$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: iNJm7hBQLMRiOQrs8n4OX+HE/ssyDI2t6WhI/csnyV0= Subject key identifier: 60:AF:F7:61:84:40:C9:0A:E7:63:E8:6C:60:DF:2C:5C:E6:FC:15:53 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 231900BB6105F8BC046527207DACAAD7B019C96A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 0509 Signing time: Fri 05 Sep 2025 22:01:41 +0000 Manifest this update: Fri 05 Sep 2025 21:56:41 +0000 Manifest next update: Tue 09 Sep 2025 04:02:41 +0000 Files and hashes: 1: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) 4: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: w4uqGg3wmHWpTLFxmCYcHxtLelviqzd7Kbk0IwvP2bA=) 5: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:19:00:bb:61:05:f8:bc:04:65:27:20:7d:ac:aa:d7:b0:19:c9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Sep 5 21:56:41 2025 GMT Not After : Sep 9 04:02:41 2025 GMT Subject: CN=60AFF7618440C90AE763E86C60DF2C5CE6FC1553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:bf:ae:e8:cd:37:b1:a5:40:c1:e7:a1:0c: 07:f0:f6:7c:b3:ce:27:f8:3a:65:93:84:ac:a6:c9: 65:bd:a5:a2:6b:45:b9:66:60:12:b0:f4:ed:7f:73: 91:26:91:83:03:68:b7:3f:43:88:61:12:c4:1a:94: 43:ed:6c:77:f8:62:73:aa:52:e0:df:4d:35:f2:98: b6:af:9e:af:39:7e:23:ab:b6:70:94:82:94:69:a7: 4b:d0:6a:03:eb:0a:e1:cf:c6:f8:57:67:46:7f:ca: a0:a9:88:f7:87:b3:ce:0b:16:32:d6:ee:91:dd:93: 4b:0d:ce:38:e1:88:65:37:8f:b4:65:cd:f6:5a:b0: da:3f:cd:76:3b:5f:23:26:a0:c0:c3:1d:63:11:e5: 96:5c:6d:ad:63:f9:08:73:65:1b:e8:68:cc:aa:e7: b4:76:6c:a7:09:1b:cb:7c:6f:53:08:fe:77:84:2f: 4b:99:93:74:42:a8:fc:c6:ae:a6:60:40:08:0c:6d: be:f9:75:63:57:8a:9b:24:10:78:b2:b1:5e:20:e2: a7:33:34:36:a2:c0:c1:c3:bb:f2:84:76:bc:9f:bc: 1e:24:f8:55:23:1a:19:36:8e:4f:ae:bf:bd:a8:38: 51:ba:0d:bf:2c:02:7a:b5:26:4f:96:7b:66:35:90: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:F7:61:84:40:C9:0A:E7:63:E8:6C:60:DF:2C:5C:E6:FC:15:53 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f7:90:ff:22:65:8e:c6:bd:b0:37:dd:ce:47:cc:0f:63:34: 7b:88:ea:68:c6:1b:58:31:07:b0:4e:19:2d:19:b0:83:76:d9: 29:bb:55:41:8f:25:f9:70:8b:10:2f:df:ed:ab:0e:2a:c6:93: b7:1d:00:5a:43:3e:94:b6:5b:41:e8:57:81:bb:74:cf:20:ff: 2c:30:6c:b7:c3:90:1b:24:c0:7f:92:cc:72:2c:02:14:d5:fe: cf:95:7e:88:80:b1:d5:6e:85:bb:ac:b2:53:1d:c8:f0:d4:70: f9:8f:19:58:5d:29:9f:fe:37:2f:1d:97:e5:a4:52:b1:4b:f9: d5:e7:3b:44:de:08:2f:7c:4f:74:55:e1:79:ec:94:1d:b6:fc: 15:61:bf:2f:3a:54:f2:08:5f:88:d3:ee:d7:6d:65:0b:3a:89: 64:43:eb:af:da:ed:b9:c1:a5:34:86:d7:5e:29:9a:bd:3e:a8: d7:d9:ea:3b:76:9e:cd:92:44:54:c0:d0:35:ed:b7:e4:d6:4a: 0e:ca:9a:e8:8c:7a:ad:67:87:0f:a2:b3:61:1c:93:bd:de:d7: 7e:b9:98:ea:83:d6:6f:8f:38:d5:c6:90:37:a5:d6:b7:b4:73: ce:d3:fd:13:9c:8a:5e:19:18:ed:a6:54:83:10:0f:2c:fc:08: db:08:53:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxkAu2EF+LwEZScgfayq17AZyWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA5MDUyMTU2NDFaFw0yNTA5MDkwNDAyNDFaMDMxMTAvBgNV BAMTKDYwQUZGNzYxODQ0MEM5MEFFNzYzRTg2QzYwREYyQzVDRTZGQzE1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x7+u6M03saVAweehDAfw9nyz zif4OmWThKymyWW9paJrRblmYBKw9O1/c5EmkYMDaLc/Q4hhEsQalEPtbHf4YnOq UuDfTTXymLavnq85fiOrtnCUgpRpp0vQagPrCuHPxvhXZ0Z/yqCpiPeHs84LFjLW 7pHdk0sNzjjhiGU3j7RlzfZasNo/zXY7XyMmoMDDHWMR5ZZcba1j+QhzZRvoaMyq 57R2bKcJG8t8b1MI/neEL0uZk3RCqPzGrqZgQAgMbb75dWNXipskEHiysV4g4qcz NDaiwMHDu/KEdryfvB4k+FUjGhk2jk+uv72oOFG6Db8sAnq1Jk+We2Y1kNmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYK/3YYRAyQrnY+hsYN8sXOb8FVMwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn3kP8iZY7GvbA33c5HzA9jNHuI6mjGG1gx B7BOGS0ZsIN22Sm7VUGPJflwixAv3+2rDirGk7cdAFpDPpS2W0HoV4G7dM8g/yww bLfDkBskwH+SzHIsAhTV/s+VfoiAsdVuhbusslMdyPDUcPmPGVhdKZ/+Ny8dl+Wk UrFL+dXnO0TeCC98T3RV4XnslB22/BVhvy86VPIIX4jT7tdtZQs6iWRD66/a7bnB pTSG114pmr0+qNfZ6jt2ns2SRFTA0DXtt+TWSg7KmuiMeq1nhw+is2Eck73e1365 mOqD1m+PONXGkDel1re0c87T/ROcil4ZGO2mVIMQDyz8CNsIU7Y= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:48 2025 by rpki-client