$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: 4XPj2h7NqcZ9WyqRjiFVPanPwb55OIx/UsTJ/ELdwIM= Subject key identifier: 31:9A:EA:48:65:5F:80:12:40:96:48:F4:FD:04:80:6D:7C:4F:0B:B3 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 7671E4B0E6E630B58FF0170D75BAA8A2132FB81A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: B8 Signing time: Mon 03 Nov 2025 01:01:01 +0000 Manifest this update: Mon 03 Nov 2025 00:56:01 +0000 Manifest next update: Thu 06 Nov 2025 03:42:01 +0000 Files and hashes: 1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: HtVeouKi/b6w3BqaFEyP+oPueNZTqFYROobZHoW+1T0=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:71:e4:b0:e6:e6:30:b5:8f:f0:17:0d:75:ba:a8:a2:13:2f:b8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Nov 3 00:56:01 2025 GMT Not After : Nov 6 03:42:01 2025 GMT Subject: CN=319AEA48655F8012409648F4FD04806D7C4F0BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:d2:49:de:0f:bc:a0:61:c8:38:79:df:f0:2a: 5f:cc:cc:32:f2:e6:1b:ed:07:99:27:99:16:58:6b: 69:73:f3:25:33:1b:30:cb:cf:75:f3:ae:ae:36:1f: e7:2a:9e:e1:5e:56:ce:fe:ca:6d:e4:8a:c1:94:d4: 50:a9:4e:98:d0:b5:ca:5a:ac:02:2a:64:62:c7:7d: 4a:11:9e:5d:93:40:b8:51:0d:46:0f:c4:71:76:cd: d8:aa:9a:81:5f:a9:50:c1:5d:5c:2b:5d:7e:e6:00: 61:5e:c3:77:69:65:54:52:b0:92:63:6d:19:c0:c5: c9:49:8e:38:1a:f1:2f:e6:4b:70:ad:49:43:9b:80: 9a:b4:7e:b1:fc:38:22:e6:ef:fc:ea:65:2e:bf:17: f9:8e:cb:a1:f4:49:5b:db:f5:9a:74:7f:bd:b2:0c: c7:6b:18:9a:6d:23:f5:87:d5:eb:c2:cc:64:92:ca: e6:31:89:ca:a6:9b:b3:be:05:85:96:07:2e:85:e8: b8:46:d6:70:c8:35:37:28:b0:78:56:3a:2b:3f:bf: 2d:d4:85:e7:2b:ef:cc:97:d7:e1:25:3c:49:70:6a: f7:92:cc:fb:6b:12:dc:f5:32:23:68:5c:cc:fa:36: cc:9d:30:f1:e7:ac:86:7b:28:c2:0b:e5:64:a6:c0: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:EA:48:65:5F:80:12:40:96:48:F4:FD:04:80:6D:7C:4F:0B:B3 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fc:c3:64:db:51:ee:1e:33:77:09:1f:11:e5:58:8b:fd:cb: a5:6d:93:2b:cb:bd:78:39:ef:b7:3f:ef:69:ef:9e:26:f7:f7: 58:2f:c4:40:25:bb:dd:8d:a5:99:c5:5e:bf:57:3f:bd:87:a4: a1:3e:75:05:23:eb:c8:a8:c1:df:7a:92:a7:08:c6:cb:a3:da: 73:b9:b6:f5:35:71:ea:80:8e:13:98:b3:eb:7d:e8:be:6e:6f: 81:a7:ea:1b:77:fc:4e:49:9c:18:aa:9b:e2:b0:66:07:f0:86: e6:90:00:0c:8d:fd:56:28:ec:13:67:e6:61:df:5d:3c:6a:64: 74:68:26:52:96:24:c7:fa:64:c8:9d:37:53:a0:af:ed:b9:d8: 1b:52:a5:86:57:19:5c:cb:62:5e:30:55:a5:cf:0f:aa:78:38: 3d:de:fc:62:46:30:79:5b:3c:e4:b5:8d:f7:8a:97:90:af:0d: 87:08:8a:78:b0:f2:48:44:cd:6a:b6:43:46:ac:40:b9:87:2e: a4:ce:c0:59:8d:9e:e3:fa:0e:35:82:66:5b:ab:9c:4a:14:54: 0a:c2:e8:9f:41:2a:36:45:1f:4f:20:98:28:bc:6f:cf:70:67: 31:66:0a:7c:7a:0e:a8:9a:36:58:53:77:27:f9:9d:5b:d7:f9: 8d:40:09:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnHksObmMLWP8BcNdbqoohMvuBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTExMDMwMDU2MDFaFw0yNTExMDYwMzQyMDFaMDMxMTAvBgNV BAMTKDMxOUFFQTQ4NjU1RjgwMTI0MDk2NDhGNEZEMDQ4MDZEN0M0RjBCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD90kneD7ygYcg4ed/wKl/MzDLy 5hvtB5knmRZYa2lz8yUzGzDLz3Xzrq42H+cqnuFeVs7+ym3kisGU1FCpTpjQtcpa rAIqZGLHfUoRnl2TQLhRDUYPxHF2zdiqmoFfqVDBXVwrXX7mAGFew3dpZVRSsJJj bRnAxclJjjga8S/mS3CtSUObgJq0frH8OCLm7/zqZS6/F/mOy6H0SVvb9Zp0f72y DMdrGJptI/WH1evCzGSSyuYxicqmm7O+BYWWBy6F6LhG1nDINTcosHhWOis/vy3U hecr78yX1+ElPElwaveSzPtrEtz1MiNoXMz6NsydMPHnrIZ7KMIL5WSmwL0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZrqSGVfgBJAlkj0/QSAbXxPC7MwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn8w2TbUe4eM3cJHxHlWIv9y6VtkyvLvXg5 77c/72nvnib391gvxEAlu92NpZnFXr9XP72HpKE+dQUj68iowd96kqcIxsuj2nO5 tvU1ceqAjhOYs+t96L5ub4Gn6ht3/E5JnBiqm+KwZgfwhuaQAAyN/VYo7BNn5mHf XTxqZHRoJlKWJMf6ZMidN1Ogr+252BtSpYZXGVzLYl4wVaXPD6p4OD3e/GJGMHlb POS1jfeKl5CvDYcIiniw8khEzWq2Q0asQLmHLqTOwFmNnuP6DjWCZlurnEoUVArC 6J9BKjZFH08gmCi8b89wZzFmCnx6DqiaNlhTdyf5nVvX+Y1ACXE= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client