$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: wmFLf7aGJkZ7+ME8ENYUAiboeRXIYPwCWjs1+AnbCXE= Subject key identifier: 83:7F:B1:F4:9D:A7:98:4B:12:B7:FB:E8:AC:0A:F6:B8:9D:67:67:81 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 4B3A43CA7C1F437EE281EC573FCC1F7D665DE10B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 0219 Signing time: Sat 06 Sep 2025 19:11:05 +0000 Manifest this update: Sat 06 Sep 2025 19:06:05 +0000 Manifest next update: Tue 09 Sep 2025 22:50:05 +0000 Files and hashes: 1: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 2: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: J+4SCXbIQJgeS8NhBCjwVjF8h7mAwuvzbtfvKAKeYn0=) 3: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 4: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 5: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 6: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3a:43:ca:7c:1f:43:7e:e2:81:ec:57:3f:cc:1f:7d:66:5d:e1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Sep 6 19:06:05 2025 GMT Not After : Sep 9 22:50:05 2025 GMT Subject: CN=837FB1F49DA7984B12B7FBE8AC0AF6B89D676781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:6d:80:b0:62:82:7b:25:7d:6c:46:08:cc: 6b:b7:f0:1b:27:b1:45:2f:9c:fe:f3:72:3e:66:31: 34:c1:54:54:8c:89:c7:c3:14:4b:b9:ee:68:ef:7d: c7:fa:85:d1:17:1b:2f:2e:c2:50:a3:d4:3e:68:5e: 8b:6c:45:da:df:0b:f0:e6:d2:9c:e9:8d:13:37:4c: 07:66:60:3a:57:42:ac:e8:cf:22:01:65:2a:42:5b: 79:18:44:d5:87:9b:23:e9:3d:e0:ba:98:c9:ae:21: d7:a6:00:ec:be:d2:c6:24:16:52:c0:31:88:05:a1: 5e:79:6d:f7:c6:f3:98:fd:8b:9a:8a:72:c9:a1:70: af:75:75:37:1a:ce:d7:f3:90:b4:90:53:db:f1:be: 11:1b:db:61:79:46:8a:f9:4e:a4:08:5f:d2:ec:0c: 63:1e:75:e0:c6:4d:d3:0b:73:0d:7a:4b:23:8e:90: 49:ae:2c:3c:8a:08:98:bc:6c:6e:26:5d:c5:c1:22: de:ea:18:7f:70:1d:14:82:f8:98:34:e8:e5:65:de: df:78:5e:5a:02:a0:74:5b:c7:f6:80:57:8e:e7:fb: 7a:49:00:ba:c8:7c:81:32:29:a4:92:02:b8:37:16: 55:6c:20:41:74:b4:1e:a8:85:73:52:17:f6:47:e2: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7F:B1:F4:9D:A7:98:4B:12:B7:FB:E8:AC:0A:F6:B8:9D:67:67:81 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f5:93:94:04:14:51:29:b3:a9:a6:95:81:22:0c:23:44:72: ff:bd:42:7f:c4:9b:2c:e7:c9:4f:eb:d9:9b:d2:95:b4:cc:ab: 6f:e5:48:60:f7:08:22:55:f8:64:11:b3:cf:ff:c0:05:57:0f: b6:99:bc:3b:bf:fd:8d:ef:1c:76:1b:09:b0:ea:00:e9:6e:6b: c4:b5:2c:7d:f1:05:cb:c2:70:c0:ab:56:58:58:f0:d4:4b:a8: dd:69:1c:9f:5a:db:96:c5:0c:eb:71:e1:79:0a:68:9c:f0:d1: 3e:88:1c:62:0e:71:8a:be:ca:63:1e:40:6d:78:2f:d1:74:dc: 30:c6:59:08:c4:98:e2:f0:77:0e:2c:fd:16:24:7b:ba:5d:ce: 5d:f8:ba:11:88:79:0f:5c:62:bb:76:38:21:19:47:a4:76:ab: bf:fe:df:27:65:32:fb:6b:e9:d9:73:47:ff:76:6c:fc:9a:1f: 33:99:72:e6:24:0a:09:56:51:29:7a:3d:20:ae:f5:72:40:a4: 9b:ae:00:78:d1:83:6b:c2:4a:3c:f0:f3:e0:6b:cb:77:f1:bc: 72:5d:82:9c:42:27:8a:98:a0:b3:c7:34:a6:ef:67:4d:3d:b4: 35:fd:45:b8:31:c2:4c:68:16:b4:3c:29:53:ce:58:88:a7:4a: c9:cc:40:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzpDynwfQ37igexXP8wffWZd4QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTA5MDYxOTA2MDVaFw0yNTA5MDkyMjUwMDVaMDMxMTAvBgNV BAMTKDgzN0ZCMUY0OURBNzk4NEIxMkI3RkJFOEFDMEFGNkI4OUQ2NzY3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtm2AsGKCeyV9bEYIzGu38Bsn sUUvnP7zcj5mMTTBVFSMicfDFEu57mjvfcf6hdEXGy8uwlCj1D5oXotsRdrfC/Dm 0pzpjRM3TAdmYDpXQqzozyIBZSpCW3kYRNWHmyPpPeC6mMmuIdemAOy+0sYkFlLA MYgFoV55bffG85j9i5qKcsmhcK91dTcaztfzkLSQU9vxvhEb22F5Ror5TqQIX9Ls DGMedeDGTdMLcw16SyOOkEmuLDyKCJi8bG4mXcXBIt7qGH9wHRSC+Jg06OVl3t94 XloCoHRbx/aAV47n+3pJALrIfIEyKaSSArg3FlVsIEF0tB6ohXNSF/ZH4hdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg3+x9J2nmEsSt/vorAr2uJ1nZ4EwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP1k5QEFFEps6mmlYEiDCNEcv+9Qn/Emyzn yU/r2ZvSlbTMq2/lSGD3CCJV+GQRs8//wAVXD7aZvDu//Y3vHHYbCbDqAOlua8S1 LH3xBcvCcMCrVlhY8NRLqN1pHJ9a25bFDOtx4XkKaJzw0T6IHGIOcYq+ymMeQG14 L9F03DDGWQjEmOLwdw4s/RYke7pdzl34uhGIeQ9cYrt2OCEZR6R2q7/+3ydlMvtr 6dlzR/92bPyaHzOZcuYkCglWUSl6PSCu9XJApJuuAHjRg2vCSjzw8+Bry3fxvHJd gpxCJ4qYoLPHNKbvZ009tDX9RbgxwkxoFrQ8KVPOWIinSsnMQL4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:09 2025 by rpki-client