$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: ww+H+nuGo1FIBim/PPKWWR3DP1ECzfkY2HafE2Af8VI= Subject key identifier: 35:11:BE:A6:3C:E6:34:12:0F:37:DF:A3:5F:60:D8:C6:F1:B0:A2:E1 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 0DE73BDB19520EA34C62CD2316BC94F175B3F95A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: 97 Signing time: Thu 21 Aug 2025 18:51:00 +0000 Manifest this update: Thu 21 Aug 2025 18:46:00 +0000 Manifest next update: Mon 25 Aug 2025 04:09:00 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=) 2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: 7nFEX3oHUkhKxQr50Vqxe5h52XwhwwdYYteUn2cypms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e7:3b:db:19:52:0e:a3:4c:62:cd:23:16:bc:94:f1:75:b3:f9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Aug 21 18:46:00 2025 GMT Not After : Aug 25 04:09:00 2025 GMT Subject: CN=3511BEA63CE634120F37DFA35F60D8C6F1B0A2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:c8:90:6e:b5:5a:fd:56:bc:31:c6:ec:6d: 25:f7:52:f2:2b:37:1d:38:5a:3e:11:71:d5:18:0a: b9:91:6b:ba:33:2d:ec:48:fb:d7:4c:ef:17:32:77: 69:e7:c7:04:24:fb:4e:4d:ad:61:07:de:6a:7d:77: d0:a2:46:79:b9:1b:8a:3e:e0:80:76:58:ad:51:8c: 74:01:5f:5f:1a:20:96:9b:8c:00:05:e5:10:d7:f1: 5f:6e:d4:b3:ee:07:b6:38:94:e7:f8:3e:47:62:33: db:16:55:a2:7f:b3:99:e2:14:ed:a4:a0:b7:08:f8: 6b:0c:e4:5d:aa:f9:1e:bd:6b:0c:4f:a0:a4:fe:c5: 7b:8b:4c:4f:63:7a:c2:7b:4e:bb:d6:00:f3:38:c8: b1:a4:cf:a3:ca:fd:a8:74:1a:84:53:5b:0f:50:c0: d7:58:72:8d:7b:c2:f3:c0:5e:40:2b:7f:db:5b:7f: 53:c6:9a:9b:a5:91:9d:8c:f8:e2:10:58:8d:1f:7f: 8b:29:c9:e4:a9:18:09:99:24:0a:f4:88:29:c6:63: dd:08:99:51:49:83:4e:0e:cc:88:39:81:1a:a4:f1: 25:77:ce:2a:48:d3:45:d7:63:49:b2:66:2b:6f:9a: 2b:e2:df:9b:24:00:54:1e:c2:aa:73:66:ef:b0:25: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:BE:A6:3C:E6:34:12:0F:37:DF:A3:5F:60:D8:C6:F1:B0:A2:E1 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c4:49:b1:c7:49:d6:6e:d7:9e:d0:54:03:d8:30:8a:cd:85: cd:35:a8:56:56:c5:3a:86:0f:7f:5a:21:fa:6a:61:30:96:a7: 7b:90:33:1b:74:66:3f:68:ca:17:71:d7:cb:e8:8d:d2:69:e9: 10:15:03:0d:d4:ac:48:3a:08:08:7d:4b:a4:58:ed:b5:79:4e: 0f:9b:23:97:af:c1:37:38:71:7e:81:7d:eb:ff:33:1f:5f:34: 5f:eb:cf:01:ff:5b:47:c4:8b:96:23:3f:17:6b:9f:5d:ba:72: b5:d7:62:37:28:e7:c9:d8:12:ca:4d:3d:8c:83:5a:27:c5:44: 8a:73:39:ef:c1:a7:6b:97:f7:15:9a:ae:59:f4:78:30:08:75: 21:64:eb:29:4f:4e:af:77:27:4e:ac:7f:d2:05:e3:f6:04:c7: 4e:d2:77:fe:3e:b6:64:23:f5:46:64:7e:a1:53:51:26:40:d9: b1:ea:03:fd:6b:10:d3:25:c1:78:7c:db:01:41:81:8f:3b:11: 9d:35:6c:47:2c:f9:bb:9d:ae:cc:06:19:2f:c3:9d:10:f7:47: 78:de:60:6f:35:be:8c:7f:8f:ff:06:46:58:d8:30:5a:b5:a0: fe:66:02:68:99:c9:5b:ba:6a:f3:74:22:c8:59:24:78:e1:e9: a3:70:ae:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDec72xlSDqNMYs0jFryU8XWz+VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTA4MjExODQ2MDBaFw0yNTA4MjUwNDA5MDBaMDMxMTAvBgNV BAMTKDM1MTFCRUE2M0NFNjM0MTIwRjM3REZBMzVGNjBEOEM2RjFCMEEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTk8iQbrVa/Va8McbsbSX3UvIr Nx04Wj4RcdUYCrmRa7ozLexI+9dM7xcyd2nnxwQk+05NrWEH3mp9d9CiRnm5G4o+ 4IB2WK1RjHQBX18aIJabjAAF5RDX8V9u1LPuB7Y4lOf4PkdiM9sWVaJ/s5niFO2k oLcI+GsM5F2q+R69awxPoKT+xXuLTE9jesJ7TrvWAPM4yLGkz6PK/ah0GoRTWw9Q wNdYco17wvPAXkArf9tbf1PGmpulkZ2M+OIQWI0ff4spyeSpGAmZJAr0iCnGY90I mVFJg04OzIg5gRqk8SV3zipI00XXY0myZitvmivi35skAFQewqpzZu+wJbZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRG+pjzmNBIPN9+jX2DYxvGwouEwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/ESbHHSdZu157QVAPYMIrNhc01qFZWxTqG D39aIfpqYTCWp3uQMxt0Zj9oyhdx18vojdJp6RAVAw3UrEg6CAh9S6RY7bV5Tg+b I5evwTc4cX6Bfev/Mx9fNF/rzwH/W0fEi5YjPxdrn126crXXYjco58nYEspNPYyD WifFRIpzOe/Bp2uX9xWarln0eDAIdSFk6ylPTq93J06sf9IF4/YEx07Sd/4+tmQj 9UZkfqFTUSZA2bHqA/1rENMlwXh82wFBgY87EZ01bEcs+budrswGGS/DnRD3R3je YG81vox/j/8GRljYMFq1oP5mAmiZyVu6avN0IshZJHjh6aNwrqo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:10 2025 by rpki-client