$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: UZeoWXQsYmTrI1adIBBlMyTvhqOGAy+uTDssJNevNOk= Subject key identifier: 14:D7:23:00:5A:1E:26:6F:AA:59:BD:3A:0C:C6:29:15:92:8E:32:6F Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 30E70749A6A68D1D2429A8ADEA731E42BDC1E09D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04E9 Signing time: Sun 02 Nov 2025 20:41:50 +0000 Manifest this update: Sun 02 Nov 2025 20:36:50 +0000 Manifest next update: Wed 05 Nov 2025 23:24:50 +0000 Files and hashes: 1: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: jgb/89Dbw3G/gGsPfFk+zSsdDvHD+7BK/DS7Gs6sarU=) 2: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 3: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 4: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) 5: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e7:07:49:a6:a6:8d:1d:24:29:a8:ad:ea:73:1e:42:bd:c1:e0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Nov 2 20:36:50 2025 GMT Not After : Nov 5 23:24:50 2025 GMT Subject: CN=14D723005A1E266FAA59BD3A0CC62915928E326F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:49:a8:4a:92:8f:39:35:ca:d3:d1:14:9a: be:96:22:8b:b5:a1:e3:f3:d6:bc:d0:ae:80:92:56: b4:42:da:74:34:2f:5f:5d:ac:f9:93:45:9f:46:79: 63:ea:30:60:be:ad:02:cb:52:9e:4a:f5:1d:a9:be: e1:bc:2d:39:53:26:cc:fd:8f:86:d3:94:98:9f:0f: b8:59:42:c8:ab:8c:ca:4c:1e:bd:2b:64:5b:c5:6c: 40:f4:76:1a:f1:53:cc:53:f5:56:03:29:68:09:d6: 1f:9c:64:0c:f9:e7:46:70:4b:64:d0:ee:45:10:f5: 9e:1c:6d:b4:0d:94:36:1f:82:e9:c8:e6:2a:2f:f0: 52:6e:77:79:9c:23:db:3e:77:fe:d8:ee:1e:75:24: a0:6b:04:33:51:58:62:47:9e:ea:6b:48:3f:77:4f: 43:a6:21:cc:f7:38:78:8d:a0:7c:f4:03:67:a0:45: b2:c4:38:40:3a:ef:43:44:22:fd:7b:f6:56:11:ef: 04:78:60:01:3d:f3:6b:91:6c:71:af:b5:f8:e3:fa: e7:54:1a:ba:78:d0:b7:9a:9a:59:12:33:76:6d:61: b7:f3:dd:77:e1:60:96:f5:b7:c7:8e:52:14:66:93: 13:34:35:97:68:ad:f1:88:3e:61:e2:b7:a6:48:12: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D7:23:00:5A:1E:26:6F:AA:59:BD:3A:0C:C6:29:15:92:8E:32:6F X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a0:6c:fb:20:bf:6a:44:a8:e1:19:35:7f:c1:a0:b0:eb:fc: 70:26:7a:31:85:1c:33:62:50:6d:6d:c6:4d:63:95:ec:d3:0d: dc:76:43:19:6c:3d:6d:64:24:18:e0:9c:09:3f:ce:a7:82:04: 33:c4:67:09:72:b7:06:89:32:75:29:75:10:55:a6:ce:af:0f: 8e:7b:c1:d3:38:4c:b3:46:b7:b2:fe:9b:ca:f8:c4:5a:c2:6d: 3e:35:8d:ae:a8:17:b8:40:21:d1:fb:0a:80:d1:69:80:0e:c4: a1:e0:15:f5:c6:4f:ce:45:7f:c0:42:e1:8e:a1:80:2b:ca:9d: db:c0:d9:62:b9:2e:9b:27:36:e1:70:b4:ab:8f:d1:06:d9:e4: 7b:e6:7f:2d:ed:e5:fd:60:8c:1c:1f:24:e4:be:f9:1a:05:6b: fa:a3:7f:6e:6b:de:15:77:d0:06:57:15:f8:be:88:b9:6a:bb: f0:5e:3e:2f:b3:ec:7b:90:13:48:ff:62:30:c4:c7:2a:76:50: 14:f7:63:5d:26:0d:ae:6d:db:82:92:cf:e4:84:1c:f5:f8:16: 8a:0a:01:85:86:95:e4:84:cb:10:d4:77:2c:fd:8b:5e:92:e0: 46:3c:c2:22:ab:4d:eb:cc:d9:c5:80:b6:7a:78:ed:8b:e7:b8: 8b:78:10:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOcHSaamjR0kKait6nMeQr3B4J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTExMDIyMDM2NTBaFw0yNTExMDUyMzI0NTBaMDMxMTAvBgNV BAMTKDE0RDcyMzAwNUExRTI2NkZBQTU5QkQzQTBDQzYyOTE1OTI4RTMyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdEmoSpKPOTXK09EUmr6WIou1 oePz1rzQroCSVrRC2nQ0L19drPmTRZ9GeWPqMGC+rQLLUp5K9R2pvuG8LTlTJsz9 j4bTlJifD7hZQsirjMpMHr0rZFvFbED0dhrxU8xT9VYDKWgJ1h+cZAz550ZwS2TQ 7kUQ9Z4cbbQNlDYfgunI5iov8FJud3mcI9s+d/7Y7h51JKBrBDNRWGJHnuprSD93 T0OmIcz3OHiNoHz0A2egRbLEOEA670NEIv179lYR7wR4YAE982uRbHGvtfjj+udU Grp40LeamlkSM3ZtYbfz3XfhYJb1t8eOUhRmkxM0NZdorfGIPmHit6ZIEjNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNcjAFoeJm+qWb06DMYpFZKOMm8wHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGgbPsgv2pEqOEZNX/BoLDr/HAmejGFHDNi UG1txk1jlezTDdx2QxlsPW1kJBjgnAk/zqeCBDPEZwlytwaJMnUpdRBVps6vD457 wdM4TLNGt7L+m8r4xFrCbT41ja6oF7hAIdH7CoDRaYAOxKHgFfXGT85Ff8BC4Y6h gCvKndvA2WK5LpsnNuFwtKuP0QbZ5Hvmfy3t5f1gjBwfJOS++RoFa/qjf25r3hV3 0AZXFfi+iLlqu/BePi+z7HuQE0j/YjDExyp2UBT3Y10mDa5t24KSz+SEHPX4FooK AYWGleSEyxDUdyz9i16S4EY8wiKrTevM2cWAtnp47YvnuIt4EPE= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:27 2025 by rpki-client