$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: rnDk6OBzowVH3+ZuY/3lMAkVpY+TVMkaBXpwLoQhFIs= Subject key identifier: 40:A5:69:C6:1E:09:EF:6F:B9:64:C2:84:AC:24:7E:D9:5D:EA:AC:01 Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 5DD09E869E69D1654E05E8D0654AEF5B583FB9C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 0440 Signing time: Thu 08 May 2025 23:00:47 +0000 Manifest this update: Thu 08 May 2025 22:55:47 +0000 Manifest next update: Mon 12 May 2025 07:35:47 +0000 Files and hashes: 1: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: wsSQ1ZH2PCic7BEYRkwFgMPjnpXYZ3ohhVuKfoCoA7s=) 2: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: be/8Wx/3MwQD0Ly3y8Z3u5nFqvRex798npHJMv4qFX8=) 3: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: k6zr2t6CCYKu6JO9poybUXChTwp4/aHi7ZJ+x1RquSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 07:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d0:9e:86:9e:69:d1:65:4e:05:e8:d0:65:4a:ef:5b:58:3f:b9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: May 8 22:55:47 2025 GMT Not After : May 12 07:35:47 2025 GMT Subject: CN=40A569C61E09EF6FB964C284AC247ED95DEAAC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:08:7e:ec:c1:60:de:96:5b:d2:61:ea:af:0c: 15:c6:4e:b9:0b:b2:3a:1d:9f:5f:ab:33:4d:02:3c: 8b:59:73:ef:6a:eb:7d:60:ec:93:e9:77:26:e4:f8: 62:52:a1:1e:c9:0b:b3:aa:8c:bd:cf:5c:cd:87:4f: 6d:b6:25:ef:78:8e:0b:f8:8b:ea:3b:c5:9e:7f:d8: ee:23:66:01:40:b8:08:e8:40:44:11:c1:86:65:93: ac:9a:eb:78:6d:26:49:f1:ee:2b:e0:71:19:cb:bc: 24:5b:e3:d6:52:78:19:44:8c:6d:85:54:21:89:f8: 58:58:ec:7f:44:7b:2c:2b:df:32:0d:44:af:0b:5e: 34:9c:b9:20:2c:ea:90:bf:21:d6:29:34:82:cf:e1: a0:af:ee:dd:2a:64:99:a9:4c:3f:6d:b3:6f:77:96: 70:35:81:26:97:56:42:ab:5a:d3:a2:e1:0a:60:45: 5c:f9:fa:44:ce:59:ed:1e:bd:18:84:79:d1:b9:a2: 61:18:ec:b9:c6:0e:ec:73:21:f7:ab:ea:ef:ce:8f: e3:a9:cd:cb:0f:4f:35:b5:0c:36:13:1b:80:5e:a5: 4d:95:22:3e:8b:5b:fd:55:e4:e1:8e:a1:ba:be:a5: 1c:90:e6:cd:fd:5f:53:57:2f:9b:c9:c8:48:2e:fd: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A5:69:C6:1E:09:EF:6F:B9:64:C2:84:AC:24:7E:D9:5D:EA:AC:01 X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:dd:6f:bc:98:7d:39:dd:5f:52:e5:73:5c:5d:3a:91:b6:8c: d3:d5:94:f2:c5:f7:27:ab:c2:12:98:12:2f:69:8d:5e:11:e0: b6:bf:9b:b8:ae:42:8b:ad:6d:5a:9e:0d:11:82:e6:12:17:ee: 21:45:25:61:01:d9:6b:05:8f:2d:8d:68:51:ef:40:2e:e4:1c: 21:80:81:ba:44:55:ca:fb:aa:fa:41:e0:b2:8f:ea:86:b9:52: 03:d3:0f:5e:66:cb:ab:78:66:b5:a7:1e:97:be:65:68:a1:6e: 16:32:16:bb:b2:3d:28:c5:3e:81:d7:f8:1f:91:b2:fb:45:01: c3:f0:93:39:46:f5:39:e5:fd:4b:6a:83:19:3e:f8:4e:bc:a8: 2e:9e:e9:4a:52:7c:ba:31:6f:e2:43:df:89:04:e1:fb:2f:e2: f2:b6:a7:87:c3:36:46:9c:58:5c:bd:e9:b6:59:f9:2c:10:0f: 28:1c:16:7e:ba:2d:09:81:8b:5f:27:cb:fd:12:b6:42:8e:23: 8b:f3:a1:40:75:2f:38:13:de:6a:f3:e5:c7:77:df:ee:45:0e: 13:61:92:8f:af:00:fa:60:5c:01:bc:4f:e7:d1:47:13:1c:ae: fc:0e:b5:b6:db:b9:95:e6:26:b8:4d:fc:61:48:f8:e5:f3:d8: eb:be:6d:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdCehp5p0WVOBejQZUrvW1g/ucgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNTA1MDgyMjU1NDdaFw0yNTA1MTIwNzM1NDdaMDMxMTAvBgNV BAMTKDQwQTU2OUM2MUUwOUVGNkZCOTY0QzI4NEFDMjQ3RUQ5NURFQUFDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsCH7swWDellvSYeqvDBXGTrkL sjodn1+rM00CPItZc+9q631g7JPpdybk+GJSoR7JC7OqjL3PXM2HT222Je94jgv4 i+o7xZ5/2O4jZgFAuAjoQEQRwYZlk6ya63htJknx7ivgcRnLvCRb49ZSeBlEjG2F VCGJ+FhY7H9Eeywr3zINRK8LXjScuSAs6pC/IdYpNILP4aCv7t0qZJmpTD9ts293 lnA1gSaXVkKrWtOi4QpgRVz5+kTOWe0evRiEedG5omEY7LnGDuxzIfer6u/Oj+Op zcsPTzW1DDYTG4BepU2VIj6LW/1V5OGOobq+pRyQ5s39X1NXL5vJyEgu/bqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKVpxh4J72+5ZMKErCR+2V3qrAEwHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbdb7yYfTndX1Llc1xdOpG2jNPVlPLF9yer whKYEi9pjV4R4La/m7iuQoutbVqeDRGC5hIX7iFFJWEB2WsFjy2NaFHvQC7kHCGA gbpEVcr7qvpB4LKP6oa5UgPTD15my6t4ZrWnHpe+ZWihbhYyFruyPSjFPoHX+B+R svtFAcPwkzlG9Tnl/Utqgxk++E68qC6e6UpSfLoxb+JD34kE4fsv4vK2p4fDNkac WFy96bZZ+SwQDygcFn66LQmBi18ny/0StkKOI4vzoUB1LzgT3mrz5cd33+5FDhNh ko+vAPpgXAG8T+fRRxMcrvwOtbbbuZXmJrhN/GFI+OXz2Ou+bdE= -----END CERTIFICATE-----Generated at Sun May 11 00:48:17 2025 by rpki-client