$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: qYTdSiedrSfs3PvQEQH2kpDMXIxNVxtxm8ulQM0eBMM= Subject key identifier: 30:14:B6:44:3F:78:31:6C:52:00:8B:13:BD:9D:C9:FC:28:CE:C9:9E Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 4FD106B2E679D6380AF899C752F8E91075B42EE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 022D Signing time: Fri 25 Jul 2025 04:11:56 +0000 Manifest this update: Fri 25 Jul 2025 04:06:56 +0000 Manifest next update: Mon 28 Jul 2025 12:36:56 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) 4: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: 9adCWB+IPc9Ko/ANA2vgkV3uMxLgePJFV0wtU5lZdRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 12:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d1:06:b2:e6:79:d6:38:0a:f8:99:c7:52:f8:e9:10:75:b4:2e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Jul 25 04:06:56 2025 GMT Not After : Jul 28 12:36:56 2025 GMT Subject: CN=3014B6443F78316C52008B13BD9DC9FC28CEC99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:5a:5b:03:b6:7a:ef:f0:a7:5b:38:61:a7: 07:53:ae:30:73:6f:74:e2:9c:ba:82:19:42:ac:7e: 37:1e:cb:15:22:7f:89:4a:2e:06:b2:cf:14:36:94: db:d9:69:ad:89:38:ca:63:75:2c:82:a8:5a:4e:ad: 04:cb:2c:d8:be:d7:50:26:f0:07:b7:73:9a:02:f6: b2:a1:a5:30:9c:98:4f:f3:71:03:8b:d1:5d:5a:fe: 41:2d:2d:d0:59:cd:8d:b4:d0:7c:70:e5:ae:e7:df: 8e:d2:96:9b:0e:88:70:bc:51:67:1a:94:13:24:cb: d5:4e:12:40:82:25:d6:df:e2:c0:00:41:57:2b:e7: aa:d4:0e:b3:d1:b3:4e:49:cf:93:4f:71:5b:8a:97: 96:1b:1b:8c:b0:fa:f3:d2:95:78:b2:bb:8d:ed:99: fe:01:0c:f6:9a:af:2e:67:87:6a:1e:8a:63:bb:6b: a0:58:31:fc:50:7d:aa:a7:d0:fb:c6:c7:35:ec:4f: 45:f5:ad:75:d8:35:a1:f1:38:a8:31:da:0b:80:c2: 35:06:20:f8:b5:e0:4d:71:84:bf:ad:d1:ab:f7:5e: f4:ff:ee:69:80:a4:90:e7:0f:9f:fb:4e:82:e1:52: bf:e8:5c:5e:74:bd:4f:d7:6c:d6:31:91:fa:2a:42: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:B6:44:3F:78:31:6C:52:00:8B:13:BD:9D:C9:FC:28:CE:C9:9E X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9a:87:c2:f1:a4:39:62:ae:7d:76:14:41:32:04:db:40:11: 8c:13:2b:77:3c:3f:f1:fd:e7:91:0c:6d:d2:c3:14:f0:92:f4: 67:c4:c6:10:1b:aa:5c:44:a8:ff:ea:6f:e6:82:7e:e4:88:cf: 62:f9:d8:9a:c9:4f:3d:14:d9:80:d0:d0:36:93:21:e7:40:6c: 31:8b:59:7a:61:8a:77:26:7b:27:a1:6a:66:a6:25:80:b8:33: a5:a4:a7:4b:21:e6:b5:fb:6f:de:fa:b7:f2:72:9f:1f:35:e3: 13:16:8a:2f:23:4e:cb:42:c0:da:5f:78:8f:35:28:9d:36:58: 32:3d:20:57:32:6f:41:e6:4d:a7:50:f4:c8:5d:1c:59:c0:91: f1:59:69:50:30:72:6e:68:d7:d4:c0:db:f4:19:4e:45:65:e6: 31:85:a6:ae:93:1e:9b:4b:cc:ca:45:53:b3:e3:42:4c:d1:77: be:1a:49:f4:83:30:bb:5b:44:b6:b5:ac:b7:97:ed:d0:2e:62: f8:0a:55:fb:21:67:fa:94:55:08:0b:dc:7f:92:eb:6d:db:f3: be:14:15:a1:a6:5f:f4:97:55:6e:ea:77:c4:33:f7:22:ee:a5: d4:46:65:a4:20:3f:a2:a4:1f:d3:99:f5:9e:39:b8:54:89:c0: 14:41:0f:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9EGsuZ51jgK+JnHUvjpEHW0LuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTA3MjUwNDA2NTZaFw0yNTA3MjgxMjM2NTZaMDMxMTAvBgNV BAMTKDMwMTRCNjQ0M0Y3ODMxNkM1MjAwOEIxM0JEOURDOUZDMjhDRUM5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzFpbA7Z67/CnWzhhpwdTrjBz b3TinLqCGUKsfjceyxUif4lKLgayzxQ2lNvZaa2JOMpjdSyCqFpOrQTLLNi+11Am 8Ae3c5oC9rKhpTCcmE/zcQOL0V1a/kEtLdBZzY200Hxw5a7n347SlpsOiHC8UWca lBMky9VOEkCCJdbf4sAAQVcr56rUDrPRs05Jz5NPcVuKl5YbG4yw+vPSlXiyu43t mf4BDPaary5nh2oeimO7a6BYMfxQfaqn0PvGxzXsT0X1rXXYNaHxOKgx2guAwjUG IPi14E1xhL+t0av3XvT/7mmApJDnD5/7ToLhUr/oXF50vU/XbNYxkfoqQpgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBS2RD94MWxSAIsTvZ3J/CjOyZ4wHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCah8LxpDlirn12FEEyBNtAEYwTK3c8P/H9 55EMbdLDFPCS9GfExhAbqlxEqP/qb+aCfuSIz2L52JrJTz0U2YDQ0DaTIedAbDGL WXphincmeyehamamJYC4M6Wkp0sh5rX7b976t/Jynx814xMWii8jTstCwNpfeI81 KJ02WDI9IFcyb0HmTadQ9MhdHFnAkfFZaVAwcm5o19TA2/QZTkVl5jGFpq6THptL zMpFU7PjQkzRd74aSfSDMLtbRLa1rLeX7dAuYvgKVfshZ/qUVQgL3H+S623b874U FaGmX/SXVW7qd8Qz9yLupdRGZaQgP6KkH9OZ9Z45uFSJwBRBD8k= -----END CERTIFICATE-----Generated at Sat Jul 26 20:07:09 2025 by rpki-client