$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: UyJgfLomPQA/NbquA7PVEXKlDH8SEVxc53lyyD9/z/A= Subject key identifier: 60:6D:07:E5:0B:BC:B8:6A:29:83:35:34:A0:E9:D1:18:CB:60:B5:15 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 5B3EF9C445AD957BFF0E3CC64E3B38C3D4855AD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01E2 Signing time: Sun 26 Oct 2025 14:11:46 +0000 Manifest this update: Sun 26 Oct 2025 14:06:46 +0000 Manifest next update: Wed 29 Oct 2025 23:43:46 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: rtsT3h5+Zq6C7/giGLuYogiiq4RDOa0VuY9b2XvneAU=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3e:f9:c4:45:ad:95:7b:ff:0e:3c:c6:4e:3b:38:c3:d4:85:5a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Oct 26 14:06:46 2025 GMT Not After : Oct 29 23:43:46 2025 GMT Subject: CN=606D07E50BBCB86A29833534A0E9D118CB60B515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:ac:ad:89:ef:37:4b:9a:51:cc:1f:41:b3: 0d:3f:ed:35:57:01:0a:c0:92:c1:31:1c:cc:e4:9f: 52:eb:8a:3b:a5:ca:b9:66:a9:5c:e8:d4:b8:63:f9: aa:06:22:18:bf:2c:67:f8:dc:64:e4:91:9d:86:ed: e5:7e:e4:14:8a:88:76:80:2e:16:93:f6:20:18:66: 66:f7:e3:98:82:6c:01:a8:91:7e:3c:bf:f3:bf:ec: db:9c:2c:13:9e:e7:2e:bd:82:1e:b4:22:a8:7f:db: 7e:73:9f:9c:cc:c7:b8:90:8f:03:12:c1:54:6a:ac: cd:93:67:0c:7f:a1:1f:7b:26:5c:f3:70:b3:38:9e: 02:ad:8b:a0:9a:1e:d2:6d:6d:ee:62:e2:ff:5b:c7: bd:70:cd:f2:b7:44:ba:8c:ca:34:3b:f5:72:a7:65: 21:8e:1a:a0:fb:60:43:dd:35:69:c6:a0:2e:2e:2a: 47:2e:f1:a8:e8:c1:03:a8:44:14:e6:70:03:08:bf: 6d:ab:37:78:1e:13:14:f3:99:a1:0a:46:4a:0c:ac: 82:87:e0:df:3e:67:50:8d:2a:c6:e9:67:05:47:73: 6a:d6:0a:73:76:52:63:38:9a:d7:1d:56:2d:fb:aa: e9:e0:70:98:1e:ad:8e:df:8d:ef:b3:4b:7f:76:86: 36:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:07:E5:0B:BC:B8:6A:29:83:35:34:A0:E9:D1:18:CB:60:B5:15 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:77:9e:dc:52:e9:ec:1d:2d:b7:db:9d:89:37:fc:7b:7e:4c: 6e:a0:bc:5b:0f:e6:de:86:be:3d:a7:dd:3d:01:42:14:42:49: be:a5:95:c4:d9:2c:55:c6:fa:70:88:43:33:32:a2:a8:ee:f5: 6c:54:e4:03:6c:3a:15:5a:a7:40:43:ad:52:86:67:13:b3:f0: a4:41:65:05:3a:fa:b0:39:99:77:ba:b9:a5:a2:ee:82:6c:38: da:58:8e:37:1b:f1:a9:be:86:7d:58:57:29:5d:ae:95:40:d7: 75:a2:40:7d:5a:9d:8b:16:e9:66:7d:8b:08:8f:0a:cd:09:69: b8:42:be:3b:69:69:54:d7:d7:73:6a:ff:f6:85:48:b4:5b:81: 9c:6d:ef:c6:ae:6d:cb:ed:39:29:3f:fd:72:09:f1:bf:d1:0b: 3a:1c:2f:71:b5:9d:36:bb:86:fa:51:88:dd:14:5d:c9:24:e8: 4d:4f:ff:2d:c6:bc:b9:68:6e:14:1a:6a:f6:ab:00:c9:3e:c0: 98:96:83:50:6a:d2:21:06:f3:69:3f:05:69:e4:dd:0f:e4:92: ca:0c:a4:ef:c6:a2:11:6a:3d:b9:96:4d:73:78:96:13:ea:46: 4f:12:ae:bd:81:92:c4:94:be:2e:7a:0e:5e:25:ac:9e:77:56: 12:46:4d:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWz75xEWtlXv/DjzGTjs4w9SFWtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTEwMjYxNDA2NDZaFw0yNTEwMjkyMzQzNDZaMDMxMTAvBgNV BAMTKDYwNkQwN0U1MEJCQ0I4NkEyOTgzMzUzNEEwRTlEMTE4Q0I2MEI1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7R6ytie83S5pRzB9Bsw0/7TVX AQrAksExHMzkn1LrijulyrlmqVzo1Lhj+aoGIhi/LGf43GTkkZ2G7eV+5BSKiHaA LhaT9iAYZmb345iCbAGokX48v/O/7NucLBOe5y69gh60Iqh/235zn5zMx7iQjwMS wVRqrM2TZwx/oR97JlzzcLM4ngKti6CaHtJtbe5i4v9bx71wzfK3RLqMyjQ79XKn ZSGOGqD7YEPdNWnGoC4uKkcu8ajowQOoRBTmcAMIv22rN3geExTzmaEKRkoMrIKH 4N8+Z1CNKsbpZwVHc2rWCnN2UmM4mtcdVi37qungcJgerY7fje+zS392hjYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYG0H5Qu8uGopgzU0oOnRGMtgtRUwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF3ntxS6ewdLbfbnYk3/Ht+TG6gvFsP5t6G vj2n3T0BQhRCSb6llcTZLFXG+nCIQzMyoqju9WxU5ANsOhVap0BDrVKGZxOz8KRB ZQU6+rA5mXe6uaWi7oJsONpYjjcb8am+hn1YVyldrpVA13WiQH1anYsW6WZ9iwiP Cs0JabhCvjtpaVTX13Nq//aFSLRbgZxt78aubcvtOSk//XIJ8b/RCzocL3G1nTa7 hvpRiN0UXckk6E1P/y3GvLlobhQaavarAMk+wJiWg1Bq0iEG82k/BWnk3Q/kksoM pO/GohFqPbmWTXN4lhPqRk8Srr2BksSUvi56Dl4lrJ53VhJGTZ4= -----END CERTIFICATE-----Generated at Tue Oct 28 08:07:14 2025 by rpki-client