$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: fiWXGFMkdSVD96LNAy4uDj9IJ5amOdOqsxJRE4Aushs= Subject key identifier: B7:D5:71:D4:CE:70:C9:94:A3:48:A4:B4:FD:88:6E:5D:5D:CE:DF:4D Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 2696DD5883E9039F1970197DE77874A6140E8BC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 13:00:34 +0000 Manifest this update: Fri 06 Jun 2025 12:55:34 +0000 Manifest next update: Mon 09 Jun 2025 13:29:34 +0000 Files and hashes: 1: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: ghYDscgkEkmdPz9NuYZxp4pY2E2dRL+ayWbivu6Gtd8=) 2: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: 9M7egaZiHrQwJ4hjWyoJPTAPi7qBGu7YCrVPGiv954Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:96:dd:58:83:e9:03:9f:19:70:19:7d:e7:78:74:a6:14:0e:8b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: Jun 6 12:55:34 2025 GMT Not After : Jun 9 13:29:34 2025 GMT Subject: CN=B7D571D4CE70C994A348A4B4FD886E5D5DCEDF4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:c5:73:32:0e:2e:fb:da:33:76:bd:3b:61: ff:77:ee:e6:81:bc:bc:9b:ee:7b:36:20:d4:e7:7b: 79:87:03:4a:6c:fd:4c:ff:78:d7:2c:54:1f:d3:66: 31:97:a8:e3:86:09:85:20:89:ce:4d:e9:1e:3a:ad: 5f:1c:83:c9:b4:e6:99:32:c4:a5:7c:36:f8:cc:0a: f0:f2:ec:3f:4d:49:8c:dd:4a:e4:0e:e6:29:c3:4a: 44:71:36:d0:07:55:a0:50:e1:96:58:f1:f9:00:6e: 56:0e:2a:11:84:a4:53:a7:d5:8a:2d:04:e1:5f:a7: e1:35:25:72:f0:f1:06:74:78:e4:7e:2e:93:51:38: 75:f0:4a:e8:5a:0e:de:85:f6:65:fb:88:31:4d:d5: 35:e0:67:be:7d:54:07:4f:e3:46:8c:4b:0b:1a:0e: 02:56:21:26:00:6c:28:12:0e:84:73:83:a3:22:76: 8b:6f:88:56:6e:29:35:cd:ae:50:92:76:9d:4e:80: 96:94:ba:29:28:0e:95:84:88:da:91:e4:54:05:7f: c1:64:38:cd:1d:40:aa:2e:02:52:e2:4b:e1:40:9e: 01:b9:91:07:3f:62:5b:70:0c:f6:91:e6:35:dc:77: 5d:61:c3:75:08:bf:22:25:47:13:a3:3d:25:fb:b9: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:71:D4:CE:70:C9:94:A3:48:A4:B4:FD:88:6E:5D:5D:CE:DF:4D X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f7:18:f1:97:f2:5d:96:90:b3:f0:cf:b0:48:3d:b3:93:ba: 3d:91:37:c1:77:90:88:62:ab:ac:fb:23:da:b4:ae:ac:ef:5a: 70:6f:02:29:d0:a2:61:36:db:be:d8:b4:34:23:22:3c:ed:fb: 79:ff:13:ee:6b:a3:98:5c:99:25:e0:35:58:fe:06:16:85:cc: 5e:ce:b7:5d:b0:67:eb:a8:45:a2:9a:a4:89:a9:ca:ca:3d:13: 80:0d:b4:38:5d:5c:ba:18:31:a2:e9:71:92:fd:94:ea:4a:cc: ab:3a:4b:88:bd:b7:7b:9d:30:7b:fe:39:18:78:f3:1d:3b:60: ec:85:fd:11:02:71:91:c0:0d:f0:a5:d4:d2:bc:0b:40:f0:65: 08:bd:8f:d8:32:f4:95:d3:39:21:14:03:cc:25:39:6e:54:74: 34:a5:18:9e:3e:c2:26:4b:bf:fb:23:cf:43:8a:1c:ac:0d:c1: ee:0c:86:9c:c2:2a:57:75:ef:7f:7d:8d:06:26:46:88:75:95: 68:a9:b3:e0:bf:59:06:ca:4c:6b:8d:b7:f1:16:88:7e:95:cc: aa:7a:5a:c1:8f:af:b3:10:25:0f:f7:0f:ad:d1:32:bd:7a:e1: 68:57:ea:85:06:94:a9:d8:0c:aa:d7:8e:88:75:1e:8e:63:10: fe:72:3b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpbdWIPpA58ZcBl953h0phQOi8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNTA2MDYxMjU1MzRaFw0yNTA2MDkxMzI5MzRaMDMxMTAvBgNV BAMTKEI3RDU3MUQ0Q0U3MEM5OTRBMzQ4QTRCNEZEODg2RTVENURDRURGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE8VzMg4u+9ozdr07Yf937uaB vLyb7ns2INTne3mHA0ps/Uz/eNcsVB/TZjGXqOOGCYUgic5N6R46rV8cg8m05pky xKV8NvjMCvDy7D9NSYzdSuQO5inDSkRxNtAHVaBQ4ZZY8fkAblYOKhGEpFOn1Yot BOFfp+E1JXLw8QZ0eOR+LpNROHXwSuhaDt6F9mX7iDFN1TXgZ759VAdP40aMSwsa DgJWISYAbCgSDoRzg6MidotviFZuKTXNrlCSdp1OgJaUuikoDpWEiNqR5FQFf8Fk OM0dQKouAlLiS+FAngG5kQc/YltwDPaR5jXcd11hw3UIvyIlRxOjPSX7ufmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9Vx1M5wyZSjSKS0/YhuXV3O300wHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC73GPGX8l2WkLPwz7BIPbOTuj2RN8F3kIhi q6z7I9q0rqzvWnBvAinQomE2277YtDQjIjzt+3n/E+5ro5hcmSXgNVj+BhaFzF7O t12wZ+uoRaKapImpyso9E4ANtDhdXLoYMaLpcZL9lOpKzKs6S4i9t3udMHv+ORh4 8x07YOyF/RECcZHADfCl1NK8C0DwZQi9j9gy9JXTOSEUA8wlOW5UdDSlGJ4+wiZL v/sjz0OKHKwNwe4MhpzCKld17399jQYmRoh1lWips+C/WQbKTGuNt/EWiH6VzKp6 WsGPr7MQJQ/3D63RMr164WhX6oUGlKnYDKrXjoh1Ho5jEP5yO4Q= -----END CERTIFICATE-----Generated at Fri Jun 6 16:31:15 2025 by rpki-client