$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: xtg/SbWlJGkcV2gGxiY1+zitY/XDjzp9JI19Cp5LDyo= Subject key identifier: B7:A9:A8:ED:8E:5F:BF:66:DA:AF:0A:6F:3D:3C:17:56:1D:82:4C:3A Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 723DD23A704B630115A88E9ACE85307460344B21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 0502 Signing time: Sat 06 Sep 2025 10:22:06 +0000 Manifest this update: Sat 06 Sep 2025 10:17:06 +0000 Manifest next update: Tue 09 Sep 2025 17:15:06 +0000 Files and hashes: 1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: UqkUH0jZYrTD3TiRVaFPmSf2N7c9WxV2W/MRWUbpzHU=) 2: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 3: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 4: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 5: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 6: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 7: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3d:d2:3a:70:4b:63:01:15:a8:8e:9a:ce:85:30:74:60:34:4b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Sep 6 10:17:06 2025 GMT Not After : Sep 9 17:15:06 2025 GMT Subject: CN=B7A9A8ED8E5FBF66DAAF0A6F3D3C17561D824C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:5c:c1:6b:7f:db:2f:ba:72:46:ab:e1:5f: 40:46:a1:bd:75:c3:47:61:66:de:0d:b6:0c:04:0e: cc:5f:43:ca:58:87:76:8c:60:35:49:cc:39:ac:3d: b0:36:d3:bb:e9:5f:d7:ca:93:89:6e:c2:a3:32:f6: 19:1d:35:b8:23:9e:dc:7d:60:06:61:9a:26:31:04: 77:2d:ad:b2:c1:2a:24:3c:26:8f:9c:a7:43:b3:56: 24:4e:6b:0d:a9:3d:46:e5:14:4b:48:95:a6:2a:2f: a7:e2:fe:f1:bb:98:87:87:58:df:2e:67:21:cc:03: b5:7c:f3:73:31:c3:2c:0b:3e:ec:ad:e6:6d:59:63: b7:e7:c1:23:5e:7d:fa:42:69:4d:29:69:39:30:2a: 1d:e9:59:7a:b8:d6:6a:49:03:1c:1e:cb:0f:6d:2c: f8:94:c6:f1:0b:c7:de:47:4e:bf:83:bc:cc:26:3d: 92:a6:28:d4:72:24:d9:e7:99:1c:ff:a0:8f:92:6e: 1d:d1:79:6c:69:50:36:47:1d:39:10:3d:c3:85:b3: 00:e7:98:54:b6:20:fb:e5:ec:4c:b0:bc:e3:95:8c: c5:d3:0a:3b:a8:13:dd:9d:43:20:de:52:5c:fa:63: 6c:e9:21:54:6a:5e:e4:03:53:ea:db:96:22:06:d6: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:A8:ED:8E:5F:BF:66:DA:AF:0A:6F:3D:3C:17:56:1D:82:4C:3A X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c8:4e:a9:82:fa:9f:09:3d:4a:a2:99:6f:4f:6e:0c:8c:0b: e9:02:1c:73:17:b8:8f:8e:a1:c9:3a:30:ba:65:03:a3:46:d0: 50:6d:2e:28:07:9a:d9:df:08:a8:7c:9f:c2:77:c1:fc:36:a9: 1f:d4:91:a8:cd:2c:68:eb:d6:6e:dc:d5:9a:de:25:43:41:5d: 37:b5:d7:61:ba:38:2e:5b:f4:ec:e4:b9:83:cb:7e:4d:bf:a9: d6:ec:f9:28:49:fe:97:22:a8:e3:ae:67:ba:0f:0f:6c:1c:19: 38:8e:4a:a6:f2:3f:58:9c:33:84:ed:3a:2c:f2:01:54:3e:8c: 16:28:59:2d:6d:3f:5e:c4:f7:bd:53:84:0f:89:8f:da:d3:b3: 61:f1:2b:ca:39:e8:91:33:e3:ff:da:0e:8f:6f:af:64:0c:87: dd:88:d7:8e:7f:ec:55:42:40:62:ad:fd:09:af:78:4d:62:95: be:c9:dd:d7:69:79:b8:de:62:2a:d6:fe:60:2c:c5:ee:c5:c6: fc:29:c1:fb:bd:7c:4f:dd:1e:d6:c5:dc:50:2f:e3:d8:0a:2c: e5:61:1c:65:53:3b:69:c0:f7:fc:3e:96:39:f8:27:a0:0b:b6: 89:99:79:46:90:28:c7:f7:12:81:22:56:fe:b8:7a:4a:84:7e: 4a:ee:bd:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcj3SOnBLYwEVqI6azoUwdGA0SyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA5MDYxMDE3MDZaFw0yNTA5MDkxNzE1MDZaMDMxMTAvBgNV BAMTKEI3QTlBOEVEOEU1RkJGNjZEQUFGMEE2RjNEM0MxNzU2MUQ4MjRDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnm1zBa3/bL7pyRqvhX0BGob11 w0dhZt4NtgwEDsxfQ8pYh3aMYDVJzDmsPbA207vpX9fKk4luwqMy9hkdNbgjntx9 YAZhmiYxBHctrbLBKiQ8Jo+cp0OzViROaw2pPUblFEtIlaYqL6fi/vG7mIeHWN8u ZyHMA7V883MxwywLPuyt5m1ZY7fnwSNeffpCaU0paTkwKh3pWXq41mpJAxweyw9t LPiUxvELx95HTr+DvMwmPZKmKNRyJNnnmRz/oI+Sbh3ReWxpUDZHHTkQPcOFswDn mFS2IPvl7EywvOOVjMXTCjuoE92dQyDeUlz6Y2zpIVRqXuQDU+rbliIG1kK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6mo7Y5fv2barwpvPTwXVh2CTDowHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzITqmC+p8JPUqimW9PbgyMC+kCHHMXuI+O ock6MLplA6NG0FBtLigHmtnfCKh8n8J3wfw2qR/UkajNLGjr1m7c1ZreJUNBXTe1 12G6OC5b9OzkuYPLfk2/qdbs+ShJ/pciqOOuZ7oPD2wcGTiOSqbyP1icM4TtOizy AVQ+jBYoWS1tP17E971ThA+Jj9rTs2HxK8o56JEz4//aDo9vr2QMh92I145/7FVC QGKt/QmveE1ilb7J3ddpebjeYirW/mAsxe7Fxvwpwfu9fE/dHtbF3FAv49gKLOVh HGVTO2nA9/w+ljn4J6ALtomZeUaQKMf3EoEiVv64ekqEfkruvRg= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client