$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: Gxt4W9F+ceYTaJysjSmR4qR01jFgZqe0oNWXSo0IdaY= Subject key identifier: 26:5B:65:73:D3:0C:A4:53:E3:E8:04:8E:B2:E2:A9:CE:58:A7:0A:D7 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 16CE43FDAD265637D20384EB4A76280DF525115A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0245 Signing time: Tue 02 Sep 2025 00:10:40 +0000 Manifest this update: Tue 02 Sep 2025 00:05:40 +0000 Manifest next update: Fri 05 Sep 2025 09:38:40 +0000 Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: UNVXui7hf4SeI4WtCjVubqW7XMY55nRhxncGykUynYM=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 09:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ce:43:fd:ad:26:56:37:d2:03:84:eb:4a:76:28:0d:f5:25:11:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Sep 2 00:05:40 2025 GMT Not After : Sep 5 09:38:40 2025 GMT Subject: CN=265B6573D30CA453E3E8048EB2E2A9CE58A70AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:f7:e9:bb:a8:3f:ca:e3:ca:3f:2f:f4:6d: d4:24:e3:4e:3e:a3:c4:16:bf:ea:bf:ab:06:b4:1e: 6b:a2:ea:be:f8:70:ae:98:96:c7:81:1a:e0:23:86: 45:2f:c6:60:a6:69:5e:45:e7:5b:c0:78:c8:fe:bf: 76:d3:b0:7d:d9:b9:c5:42:b7:a9:85:a1:6c:2b:58: bb:18:35:2b:62:7d:db:e1:94:74:d6:6b:be:94:b6: 8e:5d:27:dc:aa:10:e1:8d:f1:4c:3a:a5:ef:53:a6: 89:75:f9:e1:04:61:2a:57:c0:34:19:2d:59:f9:dc: 04:68:f2:70:49:81:e1:3d:8e:de:99:5c:27:d1:0f: 52:e7:7a:66:e0:70:ff:47:e7:58:d2:73:60:97:0b: bd:53:53:58:28:55:6e:a7:8c:13:e7:97:5e:53:f7: f3:53:04:83:7d:69:56:38:c0:e1:da:d6:1b:2a:2b: 95:31:82:65:a6:b3:aa:28:7f:ef:43:b3:63:be:df: b1:9b:71:62:16:b1:63:0d:4c:73:f7:26:5f:5f:98: e9:cc:02:79:8f:6f:7b:64:78:9d:6a:01:45:09:cb: 02:f3:e0:50:af:6c:8a:5b:f0:f2:1f:7e:04:58:75: 1c:19:c7:63:8d:47:51:dc:30:e2:ef:cc:ce:52:57: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5B:65:73:D3:0C:A4:53:E3:E8:04:8E:B2:E2:A9:CE:58:A7:0A:D7 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:40:4d:47:06:1d:22:48:09:f3:f1:28:16:1f:d0:cb:be:13: 4c:62:ad:db:47:75:2e:c9:f0:6c:00:56:ab:21:bd:eb:16:df: 16:10:a4:46:f7:1d:70:b1:02:58:d1:50:ad:a9:b5:95:bb:b4: 8c:28:fe:3e:fc:57:59:e8:9c:79:04:dd:fb:0e:18:c0:ca:5e: 03:e6:b2:e8:2c:f6:97:3b:cc:dc:a9:fd:8a:ea:75:45:42:62: bc:e8:1e:c1:17:b7:08:66:88:aa:e4:22:7a:98:dd:8f:4b:d1: e9:47:77:59:09:57:4a:c2:aa:c6:a6:da:9d:35:40:6a:68:23: 18:34:eb:11:d8:b8:70:75:3b:10:3a:16:91:88:dc:03:5a:cb: c9:66:2c:d8:89:68:d4:3b:0c:f1:c3:f8:77:f2:6d:e8:b4:ba: db:af:bb:74:c7:f3:8c:e9:3e:92:fe:68:a1:2c:0a:a3:a9:6d: b8:e4:9e:60:a6:d6:d4:f7:4b:7b:cc:a0:5a:6f:cd:b7:2a:48: 42:de:c1:69:52:41:ac:01:af:dd:c9:41:a7:cc:e6:ad:f1:bd: 58:98:7c:5c:4e:e5:df:04:a0:e7:44:83:b7:23:cb:d6:f2:63: e1:49:07:5f:f2:4d:bf:8a:ba:8f:2e:29:a6:73:af:07:79:6e: a4:f3:d1:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFs5D/a0mVjfSA4TrSnYoDfUlEVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA5MDIwMDA1NDBaFw0yNTA5MDUwOTM4NDBaMDMxMTAvBgNV BAMTKDI2NUI2NTczRDMwQ0E0NTNFM0U4MDQ4RUIyRTJBOUNFNThBNzBBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gPfpu6g/yuPKPy/0bdQk404+ o8QWv+q/qwa0Hmui6r74cK6YlseBGuAjhkUvxmCmaV5F51vAeMj+v3bTsH3ZucVC t6mFoWwrWLsYNStifdvhlHTWa76Uto5dJ9yqEOGN8Uw6pe9Tpol1+eEEYSpXwDQZ LVn53ARo8nBJgeE9jt6ZXCfRD1LnembgcP9H51jSc2CXC71TU1goVW6njBPnl15T 9/NTBIN9aVY4wOHa1hsqK5UxgmWms6oof+9Ds2O+37GbcWIWsWMNTHP3Jl9fmOnM AnmPb3tkeJ1qAUUJywLz4FCvbIpb8PIffgRYdRwZx2ONR1HcMOLvzM5SVzCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJltlc9MMpFPj6ASOsuKpzlinCtcwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRATUcGHSJICfPxKBYf0Mu+E0xirdtHdS7J 8GwAVqshvesW3xYQpEb3HXCxAljRUK2ptZW7tIwo/j78V1nonHkE3fsOGMDKXgPm sugs9pc7zNyp/YrqdUVCYrzoHsEXtwhmiKrkInqY3Y9L0elHd1kJV0rCqsam2p01 QGpoIxg06xHYuHB1OxA6FpGI3ANay8lmLNiJaNQ7DPHD+Hfybei0utuvu3TH84zp PpL+aKEsCqOpbbjknmCm1tT3S3vMoFpvzbcqSELewWlSQawBr93JQafM5q3xvViY fFxO5d8EoOdEg7cjy9byY+FJB1/yTb+Kuo8uKaZzrwd5bqTz0Ug= -----END CERTIFICATE-----Generated at Thu Sep 4 06:58:53 2025 by rpki-client