$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: miecTcC94VUjajNqzcOeiDRJx4QxDSrfKMhnRLU8IfA= Subject key identifier: 66:C0:CF:1B:BA:DB:9E:F3:BA:A1:CA:6B:DB:D7:1C:8C:22:12:83:EA Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 655DC90A6FB4F68C3912922591EF64D06E0E7D04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: 7F Signing time: Sun 29 Jun 2025 01:30:59 +0000 Manifest this update: Sun 29 Jun 2025 01:25:59 +0000 Manifest next update: Wed 02 Jul 2025 03:17:59 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=) 2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: lNZkNAZn+48fBxG1nFYdqKcV6XWWso9rpeINvt4uWBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5d:c9:0a:6f:b4:f6:8c:39:12:92:25:91:ef:64:d0:6e:0e:7d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Jun 29 01:25:59 2025 GMT Not After : Jul 2 03:17:59 2025 GMT Subject: CN=66C0CF1BBADB9EF3BAA1CA6BDBD71C8C221283EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:9e:b8:0b:50:59:70:45:a6:a0:7d:6f:ee: 34:16:fe:7e:12:40:2b:05:74:de:1a:d0:a4:25:ce: 16:99:c4:31:eb:7c:3d:a6:db:77:8e:b1:03:ab:bc: 54:8f:e2:56:8f:00:b4:23:56:b1:ee:54:a7:f9:22: fd:22:c6:fb:13:de:0f:f8:02:63:30:7b:e0:c5:2a: 2c:04:16:7e:7a:16:41:f7:9d:c0:bd:38:46:69:3d: da:fe:df:ee:d4:12:d4:e8:2e:fd:e8:2f:90:5a:d7: e8:ae:b1:4a:24:69:e7:12:51:bd:68:97:78:a4:22: 74:8f:5e:76:87:10:4e:16:78:24:ae:9a:ec:38:18: 5b:fa:20:7c:46:05:18:28:49:59:5b:e7:b0:11:d3: 2f:f1:8b:70:75:da:96:bf:c7:48:60:9b:ee:8f:7c: 82:84:b5:79:9b:c0:95:26:39:89:1a:24:df:93:91: f3:47:27:19:f6:65:a6:fe:03:f0:7e:e7:36:4f:2b: e6:88:d4:5e:e6:09:92:84:68:ba:38:6e:b0:d5:c8: 38:08:86:85:5b:bb:60:b1:fd:a0:91:79:af:de:2a: 25:8e:75:43:10:47:ff:df:33:33:2a:3a:62:f4:ca: 50:ca:e5:5f:65:f9:1a:18:19:49:37:9c:0e:b4:9e: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:CF:1B:BA:DB:9E:F3:BA:A1:CA:6B:DB:D7:1C:8C:22:12:83:EA X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5e:24:2e:76:f1:ee:6b:84:ca:81:15:00:5d:5a:0f:f1:0a: a0:d2:3a:79:c7:42:d2:99:b2:a5:e1:11:bf:71:c9:4c:5c:52: af:80:ad:12:64:97:ca:ff:22:ed:d5:90:95:0c:dd:68:be:e8: 33:85:eb:57:ac:79:73:23:fc:e7:2f:8b:dc:74:6d:08:5f:49: b5:40:58:f9:fa:ca:49:b9:45:29:20:91:d8:ba:09:93:60:00: be:3c:88:2b:23:ea:48:16:c2:b7:ec:fb:d5:de:81:93:f6:21: 40:39:50:03:44:d7:83:91:05:b9:f5:c7:cc:73:ca:f5:07:cd: bc:12:16:c7:c6:81:b3:05:d4:3f:7d:c7:f8:71:8d:0b:af:af: 34:a9:88:70:7b:f2:7b:53:79:39:26:37:bd:40:ee:6d:a2:28: 81:71:0e:9f:72:f4:b5:32:e3:90:fe:cd:ae:ad:4f:db:32:a8: 5d:eb:11:d4:96:3f:fc:f7:06:21:a1:4f:67:5e:b2:de:d2:f8: 0b:35:b4:89:8d:0f:e4:3e:24:6f:c5:84:41:21:dd:49:1c:d5: 44:a9:a5:a8:59:b7:04:46:dd:e1:87:03:f7:50:4b:f4:de:97: e3:d7:9e:20:99:84:38:ac:a3:6e:71:db:67:48:77:46:b0:e0: 1f:2e:3d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZV3JCm+09ow5EpIlke9k0G4OfQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTA2MjkwMTI1NTlaFw0yNTA3MDIwMzE3NTlaMDMxMTAvBgNV BAMTKDY2QzBDRjFCQkFEQjlFRjNCQUExQ0E2QkRCRDcxQzhDMjIxMjgzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhB564C1BZcEWmoH1v7jQW/n4S QCsFdN4a0KQlzhaZxDHrfD2m23eOsQOrvFSP4laPALQjVrHuVKf5Iv0ixvsT3g/4 AmMwe+DFKiwEFn56FkH3ncC9OEZpPdr+3+7UEtToLv3oL5Ba1+iusUokaecSUb1o l3ikInSPXnaHEE4WeCSumuw4GFv6IHxGBRgoSVlb57AR0y/xi3B12pa/x0hgm+6P fIKEtXmbwJUmOYkaJN+TkfNHJxn2Zab+A/B+5zZPK+aI1F7mCZKEaLo4brDVyDgI hoVbu2Cx/aCRea/eKiWOdUMQR//fMzMqOmL0ylDK5V9l+RoYGUk3nA60nnI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsDPG7rbnvO6ocpr29ccjCISg+owHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1eJC528e5rhMqBFQBdWg/xCqDSOnnHQtKZ sqXhEb9xyUxcUq+ArRJkl8r/Iu3VkJUM3Wi+6DOF61eseXMj/Ocvi9x0bQhfSbVA WPn6ykm5RSkgkdi6CZNgAL48iCsj6kgWwrfs+9XegZP2IUA5UANE14ORBbn1x8xz yvUHzbwSFsfGgbMF1D99x/hxjQuvrzSpiHB78ntTeTkmN71A7m2iKIFxDp9y9LUy 45D+za6tT9syqF3rEdSWP/z3BiGhT2dest7S+As1tImND+Q+JG/FhEEh3Ukc1USp pahZtwRG3eGHA/dQS/Tel+PXniCZhDiso25x22dId0aw4B8uPbU= -----END CERTIFICATE-----Generated at Mon Jun 30 17:36:01 2025 by rpki-client