$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: hYSuGZyFG5xgdklzR5yQHrLF/FQubujzylbg2dhMOKo= Subject key identifier: 86:B8:B3:93:4A:7A:D4:1B:63:34:B9:25:27:3A:06:43:D8:7D:5A:1C Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 4D4DBA2D25F43FE8668EFF9EF4390E8A41E7F286 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 0217 Signing time: Sat 07 Jun 2025 10:31:58 +0000 Manifest this update: Sat 07 Jun 2025 10:26:58 +0000 Manifest next update: Tue 10 Jun 2025 17:24:58 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: ztXhRRN4sqRlmctM//ZkJIgrxKZVbXiXbXV1qaWPkUQ=) 2: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: eCxqHIXHblGTo9THuRD/8JyQT73Sj3nih5xyXuoxa+Y=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 17:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4d:ba:2d:25:f4:3f:e8:66:8e:ff:9e:f4:39:0e:8a:41:e7:f2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Jun 7 10:26:58 2025 GMT Not After : Jun 10 17:24:58 2025 GMT Subject: CN=86B8B3934A7AD41B6334B925273A0643D87D5A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:5b:8d:ca:f0:9d:31:be:6d:8f:c2:8a:5a: 60:bc:f3:0a:fa:62:9a:83:17:c1:ad:5b:dd:55:6f: da:ee:f6:d9:8d:89:10:f4:02:c1:6b:7d:f0:25:a5: 19:c4:16:94:1a:45:35:46:84:6f:52:a1:44:84:3e: 25:ac:b4:33:84:59:bf:64:7d:d7:02:4c:89:7c:ed: be:54:d5:56:1a:42:7d:a1:bb:f9:bf:95:c3:b9:1f: 31:95:9e:87:ef:47:1b:d1:13:96:39:90:74:f0:da: 21:b6:37:95:9e:41:9c:29:3e:7b:d2:fe:c3:48:0c: f8:8f:3c:9c:37:cc:c1:67:29:40:56:30:4d:0c:e5: d9:d4:f5:e5:34:33:c0:1d:29:fc:97:e1:82:43:d7: 36:3f:7f:f9:d5:b7:c1:d1:6b:c5:7d:4b:3d:35:1c: 52:88:d7:7e:17:cf:04:94:5d:f2:a1:a5:a5:69:92: fc:6e:b3:25:58:f3:db:78:48:9a:a1:05:81:93:7a: 8c:39:60:4d:a4:c9:36:e1:15:01:df:a5:9d:9b:50: 66:4b:65:86:c4:d2:99:ec:0b:71:ca:2b:97:b6:13: fb:81:1d:77:b0:ab:0d:a0:41:8f:02:42:3b:11:39: 38:bf:5a:18:a3:b9:90:fe:62:99:aa:1c:d3:72:17: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B8:B3:93:4A:7A:D4:1B:63:34:B9:25:27:3A:06:43:D8:7D:5A:1C X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:ce:6a:cc:d6:87:47:61:e0:99:a4:fd:b0:bc:20:97:be: e9:1a:e4:56:4c:de:b5:90:74:95:5d:4d:75:ed:c3:85:6b:d3: 63:66:29:94:38:af:8c:c4:89:aa:1b:ad:8e:79:7f:26:1c:05: e4:98:9b:c3:20:c9:ee:27:0c:58:80:00:c1:91:27:09:28:6b: 0a:6d:a5:c5:6f:f3:b6:17:d2:31:44:a4:8a:ad:b1:6c:a0:9e: df:69:ff:fd:6c:ee:e6:23:4a:42:e0:2e:c3:15:83:a9:9a:80: bb:46:eb:40:bb:dd:88:1b:bd:ff:f7:3c:40:af:ab:67:fc:71: 8e:7a:44:b8:8c:97:97:f0:64:f1:42:75:b9:68:5b:82:de:12: 0c:1a:99:98:f0:cf:de:b7:cb:55:f0:b1:43:ac:29:99:fb:78: 8d:2b:2a:98:b8:ff:ec:4b:5f:53:26:3f:94:b1:37:3f:47:0c: f7:a7:94:1a:80:fd:51:a5:9e:f8:9c:31:f9:07:20:df:56:20: fe:29:01:f4:85:07:f3:bd:2d:b4:4b:d3:fd:39:e5:f6:6a:8d: be:46:ab:e2:f7:28:74:6a:3f:e9:58:3d:02:ff:7c:56:35:56: 08:b3:e9:a4:4a:e8:47:a0:0b:57:71:dc:cd:0c:f6:59:dc:5f: d7:38:15:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTU26LSX0P+hmjv+e9DkOikHn8oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTA2MDcxMDI2NThaFw0yNTA2MTAxNzI0NThaMDMxMTAvBgNV BAMTKDg2QjhCMzkzNEE3QUQ0MUI2MzM0QjkyNTI3M0EwNjQzRDg3RDVBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKx1uNyvCdMb5tj8KKWmC88wr6 YpqDF8GtW91Vb9ru9tmNiRD0AsFrffAlpRnEFpQaRTVGhG9SoUSEPiWstDOEWb9k fdcCTIl87b5U1VYaQn2hu/m/lcO5HzGVnofvRxvRE5Y5kHTw2iG2N5WeQZwpPnvS /sNIDPiPPJw3zMFnKUBWME0M5dnU9eU0M8AdKfyX4YJD1zY/f/nVt8HRa8V9Sz01 HFKI134XzwSUXfKhpaVpkvxusyVY89t4SJqhBYGTeow5YE2kyTbhFQHfpZ2bUGZL ZYbE0pnsC3HKK5e2E/uBHXewqw2gQY8CQjsROTi/WhijuZD+YpmqHNNyF1RxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhrizk0p61BtjNLklJzoGQ9h9WhwwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcOzmrM1odHYeCZpP2wvCCXvuka5FZM3rWQ dJVdTXXtw4Vr02NmKZQ4r4zEiaobrY55fyYcBeSYm8Mgye4nDFiAAMGRJwkoawpt pcVv87YX0jFEpIqtsWygnt9p//1s7uYjSkLgLsMVg6magLtG60C73Ygbvf/3PECv q2f8cY56RLiMl5fwZPFCdbloW4LeEgwamZjwz963y1XwsUOsKZn7eI0rKpi4/+xL X1MmP5SxNz9HDPenlBqA/VGlnvicMfkHIN9WIP4pAfSFB/O9LbRL0/055fZqjb5G q+L3KHRqP+lYPQL/fFY1Vgiz6aRK6EegC1dx3M0M9lncX9c4FRA= -----END CERTIFICATE-----Generated at Sat Jun 7 23:32:35 2025 by rpki-client