$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: ROMw8e3ojtTsgOKdERrDx+vWUbys4427KVsdd8UjG6w= Subject key identifier: A7:15:42:64:71:87:F7:ED:52:B4:AC:97:0A:72:D8:D3:1B:8A:FC:B9 Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 5914343F411CA0F6BDD5B2CAB38E3C388D9C6F57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 017E Signing time: Mon 28 Apr 2025 10:41:16 +0000 Manifest this update: Mon 28 Apr 2025 10:36:16 +0000 Manifest next update: Thu 01 May 2025 12:03:16 +0000 Files and hashes: 1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: qYmhKPO9rFhqz04TGUFRQv1e9eYXk46mY1Xm3G2a+Uk=) 2: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: tU1LiwWax1Mv6vvv5+H8MuMORxAaLWM4TeR33gOInYM=) 3: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 2PIJNDCqxr1CYBMDta4AS70nqIttL7WaXTQsdNAh5fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:14:34:3f:41:1c:a0:f6:bd:d5:b2:ca:b3:8e:3c:38:8d:9c:6f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Apr 28 10:36:16 2025 GMT Not After : May 1 12:03:16 2025 GMT Subject: CN=A71542647187F7ED52B4AC970A72D8D31B8AFCB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:1b:a0:ed:e5:2c:37:4f:6a:ba:98:bb:75: 02:f9:41:14:19:fb:3c:85:f8:35:2b:66:1e:4b:97: 0d:0e:33:e6:82:86:7b:2d:26:a5:b2:d6:d1:e4:ba: 09:c5:7c:21:70:d4:7e:71:c9:6a:b5:df:e6:cf:5f: 4f:eb:01:3a:be:76:6d:c6:d9:73:dd:0c:2d:d7:c6: 18:c7:ce:63:35:4f:70:a9:d2:1b:65:13:20:c8:4f: b0:f3:35:ab:77:8e:59:bb:06:93:2b:1a:d5:e1:16: ca:18:f9:5b:b7:a4:cd:75:56:e7:5d:cd:bc:74:78: e2:90:e6:b0:4e:6c:5b:a4:17:9f:74:01:1b:5c:59: c7:09:1c:39:a0:70:d0:27:b1:72:e2:e3:06:73:54: a3:99:9c:ee:a7:70:d3:08:80:29:b3:07:dc:45:ea: fb:6c:e1:ef:13:11:8f:d2:5e:48:fc:03:a1:1b:f4: 22:4f:14:d2:fc:2a:71:9f:e7:ea:13:c1:79:22:23: eb:ee:14:d1:a7:97:c3:9b:b3:fe:6f:7c:cd:e3:1a: 74:eb:f6:75:9a:97:ef:93:a1:44:d0:cc:e7:42:07: de:2a:9b:80:db:c8:f5:05:cc:94:16:97:b0:64:96: 8a:99:f5:0f:b4:08:17:74:c9:d2:f8:e7:b5:07:bc: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:15:42:64:71:87:F7:ED:52:B4:AC:97:0A:72:D8:D3:1B:8A:FC:B9 X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:0c:fe:ca:ac:f6:35:50:8c:45:f1:a5:ce:cb:9c:a5:e0:13: b8:3d:ab:8e:3d:cd:ca:83:18:31:4e:ee:d8:73:ac:4a:c1:9c: 62:45:5d:73:b6:3c:65:c2:af:e8:34:32:fd:38:e3:4c:39:2e: 82:ee:be:3b:62:14:9f:15:db:b8:9c:17:77:ae:c9:99:c3:19: cd:ad:fa:72:ef:d8:ed:3b:00:5c:87:24:97:27:64:51:ec:fc: a4:f6:b8:85:34:e0:55:d9:4e:0b:99:c6:2e:67:10:9e:65:a5: a8:aa:26:90:0c:4f:18:8a:14:a1:e5:60:39:6c:9b:7c:41:46: 23:33:ef:51:99:38:b5:4f:c8:a9:1d:96:47:dd:4c:4d:44:2d: 92:28:cb:be:00:ee:9f:45:7c:54:b1:92:fc:12:6a:55:3e:96: af:66:9f:50:25:48:68:fc:eb:70:27:bb:ad:3d:4b:22:71:8f: 4d:d9:69:07:55:ff:65:c7:f0:51:71:49:85:f0:b2:5c:3c:51: db:bc:d6:2b:fb:26:2e:bc:f0:44:96:d6:14:85:5e:de:6a:e7: 2f:a0:c7:6a:41:dc:8a:30:29:35:c7:5e:b1:85:d2:d4:a9:31: 7a:c6:08:1e:b6:32:99:5b:c5:87:fd:83:28:a9:2b:63:c6:13: d1:a6:a7:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRQ0P0EcoPa91bLKs448OI2cb1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNTA0MjgxMDM2MTZaFw0yNTA1MDExMjAzMTZaMDMxMTAvBgNV BAMTKEE3MTU0MjY0NzE4N0Y3RUQ1MkI0QUM5NzBBNzJEOEQzMUI4QUZDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOshug7eUsN09qupi7dQL5QRQZ +zyF+DUrZh5Llw0OM+aChnstJqWy1tHkugnFfCFw1H5xyWq13+bPX0/rATq+dm3G 2XPdDC3XxhjHzmM1T3Cp0htlEyDIT7DzNat3jlm7BpMrGtXhFsoY+Vu3pM11Vudd zbx0eOKQ5rBObFukF590ARtcWccJHDmgcNAnsXLi4wZzVKOZnO6ncNMIgCmzB9xF 6vts4e8TEY/SXkj8A6Eb9CJPFNL8KnGf5+oTwXkiI+vuFNGnl8Obs/5vfM3jGnTr 9nWal++ToUTQzOdCB94qm4DbyPUFzJQWl7BkloqZ9Q+0CBd0ydL457UHvNhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxVCZHGH9+1StKyXCnLY0xuK/LkwHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkM/sqs9jVQjEXxpc7LnKXgE7g9q449zcqD GDFO7thzrErBnGJFXXO2PGXCr+g0Mv0440w5LoLuvjtiFJ8V27icF3euyZnDGc2t +nLv2O07AFyHJJcnZFHs/KT2uIU04FXZTguZxi5nEJ5lpaiqJpAMTxiKFKHlYDls m3xBRiMz71GZOLVPyKkdlkfdTE1ELZIoy74A7p9FfFSxkvwSalU+lq9mn1AlSGj8 63Anu609SyJxj03ZaQdV/2XH8FFxSYXwslw8Udu81iv7Ji688ESW1hSFXt5q5y+g x2pB3IowKTXHXrGF0tSpMXrGCB62MplbxYf9gyipK2PGE9GmpyA= -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:38 2025 by rpki-client