$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: ZmNFcAhE0L1XXhPeCinEPoMJxCxatjfC7wcugMmVKe4= Subject key identifier: 6F:45:AF:F7:8D:E7:EF:E7:D1:D2:C7:93:DB:76:9C:94:56:2F:AF:BF Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 53BE174ECA7E3513D45DC4F0C6547F15FC398569 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 0431 Signing time: Fri 04 Apr 2025 00:50:47 +0000 Manifest this update: Fri 04 Apr 2025 00:45:47 +0000 Manifest next update: Mon 07 Apr 2025 08:18:47 +0000 Files and hashes: 1: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: be/8Wx/3MwQD0Ly3y8Z3u5nFqvRex798npHJMv4qFX8=) 2: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: 4WNBrx/qRP10kENTTxzffskJl+EDcgMFbriumI1eZlM=) 3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: wsSQ1ZH2PCic7BEYRkwFgMPjnpXYZ3ohhVuKfoCoA7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:be:17:4e:ca:7e:35:13:d4:5d:c4:f0:c6:54:7f:15:fc:39:85:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Apr 4 00:45:47 2025 GMT Not After : Apr 7 08:18:47 2025 GMT Subject: CN=6F45AFF78DE7EFE7D1D2C793DB769C94562FAFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:c6:bf:53:e4:26:79:e9:f4:75:eb:5d:da: 67:6c:5a:14:0d:6a:d4:2d:43:2f:d3:92:48:0d:d7: 50:1a:f6:69:40:ba:90:7c:44:b2:61:d2:ea:e6:e7: 03:c5:f9:5f:62:9e:f7:a5:2e:f1:c6:fc:d8:d9:5a: ab:af:ec:35:d0:a7:79:98:04:40:67:fc:05:bd:48: 3a:bc:64:14:cb:c1:be:31:e1:d9:a6:a7:aa:5c:cc: e8:1b:11:04:5c:a2:d3:cb:2a:bb:9a:5e:b0:c1:2b: f0:ae:d7:e8:83:c2:56:11:d9:29:08:2c:ed:d4:2d: 1d:64:0e:0f:b8:e0:e7:2a:36:bf:75:af:91:92:93: f7:7f:61:1d:ba:d2:7c:a8:80:f2:02:92:58:fd:28: ad:d7:a5:c5:81:8a:fa:66:a4:9b:b4:69:12:ac:33: df:46:82:d0:a2:94:b4:9d:df:be:eb:12:b7:ef:d0: 25:d4:03:d4:bc:66:bc:dd:40:5d:ed:6d:fa:fd:2b: ae:23:50:64:7a:18:09:94:a3:db:64:1c:aa:85:b4: 2a:e2:97:2e:e0:ca:00:fa:e2:5a:0e:d0:1b:13:35: 34:38:9a:d5:ad:7b:f4:4d:13:02:08:79:f0:c2:71: 4e:77:a0:36:83:ff:d6:c7:48:07:fc:eb:28:af:68: 62:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:45:AF:F7:8D:E7:EF:E7:D1:D2:C7:93:DB:76:9C:94:56:2F:AF:BF X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:60:81:b8:ec:74:76:a0:43:54:58:20:e3:ee:16:82:c2:21: bd:c9:21:fd:be:95:61:75:c1:d2:05:db:ec:64:d3:d1:90:c0: ad:0d:a2:e6:cf:56:31:8a:42:97:41:fd:26:91:97:d1:80:06: b7:aa:44:36:62:b3:65:c4:bf:b8:38:ad:49:25:50:b8:95:8c: 2d:ce:a4:3f:ae:f5:79:b6:db:18:7a:ed:8d:34:d1:10:9a:b9: 78:69:c2:0b:f1:de:79:26:76:ad:a8:57:87:1d:1e:cd:39:b8: 9f:e5:3b:ff:f4:f5:97:9c:d8:c2:bd:63:18:e8:97:b6:5e:e9: cd:08:21:1e:4c:24:4d:cb:9f:e9:03:e5:d1:5c:1a:56:86:6a: 52:44:73:03:d2:00:a5:3c:5d:19:10:6d:9f:41:68:5c:cd:ac: 2b:f2:6a:d2:5a:04:2e:22:e8:4d:40:80:a9:6f:7d:99:bf:81: 69:5a:b4:df:9b:b2:5e:f2:e2:52:52:76:49:8f:c7:4a:8e:4e: 53:e4:e1:4c:cf:93:60:02:87:af:e5:1c:d9:c3:ca:1c:cb:93: d7:7f:27:cb:a4:16:db:78:a9:09:2e:1c:fd:06:1c:50:25:09: b4:3f:55:b9:57:72:e5:a2:2f:4e:3b:ec:ba:f4:57:f4:1f:b0: 12:7b:0b:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU74XTsp+NRPUXcTwxlR/Ffw5hWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNTA0MDQwMDQ1NDdaFw0yNTA0MDcwODE4NDdaMDMxMTAvBgNV BAMTKDZGNDVBRkY3OERFN0VGRTdEMUQyQzc5M0RCNzY5Qzk0NTYyRkFGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fca/U+Qmeen0detd2mdsWhQN atQtQy/TkkgN11Aa9mlAupB8RLJh0urm5wPF+V9invelLvHG/NjZWquv7DXQp3mY BEBn/AW9SDq8ZBTLwb4x4dmmp6pczOgbEQRcotPLKruaXrDBK/Cu1+iDwlYR2SkI LO3ULR1kDg+44OcqNr91r5GSk/d/YR260nyogPICklj9KK3XpcWBivpmpJu0aRKs M99GgtCilLSd377rErfv0CXUA9S8ZrzdQF3tbfr9K64jUGR6GAmUo9tkHKqFtCri ly7gygD64loO0BsTNTQ4mtWte/RNEwIIefDCcU53oDaD/9bHSAf86yivaGItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb0Wv943n7+fR0seT23aclFYvr78wHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZggbjsdHagQ1RYIOPuFoLCIb3JIf2+lWF1 wdIF2+xk09GQwK0NoubPVjGKQpdB/SaRl9GABreqRDZis2XEv7g4rUklULiVjC3O pD+u9Xm22xh67Y000RCauXhpwgvx3nkmdq2oV4cdHs05uJ/lO//09Zec2MK9Yxjo l7Ze6c0IIR5MJE3Ln+kD5dFcGlaGalJEcwPSAKU8XRkQbZ9BaFzNrCvyatJaBC4i 6E1AgKlvfZm/gWlatN+bsl7y4lJSdkmPx0qOTlPk4UzPk2ACh6/lHNnDyhzLk9d/ J8ukFtt4qQkuHP0GHFAlCbQ/VblXcuWiL0477Lr0V/QfsBJ7C9M= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:06 2025 by rpki-client