$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: x804arKDOoWWr2kS6Kh55tC3U8PpHnaWMzsJRan0/OA= Subject key identifier: 5C:0F:B4:02:12:5A:7C:B0:A7:42:03:83:EC:DE:2B:FC:1A:55:86:62 Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 12E4FE1C294C1DF64AAFD3DB4844764EA4E09D0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 025A Signing time: Tue 04 Nov 2025 11:22:01 +0000 Manifest this update: Tue 04 Nov 2025 11:17:01 +0000 Manifest next update: Fri 07 Nov 2025 17:47:01 +0000 Files and hashes: 1: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: Ma8rMr1wNtcnFhNLRBGpMeQrnhYAIalfsCI7W0ZiYvo=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e4:fe:1c:29:4c:1d:f6:4a:af:d3:db:48:44:76:4e:a4:e0:9d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Nov 4 11:17:01 2025 GMT Not After : Nov 7 17:47:01 2025 GMT Subject: CN=5C0FB402125A7CB0A7420383ECDE2BFC1A558662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:a5:13:d3:e7:b9:ab:cb:c6:db:98:3d:df: d5:4f:6a:06:53:65:68:52:a4:d3:0b:74:99:a6:97: b8:64:ad:fa:d8:4b:f7:da:0c:56:8c:30:b3:7a:75: 69:74:7d:44:34:e0:f3:57:88:e4:56:07:c2:29:0f: c7:6c:00:64:e2:b0:4e:04:6b:cc:dd:13:9f:df:ef: f5:de:d0:68:38:74:1e:d2:de:07:b2:13:83:1e:08: c0:5a:f2:14:ff:87:14:64:79:4c:44:f7:73:4f:47: 99:e3:38:a2:2f:55:a1:35:29:99:3e:ef:27:04:b4: 04:b1:2d:c5:33:24:c1:6b:d1:0b:bd:c2:05:ca:d8: 36:ef:b7:3a:23:e0:7e:18:fe:82:96:8b:dd:6a:7d: 42:4a:61:08:12:52:22:ec:c4:00:1f:80:53:f5:b5: ff:d0:ed:12:3b:85:fa:74:c0:52:11:07:83:fd:4e: f3:8a:de:18:99:51:e4:aa:d5:c6:7c:de:c1:9c:42: e4:2e:78:d2:0b:2e:45:09:31:8f:b9:71:06:1f:1b: 8c:93:a4:fa:38:4c:3f:e9:bb:4d:f0:22:a9:c6:19: 48:7d:b1:35:13:db:01:c1:33:56:2e:bc:06:f6:fa: a2:8b:ee:2a:21:2f:39:e0:79:9c:eb:f0:3a:c7:47: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:B4:02:12:5A:7C:B0:A7:42:03:83:EC:DE:2B:FC:1A:55:86:62 X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d9:41:1c:b0:e7:1d:00:62:77:4e:e3:3d:11:dd:6d:45:ae: 18:a6:3d:ca:2b:03:3c:fe:6b:12:ae:6c:28:5b:10:7a:15:19: a0:df:b8:d4:66:53:09:45:b8:9c:b1:07:26:d4:f9:df:3e:83: d8:fc:b5:df:77:cd:b5:60:ad:61:e0:41:37:78:46:41:f2:b2: c6:34:c5:95:2e:26:62:8b:5e:e3:32:86:8f:a9:d4:58:b9:c6: 71:e5:b8:85:48:34:ba:01:46:d6:a3:1a:46:2c:b0:c5:66:78: 5f:e0:81:6f:84:fd:d8:09:34:34:20:3c:1f:2c:f7:82:a0:67: bd:81:e7:57:cb:24:22:d7:df:8f:7d:19:1a:ff:e2:3d:94:ba: 07:11:79:52:66:1d:8e:f8:aa:1e:1b:8a:13:1d:da:df:26:f6: 2a:fa:b7:14:6f:55:55:ec:0c:22:08:d3:b9:e8:db:02:c2:e0: 69:61:f8:c9:b4:67:b1:0d:ec:45:89:5e:a9:e6:6e:c4:ad:34: 3a:17:39:e8:95:70:ec:e0:a5:96:dd:75:c8:9f:e1:85:6b:36: bb:a3:9a:a5:5a:60:7a:be:cc:e2:18:33:e1:c1:da:3a:06:fb: 4a:ae:1b:d6:3e:60:09:83:ce:49:99:ad:73:d7:a7:cd:11:c8: 68:44:cb:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuT+HClMHfZKr9PbSER2TqTgnQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTExMDQxMTE3MDFaFw0yNTExMDcxNzQ3MDFaMDMxMTAvBgNV BAMTKDVDMEZCNDAyMTI1QTdDQjBBNzQyMDM4M0VDREUyQkZDMUE1NTg2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjqUT0+e5q8vG25g939VPagZT ZWhSpNMLdJmml7hkrfrYS/faDFaMMLN6dWl0fUQ04PNXiORWB8IpD8dsAGTisE4E a8zdE5/f7/Xe0Gg4dB7S3geyE4MeCMBa8hT/hxRkeUxE93NPR5njOKIvVaE1KZk+ 7ycEtASxLcUzJMFr0Qu9wgXK2Dbvtzoj4H4Y/oKWi91qfUJKYQgSUiLsxAAfgFP1 tf/Q7RI7hfp0wFIRB4P9TvOK3hiZUeSq1cZ83sGcQuQueNILLkUJMY+5cQYfG4yT pPo4TD/pu03wIqnGGUh9sTUT2wHBM1YuvAb2+qKL7iohLzngeZzr8DrHR88jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXA+0AhJafLCnQgOD7N4r/BpVhmIwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvZQRyw5x0AYndO4z0R3W1FrhimPcorAzz+ axKubChbEHoVGaDfuNRmUwlFuJyxBybU+d8+g9j8td93zbVgrWHgQTd4RkHyssY0 xZUuJmKLXuMyho+p1Fi5xnHluIVINLoBRtajGkYssMVmeF/ggW+E/dgJNDQgPB8s 94KgZ72B51fLJCLX3499GRr/4j2UugcReVJmHY74qh4bihMd2t8m9ir6txRvVVXs DCII07no2wLC4Glh+Mm0Z7EN7EWJXqnmbsStNDoXOeiVcOzgpZbddcif4YVrNruj mqVaYHq+zOIYM+HB2joG+0quG9Y+YAmDzkmZrXPXp80RyGhEy6o= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:05 2025 by rpki-client