$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: pfjTGDb59YHS040C87dzG5atPfIKhgsFwf0co5DESy0= Subject key identifier: 37:80:B9:4B:38:36:FE:94:E8:FF:C3:B1:A5:CC:AC:1B:B4:B3:E8:4A Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 52C3BBA0E4DCFECAFE10237D9CF47D0A8EBA77E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: B1 Signing time: Sat 18 Oct 2025 04:21:01 +0000 Manifest this update: Sat 18 Oct 2025 04:16:01 +0000 Manifest next update: Tue 21 Oct 2025 12:26:01 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) 2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: bO1V3g4ZL4pwqgcYGB8Q7VVPWy8ISvhxBaPsovWBdqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c3:bb:a0:e4:dc:fe:ca:fe:10:23:7d:9c:f4:7d:0a:8e:ba:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Oct 18 04:16:01 2025 GMT Not After : Oct 21 12:26:01 2025 GMT Subject: CN=3780B94B3836FE94E8FFC3B1A5CCAC1BB4B3E84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:df:8a:ed:01:8b:5c:72:0f:0c:92:a8:61: 1d:32:2b:89:04:e6:f8:c3:eb:ad:43:d3:2b:6b:aa: 26:a6:a5:4b:e6:04:81:0b:18:24:77:aa:66:c0:5d: 62:30:59:be:75:ae:28:0a:d2:79:3a:70:78:93:83: 7c:33:44:34:06:f2:cf:47:46:14:bf:5c:b0:66:88: c0:8e:b5:d2:de:66:6c:45:3e:c0:78:41:46:60:90: d0:2f:02:66:e9:7b:b5:0f:8c:a0:14:5e:b4:ab:88: 3e:fa:d5:19:4a:3f:fc:74:92:c9:74:05:39:7b:42: a7:bc:86:fd:7e:af:54:69:8e:23:9a:e7:35:d5:12: 6a:79:c2:e5:e4:ba:c6:41:13:2b:a2:0e:2e:e7:c7: 77:a7:14:1a:0a:b3:0d:0b:0c:57:42:a0:6b:fa:30: aa:18:6b:59:c1:34:33:d7:ce:0f:e0:d2:0e:78:07: 1a:c6:fe:b1:00:a3:28:d2:6e:60:9b:5f:8b:c3:44: 8b:6e:78:97:64:65:ca:9a:87:54:8c:01:9f:38:81: 7b:d2:9d:3f:b8:bb:da:c5:c9:8d:a6:b0:48:66:92: c2:bb:e5:a1:45:50:b6:6b:86:1f:15:71:a0:b9:28: 92:71:47:5d:27:c9:a2:aa:1b:ae:df:d3:30:01:7a: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:B9:4B:38:36:FE:94:E8:FF:C3:B1:A5:CC:AC:1B:B4:B3:E8:4A X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:38:35:4a:a7:42:0c:aa:4f:af:ee:a7:e5:2b:77:aa:37:9f: 0c:0c:8c:b8:dd:80:31:52:ff:6c:d7:1b:92:3c:34:20:cc:e9: ad:18:bf:29:6e:40:5e:7c:b8:97:91:c4:b1:2d:12:74:db:29: c7:ac:4f:10:1d:06:ff:e7:80:2f:37:cb:61:d6:6a:4f:4f:fb: 7d:5f:e9:01:93:c4:1b:ca:6a:15:65:d5:bb:f7:0d:e5:ee:07: 0a:35:25:a6:42:33:f2:68:a8:9d:24:82:c3:ab:d8:37:0d:7b: 44:bb:22:aa:79:98:79:54:8c:37:11:74:e1:65:ca:0f:6e:25: 79:e0:13:b9:33:36:29:ee:6c:39:76:9b:e2:54:39:89:43:93: 55:55:2b:8d:3f:49:25:57:50:b3:72:ae:63:cd:31:3c:af:86: dd:98:7b:10:91:5a:89:e5:98:23:94:6a:4e:56:78:48:5d:1c: ae:ca:78:d2:d7:09:65:63:f9:d7:20:b1:d6:0c:1c:af:fd:1e: 25:f8:fc:d3:f8:ed:10:04:0d:89:44:dc:dc:dd:db:df:a8:f0: eb:a2:0c:7b:ba:a6:12:cc:76:9a:88:9a:f9:f4:fb:22:ff:e8: 3f:a5:f8:02:7d:4b:b7:7f:ca:f4:9d:2b:d5:9f:a5:1c:d2:b4: 79:3a:cf:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsO7oOTc/sr+ECN9nPR9Co66d+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTEwMTgwNDE2MDFaFw0yNTEwMjExMjI2MDFaMDMxMTAvBgNV BAMTKDM3ODBCOTRCMzgzNkZFOTRFOEZGQzNCMUE1Q0NBQzFCQjRCM0U4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Lt+K7QGLXHIPDJKoYR0yK4kE 5vjD661D0ytrqiampUvmBIELGCR3qmbAXWIwWb51rigK0nk6cHiTg3wzRDQG8s9H RhS/XLBmiMCOtdLeZmxFPsB4QUZgkNAvAmbpe7UPjKAUXrSriD761RlKP/x0ksl0 BTl7Qqe8hv1+r1RpjiOa5zXVEmp5wuXkusZBEyuiDi7nx3enFBoKsw0LDFdCoGv6 MKoYa1nBNDPXzg/g0g54BxrG/rEAoyjSbmCbX4vDRItueJdkZcqah1SMAZ84gXvS nT+4u9rFyY2msEhmksK75aFFULZrhh8VcaC5KJJxR10nyaKqG67f0zABetTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4C5Szg2/pTo/8OxpcysG7Sz6EowHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY4NUqnQgyqT6/up+Urd6o3nwwMjLjdgDFS /2zXG5I8NCDM6a0YvyluQF58uJeRxLEtEnTbKcesTxAdBv/ngC83y2HWak9P+31f 6QGTxBvKahVl1bv3DeXuBwo1JaZCM/JoqJ0kgsOr2DcNe0S7Iqp5mHlUjDcRdOFl yg9uJXngE7kzNinubDl2m+JUOYlDk1VVK40/SSVXULNyrmPNMTyvht2YexCRWonl mCOUak5WeEhdHK7KeNLXCWVj+dcgsdYMHK/9HiX4/NP47RAEDYlE3Nzd29+o8Oui DHu6phLMdpqImvn0+yL/6D+l+AJ9S7d/yvSdK9WfpRzStHk6z3Y= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:19 2025 by rpki-client