$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: UPhnrSbP4g8ffzdmho6yseITM3h7ydAoNgnKBrlNdgo= Subject key identifier: 87:E1:3B:CD:C3:67:56:AF:48:13:05:EB:8D:ED:BF:8F:CB:35:54:83 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 3215119CE471FE497C87C8866C78768DBF6C1A33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01B6 Signing time: Sun 20 Jul 2025 18:01:45 +0000 Manifest this update: Sun 20 Jul 2025 17:56:45 +0000 Manifest next update: Wed 23 Jul 2025 23:18:45 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: dn72ifJT9YrqNk2i3h9zqYeJnT3g4A9bd6WOE8e/+ZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:15:11:9c:e4:71:fe:49:7c:87:c8:86:6c:78:76:8d:bf:6c:1a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Jul 20 17:56:45 2025 GMT Not After : Jul 23 23:18:45 2025 GMT Subject: CN=87E13BCDC36756AF481305EB8DEDBF8FCB355483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:c2:69:79:2d:84:95:0f:13:18:1c:e6:82: ed:f6:a5:83:64:9d:75:79:70:08:bc:bd:8d:56:c2: 21:3f:48:70:9f:d4:a3:4f:d8:98:de:42:a7:ea:69: 83:fe:e4:25:f0:2c:50:1e:c1:65:af:e4:a9:a0:09: 10:34:27:00:65:14:db:ad:86:9b:a4:6d:1a:32:6c: 96:6b:6d:af:d2:29:ef:80:9e:b6:d5:de:f7:c4:20: fc:c4:ad:42:b4:13:b2:b4:1a:7e:74:d2:24:61:15: ef:9b:44:1a:36:5c:3a:76:7a:3a:2f:73:fe:24:04: 27:4c:80:5e:19:b6:77:4e:31:7f:6d:68:4c:7e:62: be:41:61:6f:e4:2d:2e:00:8d:58:d6:ff:cd:7c:2b: a6:57:fb:c9:55:6e:df:3c:24:22:68:0f:95:ad:b8: 78:e1:f6:a1:ff:4d:72:80:a6:0a:b2:5c:21:8e:48: 45:d0:7b:d9:5d:b6:60:a2:df:e3:35:b1:53:46:32: 69:ec:db:5a:d3:89:85:91:4d:14:4c:0c:ec:0e:ac: 54:b4:16:e7:25:df:6e:13:d4:d4:2f:42:63:c2:d4: 64:57:bd:02:e8:65:e3:16:bf:7c:ca:7a:27:28:a5: 25:52:27:2a:4e:47:6c:10:6c:7c:85:7d:df:4f:3b: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E1:3B:CD:C3:67:56:AF:48:13:05:EB:8D:ED:BF:8F:CB:35:54:83 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:08:25:2a:0f:e2:ff:68:a8:09:6a:c7:28:19:c5:9c:e4:7d: e0:9a:61:55:9e:64:ff:c0:44:5f:8e:a1:76:68:3c:54:16:78: e2:4b:bf:dc:b1:ec:b6:a3:2a:59:18:8c:5d:ef:ad:c2:3e:34: a7:26:24:29:21:dc:55:e1:fe:1b:d9:33:a1:d4:fa:56:b9:51: 61:ce:7e:9a:42:3b:62:68:ab:1c:77:6b:7b:04:7d:67:56:cf: e6:60:e9:37:75:73:60:28:2c:2c:6b:46:65:c4:19:ec:32:74: 40:d1:0f:a3:23:70:f7:43:77:69:8f:00:af:2c:3c:8e:b7:3e: 78:78:8f:75:69:0c:58:e6:f0:f8:f6:0b:ef:ea:39:35:ea:70: cb:c4:aa:b7:59:67:a8:12:01:5b:01:61:92:5a:74:93:d2:fd: 9e:38:79:3d:0f:4e:8b:89:ac:bc:52:4d:b7:35:e5:3a:47:50: ed:5f:9d:ae:f3:3f:81:46:34:e0:4a:74:5a:21:24:6c:17:42: df:5f:9b:4d:e4:f7:2d:a5:70:15:0d:fa:a3:77:04:63:50:79: dd:00:ed:14:51:f6:bd:52:ed:93:b4:20:ca:c5:a0:eb:ef:91: 44:80:bf:b5:5b:5b:f4:c7:7d:ab:8a:24:31:44:9c:da:f5:41: 0a:d2:47:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhURnORx/kl8h8iGbHh2jb9sGjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA3MjAxNzU2NDVaFw0yNTA3MjMyMzE4NDVaMDMxMTAvBgNV BAMTKDg3RTEzQkNEQzM2NzU2QUY0ODEzMDVFQjhERURCRjhGQ0IzNTU0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAsJpeS2ElQ8TGBzmgu32pYNk nXV5cAi8vY1WwiE/SHCf1KNP2JjeQqfqaYP+5CXwLFAewWWv5KmgCRA0JwBlFNut hpukbRoybJZrba/SKe+AnrbV3vfEIPzErUK0E7K0Gn500iRhFe+bRBo2XDp2ejov c/4kBCdMgF4ZtndOMX9taEx+Yr5BYW/kLS4AjVjW/818K6ZX+8lVbt88JCJoD5Wt uHjh9qH/TXKApgqyXCGOSEXQe9ldtmCi3+M1sVNGMmns21rTiYWRTRRMDOwOrFS0 Fucl324T1NQvQmPC1GRXvQLoZeMWv3zKeicopSVSJypOR2wQbHyFfd9PO6ATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh+E7zcNnVq9IEwXrje2/j8s1VIMwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkIJSoP4v9oqAlqxygZxZzkfeCaYVWeZP/A RF+OoXZoPFQWeOJLv9yx7LajKlkYjF3vrcI+NKcmJCkh3FXh/hvZM6HU+la5UWHO fppCO2Joqxx3a3sEfWdWz+Zg6Td1c2AoLCxrRmXEGewydEDRD6MjcPdDd2mPAK8s PI63Pnh4j3VpDFjm8Pj2C+/qOTXqcMvEqrdZZ6gSAVsBYZJadJPS/Z44eT0PTouJ rLxSTbc15TpHUO1fna7zP4FGNOBKdFohJGwXQt9fm03k9y2lcBUN+qN3BGNQed0A 7RRR9r1S7ZO0IMrFoOvvkUSAv7VbW/THfauKJDFEnNr1QQrSR7w= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:11 2025 by rpki-client