$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: 0/MICEK8jj3gD74Kp3Dfhv+iuxQiKWUcrDg+Ie9dJXQ= Subject key identifier: B6:BE:7A:91:BC:71:A5:5C:68:06:D8:11:24:30:93:BE:2D:93:1F:2F Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 1982153B48310E43B9D8B1F4BB4C1A9CB7EB9739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 0450 Signing time: Sat 14 Jun 2025 07:40:49 +0000 Manifest this update: Sat 14 Jun 2025 07:35:49 +0000 Manifest next update: Tue 17 Jun 2025 07:50:49 +0000 Files and hashes: 1: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: W2jFc9RzBUfMsCMJAnJPUb+b179Bd16RkUJc6QBZwTc=) 2: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: be/8Wx/3MwQD0Ly3y8Z3u5nFqvRex798npHJMv4qFX8=) 3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: wsSQ1ZH2PCic7BEYRkwFgMPjnpXYZ3ohhVuKfoCoA7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 07:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:82:15:3b:48:31:0e:43:b9:d8:b1:f4:bb:4c:1a:9c:b7:eb:97:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Jun 14 07:35:49 2025 GMT Not After : Jun 17 07:50:49 2025 GMT Subject: CN=B6BE7A91BC71A55C6806D811243093BE2D931F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:63:ce:b5:c4:b3:df:1a:22:44:a0:c2:95: 9c:80:9f:a7:c8:62:55:f2:b7:78:3c:d1:ed:1f:7c: a2:d3:96:37:2b:e3:03:a7:20:b4:e8:6c:91:5d:73: 17:34:18:30:0c:24:59:ff:be:e3:12:9f:88:d5:2f: 31:23:0f:01:e5:7f:7a:56:90:99:c2:4d:81:85:34: 4d:6f:51:2f:37:30:e8:c8:27:3a:a5:20:e5:27:31: b2:6e:6b:60:d0:76:da:2c:ee:78:7a:0e:ec:ac:87: e2:11:63:0c:7e:96:28:4e:3c:96:e5:a0:cd:1f:3c: c0:50:f6:f5:2a:82:f5:0a:e0:4c:4c:f8:44:3f:f2: b2:70:12:36:8c:90:02:4e:99:5d:e9:39:cf:fb:44: 7f:d8:ed:89:c2:d2:03:a2:f9:4a:52:91:8d:30:6a: b1:e5:5a:36:0b:06:3c:bd:d2:47:b8:c9:6a:e3:13: b2:a8:af:c6:d6:02:35:a4:7c:a9:42:e8:34:d5:64: 0f:b8:f3:92:b3:92:7d:da:a4:b3:8d:73:3c:0c:0f: 04:7f:41:56:7a:ca:32:58:11:33:4b:80:7f:5c:5a: 61:13:72:da:99:60:f7:75:a6:2a:68:c3:86:03:87: ab:71:f3:ab:91:ce:82:1c:18:cd:14:4d:ff:b9:aa: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:7A:91:BC:71:A5:5C:68:06:D8:11:24:30:93:BE:2D:93:1F:2F X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:62:b1:fc:0a:b3:d1:04:a9:dd:0e:e8:24:68:94:34:f6:fc: fe:42:3d:75:df:30:da:cb:0b:bb:1a:68:da:c8:66:cc:62:97: 94:6a:66:28:ea:52:0a:99:58:34:6b:68:3a:a0:02:55:d6:17: 01:f3:61:f9:24:3e:9c:b1:c0:e2:0a:a6:20:8a:0a:3f:ed:92: 45:ee:e6:23:39:1a:9c:9c:44:0e:09:1d:38:a8:ec:86:4e:26: 3a:d6:3c:a0:92:85:3e:40:4b:cd:74:77:fd:9f:90:55:b0:d9: 8f:f4:6a:2a:36:be:e0:99:8a:cc:b4:e0:ce:f0:2d:c0:3b:c2: a8:32:0c:cc:d7:38:44:fd:6e:e6:26:34:bb:73:95:78:47:4e: 7e:6d:24:a2:84:5e:00:22:ca:62:5a:cf:08:17:61:e3:e3:c5: de:7f:c5:da:99:9d:a0:7b:28:95:1c:9f:dd:ad:1e:bb:09:39: fa:95:a2:16:be:5c:0e:4f:00:90:32:f5:0f:aa:87:e3:46:7b: 49:78:40:b2:7c:01:b2:6c:c4:b5:ad:a4:d8:ad:a3:2b:ef:68: 01:24:fe:a0:ef:ec:71:83:57:13:d2:ea:31:01:0f:c0:2f:19: 15:1b:0b:71:77:ae:c0:45:62:f5:4f:7a:7f:7c:7a:1b:e1:22: 3d:6f:41:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYIVO0gxDkO52LH0u0wanLfrlzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNTA2MTQwNzM1NDlaFw0yNTA2MTcwNzUwNDlaMDMxMTAvBgNV BAMTKEI2QkU3QTkxQkM3MUE1NUM2ODA2RDgxMTI0MzA5M0JFMkQ5MzFGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/mPOtcSz3xoiRKDClZyAn6fI YlXyt3g80e0ffKLTljcr4wOnILTobJFdcxc0GDAMJFn/vuMSn4jVLzEjDwHlf3pW kJnCTYGFNE1vUS83MOjIJzqlIOUnMbJua2DQdtos7nh6Duysh+IRYwx+lihOPJbl oM0fPMBQ9vUqgvUK4ExM+EQ/8rJwEjaMkAJOmV3pOc/7RH/Y7YnC0gOi+UpSkY0w arHlWjYLBjy90ke4yWrjE7Kor8bWAjWkfKlC6DTVZA+485Kzkn3apLONczwMDwR/ QVZ6yjJYETNLgH9cWmETctqZYPd1pipow4YDh6tx86uRzoIcGM0UTf+5qrPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtr56kbxxpVxoBtgRJDCTvi2THy8wHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5isfwKs9EEqd0O6CRolDT2/P5CPXXfMNrL C7saaNrIZsxil5RqZijqUgqZWDRraDqgAlXWFwHzYfkkPpyxwOIKpiCKCj/tkkXu 5iM5GpycRA4JHTio7IZOJjrWPKCShT5AS810d/2fkFWw2Y/0aio2vuCZisy04M7w LcA7wqgyDMzXOET9buYmNLtzlXhHTn5tJKKEXgAiymJazwgXYePjxd5/xdqZnaB7 KJUcn92tHrsJOfqVoha+XA5PAJAy9Q+qh+NGe0l4QLJ8AbJsxLWtpNitoyvvaAEk /qDv7HGDVxPS6jEBD8AvGRUbC3F3rsBFYvVPen98ehvhIj1vQWk= -----END CERTIFICATE-----Generated at Mon Jun 16 07:49:23 2025 by rpki-client