$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json) Hash identifier: sJDGmFP42ZgQLWEs1u+owW5WxsYIelsO8UuG4tQvgIY= Subject key identifier: DD:0C:AA:B5:93:4F:F7:7E:51:03:F3:2B:8B:FB:A1:BC:85:A2:14:CB Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1 Certificate serial: 2D2FB27DB0D88269E8A0623A82A63575485C130F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft Manifest number: DE Signing time: Tue 05 Aug 2025 17:22:22 +0000 Manifest this update: Tue 05 Aug 2025 17:17:22 +0000 Manifest next update: Sat 09 Aug 2025 00:10:22 +0000 Files and hashes: 1: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: LdkOVHPRJZ2FR3qmT6KJhjMmjG6naW4xlLBSVHp1k1g=) 2: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: Bnm8faIttuZIaHSeDovAEOiWsXGOl7jZ7v0Fq1qHVag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2f:b2:7d:b0:d8:82:69:e8:a0:62:3a:82:a6:35:75:48:5c:13:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Validity Not Before: Aug 5 17:17:22 2025 GMT Not After : Aug 9 00:10:22 2025 GMT Subject: CN=DD0CAAB5934FF77E5103F32B8BFBA1BC85A214CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:34:c3:34:96:54:4b:8b:b3:a2:47:4e:00:da: 18:01:95:7e:57:28:3f:32:8d:f0:94:47:90:e4:1c: 3e:87:c4:2c:bf:c2:07:dc:bc:e6:76:e9:a2:7a:16: 7b:10:07:8f:d3:67:62:86:1f:d3:88:85:f9:23:6b: c8:48:97:55:86:33:08:6b:97:c3:9f:17:11:f3:4f: 58:7c:01:88:02:c7:c0:e5:80:2d:02:89:9d:40:56: 59:ef:3f:ca:09:45:6e:92:aa:b0:e3:51:cd:5c:3a: f1:5a:df:ea:13:f6:e6:07:99:4a:23:06:fd:6d:f8: 62:98:48:39:ae:6b:2a:bd:21:d5:25:ef:2a:63:11: 28:2f:53:52:1d:ba:77:82:1b:9e:90:6a:b2:9d:05: 75:da:56:8a:2f:2c:af:10:52:48:18:74:39:6c:75: 27:e4:92:46:d2:70:d9:c7:b4:d5:ee:20:97:69:81: 42:df:58:f7:bc:3e:5c:b3:ea:a1:0d:5c:f2:ab:ae: 67:b0:24:91:2c:92:87:22:f7:70:26:83:e0:cf:d0: 2c:2b:65:b3:a4:aa:3c:d3:d7:6a:36:ae:7d:f6:6d: 98:74:9e:2f:88:d2:2d:a9:92:9b:82:f3:95:52:09: 98:55:f8:92:a8:e6:d5:31:21:4d:28:07:3f:17:b3: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0C:AA:B5:93:4F:F7:7E:51:03:F3:2B:8B:FB:A1:BC:85:A2:14:CB X509v3 Authority Key Identifier: keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:64:74:35:a8:e5:d6:24:15:88:68:c3:96:54:ae:2c:14:fe: ba:dc:8a:c0:d1:1b:e8:7a:25:16:7b:31:5a:9e:f6:6c:44:e3: b5:de:14:17:1c:f8:d4:56:09:0e:4b:d1:ef:8f:28:6b:8d:bf: 7b:f6:da:2c:43:75:0b:16:c2:4a:9d:c2:25:aa:bc:d6:5f:52: 14:de:1f:7e:87:ff:f8:e1:f0:d8:77:f1:1e:5c:23:71:c6:1c: ef:55:bf:4f:ae:e0:aa:89:10:e5:24:37:ec:d4:14:d3:8b:6b: e3:42:60:2a:d2:c6:30:5f:1a:51:69:3d:12:08:d5:a6:fb:b6: 74:c6:47:02:ad:11:78:7e:38:9a:79:e7:7b:7f:f5:f3:6f:41: f5:c9:08:1a:d6:f7:de:cb:20:22:61:42:12:e9:aa:0e:b4:62: 75:d6:56:de:bb:5d:c4:e7:1d:31:5a:15:61:6a:59:03:26:e0: d4:e9:19:1b:da:19:c4:d8:a1:7f:32:02:ea:0d:80:95:f4:d8: a5:6f:28:4a:e7:20:92:b9:0e:45:60:06:98:87:a0:2e:9f:6f: 7a:51:31:7a:16:63:b3:ee:47:6b:24:4b:68:3e:e5:cd:95:c0: 51:e3:47:e3:cb:71:f1:85:42:c4:de:8d:f4:fa:9f:24:e5:0d: 6a:8b:68:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULS+yfbDYgmnooGI6gqY1dUhcEw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND NDMwN0ZGMTAeFw0yNTA4MDUxNzE3MjJaFw0yNTA4MDkwMDEwMjJaMDMxMTAvBgNV BAMTKEREMENBQUI1OTM0RkY3N0U1MTAzRjMyQjhCRkJBMUJDODVBMjE0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwNMM0llRLi7OiR04A2hgBlX5X KD8yjfCUR5DkHD6HxCy/wgfcvOZ26aJ6FnsQB4/TZ2KGH9OIhfkja8hIl1WGMwhr l8OfFxHzT1h8AYgCx8DlgC0CiZ1AVlnvP8oJRW6SqrDjUc1cOvFa3+oT9uYHmUoj Bv1t+GKYSDmuayq9IdUl7ypjESgvU1IduneCG56QarKdBXXaVoovLK8QUkgYdDls dSfkkkbScNnHtNXuIJdpgULfWPe8Plyz6qENXPKrrmewJJEskoci93Amg+DP0Cwr ZbOkqjzT12o2rn32bZh0ni+I0i2pkpuC85VSCZhV+JKo5tUxIU0oBz8Xs1BrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QyqtZNP935RA/Mri/uhvIWiFMswHwYDVR0j BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw N0ZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1 NUNDNDMwN0ZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpkdDWo5dYkFYhow5ZUriwU/rrcisDRG+h6 JRZ7MVqe9mxE47XeFBcc+NRWCQ5L0e+PKGuNv3v22ixDdQsWwkqdwiWqvNZfUhTe H36H//jh8Nh38R5cI3HGHO9Vv0+u4KqJEOUkN+zUFNOLa+NCYCrSxjBfGlFpPRII 1ab7tnTGRwKtEXh+OJp553t/9fNvQfXJCBrW997LICJhQhLpqg60YnXWVt67XcTn HTFaFWFqWQMm4NTpGRvaGcTYoX8yAuoNgJX02KVvKErnIJK5DkVgBpiHoC6fb3pR MXoWY7PuR2skS2g+5c2VwFHjR+PLcfGFQsTejfT6nyTlDWqLaJU= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:18 2025 by rpki-client