$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: OX0ZTNROWKoKL2zVDup27TWJr50naTROd8TnO07Qzkk= Subject key identifier: E3:3D:2E:5C:81:37:A8:12:43:37:27:AF:ED:AD:0A:69:F7:33:FD:2C Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 29F50FBCFA66C9EDAAA2F76338773EE292F17C9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 17:20:39 +0000 Manifest this update: Wed 06 Aug 2025 17:15:39 +0000 Manifest next update: Sat 09 Aug 2025 17:53:39 +0000 Files and hashes: 1: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: ghYDscgkEkmdPz9NuYZxp4pY2E2dRL+ayWbivu6Gtd8=) 2: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: Gy7kJNRelNoXjJ3U6+O2u/hoJoZmcMUPJu85cuAUntA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f5:0f:bc:fa:66:c9:ed:aa:a2:f7:63:38:77:3e:e2:92:f1:7c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: Aug 6 17:15:39 2025 GMT Not After : Aug 9 17:53:39 2025 GMT Subject: CN=E33D2E5C8137A812433727AFEDAD0A69F733FD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:7e:8e:8c:d0:ef:93:78:70:c2:c7:e0:37: 19:ac:ff:70:29:e1:ed:7a:c9:8e:c4:90:6e:26:e5: ee:0f:7a:f9:b2:ef:48:d3:68:9d:6e:b0:31:64:d4: c5:18:fa:ca:07:61:f7:86:7b:10:d6:57:38:91:a4: 4d:a5:4d:22:89:75:10:ac:18:e3:ba:25:42:e5:34: 7f:bd:55:f9:ed:75:c6:4f:2e:ed:7d:87:88:b0:bb: 01:27:f8:99:8e:bd:75:ba:89:5d:4e:d9:19:21:77: 4b:6b:6b:92:59:60:ea:01:43:09:35:bf:32:fa:e6: ca:60:9a:0e:fb:bd:65:cb:6a:62:39:79:7a:da:14: 51:99:84:e8:d7:28:a0:ca:9a:03:39:30:5d:02:24: 6f:34:57:2b:e3:e8:e8:cb:29:84:7d:61:23:06:68: 54:f0:53:7e:c6:00:de:45:c5:bb:00:ad:41:56:02: 46:04:b0:ec:94:7a:e2:77:cf:fa:a0:6f:d3:03:72: ac:b9:d7:65:ad:b3:82:74:79:8b:13:99:a2:a5:5c: c1:d6:95:41:48:31:3e:a3:bf:15:a1:e1:f4:b5:2f: f2:c5:bd:14:78:87:46:59:9c:3b:38:98:9d:b5:95: a1:24:81:f0:59:81:dd:36:01:fb:57:18:39:21:34: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:2E:5C:81:37:A8:12:43:37:27:AF:ED:AD:0A:69:F7:33:FD:2C X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a9:d8:d1:07:09:e9:b3:13:21:e1:b3:e7:ab:e8:14:1c:b7: 86:be:73:4a:46:df:3b:c2:1e:eb:53:d0:10:1b:f2:f8:ec:7b: 8c:d2:c9:58:40:72:39:a9:f4:12:e2:f7:d2:88:5a:12:3f:0d: 16:5f:d1:d1:55:d6:dc:22:1a:61:0b:6c:0a:33:72:79:36:83: d8:25:1a:31:ab:82:f7:9a:da:c4:c9:a5:94:35:2e:53:eb:61: 9c:a4:c5:80:b3:1f:c5:ac:88:05:34:9f:ce:e3:dd:86:6f:84: c0:87:95:71:51:50:23:fd:0b:bc:b3:84:f3:d3:4a:d9:13:d9: 78:80:d1:83:06:02:21:6f:65:63:bf:01:c1:b9:5f:e7:a2:41: 53:14:9f:9e:e2:a5:34:ba:db:23:ba:d4:2a:f7:2a:43:92:b1: 0b:41:02:63:c8:60:6c:9b:73:e4:f9:51:df:05:df:70:67:b4: 93:f1:60:d2:af:f1:76:81:79:83:dc:f2:3c:e6:0f:30:02:6f: 4c:9b:8a:47:ae:03:66:4e:d4:f2:72:85:b8:c5:1f:6f:18:67: 58:06:d7:6d:e7:f2:d7:16:c2:93:ce:aa:6c:0b:b3:b0:5b:8d: 28:98:1b:c3:2c:07:2d:22:aa:af:84:dc:c1:cd:4c:53:b8:2a: 1b:47:e2:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfUPvPpmye2qovdjOHc+4pLxfJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNTA4MDYxNzE1MzlaFw0yNTA4MDkxNzUzMzlaMDMxMTAvBgNV BAMTKEUzM0QyRTVDODEzN0E4MTI0MzM3MjdBRkVEQUQwQTY5RjczM0ZEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8X6OjNDvk3hwwsfgNxms/3Ap 4e16yY7EkG4m5e4Pevmy70jTaJ1usDFk1MUY+soHYfeGexDWVziRpE2lTSKJdRCs GOO6JULlNH+9VfntdcZPLu19h4iwuwEn+JmOvXW6iV1O2Rkhd0tra5JZYOoBQwk1 vzL65spgmg77vWXLamI5eXraFFGZhOjXKKDKmgM5MF0CJG80Vyvj6OjLKYR9YSMG aFTwU37GAN5FxbsArUFWAkYEsOyUeuJ3z/qgb9MDcqy512Wts4J0eYsTmaKlXMHW lUFIMT6jvxWh4fS1L/LFvRR4h0ZZnDs4mJ21laEkgfBZgd02AftXGDkhNJShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4z0uXIE3qBJDNyev7a0Kafcz/SwwHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOp2NEHCemzEyHhs+er6BQct4a+c0pG3zvC HutT0BAb8vjse4zSyVhAcjmp9BLi99KIWhI/DRZf0dFV1twiGmELbAozcnk2g9gl GjGrgvea2sTJpZQ1LlPrYZykxYCzH8WsiAU0n87j3YZvhMCHlXFRUCP9C7yzhPPT StkT2XiA0YMGAiFvZWO/AcG5X+eiQVMUn57ipTS62yO61Cr3KkOSsQtBAmPIYGyb c+T5Ud8F33BntJPxYNKv8XaBeYPc8jzmDzACb0ybikeuA2ZO1PJyhbjFH28YZ1gG 123n8tcWwpPOqmwLs7BbjSiYG8MsBy0iqq+E3MHNTFO4KhtH4qg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:30:00 2025 by rpki-client