$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: aqBBARi7aqhHwvgueVWgoAHMM+27ZeugfjPP/WpKnyU= Subject key identifier: 0B:F3:EE:52:8B:D5:19:2D:FA:F9:DA:48:23:79:10:D3:0D:B0:5F:F3 Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 066B3ABA53DEB4A5A38264705472882C367F27BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 0148 Signing time: Fri 17 Oct 2025 19:10:51 +0000 Manifest this update: Fri 17 Oct 2025 19:05:51 +0000 Manifest next update: Mon 20 Oct 2025 20:17:51 +0000 Files and hashes: 1: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: lba1v4z7nYWbnoK/4kTVSAyDKKCR7EsAIZ4ZYjgIw60=) 2: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: Gbsi8D4bcwq6U+Q19Mqsfym6REVmuRrGviaI9wwhdXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 20:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6b:3a:ba:53:de:b4:a5:a3:82:64:70:54:72:88:2c:36:7f:27:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Oct 17 19:05:51 2025 GMT Not After : Oct 20 20:17:51 2025 GMT Subject: CN=0BF3EE528BD5192DFAF9DA48237910D30DB05FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:29:6f:b4:a2:fd:57:07:88:24:b9:e0:35: 5b:14:11:fa:ca:f2:46:63:ef:45:56:9c:af:bd:76: 67:45:2b:c3:c0:e2:c1:bb:4c:b0:9f:f8:28:31:b7: f4:85:38:d9:20:a7:50:6e:80:26:48:42:4a:de:92: 81:b7:17:15:1a:7d:33:ae:1b:4f:b8:68:fc:e3:63: 8b:49:27:e9:ac:3b:eb:14:0f:62:97:59:e8:2a:b1: 2a:4d:5d:79:5d:8d:d2:84:14:74:07:52:25:eb:9d: 71:44:51:59:33:46:e4:1c:fb:64:e8:aa:d7:e5:ae: 90:1e:41:2a:d5:89:2f:76:53:79:78:1b:75:8e:5b: 98:1f:f2:01:b5:65:03:2e:eb:13:d5:3b:d7:03:7f: cb:12:ab:26:24:64:cf:fe:c2:9d:c1:a5:86:55:10: d1:56:bf:07:5e:0a:36:c4:2a:fc:50:47:06:f2:d5: 36:42:7f:17:39:b5:da:11:d3:38:e2:ec:4b:c8:8f: dd:fd:e1:3f:c7:d9:89:f6:2e:e0:12:c5:59:c2:76: 9a:0b:55:0d:66:19:52:36:12:bd:9c:dd:d5:2f:7b: 8f:62:dd:1e:d4:77:6b:00:f8:98:02:98:e5:15:d7: f9:e3:c7:21:a1:d6:d5:13:ff:10:d4:80:9d:37:f4: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F3:EE:52:8B:D5:19:2D:FA:F9:DA:48:23:79:10:D3:0D:B0:5F:F3 X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:61:d8:8d:07:18:8b:ea:0a:60:f4:6f:21:f4:04:ee:5e:c8: 76:81:06:96:c1:ba:18:27:4d:58:e2:ce:fa:16:21:d3:5d:7e: f5:2e:c5:5c:93:03:8b:5e:61:d2:b4:88:6c:5f:77:88:8c:18: e8:73:bc:69:45:59:9d:a5:77:1e:65:49:e5:ec:cf:32:af:56: f9:26:34:5b:6f:72:7a:a0:3a:b6:1b:78:2f:59:40:25:bc:d0: 47:05:20:ef:37:ae:7e:3c:3d:02:fd:be:e7:b6:5f:e9:b4:ee: 44:6e:c8:94:17:37:15:3b:a0:61:25:cc:89:d4:2b:ad:84:aa: 1a:bf:92:13:a4:78:c9:e5:78:dc:43:ca:1d:ed:48:8a:41:38: ac:26:cd:90:c4:4a:21:31:cb:24:eb:cb:89:6c:e8:d5:e3:51: e7:4b:63:8e:de:87:51:2d:c6:b4:40:a7:5c:fa:fb:97:47:5d: 26:53:46:eb:bb:74:ae:a3:45:04:7f:ae:5c:f5:c2:87:39:be: 7d:29:57:96:64:a4:63:d3:91:8b:0a:e2:8d:94:ab:e0:b2:31: cb:a3:d3:06:05:f6:97:f2:d6:4a:5f:cb:47:6c:60:e4:6e:a9: 46:a1:1c:74:01:b2:64:9e:c5:05:d5:7d:19:a2:32:68:b3:08: 74:c4:83:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBms6ulPetKWjgmRwVHKILDZ/J78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTEwMTcxOTA1NTFaFw0yNTEwMjAyMDE3NTFaMDMxMTAvBgNV BAMTKDBCRjNFRTUyOEJENTE5MkRGQUY5REE0ODIzNzkxMEQzMERCMDVGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PClvtKL9VweIJLngNVsUEfrK 8kZj70VWnK+9dmdFK8PA4sG7TLCf+Cgxt/SFONkgp1BugCZIQkrekoG3FxUafTOu G0+4aPzjY4tJJ+msO+sUD2KXWegqsSpNXXldjdKEFHQHUiXrnXFEUVkzRuQc+2To qtflrpAeQSrViS92U3l4G3WOW5gf8gG1ZQMu6xPVO9cDf8sSqyYkZM/+wp3BpYZV ENFWvwdeCjbEKvxQRwby1TZCfxc5tdoR0zji7EvIj9394T/H2Yn2LuASxVnCdpoL VQ1mGVI2Er2c3dUve49i3R7Ud2sA+JgCmOUV1/njxyGh1tUT/xDUgJ039AFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/PuUovVGS36+dpII3kQ0w2wX/MwHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9h2I0HGIvqCmD0byH0BO5eyHaBBpbBuhgn TVjizvoWIdNdfvUuxVyTA4teYdK0iGxfd4iMGOhzvGlFWZ2ldx5lSeXszzKvVvkm NFtvcnqgOrYbeC9ZQCW80EcFIO83rn48PQL9vue2X+m07kRuyJQXNxU7oGElzInU K62Eqhq/khOkeMnleNxDyh3tSIpBOKwmzZDESiExyyTry4ls6NXjUedLY47eh1Et xrRAp1z6+5dHXSZTRuu7dK6jRQR/rlz1woc5vn0pV5ZkpGPTkYsK4o2Uq+CyMcuj 0wYF9pfy1kpfy0dsYORuqUahHHQBsmSexQXVfRmiMmizCHTEgy8= -----END CERTIFICATE-----Generated at Mon Oct 20 01:19:17 2025 by rpki-client