$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: LCwVOaEYmHrhvZ3dMEPQLI7W9Pk2+6XYnU2+RsjWyfw= Subject key identifier: 6B:5C:7E:F9:1E:5B:79:F5:F3:5D:38:17:92:4A:68:94:0A:EB:5E:61 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 090D472EC5272CB52E155BDF67CD21AEA0522837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01A1 Signing time: Tue 03 Jun 2025 02:52:07 +0000 Manifest this update: Tue 03 Jun 2025 02:47:07 +0000 Manifest next update: Fri 06 Jun 2025 05:48:07 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: GP0Ejfr46NRrDBTw8dma9HB2y5qOCLdfUZ575dL7uKs=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 05:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0d:47:2e:c5:27:2c:b5:2e:15:5b:df:67:cd:21:ae:a0:52:28:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Jun 3 02:47:07 2025 GMT Not After : Jun 6 05:48:07 2025 GMT Subject: CN=6B5C7EF91E5B79F5F35D3817924A68940AEB5E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:ec:d0:f5:48:12:a9:51:1d:71:fe:a8:e9: b5:d7:10:eb:96:8e:dd:c6:86:16:04:b0:2e:09:cd: d3:90:92:18:2c:33:2d:be:6b:07:0b:6e:de:d3:78: 17:8e:3b:4c:a2:84:3b:38:0a:39:2d:04:65:c6:a5: 44:07:a7:74:1d:74:7c:46:b3:bd:7c:61:a5:0e:3e: 43:1c:98:5c:d6:51:97:ea:b9:1b:e2:46:5e:7b:17: e1:a6:73:ef:4e:8a:73:63:e6:f8:22:5f:7e:91:2c: ee:38:07:e6:c9:5a:81:c1:2d:d4:ac:3d:6f:4b:a9: c3:39:4d:1d:6e:9f:6f:77:9d:72:8d:36:f3:00:46: 6e:a0:bf:40:0c:36:fc:1f:64:00:bd:bc:d4:be:17: f6:fb:34:3e:de:5b:2c:ed:43:b6:63:f4:7e:5f:47: 14:7c:8b:d3:5d:22:49:1a:14:dd:99:6a:e1:ee:6e: f3:ca:25:bb:26:c1:65:86:7a:08:37:28:7c:d2:5e: b5:b2:b2:54:61:a5:58:92:60:3c:92:d1:1a:af:09: 52:10:ff:3b:5e:c6:0e:8e:e9:1f:02:8f:62:b2:59: 6a:83:ca:81:c9:e0:46:ad:b4:f9:80:ac:59:ac:79: 97:45:2c:11:dc:82:64:e0:c6:5f:2d:e7:29:ed:4f: 3f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:7E:F9:1E:5B:79:F5:F3:5D:38:17:92:4A:68:94:0A:EB:5E:61 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:79:99:67:f1:ef:87:5f:7a:12:a5:73:c5:4e:6e:f5:d4:a8: 07:ae:51:f4:29:ad:be:24:62:9a:35:a5:38:e6:dd:94:8d:3d: 22:32:c1:cf:ef:2c:f7:85:ca:9c:f3:71:e1:84:27:fc:61:56: 33:20:b3:56:99:7a:85:b6:1e:cd:5f:c9:4d:06:b0:e4:b3:a8: 8c:41:2c:aa:11:6e:d7:d3:4b:14:a3:ed:7a:a9:37:dc:5b:68: 3c:e3:95:d3:9c:39:e4:96:79:d9:db:33:4f:08:f0:32:99:16: 6d:55:26:82:59:54:e3:3e:e5:27:b3:f7:5c:1a:fe:d1:a6:32: 9a:78:3e:4f:ed:61:84:28:50:34:59:d8:eb:7c:81:4d:1e:84: f3:9e:e3:8e:74:9b:4f:f3:b8:4a:24:f6:5e:8b:8b:73:04:8c: c2:57:6b:b2:6f:a4:49:fc:3c:39:43:0d:a0:d5:e3:98:5f:7c: 27:17:e6:5f:ed:6e:af:42:fa:b3:86:58:bf:3a:7b:c6:c5:28: 5b:34:31:43:41:6a:7d:67:57:98:7c:ef:e3:77:e6:2c:66:18: a7:09:c7:ae:f2:cb:37:fd:2e:6c:3d:dc:64:0a:2b:30:65:25: a6:9d:e8:c6:79:8b:8e:c0:01:4b:84:d6:76:91:27:69:89:50: 1a:06:e2:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQ1HLsUnLLUuFVvfZ80hrqBSKDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA2MDMwMjQ3MDdaFw0yNTA2MDYwNTQ4MDdaMDMxMTAvBgNV BAMTKDZCNUM3RUY5MUU1Qjc5RjVGMzVEMzgxNzkyNEE2ODk0MEFFQjVFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOezQ9UgSqVEdcf6o6bXXEOuW jt3GhhYEsC4JzdOQkhgsMy2+awcLbt7TeBeOO0yihDs4CjktBGXGpUQHp3QddHxG s718YaUOPkMcmFzWUZfquRviRl57F+Gmc+9OinNj5vgiX36RLO44B+bJWoHBLdSs PW9LqcM5TR1un293nXKNNvMARm6gv0AMNvwfZAC9vNS+F/b7ND7eWyztQ7Zj9H5f RxR8i9NdIkkaFN2ZauHubvPKJbsmwWWGegg3KHzSXrWyslRhpViSYDyS0RqvCVIQ /ztexg6O6R8Cj2KyWWqDyoHJ4EattPmArFmseZdFLBHcgmTgxl8t5yntTz9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa1x++R5befXzXTgXkkpolArrXmEwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF55mWfx74dfehKlc8VObvXUqAeuUfQprb4k Ypo1pTjm3ZSNPSIywc/vLPeFypzzceGEJ/xhVjMgs1aZeoW2Hs1fyU0GsOSzqIxB LKoRbtfTSxSj7XqpN9xbaDzjldOcOeSWednbM08I8DKZFm1VJoJZVOM+5Sez91wa /tGmMpp4Pk/tYYQoUDRZ2Ot8gU0ehPOe4450m0/zuEok9l6Li3MEjMJXa7JvpEn8 PDlDDaDV45hffCcX5l/tbq9C+rOGWL86e8bFKFs0MUNBan1nV5h87+N35ixmGKcJ x67yyzf9Lmw93GQKKzBlJaad6MZ5i47AAUuE1naRJ2mJUBoG4hw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:02 2025 by rpki-client