$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: ZjbOL9xBdS0RjWiM3SZJW/d3LppABFdYL/g5yBV5c8c= Subject key identifier: A8:93:E3:6C:AD:37:BA:2E:7D:00:BF:2A:DB:62:75:33:FA:68:A7:7E Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 79DF92F64112F0ECE8248117EF51A9CBE62827FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 01B7 Signing time: Wed 03 Sep 2025 10:01:17 +0000 Manifest this update: Wed 03 Sep 2025 09:56:17 +0000 Manifest next update: Sat 06 Sep 2025 17:17:17 +0000 Files and hashes: 1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=) 2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=) 3: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: wiKCPnYvuVN0VLIbdW4XkRzsREYjK4XCVgQamZK8l4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:df:92:f6:41:12:f0:ec:e8:24:81:17:ef:51:a9:cb:e6:28:27:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Sep 3 09:56:17 2025 GMT Not After : Sep 6 17:17:17 2025 GMT Subject: CN=A893E36CAD37BA2E7D00BF2ADB627533FA68A77E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:6b:3a:ea:29:70:f9:46:3b:bf:a0:69:36: 5f:4b:20:af:c7:05:eb:40:5e:e0:03:4f:f3:7e:d3: 1f:88:4c:2d:74:3c:f7:e5:95:4f:37:02:be:af:0c: 79:f3:da:1a:a6:1f:d0:e8:2f:06:10:ad:25:56:71: b0:cc:6c:2e:e6:77:b0:07:d6:de:32:04:94:2f:40: 42:0f:6f:69:15:ff:1e:07:22:50:9a:62:bd:f2:f8: e6:32:42:3a:cf:07:ec:b8:02:26:d4:1a:87:7d:a4: 41:cc:a8:9c:70:63:08:5f:60:e8:a3:d1:9c:95:10: f0:c9:54:70:bd:55:39:b8:a7:99:b2:b0:e0:83:9c: 63:13:40:2f:2a:36:18:bf:80:6c:70:c0:d7:af:bb: 7f:d7:44:9d:d2:91:2a:40:ff:01:da:0c:d9:19:91: 73:78:38:88:98:9d:7c:a9:ae:d1:92:15:f2:4d:3f: 8a:88:24:7f:14:23:b2:08:eb:f7:78:d2:6a:f3:dd: f0:b2:29:52:22:7d:34:ca:ac:c9:9c:76:36:0a:9e: b4:2d:64:f5:c4:0f:e1:f5:01:14:ef:53:86:da:b6: b7:ce:3e:96:7d:e9:2e:0b:3e:0b:d3:ac:50:9f:e4: 65:b1:01:75:df:b5:d7:d7:2f:b5:11:3f:86:f4:37: ed:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:93:E3:6C:AD:37:BA:2E:7D:00:BF:2A:DB:62:75:33:FA:68:A7:7E X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:20:8e:b7:53:f4:6d:24:fb:f1:89:67:25:ad:41:2f:96:d5: 1a:a5:a8:83:bb:89:6f:df:00:a5:72:a8:ed:8b:7f:ab:bd:dd: ba:41:aa:11:29:64:23:e8:28:ae:12:01:71:5b:6e:f7:a1:f1: 51:1f:1e:dd:f6:20:d5:3c:73:77:fb:fd:ad:01:d6:4c:c6:39: 9c:7d:85:3a:b7:4e:93:6b:5f:f3:76:0f:8b:d5:e6:3a:7e:a0: c4:57:d1:d7:86:5c:88:3f:02:0c:b6:bb:4f:59:de:bc:79:b6: 71:19:9a:ae:af:b5:62:8d:ac:e3:b7:b1:8d:b7:4d:79:cc:e5: 50:5a:6f:35:c3:ff:0a:19:4b:0d:01:f2:f7:77:e6:19:2b:b0: ca:c3:4b:65:2c:d6:b1:5d:7a:ad:c7:b2:10:64:2e:c3:c2:96: 38:54:1a:83:8a:73:1a:5b:83:e9:22:95:e6:a7:a1:ec:d9:0e: de:43:7c:59:46:c4:a8:9a:9a:4c:b7:21:98:c7:a2:59:bf:19: 2d:98:b3:85:2d:6b:e6:8e:a8:92:18:1a:a3:75:d2:0a:fb:a4: e3:50:30:5f:61:79:53:fc:7b:ed:08:f5:21:49:21:f7:d3:55: fb:a8:de:c1:40:21:87:70:60:c1:93:36:ba:84:6c:60:3e:a7: 43:79:5e:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUed+S9kES8OzoJIEX71Gpy+YoJ/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNTA5MDMwOTU2MTdaFw0yNTA5MDYxNzE3MTdaMDMxMTAvBgNV BAMTKEE4OTNFMzZDQUQzN0JBMkU3RDAwQkYyQURCNjI3NTMzRkE2OEE3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtWs66ilw+UY7v6BpNl9LIK/H BetAXuADT/N+0x+ITC10PPfllU83Ar6vDHnz2hqmH9DoLwYQrSVWcbDMbC7md7AH 1t4yBJQvQEIPb2kV/x4HIlCaYr3y+OYyQjrPB+y4AibUGod9pEHMqJxwYwhfYOij 0ZyVEPDJVHC9VTm4p5mysOCDnGMTQC8qNhi/gGxwwNevu3/XRJ3SkSpA/wHaDNkZ kXN4OIiYnXyprtGSFfJNP4qIJH8UI7II6/d40mrz3fCyKVIifTTKrMmcdjYKnrQt ZPXED+H1ARTvU4batrfOPpZ96S4LPgvTrFCf5GWxAXXftdfXL7URP4b0N+3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqJPjbK03ui59AL8q22J1M/pop34wHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8gjrdT9G0k+/GJZyWtQS+W1RqlqIO7iW/f AKVyqO2Lf6u93bpBqhEpZCPoKK4SAXFbbveh8VEfHt32INU8c3f7/a0B1kzGOZx9 hTq3TpNrX/N2D4vV5jp+oMRX0deGXIg/Agy2u09Z3rx5tnEZmq6vtWKNrOO3sY23 TXnM5VBabzXD/woZSw0B8vd35hkrsMrDS2Us1rFdeq3HshBkLsPCljhUGoOKcxpb g+kileanoezZDt5DfFlGxKiamky3IZjHolm/GS2Ys4Uta+aOqJIYGqN10gr7pONQ MF9heVP8e+0I9SFJIffTVfuo3sFAIYdwYMGTNrqEbGA+p0N5XoE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:36 2025 by rpki-client