$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: ucG6cILdvW/MvHXo9qpQsM6BFxtIS/DfOaevjr8ZOMY= Subject key identifier: 78:34:B3:C9:A4:7E:DB:9F:F7:7E:3E:0F:8B:2A:67:5C:90:E7:D4:C1 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 4BA5C4130314A54E8927F8EE7EA186B6FA14F165 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 04DF Signing time: Wed 04 Jun 2025 08:41:42 +0000 Manifest this update: Wed 04 Jun 2025 08:36:42 +0000 Manifest next update: Sat 07 Jun 2025 08:57:42 +0000 Files and hashes: 1: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 3: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 4: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) 5: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: LmkzOx7Nd9RfwCbF1nC0VrW3tnAb9IT92jpWKT5hfmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 08:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a5:c4:13:03:14:a5:4e:89:27:f8:ee:7e:a1:86:b6:fa:14:f1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Jun 4 08:36:42 2025 GMT Not After : Jun 7 08:57:42 2025 GMT Subject: CN=7834B3C9A47EDB9FF77E3E0F8B2A675C90E7D4C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:b8:b7:ec:14:eb:96:af:e4:d3:bf:74:f6: b2:8a:9e:8e:6e:69:3c:fe:2a:57:32:2e:ff:f5:bb: b9:95:74:f0:98:c2:fa:6a:23:bf:fc:1e:f7:9b:21: c6:d6:89:66:3d:ff:ec:72:2e:63:7f:12:c7:5e:de: 99:6a:0e:5d:1b:12:30:c5:e0:92:d6:83:44:d9:95: f4:19:c6:e0:71:c3:e8:72:06:4d:6b:39:9a:4d:63: cf:5a:eb:59:82:77:09:28:33:43:e6:32:7a:49:31: 84:2f:3f:c0:ec:9d:b3:46:d7:70:2f:86:3a:38:2a: ee:7f:1c:42:c1:54:d8:f7:2d:75:f7:80:b4:3a:47: 73:4b:cc:20:ad:d2:bb:2b:12:a4:af:9a:da:3f:70: 81:89:85:9f:d3:3e:30:67:78:95:90:50:ab:ba:6a: 55:3c:72:f6:1d:6a:81:d1:5f:ef:15:df:f5:6a:51: ad:78:13:d0:3f:05:c8:9f:db:f1:24:80:bf:27:44: 47:5a:38:11:2c:23:56:69:23:db:71:50:9c:96:35: b9:fe:cd:97:be:44:f6:98:3e:e1:b3:bf:d1:93:d3: 55:59:cd:4e:66:ca:3b:42:ce:d0:30:d2:0d:af:c6: fc:c5:9d:8e:83:46:0b:71:7d:a8:d4:58:4a:d4:13: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:34:B3:C9:A4:7E:DB:9F:F7:7E:3E:0F:8B:2A:67:5C:90:E7:D4:C1 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:49:74:f3:df:cb:fd:76:8b:bb:f4:f7:61:cd:00:4b:1d:89: b7:c7:d1:8e:f2:4e:0c:9d:71:32:eb:de:c5:38:77:18:f4:80: 09:ad:6c:fe:ee:ac:37:3d:8e:2d:e2:c1:de:41:4a:8f:fd:5d: fd:71:0c:43:bc:47:08:d8:cb:1c:e0:9e:15:0c:e2:01:83:b7: ff:e0:25:d0:72:70:02:2a:c7:4b:49:90:16:3c:63:7a:af:58: 2f:89:a7:89:d5:c6:2a:a0:88:0c:f4:e6:3f:35:3f:81:2d:f8: cb:a0:10:1b:bc:e8:71:72:60:90:15:1e:90:42:11:7a:e3:26: 34:56:4b:be:71:51:2c:18:c0:f4:27:3a:b6:2c:89:de:51:d2: af:bf:fb:fb:06:62:bf:64:b4:2d:06:0f:5f:5b:42:db:c3:d9: bc:39:aa:4b:35:aa:21:45:d9:a5:1f:a8:e7:22:0b:9b:4f:91: 25:d3:6e:ae:5f:97:00:55:a1:ce:71:3a:7f:db:e4:72:f0:56: ff:64:72:b0:50:c2:85:47:d3:f5:b2:be:6b:8c:d9:81:c4:6f: 25:0f:a2:99:f7:06:82:e7:8f:31:1e:2f:5b:88:2e:4c:66:63: 3c:66:53:ab:80:15:4d:02:c6:28:cd:a6:a9:da:7c:6b:7c:8a: cd:70:8f:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6XEEwMUpU6JJ/jufqGGtvoU8WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA2MDQwODM2NDJaFw0yNTA2MDcwODU3NDJaMDMxMTAvBgNV BAMTKDc4MzRCM0M5QTQ3RURCOUZGNzdFM0UwRjhCMkE2NzVDOTBFN0Q0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEbi37BTrlq/k07909rKKno5u aTz+KlcyLv/1u7mVdPCYwvpqI7/8HvebIcbWiWY9/+xyLmN/Esde3plqDl0bEjDF 4JLWg0TZlfQZxuBxw+hyBk1rOZpNY89a61mCdwkoM0PmMnpJMYQvP8DsnbNG13Av hjo4Ku5/HELBVNj3LXX3gLQ6R3NLzCCt0rsrEqSvmto/cIGJhZ/TPjBneJWQUKu6 alU8cvYdaoHRX+8V3/VqUa14E9A/Bcif2/EkgL8nREdaOBEsI1ZpI9txUJyWNbn+ zZe+RPaYPuGzv9GT01VZzU5myjtCztAw0g2vxvzFnY6DRgtxfajUWErUE6HBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDSzyaR+25/3fj4PiypnXJDn1MEwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5JdPPfy/12i7v092HNAEsdibfH0Y7yTgyd cTLr3sU4dxj0gAmtbP7urDc9ji3iwd5BSo/9Xf1xDEO8RwjYyxzgnhUM4gGDt//g JdBycAIqx0tJkBY8Y3qvWC+Jp4nVxiqgiAz05j81P4Et+MugEBu86HFyYJAVHpBC EXrjJjRWS75xUSwYwPQnOrYsid5R0q+/+/sGYr9ktC0GD19bQtvD2bw5qks1qiFF 2aUfqOciC5tPkSXTbq5flwBVoc5xOn/b5HLwVv9kcrBQwoVH0/WyvmuM2YHEbyUP opn3BoLnjzEeL1uILkxmYzxmU6uAFU0CxijNpqnafGt8is1wj7c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:40 2025 by rpki-client