$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: iMKryL+GTGTrX9QPtgapDU32xthEHQwA6lBZYdhJNr8= Subject key identifier: 36:9B:51:EA:58:6C:6C:E4:46:86:9B:9C:F1:5B:1D:37:CE:EF:77:FC Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 1747F0C234DBA9BD44B8750C81F45E2F937B7239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: 0102 Signing time: Sun 20 Jul 2025 08:51:46 +0000 Manifest this update: Sun 20 Jul 2025 08:46:46 +0000 Manifest next update: Wed 23 Jul 2025 14:20:46 +0000 Files and hashes: 1: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: kXUlL7eqfg1Z/RFzHSwirHpd5NRz580oZctBNwaCXu0=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: nlk9kDpk/BSuBGjIxDCCHEnpVQe5Pmyq5qHbN5r7XAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:47:f0:c2:34:db:a9:bd:44:b8:75:0c:81:f4:5e:2f:93:7b:72:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Jul 20 08:46:46 2025 GMT Not After : Jul 23 14:20:46 2025 GMT Subject: CN=369B51EA586C6CE446869B9CF15B1D37CEEF77FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:66:ca:4f:1f:22:67:cd:af:d0:a7:3a:06:77: a7:f4:54:ff:38:85:53:a5:df:19:c3:b0:15:71:b0: 1c:39:40:73:47:bb:ee:74:0f:78:dc:54:c5:7e:b3: 41:d3:2b:3c:4a:3b:00:a4:d7:3e:72:ca:fb:9d:72: ce:f8:22:fe:a9:75:65:b1:6a:f5:0f:0c:2b:c2:31: de:ba:88:ca:9f:91:37:62:21:e6:ef:a5:c8:ea:17: d5:58:29:02:24:5a:01:fe:6e:23:db:48:34:70:a1: 92:81:5e:96:6f:be:23:ac:b6:eb:75:fb:cf:1b:0c: 0c:dd:c4:7e:bb:cc:6a:be:35:af:20:21:e7:35:6a: b8:7b:e4:66:e4:6a:d6:71:0d:1d:75:36:fe:18:e4: 4c:0a:09:c9:5d:31:3e:46:0c:68:e3:9a:2f:42:d7: 83:da:43:25:33:0d:65:ca:1c:20:b7:06:ea:67:aa: aa:78:0a:37:f8:a9:f8:4e:6c:29:bf:0a:a5:ec:42: 4c:3a:5f:a3:dd:70:d4:12:86:a5:bd:e0:b2:e4:00: 90:b8:51:d8:fe:f5:89:07:91:b8:47:c0:8f:57:e7: 43:81:ba:be:fd:43:9d:04:6e:53:a5:f7:d3:9f:5e: 0f:53:91:7e:5c:83:05:8e:e9:a1:00:36:60:07:d2: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9B:51:EA:58:6C:6C:E4:46:86:9B:9C:F1:5B:1D:37:CE:EF:77:FC X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:42:f6:92:55:cd:4f:f5:6a:07:2c:9c:ef:6c:4e:af:04:28: ca:33:e5:dd:a4:03:c3:86:c9:32:3b:93:2c:52:6d:ba:f9:ea: 84:36:2d:00:4f:60:b1:d5:21:dc:56:39:ba:ef:b2:1a:ef:d1: 20:f8:59:ab:55:d1:0b:2f:98:3d:eb:51:19:82:5f:67:41:ce: ce:b3:73:59:30:29:28:b2:2b:0e:5d:9a:a4:b4:0d:ca:52:49: 5e:f9:89:d7:65:50:26:46:a4:bf:0b:a7:ac:ab:b0:6d:a2:06: f4:d6:d8:3b:1e:21:e5:bc:57:4a:16:1d:17:1e:7f:7a:12:ed: 4e:11:de:55:4f:e6:1b:e4:6c:42:c7:88:1f:1d:3d:ee:3e:69: 9b:13:88:16:bb:e5:25:d2:4e:90:9a:e4:db:bb:c1:80:7b:9b: 41:f2:04:dd:5f:f2:6d:06:ef:01:1d:25:3c:a0:2a:93:d7:79: 27:f8:06:86:86:3e:b6:0f:d8:2e:bc:83:38:26:2b:18:f6:68: c9:0b:9f:78:99:e4:1c:2e:0c:04:5b:b8:46:f4:50:a5:6d:49: 17:0d:33:cb:ba:0b:11:6d:70:78:b7:2e:a4:8e:36:c5:2e:55: aa:17:e2:e6:5c:8a:d1:ab:75:6f:43:0b:a7:f9:6a:17:70:d6: 03:72:03:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0fwwjTbqb1EuHUMgfReL5N7cjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTA3MjAwODQ2NDZaFw0yNTA3MjMxNDIwNDZaMDMxMTAvBgNV BAMTKDM2OUI1MUVBNTg2QzZDRTQ0Njg2OUI5Q0YxNUIxRDM3Q0VFRjc3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZspPHyJnza/QpzoGd6f0VP84 hVOl3xnDsBVxsBw5QHNHu+50D3jcVMV+s0HTKzxKOwCk1z5yyvudcs74Iv6pdWWx avUPDCvCMd66iMqfkTdiIebvpcjqF9VYKQIkWgH+biPbSDRwoZKBXpZvviOstut1 +88bDAzdxH67zGq+Na8gIec1arh75GbkatZxDR11Nv4Y5EwKCcldMT5GDGjjmi9C 14PaQyUzDWXKHCC3Bupnqqp4Cjf4qfhObCm/CqXsQkw6X6PdcNQShqW94LLkAJC4 Udj+9YkHkbhHwI9X50OBur79Q50EblOl99OfXg9TkX5cgwWO6aEANmAH0q1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNptR6lhsbORGhpuc8VsdN87vd/wwHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVC9pJVzU/1agcsnO9sTq8EKMoz5d2kA8OG yTI7kyxSbbr56oQ2LQBPYLHVIdxWObrvshrv0SD4WatV0QsvmD3rURmCX2dBzs6z c1kwKSiyKw5dmqS0DcpSSV75iddlUCZGpL8Lp6yrsG2iBvTW2DseIeW8V0oWHRce f3oS7U4R3lVP5hvkbELHiB8dPe4+aZsTiBa75SXSTpCa5Nu7wYB7m0HyBN1f8m0G 7wEdJTygKpPXeSf4BoaGPrYP2C68gzgmKxj2aMkLn3iZ5BwuDARbuEb0UKVtSRcN M8u6CxFtcHi3LqSONsUuVaoX4uZcitGrdW9DC6f5ahdw1gNyA7g= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:00 2025 by rpki-client