$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: vmH7YBfPbC2Ff+bmr6XY5SP37OsBPhw5cdUdh63jKE0= Subject key identifier: C9:EC:B0:EE:A4:7E:CE:E7:23:B3:16:49:AF:2B:38:D2:29:EE:EB:97 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 452DF3E23AF0629C3617E8DC594492E82DAA4C0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0314 Signing time: Tue 05 Aug 2025 21:31:12 +0000 Manifest this update: Tue 05 Aug 2025 21:26:12 +0000 Manifest next update: Sat 09 Aug 2025 03:06:12 +0000 Files and hashes: 1: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 2: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 3: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: PfQmviPQWVr5khvGTLxlsAlIkQ3h5bT8RoVPMp7+vAU=) 4: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: 8aTJRu9foQFYsb9vuOMv9v2Z6K/Xnx4JbU5S1Q47rNw=) 5: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 6: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2d:f3:e2:3a:f0:62:9c:36:17:e8:dc:59:44:92:e8:2d:aa:4c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Aug 5 21:26:12 2025 GMT Not After : Aug 9 03:06:12 2025 GMT Subject: CN=C9ECB0EEA47ECEE723B31649AF2B38D229EEEB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:20:8a:24:d0:87:21:a1:f3:ab:64:8a:79:9b: 58:75:d6:3c:6a:37:37:7b:aa:d3:00:82:e6:e1:85: fe:ce:52:71:d1:20:f1:51:52:34:a7:ff:a6:19:14: 73:58:51:6c:c0:5d:90:71:bd:45:02:63:27:25:55: 19:80:14:fe:ba:2c:7e:8e:9d:3a:b4:ad:ee:de:e3: 93:f6:d4:28:a3:3b:45:fd:f4:4f:a8:eb:c7:80:3e: 6c:e7:cd:c7:65:2c:19:4a:75:bf:dd:ab:6b:b1:38: 32:f7:e9:ab:28:b7:18:c5:5b:db:39:9d:c9:9c:8a: f1:be:ff:e3:c0:9c:01:5e:98:11:e6:e3:64:a7:d3: b9:42:d1:22:0f:38:f3:e6:4d:ce:56:03:5d:17:d8: 39:f6:a2:a1:8b:be:f4:87:94:10:b0:dd:d0:2d:f0: 87:8d:a8:bc:e5:e1:d8:66:e3:94:d6:69:1a:aa:6b: 75:c2:b4:64:c5:cd:13:d0:c5:43:cc:00:e7:12:82: e1:7f:94:34:2a:63:89:8b:07:24:0a:46:49:eb:d6: a1:77:39:51:74:23:ed:07:22:48:ab:6c:11:87:29: f9:ca:f6:75:ac:c0:f9:9f:c7:fd:79:97:02:95:6f: 02:8b:39:b4:a0:3a:4e:0d:f0:80:24:e3:ba:a3:6d: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EC:B0:EE:A4:7E:CE:E7:23:B3:16:49:AF:2B:38:D2:29:EE:EB:97 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2a:08:ad:6e:29:8f:4c:9c:5e:52:8d:7f:df:44:e5:bc:28: 9e:c5:53:39:25:a3:d3:ac:1d:dd:19:a0:58:70:76:2b:b1:7e: d2:57:3d:31:1a:78:bc:b3:de:ad:7e:11:56:52:59:04:e1:c7: c6:d6:f6:c3:d5:eb:d8:60:90:a4:a5:ea:5c:ed:b6:81:fe:d2: 30:a9:62:6e:21:c8:d1:93:16:bd:83:ac:41:e8:8f:c3:8d:ea: b2:0e:8a:9c:e0:1b:4d:6b:e4:60:d3:6b:c9:5b:24:c3:03:0d: 06:1e:17:8f:95:1e:51:74:6a:03:33:f8:3b:d2:cd:a7:60:84: 67:81:4b:bc:18:df:84:a4:b5:a9:97:3c:c8:36:4c:36:b3:6c: 6f:69:fb:e4:0c:66:a8:28:97:c3:01:b0:29:e6:4b:7c:5f:67: 36:43:c8:9c:02:d0:85:17:52:14:8d:b9:a1:24:e7:6a:db:2f: 67:f7:92:1d:94:14:2c:d2:8b:76:b2:af:46:46:d9:6d:8b:0d: c9:b5:9d:a1:bb:43:a1:8f:dc:b4:1f:64:d7:46:ba:d9:ae:e7: e5:08:1f:3e:cf:10:53:88:47:d8:8c:92:30:3c:37:37:99:47: c5:fc:e7:57:14:9b:6c:3a:33:0f:d2:f1:41:d8:10:06:10:30: e9:03:1c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURS3z4jrwYpw2F+jcWUSS6C2qTAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTA4MDUyMTI2MTJaFw0yNTA4MDkwMzA2MTJaMDMxMTAvBgNV BAMTKEM5RUNCMEVFQTQ3RUNFRTcyM0IzMTY0OUFGMkIzOEQyMjlFRUVCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtIIok0IchofOrZIp5m1h11jxq Nzd7qtMAgubhhf7OUnHRIPFRUjSn/6YZFHNYUWzAXZBxvUUCYyclVRmAFP66LH6O nTq0re7e45P21CijO0X99E+o68eAPmznzcdlLBlKdb/dq2uxODL36asotxjFW9s5 ncmcivG+/+PAnAFemBHm42Sn07lC0SIPOPPmTc5WA10X2Dn2oqGLvvSHlBCw3dAt 8IeNqLzl4dhm45TWaRqqa3XCtGTFzRPQxUPMAOcSguF/lDQqY4mLByQKRknr1qF3 OVF0I+0HIkirbBGHKfnK9nWswPmfx/15lwKVbwKLObSgOk4N8IAk47qjbSLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeyw7qR+zucjsxZJrys40inu65cwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwqCK1uKY9MnF5SjX/fROW8KJ7FUzklo9Os Hd0ZoFhwdiuxftJXPTEaeLyz3q1+EVZSWQThx8bW9sPV69hgkKSl6lzttoH+0jCp Ym4hyNGTFr2DrEHoj8ON6rIOipzgG01r5GDTa8lbJMMDDQYeF4+VHlF0agMz+DvS zadghGeBS7wY34SktamXPMg2TDazbG9p++QMZqgol8MBsCnmS3xfZzZDyJwC0IUX UhSNuaEk52rbL2f3kh2UFCzSi3ayr0ZG2W2LDcm1naG7Q6GP3LQfZNdGutmu5+UI Hz7PEFOIR9iMkjA8NzeZR8X851cUm2w6Mw/S8UHYEAYQMOkDHKI= -----END CERTIFICATE-----Generated at Wed Aug 6 14:07:09 2025 by rpki-client