$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: R47pP31e/8OUJ3K51P/d2qTeNLinGJws7ZRHu+DQZJg= Subject key identifier: FD:7B:A3:2A:F2:FA:5B:6A:18:D7:2F:2A:9B:26:A0:DE:2D:C2:A3:28 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 49C2E70505016823D829EDDF970ACFE800CA5A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04C2 Signing time: Tue 05 Aug 2025 16:41:52 +0000 Manifest this update: Tue 05 Aug 2025 16:36:52 +0000 Manifest next update: Fri 08 Aug 2025 19:00:52 +0000 Files and hashes: 1: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 2: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) 3: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: cG7N58K0PxeF5fqDnNeBNFLkdqNdH9GpF4VxETmZZ0o=) 4: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 5: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:e7:05:05:01:68:23:d8:29:ed:df:97:0a:cf:e8:00:ca:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Aug 5 16:36:52 2025 GMT Not After : Aug 8 19:00:52 2025 GMT Subject: CN=FD7BA32AF2FA5B6A18D72F2A9B26A0DE2DC2A328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:3a:18:1e:d9:d5:1b:a6:38:59:aa:5a:78: 5d:78:82:ec:67:1a:c8:b2:f0:a9:b5:1d:76:6e:60: 77:ef:aa:0c:11:65:f5:81:2c:41:3f:91:f9:38:c8: c6:00:4c:d4:80:eb:1e:0f:29:ff:b7:37:2d:0c:a0: aa:93:7f:ee:fd:cf:c5:fc:07:8d:ca:c3:00:aa:aa: e7:ba:40:7d:8a:85:a6:77:8a:6e:d6:c5:a6:c9:af: 78:7e:d3:58:8e:06:76:cf:ca:0d:f7:b8:78:7c:88: 1e:8a:4f:2d:e5:8c:75:0a:c8:e0:43:fe:24:66:11: f9:64:9d:22:84:60:a8:df:f8:05:e1:c2:40:a7:bb: ea:1e:ca:33:95:e8:a9:da:47:a6:da:b0:f9:74:e9: 22:8e:75:d4:3b:6c:0d:55:ab:54:b1:4b:30:8e:64: ad:cd:79:c6:60:47:f7:c8:22:61:97:9d:e3:17:25: d5:c0:48:62:ad:2e:13:1a:96:08:7a:0f:4c:5d:f9: 34:38:a6:63:17:15:5c:77:ed:2e:cf:5a:85:36:f7: c3:64:d8:9e:bc:5a:28:9c:84:7e:1b:cf:49:dd:15: 5d:73:10:36:e7:53:b5:42:0d:aa:cc:f5:65:19:5b: 32:0e:1d:84:ff:73:00:46:0d:32:2a:32:e2:a3:79: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7B:A3:2A:F2:FA:5B:6A:18:D7:2F:2A:9B:26:A0:DE:2D:C2:A3:28 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:de:2c:7a:45:00:60:4d:db:26:83:1c:ca:83:31:7e:ad:8c: e7:05:82:c6:f4:8c:18:2f:d1:1d:94:a5:1c:8f:ad:52:23:39: af:2f:0a:f8:0d:a4:a3:f3:e6:0c:3b:9f:7d:73:7f:67:99:06: 0e:36:5c:54:37:ac:77:a0:88:49:fb:9e:43:80:5f:72:ab:ba: 95:49:e0:df:0a:ff:e7:8b:45:9e:dd:18:3a:2e:39:3c:74:88: 57:c7:1c:ba:a6:04:51:9a:a0:0f:95:d5:ab:2f:bb:93:87:ac: 97:3b:d5:da:28:6d:31:38:48:04:66:3e:f8:c4:c7:8e:4f:96: 4e:e8:6c:59:55:47:81:ed:60:16:16:86:3d:27:cd:71:f3:3a: 46:bd:d7:29:56:57:26:b3:de:98:db:1c:07:b5:0f:0a:b3:0a: 80:36:72:fb:a0:c8:29:e7:c0:c9:5b:7b:94:c6:5c:54:95:cf: 04:75:36:d5:a4:93:6a:f4:0d:77:4e:2d:47:85:51:d6:e1:66: b8:61:01:29:07:88:7e:71:d3:3f:e8:f3:98:7b:36:ef:38:e6: 27:94:d3:2f:6f:79:cd:86:90:1e:d7:83:8d:f2:1f:80:33:f0: 8e:89:fd:46:9e:e1:17:20:a1:b2:79:e5:ea:ec:2d:21:36:2a: d7:22:53:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScLnBQUBaCPYKe3flwrP6ADKWgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTA4MDUxNjM2NTJaFw0yNTA4MDgxOTAwNTJaMDMxMTAvBgNV BAMTKEZEN0JBMzJBRjJGQTVCNkExOEQ3MkYyQTlCMjZBMERFMkRDMkEzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkjoYHtnVG6Y4WapaeF14guxn Gsiy8Km1HXZuYHfvqgwRZfWBLEE/kfk4yMYATNSA6x4PKf+3Ny0MoKqTf+79z8X8 B43KwwCqque6QH2KhaZ3im7WxabJr3h+01iOBnbPyg33uHh8iB6KTy3ljHUKyOBD /iRmEflknSKEYKjf+AXhwkCnu+oeyjOV6KnaR6basPl06SKOddQ7bA1Vq1SxSzCO ZK3NecZgR/fIImGXneMXJdXASGKtLhMalgh6D0xd+TQ4pmMXFVx37S7PWoU298Nk 2J68WiichH4bz0ndFV1zEDbnU7VCDarM9WUZWzIOHYT/cwBGDTIqMuKjeaFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XujKvL6W2oY1y8qmyag3i3CoygwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANLeLHpFAGBN2yaDHMqDMX6tjOcFgsb0jBgv 0R2UpRyPrVIjOa8vCvgNpKPz5gw7n31zf2eZBg42XFQ3rHegiEn7nkOAX3KrupVJ 4N8K/+eLRZ7dGDouOTx0iFfHHLqmBFGaoA+V1asvu5OHrJc71doobTE4SARmPvjE x45Plk7obFlVR4HtYBYWhj0nzXHzOka91ylWVyaz3pjbHAe1DwqzCoA2cvugyCnn wMlbe5TGXFSVzwR1NtWkk2r0DXdOLUeFUdbhZrhhASkHiH5x0z/o85h7Nu845ieU 0y9vec2GkB7Xg43yH4Az8I6J/Uae4RcgobJ55ersLSE2KtciU04= -----END CERTIFICATE-----Generated at Thu Aug 7 14:49:11 2025 by rpki-client