$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: gghVctOPv5v4QA0cxCQlLefOuX7T8Quzu0O0UuFlUPM= Subject key identifier: BD:15:5B:7A:41:90:C6:CE:5F:EF:96:51:35:06:AF:91:E7:45:D9:8F Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 01C3601ADB4B040641D2DEC09C7508D4E6C365D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 04F3 Signing time: Sat 19 Jul 2025 06:11:37 +0000 Manifest this update: Sat 19 Jul 2025 06:06:37 +0000 Manifest next update: Tue 22 Jul 2025 07:59:37 +0000 Files and hashes: 1: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 2: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: Tv0v72lO/Fpu8hsN+h08KrquzmgaXG/+OkWI1RC5tDs=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) 4: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c3:60:1a:db:4b:04:06:41:d2:de:c0:9c:75:08:d4:e6:c3:65:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Jul 19 06:06:37 2025 GMT Not After : Jul 22 07:59:37 2025 GMT Subject: CN=BD155B7A4190C6CE5FEF96513506AF91E745D98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:51:cd:62:b8:1b:9b:ef:08:5f:5a:bd:1b: 84:8f:19:94:e0:a3:c1:59:19:21:90:20:f9:b1:42: 37:38:ac:e3:64:50:61:bb:2d:cf:54:92:45:5f:0a: 5a:a1:8e:93:74:4e:97:e6:bd:2d:98:cc:20:27:f6: 89:e2:3b:94:55:0b:04:2b:be:38:5f:72:d0:3b:9b: d9:70:07:08:ba:b9:5c:93:da:4a:70:d0:05:7c:13: ba:5d:cc:85:72:a4:3c:3e:2a:1f:f4:3b:f0:20:9f: be:8b:bf:9b:3b:26:1e:66:c6:78:21:98:7b:80:d2: c1:86:d9:e0:16:18:d1:99:ac:b1:d0:ca:94:2a:af: 7d:13:20:80:46:83:b0:71:45:dd:a5:6e:a5:88:4b: ed:4a:11:64:f6:11:bd:f8:c2:67:df:49:e4:8c:4f: a7:de:05:83:6a:3e:34:bb:4b:5a:62:59:a8:08:7a: 2a:5e:7c:dc:47:ab:3c:70:9d:21:3b:9c:19:b7:42: 62:68:ee:45:5d:e9:a0:d0:78:e3:94:13:53:4d:49: 73:ef:bb:13:a1:52:45:85:c5:57:ee:41:e3:f2:31: fa:2f:f7:44:41:ae:9e:5b:bb:f5:89:9b:a8:e7:6d: dd:d1:39:ee:07:31:58:8e:c4:2b:d3:a1:98:67:89: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:15:5B:7A:41:90:C6:CE:5F:EF:96:51:35:06:AF:91:E7:45:D9:8F X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:88:29:50:dd:41:73:a0:37:eb:8d:65:66:fc:58:f7:cf:ea: b3:07:5a:8e:11:21:39:76:b4:86:51:22:bd:c8:d0:5f:eb:09: ba:30:15:2f:2a:40:ae:67:a5:23:7b:16:cb:0a:e2:f3:4d:3a: f1:bc:5d:81:3f:d8:15:57:9b:21:17:d2:fb:c3:d6:03:9e:87: c9:3e:98:bb:54:4f:65:2d:b3:29:16:96:67:16:b1:1c:00:38: 30:6b:9b:85:b6:df:ee:a1:b7:0c:91:24:75:ba:3c:eb:2e:2b: c2:f0:f5:a2:b8:6c:b4:07:0e:1e:18:e4:79:e8:b1:ee:d3:ab: c3:bb:96:6d:3b:93:4f:c5:a4:2c:9b:b6:fa:82:d7:bc:92:d8: 77:1c:46:41:9a:4f:f3:a4:88:62:66:be:12:a7:43:5b:95:22: 54:3b:23:88:f3:65:7a:32:bf:fe:6c:9b:64:cb:68:a4:29:c0: b0:ac:d6:18:e7:1d:cd:b9:97:1e:0c:46:fa:ea:84:9f:5e:27: 98:92:5e:4e:73:de:41:43:b0:64:ed:37:91:95:64:24:14:fd: 8d:c4:a6:98:f2:31:51:21:83:6f:79:ca:15:d5:5f:22:b6:bc: 34:38:aa:ee:59:e8:08:87:ef:f5:6c:23:e3:f0:30:51:48:86: be:55:3a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcNgGttLBAZB0t7AnHUI1ObDZdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA3MTkwNjA2MzdaFw0yNTA3MjIwNzU5MzdaMDMxMTAvBgNV BAMTKEJEMTU1QjdBNDE5MEM2Q0U1RkVGOTY1MTM1MDZBRjkxRTc0NUQ5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRVHNYrgbm+8IX1q9G4SPGZTg o8FZGSGQIPmxQjc4rONkUGG7Lc9UkkVfClqhjpN0TpfmvS2YzCAn9oniO5RVCwQr vjhfctA7m9lwBwi6uVyT2kpw0AV8E7pdzIVypDw+Kh/0O/Agn76Lv5s7Jh5mxngh mHuA0sGG2eAWGNGZrLHQypQqr30TIIBGg7BxRd2lbqWIS+1KEWT2Eb34wmffSeSM T6feBYNqPjS7S1piWagIeipefNxHqzxwnSE7nBm3QmJo7kVd6aDQeOOUE1NNSXPv uxOhUkWFxVfuQePyMfov90RBrp5bu/WJm6jnbd3ROe4HMViOxCvToZhniSj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvRVbekGQxs5f75ZRNQavkedF2Y8wHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaIKVDdQXOgN+uNZWb8WPfP6rMHWo4RITl2 tIZRIr3I0F/rCbowFS8qQK5npSN7FssK4vNNOvG8XYE/2BVXmyEX0vvD1gOeh8k+ mLtUT2UtsykWlmcWsRwAODBrm4W23+6htwyRJHW6POsuK8Lw9aK4bLQHDh4Y5Hno se7Tq8O7lm07k0/FpCybtvqC17yS2HccRkGaT/OkiGJmvhKnQ1uVIlQ7I4jzZXoy v/5sm2TLaKQpwLCs1hjnHc25lx4MRvrqhJ9eJ5iSXk5z3kFDsGTtN5GVZCQU/Y3E ppjyMVEhg295yhXVXyK2vDQ4qu5Z6AiH7/VsI+PwMFFIhr5VOok= -----END CERTIFICATE-----Generated at Sun Jul 20 21:23:19 2025 by rpki-client