$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: gVNvNSiMxHfmXyAxZisWEqtuiUqHMrIlELYmFPeOe+I= Subject key identifier: FD:8B:9C:82:F0:17:55:EC:AF:44:E4:8C:3F:AB:DA:6D:B5:EC:F1:A1 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 77497C8384341E8E443B09165734FBA7081B7AB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 020D Signing time: Mon 28 Apr 2025 18:10:37 +0000 Manifest this update: Mon 28 Apr 2025 18:05:37 +0000 Manifest next update: Thu 01 May 2025 22:32:37 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: ytwMfYe3IvhSIfjh9Z18EH7izA2Le7WDZXyzkAiCyiU=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:49:7c:83:84:34:1e:8e:44:3b:09:16:57:34:fb:a7:08:1b:7a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Apr 28 18:05:37 2025 GMT Not After : May 1 22:32:37 2025 GMT Subject: CN=FD8B9C82F01755ECAF44E48C3FABDA6DB5ECF1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:5e:05:15:82:42:e2:36:79:ee:d9:32:b6: 69:99:41:6e:60:11:46:a3:c9:c5:bd:ec:ff:dd:71: c2:a1:53:32:d3:65:49:a0:cd:01:5e:e9:86:72:dc: 89:50:78:2f:77:2c:15:4d:4a:09:be:3a:56:a8:60: 67:42:c6:20:71:c2:0c:58:6b:69:d2:93:d0:85:5d: 8c:0f:7d:f1:59:48:1b:36:5b:b7:99:c4:b4:5b:7d: 42:1b:1a:65:ad:cc:5e:9f:5d:05:97:e9:7c:a9:1d: b8:df:b9:24:4f:e7:50:09:a5:e5:21:bb:15:07:4c: 4d:ad:f9:3c:01:54:8a:76:fe:fc:c5:6a:4a:f2:24: 98:1d:c2:2c:10:04:f2:be:aa:61:69:b7:a3:f8:fd: db:f5:ef:63:0c:73:c4:53:0f:b0:a4:61:e0:48:3f: b4:9c:b8:2e:1e:c9:3b:a7:d6:81:a1:16:08:49:94: 72:10:e5:c9:f1:39:42:cf:a4:5e:aa:b6:ec:c0:13: 22:05:1f:6a:07:96:09:55:48:e2:b8:dd:cd:7b:bc: 3a:8b:8a:f8:2f:c7:c2:0b:d9:11:fa:3a:c5:65:28: db:63:cc:7e:b4:41:78:d4:4d:0a:d0:fb:84:36:4e: e3:ec:d4:f8:84:57:7c:81:e0:67:92:7a:2d:1c:01: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8B:9C:82:F0:17:55:EC:AF:44:E4:8C:3F:AB:DA:6D:B5:EC:F1:A1 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:7f:1a:1d:0b:6f:4a:ca:01:1e:14:0a:08:e9:22:d0:08: 55:f7:b1:5a:d7:ab:7e:53:bc:ce:f6:c5:d9:b2:67:7a:98:bb: cf:ce:80:41:62:bb:50:f4:74:24:e5:ff:6a:a7:8a:d7:bc:7f: f4:ab:5f:80:86:39:99:92:db:7a:3e:d1:ce:27:4d:ac:04:f8: 9b:99:ad:79:fc:42:f7:16:02:1f:01:3f:97:6a:bc:dc:8c:06: 3c:1a:09:1d:3a:67:75:a0:f2:ac:91:b4:5e:59:2a:3d:7b:04: 3e:0d:13:d5:b3:0f:9e:4d:2d:11:9d:cc:df:ca:06:be:9d:53: b5:c5:20:e8:63:50:f9:2c:88:66:8d:77:ec:ab:dc:f9:71:39: 13:ba:10:70:d6:a6:08:91:fc:0c:44:56:89:0f:d8:fb:13:ee: b7:e0:88:4e:5b:2d:56:87:00:5a:77:2c:fa:92:93:74:8e:fa: 1d:d6:80:ef:4c:1a:58:2d:58:ca:76:2d:06:d0:1e:96:ad:e8: c8:64:a6:af:9b:97:31:e7:06:6b:2d:eb:bd:78:0d:d6:b4:8e: 33:7f:20:19:f3:ed:6c:ce:3f:50:e2:69:d4:d6:b6:91:4e:cb: cc:41:a0:33:d1:29:cd:d0:d7:df:64:86:85:ff:37:dd:d9:41: 8a:93:3c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0l8g4Q0Ho5EOwkWVzT7pwgberIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA0MjgxODA1MzdaFw0yNTA1MDEyMjMyMzdaMDMxMTAvBgNV BAMTKEZEOEI5QzgyRjAxNzU1RUNBRjQ0RTQ4QzNGQUJEQTZEQjVFQ0YxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzI14FFYJC4jZ57tkytmmZQW5g EUajycW97P/dccKhUzLTZUmgzQFe6YZy3IlQeC93LBVNSgm+OlaoYGdCxiBxwgxY a2nSk9CFXYwPffFZSBs2W7eZxLRbfUIbGmWtzF6fXQWX6XypHbjfuSRP51AJpeUh uxUHTE2t+TwBVIp2/vzFakryJJgdwiwQBPK+qmFpt6P4/dv172MMc8RTD7CkYeBI P7ScuC4eyTun1oGhFghJlHIQ5cnxOULPpF6qtuzAEyIFH2oHlglVSOK43c17vDqL ivgvx8IL2RH6OsVlKNtjzH60QXjUTQrQ+4Q2TuPs1PiEV3yB4GeSei0cAb0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YucgvAXVeyvROSMP6vabbXs8aEwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0dfxodC29KygEeFAoI6SLQCFX3sVrXq35T vM72xdmyZ3qYu8/OgEFiu1D0dCTl/2qnite8f/SrX4CGOZmS23o+0c4nTawE+JuZ rXn8QvcWAh8BP5dqvNyMBjwaCR06Z3Wg8qyRtF5ZKj17BD4NE9WzD55NLRGdzN/K Br6dU7XFIOhjUPksiGaNd+yr3PlxORO6EHDWpgiR/AxEVokP2PsT7rfgiE5bLVaH AFp3LPqSk3SO+h3WgO9MGlgtWMp2LQbQHpat6Mhkpq+blzHnBmst6714Dda0jjN/ IBnz7WzOP1DiadTWtpFOy8xBoDPRKc3Q199khoX/N93ZQYqTPKs= -----END CERTIFICATE-----Generated at Tue Apr 29 12:08:04 2025 by rpki-client