$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: 5wn0k6YATyubskBUSGaO40t4w9FdYLLBeBcxtmLaAG0= Subject key identifier: 97:6B:65:50:DB:51:FC:4E:11:4E:21:94:5C:E6:52:D8:FC:F4:6C:40 Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 4D1DAC35B5CD8A2E8FE7971E688E8FB108F754E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 018E Signing time: Tue 03 Jun 2025 00:12:13 +0000 Manifest this update: Tue 03 Jun 2025 00:07:13 +0000 Manifest next update: Fri 06 Jun 2025 07:08:13 +0000 Files and hashes: 1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=) 2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=) 3: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: GsEM5Oez8C6+Tc0wo05srRzW2t9R4dlWWBlbSQeNhe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 07:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1d:ac:35:b5:cd:8a:2e:8f:e7:97:1e:68:8e:8f:b1:08:f7:54:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Jun 3 00:07:13 2025 GMT Not After : Jun 6 07:08:13 2025 GMT Subject: CN=976B6550DB51FC4E114E21945CE652D8FCF46C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:94:be:ff:db:c4:1e:4b:36:18:3e:94:1a: bd:db:69:b3:2b:c2:a0:ab:ed:6e:68:c2:54:3e:7a: 00:82:9e:21:63:39:db:6e:0c:47:25:09:3c:a6:16: f7:e3:08:dc:52:af:84:ea:8b:5b:b3:e1:c0:a6:48: 34:1c:6a:4e:6e:42:8a:90:df:29:fd:2d:a4:5d:f6: a1:94:fa:e5:18:8f:2a:5c:f8:70:66:bf:d4:a5:fd: 5d:93:87:b8:9f:f6:f1:0b:8a:08:b9:5c:f2:41:17: 83:be:0a:cd:5f:0e:ce:e8:08:5f:2a:91:20:bc:4f: b9:97:98:20:78:27:9b:88:77:9a:e5:ad:c4:56:cc: e8:2d:8b:4e:da:18:30:c7:d7:c8:9b:94:a2:7e:cf: 13:81:56:82:7f:85:9d:9f:04:6a:ee:25:c6:fc:fd: da:76:35:4a:03:86:39:47:07:77:72:34:07:cf:02: 75:94:e7:b0:71:80:4f:26:07:90:25:1e:e0:f2:86: 3e:79:39:5c:50:06:c0:81:2f:4f:13:e0:ad:cd:4e: 33:87:a0:74:01:02:24:71:b1:40:c6:ef:51:11:06: 63:5a:4e:cb:c8:82:e9:b4:89:a5:3e:7a:76:f1:cc: 49:35:7f:6c:63:6c:a6:f2:e1:ba:a7:be:e8:91:f4: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6B:65:50:DB:51:FC:4E:11:4E:21:94:5C:E6:52:D8:FC:F4:6C:40 X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:a6:ac:1e:a0:3f:11:23:8b:85:9d:2f:49:de:6f:9d:96:92: b5:c7:09:5b:ce:2a:59:22:7a:a5:fe:80:77:20:8b:77:2b:fd: c7:09:9c:e4:b0:39:69:57:b0:38:62:7d:00:6b:f0:2c:16:19: aa:7d:88:95:a0:1e:cc:02:97:51:00:3d:57:4d:01:58:f3:7a: 9c:cb:27:fd:e1:69:6c:14:4f:78:52:03:cc:3c:d1:bb:74:b8: da:d2:c2:ff:13:50:4a:57:a3:bf:83:ae:70:86:5a:5f:fe:ef: 81:9a:16:02:98:3c:9e:16:28:35:b5:97:c9:75:c2:aa:c9:bd: 2b:99:5d:12:c1:96:88:7c:6c:01:2b:6e:fc:13:15:9c:9b:95: 13:4e:43:33:56:86:0b:69:d5:f4:33:bd:f7:a3:3a:03:72:0d: 6c:57:65:1c:44:7e:e3:db:e5:10:84:c8:a9:5e:f2:da:50:d2: fb:78:52:bd:fa:12:76:e2:82:e6:98:6b:d1:e5:17:5e:b3:0c: eb:a4:b7:f5:56:1e:a1:b3:b4:ca:0d:8d:6e:95:b4:86:b2:f2: b7:9d:b0:d8:29:eb:a4:b0:f1:0f:66:4b:d4:40:7d:6c:33:ea: 6d:bf:68:6b:f1:46:83:38:c5:8c:d7:55:be:c4:d2:c9:54:84: 7f:56:0f:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTR2sNbXNii6P55ceaI6PsQj3VOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNTA2MDMwMDA3MTNaFw0yNTA2MDYwNzA4MTNaMDMxMTAvBgNV BAMTKDk3NkI2NTUwREI1MUZDNEUxMTRFMjE5NDVDRTY1MkQ4RkNGNDZDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsh5S+/9vEHks2GD6UGr3babMr wqCr7W5owlQ+egCCniFjOdtuDEclCTymFvfjCNxSr4Tqi1uz4cCmSDQcak5uQoqQ 3yn9LaRd9qGU+uUYjypc+HBmv9Sl/V2Th7if9vELigi5XPJBF4O+Cs1fDs7oCF8q kSC8T7mXmCB4J5uId5rlrcRWzOgti07aGDDH18iblKJ+zxOBVoJ/hZ2fBGruJcb8 /dp2NUoDhjlHB3dyNAfPAnWU57BxgE8mB5AlHuDyhj55OVxQBsCBL08T4K3NTjOH oHQBAiRxsUDG71ERBmNaTsvIgum0iaU+enbxzEk1f2xjbKby4bqnvuiR9P2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl2tlUNtR/E4RTiGUXOZS2Pz0bEAwHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGmrB6gPxEji4WdL0neb52WkrXHCVvOKlki eqX+gHcgi3cr/ccJnOSwOWlXsDhifQBr8CwWGap9iJWgHswCl1EAPVdNAVjzepzL J/3haWwUT3hSA8w80bt0uNrSwv8TUEpXo7+DrnCGWl/+74GaFgKYPJ4WKDW1l8l1 wqrJvSuZXRLBloh8bAErbvwTFZyblRNOQzNWhgtp1fQzvfejOgNyDWxXZRxEfuPb 5RCEyKle8tpQ0vt4Ur36EnbiguaYa9HlF16zDOukt/VWHqGztMoNjW6VtIay8red sNgp66Sw8Q9mS9RAfWwz6m2/aGvxRoM4xYzXVb7E0slUhH9WDzM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:52 2025 by rpki-client