$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: rIRUeXhPvnJ0bXUHk55J73SRkT+adVlXv3BNC3QmS+E= Subject key identifier: D7:F8:C7:B6:BE:7E:31:D0:53:54:26:40:CC:61:B8:E9:73:82:41:FD Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 50DEBA069630800CEEACEEFC6FDC2B829C65F497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01CB Signing time: Fri 05 Sep 2025 17:21:46 +0000 Manifest this update: Fri 05 Sep 2025 17:16:46 +0000 Manifest next update: Tue 09 Sep 2025 01:59:46 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: +7sgPuaTTkLnaAQsgbZyTGiDEPLAZxYdnRSpLvPR65Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:de:ba:06:96:30:80:0c:ee:ac:ee:fc:6f:dc:2b:82:9c:65:f4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Sep 5 17:16:46 2025 GMT Not After : Sep 9 01:59:46 2025 GMT Subject: CN=D7F8C7B6BE7E31D053542640CC61B8E9738241FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:1c:45:df:71:43:85:4f:4f:57:7f:53:37: 09:4b:65:0f:85:c2:22:b9:d1:61:c2:b6:69:2a:36: cf:24:cd:4b:b2:3e:47:ef:20:8f:19:2d:57:16:57: a3:45:b3:76:25:f9:1b:89:ac:2d:a5:41:0a:4e:4b: 54:b5:1c:db:14:9f:a2:24:81:9e:06:ad:ac:09:2a: b5:91:52:f3:1a:6b:d3:b4:01:0f:78:6c:e3:5c:a9: d1:e9:f9:32:4b:db:ee:0e:03:a4:15:5e:c5:11:95: 31:ce:72:cd:95:29:dd:30:2f:d9:f7:b5:c4:84:b5: 11:d6:f1:4c:7f:1f:73:2e:3b:da:4b:de:d5:52:3a: f1:ac:cf:0f:53:57:22:47:76:da:78:aa:65:f1:a3: ca:5f:46:cc:e2:e3:aa:ae:cb:fe:c8:69:b3:c0:cc: 7b:b1:d3:5d:77:4d:c8:21:f9:f4:6a:9e:a4:d3:03: d9:28:2c:94:77:e9:63:4e:67:57:52:fd:a7:44:e2: 79:56:84:7d:01:b0:42:4c:d6:e8:96:24:57:3a:b4: f0:78:08:09:86:b8:64:6a:6a:17:89:71:52:16:c1: 7c:65:a6:ef:e0:e4:96:c5:cb:25:cc:41:00:9c:65: 53:5b:ea:93:aa:64:0b:b1:02:3b:cb:78:ce:01:a5: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F8:C7:B6:BE:7E:31:D0:53:54:26:40:CC:61:B8:E9:73:82:41:FD X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:41:84:9b:e5:ec:df:60:aa:c8:3c:2c:b3:b8:43:26:e3:a2: 4f:99:d6:72:27:7a:1f:c2:2f:79:e1:de:29:79:a8:1e:9f:20: e6:d0:6f:c9:b4:3f:a3:df:25:37:48:06:9f:0a:0e:2f:03:f0: d3:ab:f2:c1:81:33:5a:85:a4:15:1d:38:8b:ce:e4:a0:6f:f7: 5e:b0:f5:aa:46:47:d7:81:3d:1e:89:4e:14:cc:32:63:4f:d3: b3:f5:e4:ed:2b:1e:0b:62:3a:7a:1c:c8:99:d8:05:07:44:15: ae:96:68:f7:32:fa:c0:ec:9e:84:34:b7:7c:72:9a:f0:db:ce: a4:35:ff:7b:4d:d6:b6:3e:7a:81:8d:29:b0:b7:0f:69:21:03: 82:47:32:2e:db:1e:a6:1c:88:67:47:93:77:ed:8e:88:c1:68: a1:da:b6:98:98:16:14:e5:c0:ed:00:d5:56:49:68:35:ee:c6: 16:80:d4:6b:1f:be:ac:44:85:e7:44:1b:a8:2e:e0:26:1e:f3: 4d:8e:d5:9b:a5:67:6c:19:87:c7:c1:9b:1e:3a:0f:8a:14:d9: 44:88:b2:78:10:59:6f:28:0c:ec:0b:d5:da:87:75:3d:2a:7f: 6f:61:da:02:d6:7d:7d:05:2f:76:f4:6f:fe:54:03:8a:81:82: 87:6b:78:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN66BpYwgAzurO78b9wrgpxl9JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA5MDUxNzE2NDZaFw0yNTA5MDkwMTU5NDZaMDMxMTAvBgNV BAMTKEQ3RjhDN0I2QkU3RTMxRDA1MzU0MjY0MENDNjFCOEU5NzM4MjQxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3xxF33FDhU9PV39TNwlLZQ+F wiK50WHCtmkqNs8kzUuyPkfvII8ZLVcWV6NFs3Yl+RuJrC2lQQpOS1S1HNsUn6Ik gZ4GrawJKrWRUvMaa9O0AQ94bONcqdHp+TJL2+4OA6QVXsURlTHOcs2VKd0wL9n3 tcSEtRHW8Ux/H3MuO9pL3tVSOvGszw9TVyJHdtp4qmXxo8pfRszi46quy/7IabPA zHux0113Tcgh+fRqnqTTA9koLJR36WNOZ1dS/adE4nlWhH0BsEJM1uiWJFc6tPB4 CAmGuGRqaheJcVIWwXxlpu/g5JbFyyXMQQCcZVNb6pOqZAuxAjvLeM4BpXDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/jHtr5+MdBTVCZAzGG46XOCQf0wHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1BhJvl7N9gqsg8LLO4Qybjok+Z1nIneh/C L3nh3il5qB6fIObQb8m0P6PfJTdIBp8KDi8D8NOr8sGBM1qFpBUdOIvO5KBv916w 9apGR9eBPR6JThTMMmNP07P15O0rHgtiOnocyJnYBQdEFa6WaPcy+sDsnoQ0t3xy mvDbzqQ1/3tN1rY+eoGNKbC3D2khA4JHMi7bHqYciGdHk3ftjojBaKHatpiYFhTl wO0A1VZJaDXuxhaA1GsfvqxEhedEG6gu4CYe802O1ZulZ2wZh8fBmx46D4oU2USI sngQWW8oDOwL1dqHdT0qf29h2gLWfX0FL3b0b/5UA4qBgodreFs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:42 2025 by rpki-client