$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: 0LPbxzvEhs2kOKcWhMKQ/POqnmoXxQOIJuhMzP4Qvkw= Subject key identifier: EC:2D:66:A2:9F:38:40:57:46:33:03:BE:A7:E8:44:DA:17:E6:AE:68 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 427060FD479D50DBAB897BECFC4CF2A9D9A77D72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 020B Signing time: Tue 05 Aug 2025 08:21:05 +0000 Manifest this update: Tue 05 Aug 2025 08:16:05 +0000 Manifest next update: Fri 08 Aug 2025 17:11:05 +0000 Files and hashes: 1: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 2: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 3: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 4: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 5: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 6: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: gkXwM+RWb+IGjjyxLQX3JNeycUTdn2onnzcx7dUklRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:70:60:fd:47:9d:50:db:ab:89:7b:ec:fc:4c:f2:a9:d9:a7:7d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Aug 5 08:16:05 2025 GMT Not After : Aug 8 17:11:05 2025 GMT Subject: CN=EC2D66A29F384057463303BEA7E844DA17E6AE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:c9:84:85:e0:db:29:09:d4:ba:09:f9:89: 6a:f9:25:3f:67:6e:af:f9:e9:7e:59:6a:e4:5c:ac: be:d8:c3:54:0b:91:f1:60:5a:91:7d:aa:e3:93:5a: 27:d5:c2:c5:fe:c0:ca:30:b3:c2:e0:79:af:bd:3b: 4e:de:0e:0a:90:b8:54:a9:a1:42:3f:c1:2b:37:d3: 1d:d2:a8:25:28:e5:e0:8f:c1:b2:09:02:7d:63:00: 71:31:a9:eb:f0:20:4f:0c:ff:be:4f:e9:c3:f0:3d: 05:ac:f2:91:2b:50:42:80:51:0a:ef:e5:6d:c1:c8: 3a:05:93:3d:e3:83:4a:e8:b4:ee:58:46:e2:18:50: 55:a6:b9:fe:fa:6b:fd:cd:0f:f6:57:ef:c8:f2:71: f2:6e:6c:1a:4a:1e:df:80:c3:65:71:cb:f1:60:76: 67:53:71:7d:0c:78:ff:29:e4:0b:d2:38:2d:86:62: b0:0b:9a:77:cf:d2:9c:c0:72:97:22:47:9f:6d:b2: eb:8f:ea:66:9c:4e:94:51:ea:89:bc:c0:82:a1:9c: 4b:11:f1:7b:1c:07:36:49:c8:e9:a8:69:24:6f:a9: 5d:27:77:1c:cf:90:91:0b:d5:b1:60:cd:8e:93:dd: 72:e4:8b:06:1a:51:70:35:20:dd:22:ed:30:47:84: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:66:A2:9F:38:40:57:46:33:03:BE:A7:E8:44:DA:17:E6:AE:68 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4b:2a:82:d3:33:78:03:d7:9c:a9:40:fc:37:86:c1:2f:a3: 2a:f9:fb:39:48:33:14:c5:cc:34:c7:f7:70:49:e0:16:2b:41: 1b:6b:09:50:d1:82:8d:fc:40:fb:55:80:fb:ac:29:38:be:0f: 94:fe:2c:12:90:3f:cf:8e:e9:f9:50:90:ab:3a:5a:eb:1b:98: bf:15:a7:4f:ed:88:7c:da:5b:04:a1:59:a6:52:ba:f2:89:29: 99:0a:38:40:e9:46:d5:02:cb:e5:6d:66:74:f0:d9:aa:5b:bc: db:46:44:28:4a:94:03:65:29:6c:53:37:50:59:98:e5:54:e2: 64:33:03:7a:cb:9f:8f:e4:c9:b1:d8:d5:ea:61:d2:49:a6:3f: 69:b6:cd:cb:ff:2f:e1:0f:23:f7:00:0c:16:b3:03:bc:9a:27: 52:c0:e0:83:68:51:19:a7:d0:19:47:19:d3:a6:14:4d:1c:0f: 34:7c:8e:e7:3b:49:61:82:34:bf:26:86:40:a8:54:44:3a:80: 9d:06:2d:71:4f:18:af:bf:51:a9:03:05:79:f4:83:7f:53:32: 1b:3d:33:d8:25:f7:42:45:2c:a5:1b:b6:32:b1:7a:cd:13:f0: f0:e1:3c:66:b1:6f:81:1d:ef:07:4f:3b:a4:57:a1:7e:10:00: 5c:a9:0f:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnBg/UedUNuriXvs/EzyqdmnfXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTA4MDUwODE2MDVaFw0yNTA4MDgxNzExMDVaMDMxMTAvBgNV BAMTKEVDMkQ2NkEyOUYzODQwNTc0NjMzMDNCRUE3RTg0NERBMTdFNkFFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eMmEheDbKQnUugn5iWr5JT9n bq/56X5ZauRcrL7Yw1QLkfFgWpF9quOTWifVwsX+wMows8Lgea+9O07eDgqQuFSp oUI/wSs30x3SqCUo5eCPwbIJAn1jAHExqevwIE8M/75P6cPwPQWs8pErUEKAUQrv 5W3ByDoFkz3jg0rotO5YRuIYUFWmuf76a/3ND/ZX78jycfJubBpKHt+Aw2Vxy/Fg dmdTcX0MeP8p5AvSOC2GYrALmnfP0pzAcpciR59tsuuP6macTpRR6om8wIKhnEsR 8XscBzZJyOmoaSRvqV0ndxzPkJEL1bFgzY6T3XLkiwYaUXA1IN0i7TBHhIO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7C1mop84QFdGMwO+p+hE2hfmrmgwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVLKoLTM3gD15ypQPw3hsEvoyr5+zlIMxTF zDTH93BJ4BYrQRtrCVDRgo38QPtVgPusKTi+D5T+LBKQP8+O6flQkKs6WusbmL8V p0/tiHzaWwShWaZSuvKJKZkKOEDpRtUCy+VtZnTw2apbvNtGRChKlANlKWxTN1BZ mOVU4mQzA3rLn4/kybHY1eph0kmmP2m2zcv/L+EPI/cADBazA7yaJ1LA4INoURmn 0BlHGdOmFE0cDzR8juc7SWGCNL8mhkCoVEQ6gJ0GLXFPGK+/UakDBXn0g39TMhs9 M9gl90JFLKUbtjKxes0T8PDhPGaxb4Ed7wdPO6RXoX4QAFypD4s= -----END CERTIFICATE-----Generated at Thu Aug 7 01:05:01 2025 by rpki-client