$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: bAwsc4hIiA/cNHXeBH4X6mWC9m7RqUJ3yhyA/vA7N+M= Subject key identifier: 51:40:67:78:38:43:B7:B1:C6:6E:6A:16:E8:EF:BF:0E:6B:08:D3:6E Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 55544C2A20F7791E324B5363331108DA253361B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0239 Signing time: Wed 06 Aug 2025 11:30:41 +0000 Manifest this update: Wed 06 Aug 2025 11:25:41 +0000 Manifest next update: Sat 09 Aug 2025 13:39:41 +0000 Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: rlXoxe7uqAe4oOXT38bvMmtOP46Sbie7Aq0Yhr2h1Qk=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:54:4c:2a:20:f7:79:1e:32:4b:53:63:33:11:08:da:25:33:61:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Aug 6 11:25:41 2025 GMT Not After : Aug 9 13:39:41 2025 GMT Subject: CN=514067783843B7B1C66E6A16E8EFBF0E6B08D36E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:a5:c7:2f:c3:26:e3:bb:d3:ac:4e:81:16: bd:40:f9:45:ad:bd:ac:ae:00:21:3f:fd:9f:ae:29: e5:a1:20:18:a8:9d:17:9e:9f:d2:ce:21:0f:06:20: 58:9c:61:c9:aa:c1:33:41:58:fc:80:e6:d2:de:13: 28:cd:e4:09:38:ca:23:23:1c:20:03:60:57:54:5e: e8:7a:a3:d0:a9:91:5c:b7:1e:b8:4a:bf:c3:e6:18: ac:d3:b2:95:33:d7:ca:73:e7:e4:84:28:01:fb:ad: 03:a9:1d:14:bf:eb:04:10:f7:cd:50:4f:8f:00:a6: 5c:6c:52:79:e2:99:a8:9b:1c:1d:0d:f2:28:17:d5: d8:0c:ae:02:bd:28:f6:70:8f:d3:9c:9a:ee:3a:47: 1c:27:b9:a5:d1:c4:52:fc:43:76:9d:70:e4:38:70: 6a:64:93:6d:7f:10:a8:a0:45:aa:7f:96:02:c2:86: 7d:09:d7:10:40:6a:39:b7:88:d4:7d:9a:0c:9a:b2: 33:83:96:43:ca:72:ab:12:ef:e1:a3:97:47:c6:ee: e5:d4:18:dc:a9:4e:97:2b:5f:f0:77:94:ed:f5:bc: cc:17:94:aa:04:0a:29:fc:ec:7b:1c:d7:27:80:93: 26:c2:ad:34:e2:16:79:fc:26:03:73:2f:02:5e:12: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:40:67:78:38:43:B7:B1:C6:6E:6A:16:E8:EF:BF:0E:6B:08:D3:6E X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8b:93:73:f6:cc:ed:bb:89:95:b0:1e:59:b8:a5:69:5b:e8: cf:b1:09:38:75:3d:42:0f:da:3d:37:75:a2:48:83:19:91:fb: af:36:27:bc:39:48:db:b4:a8:57:37:f7:d2:30:06:cd:1f:1e: 3a:4c:c9:7d:d5:26:f1:13:b7:a2:e6:35:af:4f:52:ef:ee:0f: 9e:21:71:58:5d:ad:dc:e5:0f:0f:b0:77:04:1e:11:e4:a6:83: c9:81:2f:a3:1c:2a:cb:ff:e5:60:cd:24:6b:6c:ec:cb:09:b5: 47:48:23:14:f6:3e:74:48:24:f3:1f:11:8e:d6:01:d0:44:88: 89:2f:74:b9:b5:61:fd:e2:80:bf:79:ae:8c:23:28:62:f5:e4: bb:17:29:f3:f4:38:ed:20:b0:79:c1:1a:ab:59:b7:e4:ff:61: ec:d7:a9:c6:ee:67:a9:4b:cd:17:6a:0d:ec:b3:d9:0b:b2:71: 67:d1:65:ca:b3:99:c6:53:75:36:29:3c:61:34:68:2d:0f:d9: cf:bc:9f:b7:2f:83:ad:5b:c3:3c:90:f1:34:b0:89:b6:bf:97: f0:d8:96:34:08:94:63:f8:01:de:8d:62:73:1b:1b:6a:5f:cb: ec:77:e7:e4:f4:e1:c6:39:40:0b:36:0f:93:2f:19:57:3b:6a: 7f:9c:fa:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVRMKiD3eR4yS1NjMxEI2iUzYbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA4MDYxMTI1NDFaFw0yNTA4MDkxMzM5NDFaMDMxMTAvBgNV BAMTKDUxNDA2Nzc4Mzg0M0I3QjFDNjZFNkExNkU4RUZCRjBFNkIwOEQzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkqXHL8Mm47vTrE6BFr1A+UWt vayuACE//Z+uKeWhIBionReen9LOIQ8GIFicYcmqwTNBWPyA5tLeEyjN5Ak4yiMj HCADYFdUXuh6o9CpkVy3HrhKv8PmGKzTspUz18pz5+SEKAH7rQOpHRS/6wQQ981Q T48AplxsUnnimaibHB0N8igX1dgMrgK9KPZwj9Ocmu46RxwnuaXRxFL8Q3adcOQ4 cGpkk21/EKigRap/lgLChn0J1xBAajm3iNR9mgyasjODlkPKcqsS7+Gjl0fG7uXU GNypTpcrX/B3lO31vMwXlKoECin87Hsc1yeAkybCrTTiFnn8JgNzLwJeEs51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUBneDhDt7HGbmoW6O+/DmsI024wHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaLk3P2zO27iZWwHlm4pWlb6M+xCTh1PUIP 2j03daJIgxmR+682J7w5SNu0qFc399IwBs0fHjpMyX3VJvETt6LmNa9PUu/uD54h cVhdrdzlDw+wdwQeEeSmg8mBL6McKsv/5WDNJGts7MsJtUdIIxT2PnRIJPMfEY7W AdBEiIkvdLm1Yf3igL95rowjKGL15LsXKfP0OO0gsHnBGqtZt+T/YezXqcbuZ6lL zRdqDeyz2QuycWfRZcqzmcZTdTYpPGE0aC0P2c+8n7cvg61bwzyQ8TSwiba/l/DY ljQIlGP4Ad6NYnMbG2pfy+x35+T04cY5QAs2D5MvGVc7an+c+oY= -----END CERTIFICATE-----Generated at Thu Aug 7 20:17:10 2025 by rpki-client