Z6RcYo+GVLlU+3XvVDPVtrykgZ0eSKVG0QQ3lj69WVtcEUjdwBsO sJQ4iGKpllzG7zrAsarATJei1rsfZJg6mJBG/tnd4S5Dxs9MMwgfM5mogSBngkkX 5g7M340Du6nZdKmsIPUwCH1lJ8vbaj2fetAqvW6WhWBQo2eExv3IiIfIJ+hsvcF4 N1szf//GWVpdNgdM/ujhXRtfZ1ChlBp99Eh09yQqPuUUdGMTNPzpLugdGGAvEsDF g8UaA2t60zrhWn1uIz5j40321WxuPAGgTopamsV7AtIpaUTgQGg= -----END CERTIFICATE-----Generated at Fri May 9 08:35:39 2025 by rpki-client