$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: CTWbrCiCKV95vxSOaFRy3mOVTEWGA/EbLyHzX3I3LV8= Subject key identifier: 68:6D:21:ED:B8:00:1A:12:CC:62:26:08:A3:9F:E1:31:5F:12:B7:5D Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 77AF3349A4DA246A032C72D3FBB3BA1852D79FC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 0121 Signing time: Wed 23 Jul 2025 01:10:48 +0000 Manifest this update: Wed 23 Jul 2025 01:05:48 +0000 Manifest next update: Sat 26 Jul 2025 10:58:48 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: Z6aLMRILX9HKvhCZEcruBelbX3rC23oEBxMeTgyAfUI=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: XSreqIJljknfOIObygSCrMVbPXNgjuTPQtrsZby6wgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:af:33:49:a4:da:24:6a:03:2c:72:d3:fb:b3:ba:18:52:d7:9f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Jul 23 01:05:48 2025 GMT Not After : Jul 26 10:58:48 2025 GMT Subject: CN=686D21EDB8001A12CC622608A39FE1315F12B75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:9e:1b:f9:54:de:36:95:d2:b4:81:61:02: 0e:d5:8f:13:be:06:a4:47:9f:0e:82:38:f4:74:b5: 6d:c8:c9:89:d4:fb:73:74:c8:78:10:d6:2a:4b:b5: b1:58:5f:73:bd:30:0b:4a:bd:ae:5c:5c:03:f6:aa: 29:67:37:5d:a4:2b:9d:3d:d5:52:46:0e:f7:e1:b1: df:d4:f7:63:a3:ed:95:95:0f:56:6f:35:9c:ab:f3: 46:b1:d6:77:39:27:85:a4:36:7b:3d:20:73:3f:2b: 3b:dd:c3:4c:5f:25:3d:4f:ab:37:7a:ba:88:b6:cd: e8:ef:da:04:07:ec:52:38:ac:7c:f4:46:6c:1b:76: d1:38:49:88:12:81:cb:d9:6c:d7:8b:37:22:6a:94: f9:4c:b2:bc:d9:86:ac:2f:a0:cb:3e:c5:e1:92:b7: 13:a5:2a:67:08:cc:69:01:69:9f:fd:97:d0:fa:98: af:ca:d4:51:d8:36:75:44:af:86:4f:e6:5a:37:36: 3c:c9:74:b9:46:22:0b:b4:e2:ca:da:45:38:dd:fe: 45:b7:eb:0a:5e:5f:ef:d4:de:61:33:f3:32:b2:65: c5:80:bd:7f:9c:01:e1:83:e6:1c:d5:db:ce:6a:da: c0:6e:1d:75:83:45:46:0c:a8:5e:d9:b0:68:69:d8: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:21:ED:B8:00:1A:12:CC:62:26:08:A3:9F:E1:31:5F:12:B7:5D X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:00:6e:1b:9f:cd:83:f5:e4:b0:fd:7e:5e:f1:ae:6d:ed:50: 62:f3:c7:80:58:f8:cc:07:db:14:94:56:49:a2:20:9b:69:5f: 53:85:c3:e9:ca:df:a6:5e:7f:38:21:d9:8d:73:32:e8:31:e6: bf:03:14:f3:ce:ce:d2:0c:c7:6f:ca:04:61:cd:a8:23:9f:3a: 5c:79:9f:a2:e8:b6:ec:b5:bf:ed:6e:12:6e:f3:03:e9:fb:cc: 71:72:cf:7a:c9:8b:a8:b6:37:3c:7e:23:7e:94:ee:33:b3:75: 46:d2:31:50:c0:21:0f:d8:4e:cc:cc:ad:a2:63:4f:c2:46:9c: d7:92:83:a4:5c:53:03:09:51:d1:dc:8a:2b:1a:09:84:15:a6: ff:f8:32:58:74:c8:89:3b:ac:97:10:fe:0d:c5:ce:cc:c8:04: f9:92:66:fa:c4:74:d9:ed:93:7c:db:99:5d:76:c3:5b:97:0b: ed:e4:55:28:1e:36:c9:46:33:bd:46:72:34:d2:db:22:27:60: 1d:9b:c1:8f:8e:59:10:c2:cb:d7:17:e8:29:3c:e4:fc:9b:ff: 75:37:38:62:50:22:09:03:8c:ed:5e:80:e9:23:3a:cd:71:b3: 51:b9:3a:78:f3:a7:f0:10:d7:2c:86:2e:c8:0d:df:83:eb:7c: 8e:6f:42:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd68zSaTaJGoDLHLT+7O6GFLXn8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTA3MjMwMTA1NDhaFw0yNTA3MjYxMDU4NDhaMDMxMTAvBgNV BAMTKDY4NkQyMUVEQjgwMDFBMTJDQzYyMjYwOEEzOUZFMTMxNUYxMkI3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqp4b+VTeNpXStIFhAg7VjxO+ BqRHnw6COPR0tW3IyYnU+3N0yHgQ1ipLtbFYX3O9MAtKva5cXAP2qilnN12kK509 1VJGDvfhsd/U92Oj7ZWVD1ZvNZyr80ax1nc5J4WkNns9IHM/Kzvdw0xfJT1Pqzd6 uoi2zejv2gQH7FI4rHz0RmwbdtE4SYgSgcvZbNeLNyJqlPlMsrzZhqwvoMs+xeGS txOlKmcIzGkBaZ/9l9D6mK/K1FHYNnVEr4ZP5lo3NjzJdLlGIgu04sraRTjd/kW3 6wpeX+/U3mEz8zKyZcWAvX+cAeGD5hzV285q2sBuHXWDRUYMqF7ZsGhp2NaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaG0h7bgAGhLMYiYIo5/hMV8St10wHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8AbhufzYP15LD9fl7xrm3tUGLzx4BY+MwH 2xSUVkmiIJtpX1OFw+nK36Zefzgh2Y1zMugx5r8DFPPOztIMx2/KBGHNqCOfOlx5 n6Lotuy1v+1uEm7zA+n7zHFyz3rJi6i2Nzx+I36U7jOzdUbSMVDAIQ/YTszMraJj T8JGnNeSg6RcUwMJUdHciisaCYQVpv/4Mlh0yIk7rJcQ/g3FzszIBPmSZvrEdNnt k3zbmV12w1uXC+3kVSgeNslGM71GcjTS2yInYB2bwY+OWRDCy9cX6Ck85Pyb/3U3 OGJQIgkDjO1egOkjOs1xs1G5Onjzp/AQ1yyGLsgN34PrfI5vQgc= -----END CERTIFICATE-----Generated at Wed Jul 23 12:23:28 2025 by rpki-client