$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: iFDeLtr2lFeKMJgtEdiU7rFQucjC66op06vsKealeaY= Subject key identifier: FD:CA:25:95:6E:5A:73:21:CF:46:A0:CF:9C:DC:12:23:80:3F:CC:15 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 0B2961325829B4837F86A817BFA0200D82634774 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: 64 Signing time: Mon 28 Apr 2025 17:50:59 +0000 Manifest this update: Mon 28 Apr 2025 17:45:59 +0000 Manifest next update: Fri 02 May 2025 02:56:59 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=) 2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: 3fOZpfcQWhmvTed5hejVcO275+iWESrKrQoN6nJXt4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:29:61:32:58:29:b4:83:7f:86:a8:17:bf:a0:20:0d:82:63:47:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Apr 28 17:45:59 2025 GMT Not After : May 2 02:56:59 2025 GMT Subject: CN=FDCA25956E5A7321CF46A0CF9CDC1223803FCC15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:54:04:7e:0c:e1:49:30:28:32:ae:cb:60: 59:f9:80:8a:88:b9:75:77:2e:75:bb:fe:e1:34:21: 7b:d1:5e:65:71:16:f2:64:f6:f1:16:b4:75:ea:50: 40:2d:2f:74:ef:53:fb:5f:30:87:b4:51:c1:83:d9: 8a:19:e7:a2:b1:34:08:c3:72:e3:22:98:b6:a4:e8: 03:79:7c:84:3e:73:10:d3:d8:15:79:95:f9:de:6c: 54:74:1f:bc:45:02:e0:61:29:1b:f2:02:a0:be:2a: b4:b8:89:2a:2f:01:a3:56:18:a0:a1:ef:78:09:3c: 92:c8:03:cf:7a:bf:41:d3:45:fd:7e:8f:fa:54:5c: 17:93:6d:82:0d:8b:11:91:cc:b8:71:d8:58:6f:c1: 2d:3c:92:38:e3:02:47:25:2e:28:29:fb:5c:d7:4f: 17:5f:fb:d0:0b:67:7f:a5:ab:de:55:32:86:e4:fa: 11:df:b9:04:32:39:26:cc:81:49:44:d4:e3:b8:d0: 60:9e:17:d1:9a:08:92:50:e0:f3:22:19:eb:6c:aa: 8f:f4:55:ec:51:01:83:6a:22:12:f0:31:8f:3e:eb: 8b:da:d7:6f:a5:26:6c:5f:d9:9b:96:bf:b5:61:d6: bc:ea:fc:f5:b0:49:64:98:01:e7:e4:7d:a9:16:fc: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CA:25:95:6E:5A:73:21:CF:46:A0:CF:9C:DC:12:23:80:3F:CC:15 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:58:fd:4e:3f:e0:9a:d6:2e:61:67:f7:af:fe:70:2b:cb:ef: 1f:c5:e7:7b:8c:00:02:da:ea:9c:b6:2e:74:b3:f5:05:c4:05: 24:6d:02:d8:f4:27:2c:95:14:c5:c0:19:32:78:10:e1:3f:00: f1:bc:b9:ea:6d:3d:02:cc:ce:ac:d2:8a:0e:33:74:5b:06:ca: fa:2a:4c:9d:48:58:72:e4:42:0d:83:12:33:91:3b:b8:bd:9c: a8:36:80:53:01:92:55:78:6b:02:a1:f4:22:80:b7:f9:a5:3d: b9:79:96:06:9e:66:04:9d:9a:a0:be:3c:26:85:ee:8d:33:92: 76:78:17:c2:8c:56:c2:47:57:08:45:e0:4c:29:ea:10:d1:e5: d1:d2:e5:34:95:cb:db:3b:15:81:c7:ff:87:3c:36:5c:74:80: 11:bb:3c:a1:7b:a6:83:14:1a:35:f0:8f:27:05:81:f7:3a:f0: e7:b0:02:00:ff:ae:62:fe:3e:11:a9:74:27:d8:7e:6c:be:fc: f3:6c:5b:b6:9b:98:1a:e5:c7:f3:02:b3:fc:12:12:8a:b5:c2: 32:bd:36:df:2a:62:b6:3a:ee:3f:81:b9:4e:c1:43:ce:b8:24: 03:d5:43:48:0c:b6:39:39:4b:a0:df:e0:8f:e2:d8:ba:53:c7: 44:f0:f2:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCylhMlgptIN/hqgXv6AgDYJjR3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTA0MjgxNzQ1NTlaFw0yNTA1MDIwMjU2NTlaMDMxMTAvBgNV BAMTKEZEQ0EyNTk1NkU1QTczMjFDRjQ2QTBDRjlDREMxMjIzODAzRkNDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4FQEfgzhSTAoMq7LYFn5gIqI uXV3LnW7/uE0IXvRXmVxFvJk9vEWtHXqUEAtL3TvU/tfMIe0UcGD2YoZ56KxNAjD cuMimLak6AN5fIQ+cxDT2BV5lfnebFR0H7xFAuBhKRvyAqC+KrS4iSovAaNWGKCh 73gJPJLIA896v0HTRf1+j/pUXBeTbYINixGRzLhx2FhvwS08kjjjAkclLigp+1zX Txdf+9ALZ3+lq95VMobk+hHfuQQyOSbMgUlE1OO40GCeF9GaCJJQ4PMiGetsqo/0 VexRAYNqIhLwMY8+64va12+lJmxf2ZuWv7Vh1rzq/PWwSWSYAefkfakW/MDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/collW5acyHPRqDPnNwSI4A/zBUwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVY/U4/4JrWLmFn96/+cCvL7x/F53uMAALa 6py2LnSz9QXEBSRtAtj0JyyVFMXAGTJ4EOE/APG8ueptPQLMzqzSig4zdFsGyvoq TJ1IWHLkQg2DEjORO7i9nKg2gFMBklV4awKh9CKAt/mlPbl5lgaeZgSdmqC+PCaF 7o0zknZ4F8KMVsJHVwhF4Ewp6hDR5dHS5TSVy9s7FYHH/4c8Nlx0gBG7PKF7poMU GjXwjycFgfc68OewAgD/rmL+PhGpdCfYfmy+/PNsW7abmBrlx/MCs/wSEoq1wjK9 Nt8qYrY67j+BuU7BQ864JAPVQ0gMtjk5S6Df4I/i2LpTx0Tw8uw= -----END CERTIFICATE-----Generated at Wed Apr 30 07:37:23 2025 by rpki-client