$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: pM5TC9AH9Ad/9mBgOThLyCo5RHjdKGg5JJPWSfv+Lw8= Subject key identifier: 4F:8A:1B:DE:95:A7:5E:F0:C9:90:17:E2:12:DD:11:CE:C7:64:99:A2 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 0592D43582C30E50A423DC81C6407C32BC46A4D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0222 Signing time: Sun 15 Jun 2025 07:30:38 +0000 Manifest this update: Sun 15 Jun 2025 07:25:38 +0000 Manifest next update: Wed 18 Jun 2025 13:23:38 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: q0d+kWQLKY9Zryn63oK92LQ8rSpk8tXlhsjA31GAP3w=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:92:d4:35:82:c3:0e:50:a4:23:dc:81:c6:40:7c:32:bc:46:a4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Jun 15 07:25:38 2025 GMT Not After : Jun 18 13:23:38 2025 GMT Subject: CN=4F8A1BDE95A75EF0C99017E212DD11CEC76499A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:3e:cc:68:61:26:34:68:63:7a:14:72:b6: f0:f5:c1:0e:aa:57:bc:c1:6c:89:3f:d0:72:45:80: cf:9d:82:30:b3:b2:26:e1:70:24:4e:75:d2:c4:24: 4f:99:28:12:4d:74:16:a0:aa:d4:bb:94:89:17:7d: fe:c8:e9:54:0d:af:90:38:94:98:f9:a4:ce:6e:67: 0c:c5:b6:6f:9e:e3:11:8a:92:3b:3a:e2:82:cc:1a: 81:4d:d5:a3:75:29:23:bd:5e:67:61:67:0d:33:5b: f2:f9:f9:82:3a:74:46:97:4e:be:7d:7f:02:ab:94: c4:80:6a:e0:27:43:0e:17:c3:6b:89:e0:31:a4:09: bb:92:47:3e:e9:eb:d8:e9:8c:2c:22:2b:8b:f1:30: b0:87:1a:46:85:73:8f:ed:3e:3a:12:86:cb:b2:b5: 16:90:2d:d8:14:f8:94:97:4f:7e:56:db:ce:51:47: 12:bc:c8:ad:00:fe:45:c6:4c:e4:4d:f8:42:53:02: 8d:f7:57:df:a7:b5:ff:d6:03:3a:19:28:07:c7:38: 88:d9:ee:f2:96:e3:23:d8:10:e7:fe:af:3b:b6:8c: 66:a0:0a:76:af:ec:6d:fe:5f:a4:8e:a6:c4:cf:90: db:b3:17:0b:35:cb:0c:a9:9e:6f:57:67:21:85:d3: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8A:1B:DE:95:A7:5E:F0:C9:90:17:E2:12:DD:11:CE:C7:64:99:A2 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:5d:05:47:ac:63:7e:7b:82:c3:50:d2:fd:0f:83:5b:14: d1:ed:0a:6a:86:6a:cd:73:a1:68:ef:69:4e:5b:ca:f9:8a:44: bb:ac:14:f5:6f:04:1e:39:fd:9b:8b:cd:a1:07:b3:9a:e3:bd: 83:76:30:9a:6f:04:d1:5c:a7:52:ed:9c:e4:58:5b:52:63:0f: 3a:79:d0:71:3d:7f:5a:ac:d3:59:3a:b9:24:96:3b:bd:02:85: 23:22:6b:ac:e7:94:04:80:e4:cc:6e:f3:34:09:76:8c:bf:ba: e3:15:9e:f6:47:6d:5d:81:7e:d8:70:4e:f4:3e:99:77:80:69: 35:03:e2:35:aa:f2:3e:5c:59:11:bc:02:7d:05:04:03:b6:43: 91:a4:ff:ca:0b:7e:1f:22:d4:fa:85:62:dc:c9:57:cf:0c:ad: 6d:96:20:02:22:c0:8e:64:1f:48:1a:68:67:8f:8c:06:1d:ec: 10:11:90:91:0d:2f:31:44:35:2c:39:3f:cc:47:f9:d7:af:62: 1e:3f:f3:f0:70:b6:f1:4b:c1:a2:42:66:6e:02:f2:de:36:44: e7:13:64:bd:44:c6:f4:33:f2:0c:4c:29:11:ef:1b:70:4d:1f: 9e:f3:8e:16:4c:2f:b1:c0:72:12:61:a3:f1:8d:09:8e:e0:4c: 04:a4:f2:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZLUNYLDDlCkI9yBxkB8MrxGpNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA2MTUwNzI1MzhaFw0yNTA2MTgxMzIzMzhaMDMxMTAvBgNV BAMTKDRGOEExQkRFOTVBNzVFRjBDOTkwMTdFMjEyREQxMUNFQzc2NDk5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9z7MaGEmNGhjehRytvD1wQ6q V7zBbIk/0HJFgM+dgjCzsibhcCROddLEJE+ZKBJNdBagqtS7lIkXff7I6VQNr5A4 lJj5pM5uZwzFtm+e4xGKkjs64oLMGoFN1aN1KSO9XmdhZw0zW/L5+YI6dEaXTr59 fwKrlMSAauAnQw4Xw2uJ4DGkCbuSRz7p69jpjCwiK4vxMLCHGkaFc4/tPjoShsuy tRaQLdgU+JSXT35W285RRxK8yK0A/kXGTORN+EJTAo33V9+ntf/WAzoZKAfHOIjZ 7vKW4yPYEOf+rzu2jGagCnav7G3+X6SOpsTPkNuzFws1ywypnm9XZyGF08XhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4ob3pWnXvDJkBfiEt0RzsdkmaIwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAsXQVHrGN+e4LDUNL9D4NbFNHtCmqGas1z oWjvaU5byvmKRLusFPVvBB45/ZuLzaEHs5rjvYN2MJpvBNFcp1LtnORYW1JjDzp5 0HE9f1qs01k6uSSWO70ChSMia6znlASA5Mxu8zQJdoy/uuMVnvZHbV2BfthwTvQ+ mXeAaTUD4jWq8j5cWRG8An0FBAO2Q5Gk/8oLfh8i1PqFYtzJV88MrW2WIAIiwI5k H0gaaGePjAYd7BARkJENLzFENSw5P8xH+devYh4/8/BwtvFLwaJCZm4C8t42ROcT ZL1ExvQz8gxMKRHvG3BNH57zjhZML7HAchJho/GNCY7gTASk8qM= -----END CERTIFICATE-----Generated at Mon Jun 16 14:08:00 2025 by rpki-client