$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: 9IC+gj12/x2atIfZtxUhwfrbr0WLUe617NVqmivp98M= Subject key identifier: FC:17:F4:49:36:C7:BF:68:61:CF:61:D9:69:C9:B4:64:D8:D9:43:07 Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 7ECB6EDE3B6BE53BF74C01D6D0214F471216E8FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 0201 Signing time: Sun 07 Sep 2025 06:11:14 +0000 Manifest this update: Sun 07 Sep 2025 06:06:14 +0000 Manifest next update: Wed 10 Sep 2025 14:07:14 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: Loti3oLAwhXEZf3hk0u16J7btP7TtSFyyvgQZ/LuTYk=) 2: 3130332e3138352e3235322e302f32332d3234203d3e20313439363839.roa (hash: HnJcM1pYTCQNaP5Phr+gH+vSqyaKDOtxhKznqfzli4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cb:6e:de:3b:6b:e5:3b:f7:4c:01:d6:d0:21:4f:47:12:16:e8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Sep 7 06:06:14 2025 GMT Not After : Sep 10 14:07:14 2025 GMT Subject: CN=FC17F44936C7BF6861CF61D969C9B464D8D94307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:70:6b:f0:cd:9d:d1:a5:e9:8a:ad:3c:82: f2:77:be:9e:d6:81:82:17:63:38:82:af:aa:52:fa: 25:04:28:c6:57:80:18:61:36:5c:8d:c0:fd:aa:03: a9:f4:56:c4:bd:38:9a:ec:7d:88:a4:ee:76:33:03: 5b:70:7c:9e:da:b7:73:d1:81:4c:70:a7:36:1e:80: 15:13:03:4e:b3:af:4b:66:f6:fe:ec:8d:f3:c4:ea: 69:31:cb:ef:1c:c4:be:cb:54:37:96:ee:01:87:77: 3a:38:92:a0:94:27:db:0e:18:f0:b6:f1:3b:22:9b: 3a:78:2a:01:c2:5b:dc:f2:87:6e:d1:9a:7d:5c:19: 56:9d:b7:e1:ef:01:24:e0:07:b8:c5:c2:03:95:f7: 95:50:a4:76:8e:ef:e5:ce:45:fa:52:5b:27:3c:a1: 4b:a9:b6:c2:b7:b1:0a:8b:f6:ba:a5:67:7f:1c:be: e3:53:d5:49:3d:78:66:72:18:81:9d:a4:dd:e6:9a: 93:5c:78:32:75:fd:0b:07:15:e2:eb:7e:d3:67:e2: 5f:6b:55:6e:97:de:8e:31:78:2f:99:57:a7:34:c2: 34:57:15:5e:ef:f3:e4:6d:0f:f5:f4:da:12:ac:1f: 1c:b6:9b:33:12:61:25:3d:06:12:5b:7a:07:49:08: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:17:F4:49:36:C7:BF:68:61:CF:61:D9:69:C9:B4:64:D8:D9:43:07 X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fe:5e:58:9b:06:5c:fb:dc:52:18:d3:f5:e9:3e:d1:d2:32: 40:4d:52:47:8a:71:50:d5:f1:62:93:b6:cc:78:8a:d1:3f:d1: 14:a0:31:84:0b:fb:25:57:63:c4:7d:6b:f1:d6:c5:1d:72:3b: ad:e4:6f:4e:43:65:a2:6d:81:19:27:f9:c3:aa:e8:ce:26:05: 9e:6a:46:1b:d4:17:58:e3:36:a4:42:ab:1a:22:46:68:e4:a5: cf:4e:24:4d:ae:bd:bf:48:7f:5e:9e:11:98:61:1f:a6:df:df: 12:66:f6:7d:f3:54:6a:a7:77:a0:dc:5c:1d:00:d1:fc:96:b7: bc:c3:26:f5:4f:3b:07:0f:7f:b8:59:2f:68:22:a9:e4:13:bc: 6c:51:08:ac:06:74:86:ad:72:05:c8:f6:02:a7:f1:f0:c0:32: 16:9b:cf:f6:a6:59:39:7d:f8:e9:c1:af:2b:26:fb:54:a8:e2: 57:e9:de:99:90:9d:12:24:ca:6b:68:57:9f:69:2a:2b:9f:bf: d0:9c:a4:8f:dc:a6:ef:0a:e2:57:81:3b:c7:11:53:a7:1b:15: 0f:9a:f1:1d:27:23:cf:c8:39:7a:87:d0:9d:ff:e7:11:4d:5b: 06:3e:9a:a9:c8:51:d9:84:f2:6b:6f:10:e4:f1:e1:ae:82:2e: 18:15:3f:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfstu3jtr5Tv3TAHW0CFPRxIW6PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTA5MDcwNjA2MTRaFw0yNTA5MTAxNDA3MTRaMDMxMTAvBgNV BAMTKEZDMTdGNDQ5MzZDN0JGNjg2MUNGNjFEOTY5QzlCNDY0RDhEOTQzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7knBr8M2d0aXpiq08gvJ3vp7W gYIXYziCr6pS+iUEKMZXgBhhNlyNwP2qA6n0VsS9OJrsfYik7nYzA1twfJ7at3PR gUxwpzYegBUTA06zr0tm9v7sjfPE6mkxy+8cxL7LVDeW7gGHdzo4kqCUJ9sOGPC2 8Tsimzp4KgHCW9zyh27Rmn1cGVadt+HvASTgB7jFwgOV95VQpHaO7+XORfpSWyc8 oUuptsK3sQqL9rqlZ38cvuNT1Uk9eGZyGIGdpN3mmpNceDJ1/QsHFeLrftNn4l9r VW6X3o4xeC+ZV6c0wjRXFV7v8+RtD/X02hKsHxy2mzMSYSU9BhJbegdJCNtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Bf0STbHv2hhz2HZacm0ZNjZQwcwHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT+XlibBlz73FIY0/XpPtHSMkBNUkeKcVDV 8WKTtsx4itE/0RSgMYQL+yVXY8R9a/HWxR1yO63kb05DZaJtgRkn+cOq6M4mBZ5q RhvUF1jjNqRCqxoiRmjkpc9OJE2uvb9If16eEZhhH6bf3xJm9n3zVGqnd6DcXB0A 0fyWt7zDJvVPOwcPf7hZL2giqeQTvGxRCKwGdIatcgXI9gKn8fDAMhabz/amWTl9 +OnBrysm+1So4lfp3pmQnRIkymtoV59pKiufv9CcpI/cpu8K4leBO8cRU6cbFQ+a 8R0nI8/IOXqH0J3/5xFNWwY+mqnIUdmE8mtvEOTx4a6CLhgVP1c= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:43 2025 by rpki-client