$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: YWMYMKLSghP7AyZgqPc8/byTydsIzxzpY7OHvP/u4XQ= Subject key identifier: AE:04:D0:32:6B:66:9D:E4:25:8A:49:20:A0:2E:0D:BF:05:71:6F:82 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 4BBFDE3EA1C0CB9F2A48B913D8CC3530565BF384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04BB Signing time: Sun 20 Jul 2025 06:02:54 +0000 Manifest this update: Sun 20 Jul 2025 05:57:54 +0000 Manifest next update: Wed 23 Jul 2025 08:03:54 +0000 Files and hashes: 1: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: eoDQj7XDY/IcxpbTEdtjDT8iFAaHKAAwbuwHXDbkHVc=) 2: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 3: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) 4: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 5: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bf:de:3e:a1:c0:cb:9f:2a:48:b9:13:d8:cc:35:30:56:5b:f3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jul 20 05:57:54 2025 GMT Not After : Jul 23 08:03:54 2025 GMT Subject: CN=AE04D0326B669DE4258A4920A02E0DBF05716F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:8f:00:19:65:6b:68:c3:36:1c:49:99:ca: f0:cd:24:4b:32:81:1c:ec:55:11:b5:11:9d:ae:00: 34:45:fc:07:52:f9:91:99:0e:7a:52:c9:0d:97:ff: d7:77:3d:bf:f9:b4:cd:4e:77:c3:eb:5a:ba:64:52: df:38:ea:9c:f0:2a:a8:cd:32:7f:46:26:1a:84:cf: 0e:b3:9d:7e:b2:dd:6c:95:e1:f6:6c:e4:a1:e7:db: 79:2e:c8:1a:5c:1a:5f:b5:8f:16:9b:ff:bc:d5:17: ed:39:a6:4e:44:a4:d2:9b:78:d4:ae:ef:12:59:d9: 61:a4:f9:14:ef:78:5a:10:55:03:00:39:09:df:80: e5:b0:72:8d:be:b5:5b:47:de:a4:39:88:44:b8:35: 89:8a:72:21:5e:b7:c9:ad:26:d0:9a:2e:92:4a:4b: e8:d3:b2:70:1e:bd:b0:1b:8b:df:8f:02:d9:ad:12: 3a:6a:3d:db:1b:b6:4d:19:b8:d2:fc:e8:ca:92:67: 13:93:c2:76:0c:ef:1b:6d:1d:5b:88:81:0b:ec:ac: 5d:d3:d3:65:8f:5f:56:90:35:12:dd:2a:0b:b1:63: 39:c0:a0:b2:ae:bf:93:a5:0e:40:d8:7b:b8:00:52: 4d:a6:9d:35:ae:4c:ba:bf:84:8a:a3:11:98:f4:1e: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:04:D0:32:6B:66:9D:E4:25:8A:49:20:A0:2E:0D:BF:05:71:6F:82 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:31:0d:b6:8b:77:9a:ed:a3:c9:d6:c3:ea:2c:bf:94:dd:2c: 94:02:08:16:f2:5f:69:41:6a:8a:97:25:c6:5e:d1:78:02:79: 7c:7f:65:2e:8a:df:9e:2d:ca:44:cf:73:0c:a3:9b:f8:fc:71: 48:52:bd:c0:01:1c:98:05:08:4c:85:cc:b0:82:99:db:a2:f1: 29:14:f0:eb:a7:d5:40:c1:32:36:43:12:a5:25:f7:84:b1:3e: 5c:7e:30:d7:a9:88:cc:c5:a8:05:f9:e9:c2:e1:e5:fc:1c:e2: bc:d8:73:c8:6a:80:19:50:82:0c:48:26:72:82:f5:d7:cc:48: 32:56:c7:b9:11:c5:90:20:94:7d:eb:0b:cc:2a:41:fb:4c:53: 40:91:27:1e:a0:67:7c:57:ec:9b:8b:93:f7:5b:14:3d:11:5f: c8:c0:b5:51:71:e1:58:fb:b7:c2:d8:84:05:34:d7:d3:72:b0: 4e:55:52:f1:c7:89:e2:83:2c:2b:84:45:0c:a9:9e:7d:55:f0: 17:b8:10:93:14:ee:67:33:bb:0e:f7:f9:34:01:dc:47:6c:86: b7:68:18:f2:eb:56:8e:99:b6:61:05:7b:1a:4b:51:d5:17:b3: 53:12:44:17:a5:6c:06:32:b2:92:af:28:05:29:ce:ef:1d:01: 5a:d9:b5:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7/ePqHAy58qSLkT2Mw1MFZb84QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTA3MjAwNTU3NTRaFw0yNTA3MjMwODAzNTRaMDMxMTAvBgNV BAMTKEFFMDREMDMyNkI2NjlERTQyNThBNDkyMEEwMkUwREJGMDU3MTZGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+o8AGWVraMM2HEmZyvDNJEsy gRzsVRG1EZ2uADRF/AdS+ZGZDnpSyQ2X/9d3Pb/5tM1Od8PrWrpkUt846pzwKqjN Mn9GJhqEzw6znX6y3WyV4fZs5KHn23kuyBpcGl+1jxab/7zVF+05pk5EpNKbeNSu 7xJZ2WGk+RTveFoQVQMAOQnfgOWwco2+tVtH3qQ5iES4NYmKciFet8mtJtCaLpJK S+jTsnAevbAbi9+PAtmtEjpqPdsbtk0ZuNL86MqSZxOTwnYM7xttHVuIgQvsrF3T 02WPX1aQNRLdKguxYznAoLKuv5OlDkDYe7gAUk2mnTWuTLq/hIqjEZj0HtwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrgTQMmtmneQlikkgoC4NvwVxb4IwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOUxDbaLd5rto8nWw+osv5TdLJQCCBbyX2lB aoqXJcZe0XgCeXx/ZS6K354tykTPcwyjm/j8cUhSvcABHJgFCEyFzLCCmdui8SkU 8Oun1UDBMjZDEqUl94SxPlx+MNepiMzFqAX56cLh5fwc4rzYc8hqgBlQggxIJnKC 9dfMSDJWx7kRxZAglH3rC8wqQftMU0CRJx6gZ3xX7JuLk/dbFD0RX8jAtVFx4Vj7 t8LYhAU019NysE5VUvHHieKDLCuERQypnn1V8Be4EJMU7mczuw73+TQB3Edshrdo GPLrVo6ZtmEFexpLUdUXs1MSRBelbAYyspKvKAUpzu8dAVrZteo= -----END CERTIFICATE-----Generated at Tue Jul 22 06:18:08 2025 by rpki-client