$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: UoCrmyfwdEAQBY8FiSnaZRKlbA6+v/Gmi9x7bfiIzT8= Subject key identifier: 8F:D7:B2:AD:2B:C2:A5:5E:8F:97:DB:A7:9A:ED:80:03:19:4E:2E:79 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 76699EF69C90E21028BD5A27E092B04602EA61D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 0425 Signing time: Mon 16 Jun 2025 22:21:42 +0000 Manifest this update: Mon 16 Jun 2025 22:16:42 +0000 Manifest next update: Fri 20 Jun 2025 00:30:42 +0000 Files and hashes: 1: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: +QupJ1EZByI+g6S06PODORTdzbTVZh4a1MkmGIToh1c=) 2: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: 5eC7/I40aczbOTzlYXr05tpa3jo1C0J9l1xBueSDuOI=) 3: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 4: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: OWDwdkUQ7AVTgpcyTyWwrcLwGtGNDm2CT22fPcG3Gkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:69:9e:f6:9c:90:e2:10:28:bd:5a:27:e0:92:b0:46:02:ea:61:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Jun 16 22:16:42 2025 GMT Not After : Jun 20 00:30:42 2025 GMT Subject: CN=8FD7B2AD2BC2A55E8F97DBA79AED8003194E2E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:35:fb:27:6a:df:c4:eb:00:4c:e3:a2:2f: 27:fe:60:34:48:bd:cd:9e:bf:10:7a:cc:66:e4:db: 7d:b7:4b:8c:78:d8:1b:52:e6:5a:4c:67:dc:66:43: 21:eb:16:87:95:7c:57:1f:a3:df:f9:83:ac:29:86: c1:c4:4f:ba:e8:f2:a2:57:7a:bb:c1:e8:ba:f2:aa: 15:08:38:56:62:44:93:43:b1:c0:f0:c8:80:d7:43: 3c:87:f2:c3:40:a5:95:1c:ce:17:1b:f5:38:89:9a: ec:86:34:f6:bd:3b:20:7a:b5:e3:3e:a9:90:de:5f: f5:88:64:60:f3:38:b9:d1:bf:22:2d:1b:f9:fc:24: 16:0e:90:d7:54:fe:64:97:3d:3b:ec:4f:a5:39:e0: 8b:94:a0:6a:23:dc:59:d8:87:36:1e:e8:32:0f:61: 27:5f:a9:e9:9a:e4:07:c6:8b:ed:b2:78:76:e1:eb: 81:45:1a:b9:c3:cb:d0:67:e6:67:1c:10:4d:85:46: 9d:69:a6:eb:20:24:c0:06:a0:b8:8f:7d:14:46:ae: 45:1e:6d:c0:19:6a:1a:4f:70:4a:c4:00:75:ba:36: 98:46:7c:54:9d:d3:70:32:e0:6c:ea:4b:44:44:4e: b4:c7:31:8c:be:bc:45:2a:28:d0:4b:2a:33:cc:b8: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D7:B2:AD:2B:C2:A5:5E:8F:97:DB:A7:9A:ED:80:03:19:4E:2E:79 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c0:c5:69:dd:73:fc:ab:20:22:db:20:84:27:19:5d:78:82: 7e:dd:07:73:fe:7f:6d:97:59:dd:17:6b:ab:0f:ee:1a:3c:c2: 72:6c:b0:c4:3b:2e:74:a1:08:90:6d:12:ae:03:39:49:02:e4: d3:18:84:c4:b4:8b:54:a4:3d:86:6a:a6:22:0d:c7:40:09:75: 7f:5a:9f:f3:c1:d6:0b:7d:1e:ed:cf:d9:dd:b4:8f:fa:57:d7: 37:f0:9a:3d:32:42:70:0c:d7:36:0c:3d:a8:9c:23:9a:a9:aa: 19:ad:78:1f:56:2c:fe:13:dd:93:e9:3b:03:e5:f7:32:b0:43: 77:b2:a9:78:90:c0:1b:26:42:5d:dc:3d:1e:9f:d1:21:a3:b9: 87:26:fb:01:30:33:88:8b:b4:2b:f1:14:65:0c:92:a9:eb:74: ff:80:63:48:63:47:92:7e:02:da:10:3f:83:95:e1:7b:66:31: 61:e9:f7:9a:2d:5f:6e:df:53:fb:d5:8a:d1:ef:df:63:08:6a: 35:dd:ee:3d:35:b8:f8:92:28:c4:9e:1f:bd:cf:38:ba:4d:a6: 36:ff:fc:39:0a:b4:97:20:e2:59:37:a0:21:56:bf:c9:4e:c5: e3:ac:67:da:46:94:ae:87:89:82:51:16:db:2a:7c:bb:88:94: ab:62:63:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmme9pyQ4hAovVon4JKwRgLqYdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTA2MTYyMjE2NDJaFw0yNTA2MjAwMDMwNDJaMDMxMTAvBgNV BAMTKDhGRDdCMkFEMkJDMkE1NUU4Rjk3REJBNzlBRUQ4MDAzMTk0RTJFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqITX7J2rfxOsATOOiLyf+YDRI vc2evxB6zGbk2323S4x42BtS5lpMZ9xmQyHrFoeVfFcfo9/5g6wphsHET7ro8qJX ervB6LryqhUIOFZiRJNDscDwyIDXQzyH8sNApZUczhcb9TiJmuyGNPa9OyB6teM+ qZDeX/WIZGDzOLnRvyItG/n8JBYOkNdU/mSXPTvsT6U54IuUoGoj3FnYhzYe6DIP YSdfqema5AfGi+2yeHbh64FFGrnDy9Bn5mccEE2FRp1ppusgJMAGoLiPfRRGrkUe bcAZahpPcErEAHW6NphGfFSd03Ay4GzqS0RETrTHMYy+vEUqKNBLKjPMuFhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9eyrSvCpV6Pl9unmu2AAxlOLnkwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbAxWndc/yrICLbIIQnGV14gn7dB3P+f22X Wd0Xa6sP7ho8wnJssMQ7LnShCJBtEq4DOUkC5NMYhMS0i1SkPYZqpiINx0AJdX9a n/PB1gt9Hu3P2d20j/pX1zfwmj0yQnAM1zYMPaicI5qpqhmteB9WLP4T3ZPpOwPl 9zKwQ3eyqXiQwBsmQl3cPR6f0SGjuYcm+wEwM4iLtCvxFGUMkqnrdP+AY0hjR5J+ AtoQP4OV4XtmMWHp95otX27fU/vVitHv32MIajXd7j01uPiSKMSeH73POLpNpjb/ /DkKtJcg4lk3oCFWv8lOxeOsZ9pGlK6HiYJRFtsqfLuIlKtiY4s= -----END CERTIFICATE-----Generated at Wed Jun 18 08:23:17 2025 by rpki-client