$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: X3MiIdEeajXQcSb/omO7T3qo3BESCEd2fUn7pm1win8= Subject key identifier: 75:1C:BE:15:59:01:B4:84:16:B4:10:FB:3B:B5:5E:43:30:8F:04:B6 Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 1AD5403BB7C812100177BDB12F152AE9A4A385B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 010A Signing time: Sun 01 Jun 2025 11:40:48 +0000 Manifest this update: Sun 01 Jun 2025 11:35:48 +0000 Manifest next update: Wed 04 Jun 2025 20:31:48 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: YvjXGLIIj7MgoCYnEJAj3zGZ31ubmoblzzVqPdTp2A0=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: XSreqIJljknfOIObygSCrMVbPXNgjuTPQtrsZby6wgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d5:40:3b:b7:c8:12:10:01:77:bd:b1:2f:15:2a:e9:a4:a3:85:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Jun 1 11:35:48 2025 GMT Not After : Jun 4 20:31:48 2025 GMT Subject: CN=751CBE155901B48416B410FB3BB55E43308F04B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:3c:c7:7e:1e:88:e2:c8:54:d5:81:9f:32: 10:3e:06:d3:9f:77:90:0a:b7:5b:ed:56:6f:a6:ff: 58:e2:d7:e2:38:3d:13:22:9c:a4:c8:58:62:46:08: 79:63:83:dd:1a:7a:cb:04:60:b1:93:d0:bd:1e:b8: c8:27:bc:5e:f7:89:08:f7:97:77:8e:ee:bf:3f:7d: 13:bc:dd:2d:61:2b:fd:f1:99:1f:12:3e:53:6d:39: 31:b0:b4:18:10:c5:58:51:0a:a2:37:f9:84:19:db: 9c:a6:30:60:94:45:38:c1:c3:6e:74:5b:98:64:63: 58:95:b3:8a:6b:a2:88:08:58:f5:8d:5a:0c:a5:66: d6:84:8d:98:79:99:5d:27:d1:5d:c9:75:a6:fb:81: 1d:e1:91:2a:6e:f8:e7:57:85:3e:0b:94:3c:d2:da: 1c:f9:be:28:cc:92:b2:c4:21:0d:3f:b6:bb:bc:62: 96:d2:bc:95:ad:02:f1:c9:b4:f8:8c:f6:d6:57:37: 44:42:10:e3:4f:05:15:20:f8:b0:81:ed:8e:db:10: 82:7f:fb:6e:77:6c:a5:97:7a:80:ac:ed:3f:7d:7c: b5:fa:d4:29:d9:f7:92:f2:51:ea:fb:03:54:37:0a: ef:c3:17:26:62:89:29:25:99:6e:92:f5:03:8e:cd: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:BE:15:59:01:B4:84:16:B4:10:FB:3B:B5:5E:43:30:8F:04:B6 X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:29:e5:8c:41:8f:1d:0d:4b:db:46:a6:d9:48:ec:59:77:d7: 39:68:8d:aa:19:67:47:28:83:29:92:3a:0f:12:65:e2:37:35: f6:f9:60:67:8c:81:2d:a6:67:6b:2f:28:32:dc:6a:81:0b:40: 21:0a:4d:5c:b3:eb:d8:61:e2:58:ba:a4:9a:2b:37:25:85:12: 48:1b:09:2f:fb:86:38:5b:e9:33:73:8b:9a:3f:65:4f:36:23: 7f:bb:73:54:65:56:44:a0:99:70:97:7e:10:42:49:06:44:9a: 63:4d:f1:5e:ea:2a:30:96:84:f7:bf:a4:c8:ef:4e:9c:7c:24: 63:d6:df:e4:e1:39:ef:7b:89:59:b4:8a:b0:75:7c:10:47:59: 8f:d6:a9:a5:18:04:d8:51:4b:91:31:9a:15:b4:ed:c8:69:fb: 60:a5:da:a8:a7:18:fa:82:b4:32:41:97:33:f0:ee:98:09:74: 35:0a:8e:53:62:74:c9:9d:33:b5:f0:5b:e7:cf:4d:dc:61:f3: 1c:70:a7:4c:3a:7d:d1:4b:ef:2e:99:3c:be:00:7f:ed:b8:6b: a6:ca:4b:cc:f6:fe:54:64:a3:91:b6:b3:70:1f:52:6b:8c:7d: 45:f0:80:f1:1c:0a:db:5d:ee:b6:55:cc:80:a0:1b:78:c2:1f: f8:cc:73:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtVAO7fIEhABd72xLxUq6aSjhbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTA2MDExMTM1NDhaFw0yNTA2MDQyMDMxNDhaMDMxMTAvBgNV BAMTKDc1MUNCRTE1NTkwMUI0ODQxNkI0MTBGQjNCQjU1RTQzMzA4RjA0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwDzHfh6I4shU1YGfMhA+BtOf d5AKt1vtVm+m/1ji1+I4PRMinKTIWGJGCHljg90aessEYLGT0L0euMgnvF73iQj3 l3eO7r8/fRO83S1hK/3xmR8SPlNtOTGwtBgQxVhRCqI3+YQZ25ymMGCURTjBw250 W5hkY1iVs4proogIWPWNWgylZtaEjZh5mV0n0V3Jdab7gR3hkSpu+OdXhT4LlDzS 2hz5vijMkrLEIQ0/tru8YpbSvJWtAvHJtPiM9tZXN0RCEONPBRUg+LCB7Y7bEIJ/ +253bKWXeoCs7T99fLX61CnZ95LyUer7A1Q3Cu/DFyZiiSklmW6S9QOOzblVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdRy+FVkBtIQWtBD7O7VeQzCPBLYwHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEp5YxBjx0NS9tGptlI7Fl31zlojaoZZ0co gymSOg8SZeI3Nfb5YGeMgS2mZ2svKDLcaoELQCEKTVyz69hh4li6pJorNyWFEkgb CS/7hjhb6TNzi5o/ZU82I3+7c1RlVkSgmXCXfhBCSQZEmmNN8V7qKjCWhPe/pMjv Tpx8JGPW3+ThOe97iVm0irB1fBBHWY/WqaUYBNhRS5ExmhW07chp+2Cl2qinGPqC tDJBlzPw7pgJdDUKjlNidMmdM7XwW+fPTdxh8xxwp0w6fdFL7y6ZPL4Af+24a6bK S8z2/lRko5G2s3AfUmuMfUXwgPEcCttd7rZVzICgG3jCH/jMc40= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:51 2025 by rpki-client