$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: SNdzcJpNfEricRgIJGKQCCLLhkcTFCxVkRF40sFscs4= Subject key identifier: 8C:E9:F4:6C:B0:44:59:FA:0E:4A:BC:12:8E:8C:6E:CC:53:E8:77:25 Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 3C8FACF5288BE3855F5F07B0D5EF204E05A26479 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 021B Signing time: Mon 16 Jun 2025 17:51:58 +0000 Manifest this update: Mon 16 Jun 2025 17:46:58 +0000 Manifest next update: Thu 19 Jun 2025 17:54:58 +0000 Files and hashes: 1: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: ztXhRRN4sqRlmctM//ZkJIgrxKZVbXiXbXV1qaWPkUQ=) 3: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: E29AgIu7F6w6Dkf6o+UWq4WBV/W9vrzCiDg7WHaO1tg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8f:ac:f5:28:8b:e3:85:5f:5f:07:b0:d5:ef:20:4e:05:a2:64:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Jun 16 17:46:58 2025 GMT Not After : Jun 19 17:54:58 2025 GMT Subject: CN=8CE9F46CB04459FA0E4ABC128E8C6ECC53E87725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:2d:85:b4:03:f6:98:bb:33:88:06:fa:3f: 5c:ca:f6:3e:bc:11:61:ca:a0:60:0c:80:58:13:ee: 7e:ac:a8:f5:d4:1e:84:85:cd:f1:62:62:4c:01:4e: e3:e6:f3:80:0f:25:d1:1d:1f:43:4e:65:5b:c7:4d: b0:3d:7d:72:ce:5f:2a:6d:8a:a6:6a:91:21:f8:4b: f7:ac:4f:6a:b8:2f:f3:0a:7d:b9:aa:1b:36:28:48: 2e:42:3a:97:d1:29:85:6b:16:4c:40:dc:47:c5:21: 4b:90:0d:ef:f5:33:87:1f:5b:10:7c:0d:3b:30:55: 6a:5c:e0:b4:4b:d9:80:23:1e:21:54:12:e9:ee:d6: b1:cf:11:bb:32:db:77:11:f8:ff:ad:9b:7e:39:10: 7e:92:fc:ea:6a:70:6e:bf:e5:cf:70:dd:d3:05:e4: cf:a9:df:be:bd:c7:d9:0e:d2:6f:c3:9d:f6:35:0c: 92:d4:2b:d1:74:3d:f8:6a:f5:d6:70:a4:66:a6:3f: 3c:c4:d9:f6:50:6a:ec:32:4e:1f:31:7a:a9:f7:31: d1:74:7a:e2:f4:ac:be:59:4e:b8:98:0c:2f:02:d5: 08:a8:82:b6:6b:e6:b5:ff:cc:75:ae:3d:47:15:91: c1:fe:67:30:ee:dd:fe:ba:6d:2a:e7:27:e8:1e:06: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:F4:6C:B0:44:59:FA:0E:4A:BC:12:8E:8C:6E:CC:53:E8:77:25 X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f7:c8:90:2c:da:00:bb:97:e7:67:17:1d:7a:58:37:40:63: f7:2a:ef:d8:4a:cb:9e:1b:de:99:52:01:a9:b7:65:95:5f:bb: 53:b6:2d:d7:4b:52:00:61:ad:ce:52:e8:10:09:a7:25:86:02: e1:19:f5:dc:c9:0b:57:a5:6d:58:38:f5:56:48:74:b6:d8:86: a3:af:ce:fe:c8:89:ab:49:2a:36:e7:bc:b0:57:3d:59:77:49: c9:be:d1:7b:cd:86:1e:f8:7e:0a:ba:ab:14:bb:fd:ba:69:a9: 63:8e:cf:ca:bb:d3:4c:2c:42:a0:f4:7c:10:9d:3d:10:6b:ec: 66:3e:7a:fe:88:36:7b:35:ba:73:12:5a:32:69:46:52:99:77: 7f:62:0a:e0:14:b8:36:69:cd:df:fb:eb:2f:ad:8a:78:84:14: bc:80:8c:c9:d1:bc:c3:b7:15:6d:57:af:c3:e6:46:d1:c2:34: 1a:58:f8:40:17:13:9c:9f:73:8a:4a:7a:ed:af:a6:c8:05:7e: 52:11:8e:f3:db:59:a6:1f:e8:50:0f:39:dc:c3:00:1b:e3:d8: 96:34:85:1c:dd:a0:38:47:d1:ca:23:61:c4:cc:9b:a0:49:d9: 63:bc:f7:76:56:14:05:6e:1c:78:63:f7:08:fe:b1:3e:cc:f8: ba:69:95:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPI+s9SiL44VfXwew1e8gTgWiZHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTA2MTYxNzQ2NThaFw0yNTA2MTkxNzU0NThaMDMxMTAvBgNV BAMTKDhDRTlGNDZDQjA0NDU5RkEwRTRBQkMxMjhFOEM2RUNDNTNFODc3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfKC2FtAP2mLsziAb6P1zK9j68 EWHKoGAMgFgT7n6sqPXUHoSFzfFiYkwBTuPm84APJdEdH0NOZVvHTbA9fXLOXypt iqZqkSH4S/esT2q4L/MKfbmqGzYoSC5COpfRKYVrFkxA3EfFIUuQDe/1M4cfWxB8 DTswVWpc4LRL2YAjHiFUEunu1rHPEbsy23cR+P+tm345EH6S/OpqcG6/5c9w3dMF 5M+p3769x9kO0m/DnfY1DJLUK9F0Pfhq9dZwpGamPzzE2fZQauwyTh8xeqn3MdF0 euL0rL5ZTriYDC8C1QiogrZr5rX/zHWuPUcVkcH+ZzDu3f66bSrnJ+geBvyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOn0bLBEWfoOSrwSjoxuzFPodyUwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA33yJAs2gC7l+dnFx16WDdAY/cq79hKy54b 3plSAam3ZZVfu1O2LddLUgBhrc5S6BAJpyWGAuEZ9dzJC1elbVg49VZIdLbYhqOv zv7IiatJKjbnvLBXPVl3Scm+0XvNhh74fgq6qxS7/bppqWOOz8q700wsQqD0fBCd PRBr7GY+ev6INns1unMSWjJpRlKZd39iCuAUuDZpzd/76y+tiniEFLyAjMnRvMO3 FW1Xr8PmRtHCNBpY+EAXE5yfc4pKeu2vpsgFflIRjvPbWaYf6FAPOdzDABvj2JY0 hRzdoDhH0cojYcTMm6BJ2WO893ZWFAVuHHhj9wj+sT7M+Lpplf8= -----END CERTIFICATE-----Generated at Tue Jun 17 17:26:55 2025 by rpki-client