$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: dYMhvRXru9F7ZYQofWAlYeHnYa37DS11CyFAomf7t/g= Subject key identifier: B5:B2:BD:BD:EB:DD:C0:F3:E0:D7:24:08:1E:5C:70:B4:D2:09:DF:97 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 0A7C1F4B75AC7D9FB6E2C884A5423666596E3D4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: 68 Signing time: Thu 08 May 2025 00:20:59 +0000 Manifest this update: Thu 08 May 2025 00:15:59 +0000 Manifest next update: Sun 11 May 2025 08:12:59 +0000 Files and hashes: 1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: dVtnoN7cCWiR5/exSGxplAUUsmpT/ckUlFC4xnksdPU=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 08:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7c:1f:4b:75:ac:7d:9f:b6:e2:c8:84:a5:42:36:66:59:6e:3d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: May 8 00:15:59 2025 GMT Not After : May 11 08:12:59 2025 GMT Subject: CN=B5B2BDBDEBDDC0F3E0D724081E5C70B4D209DF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:af:22:c4:e5:2b:68:23:fe:67:e2:ce:42: d6:64:ff:94:6d:91:8d:f3:9a:8c:3f:bc:d3:6c:47: 66:af:16:f1:6f:4a:3c:9c:94:d2:5c:22:be:90:8a: be:07:2f:0d:02:4c:2e:44:ea:3c:5f:8d:d1:a8:ab: d8:91:e9:f2:7e:ec:01:bf:39:14:33:23:ed:13:55: bd:d1:69:e7:12:bb:d6:39:a7:72:a4:ba:70:7a:cb: bf:60:eb:4b:8c:3a:c7:8e:02:94:45:59:91:22:4a: dc:d8:c1:05:81:ed:51:de:bf:5b:f9:aa:c1:ab:0a: e4:3f:a1:59:7f:31:c2:46:4b:6f:1e:25:71:9a:ea: dd:80:e4:00:13:c6:1f:b7:00:44:b8:f7:da:06:d6: d0:67:fe:4b:e2:c0:d1:b3:4e:dd:8c:7d:e0:19:6e: f6:62:fe:9f:31:cf:c5:09:5b:33:d3:28:4d:df:f5: 5f:76:8f:db:2a:6d:33:d9:ac:bf:2d:e0:ba:28:e6: 36:2c:ef:fb:14:e8:e3:58:17:98:a5:74:58:9d:16: 20:50:53:96:59:38:cb:67:ea:63:86:20:a4:b3:f1: 57:c5:95:b6:6d:24:1b:29:f5:23:a6:f1:60:b2:26: 36:39:6b:42:36:b6:ef:60:72:8e:28:b3:2c:7d:4a: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B2:BD:BD:EB:DD:C0:F3:E0:D7:24:08:1E:5C:70:B4:D2:09:DF:97 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ca:76:55:8b:fd:6f:45:9b:4e:32:71:9e:42:8f:00:6a:64: 59:42:ba:28:1c:d5:b1:f4:fd:49:f2:01:20:d4:1e:05:91:91: 8b:83:82:77:b5:85:c6:20:bf:e9:71:6f:64:b3:86:13:23:b4: bd:60:8e:46:83:b6:3d:02:d3:0a:30:9b:f2:58:f5:e8:7d:ce: f5:31:2f:39:2a:d1:e1:1b:42:55:72:bf:fd:99:a4:a8:d3:ae: dd:0c:27:10:31:3e:f5:04:a6:61:b2:22:32:fa:37:c5:ca:65: b2:e8:12:d4:d6:d2:c8:0b:c0:7e:48:9c:59:f5:bb:6d:b5:07: 24:64:94:f4:94:df:bd:2d:96:7a:0d:b9:a2:52:23:7a:8b:5a: d8:79:9d:e4:df:c7:ae:8f:ef:66:b3:42:49:f8:57:64:35:5a: a4:2a:41:f3:1f:cf:0a:2b:8d:34:bc:9a:aa:a3:e8:ed:20:4a: 5d:1d:c9:45:34:5d:70:22:13:2b:ab:e9:b8:a1:ab:43:42:1a: 1b:09:a4:3f:b4:32:9c:2d:91:49:c2:8a:2b:e0:a6:6b:f7:d4: 15:18:e1:2e:17:fc:b0:c7:4b:a7:1d:8a:9b:df:21:ae:1e:8a: aa:89:2b:b5:58:80:df:a4:b0:d2:50:d0:8f:ea:c8:c3:b1:f3: f2:42:30:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnwfS3WsfZ+24siEpUI2ZlluPUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTA1MDgwMDE1NTlaFw0yNTA1MTEwODEyNTlaMDMxMTAvBgNV BAMTKEI1QjJCREJERUJEREMwRjNFMEQ3MjQwODFFNUM3MEI0RDIwOURGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRL68ixOUraCP+Z+LOQtZk/5Rt kY3zmow/vNNsR2avFvFvSjyclNJcIr6Qir4HLw0CTC5E6jxfjdGoq9iR6fJ+7AG/ ORQzI+0TVb3RaecSu9Y5p3KkunB6y79g60uMOseOApRFWZEiStzYwQWB7VHev1v5 qsGrCuQ/oVl/McJGS28eJXGa6t2A5AATxh+3AES499oG1tBn/kviwNGzTt2MfeAZ bvZi/p8xz8UJWzPTKE3f9V92j9sqbTPZrL8t4Loo5jYs7/sU6ONYF5ildFidFiBQ U5ZZOMtn6mOGIKSz8VfFlbZtJBsp9SOm8WCyJjY5a0I2tu9gco4osyx9Sp4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtbK9vevdwPPg1yQIHlxwtNIJ35cwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnKdlWL/W9Fm04ycZ5CjwBqZFlCuigc1bH0 /UnyASDUHgWRkYuDgne1hcYgv+lxb2SzhhMjtL1gjkaDtj0C0wowm/JY9eh9zvUx Lzkq0eEbQlVyv/2ZpKjTrt0MJxAxPvUEpmGyIjL6N8XKZbLoEtTW0sgLwH5InFn1 u221ByRklPSU370tlnoNuaJSI3qLWth5neTfx66P72azQkn4V2Q1WqQqQfMfzwor jTS8mqqj6O0gSl0dyUU0XXAiEyur6bihq0NCGhsJpD+0MpwtkUnCiivgpmv31BUY 4S4X/LDHS6cdipvfIa4eiqqJK7VYgN+ksNJQ0I/qyMOx8/JCMI0= -----END CERTIFICATE-----Generated at Fri May 9 07:50:42 2025 by rpki-client