$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: FGDuVttXrx98I55swbmDLAv+DmHVZfXFIMaK+4f2kTg= Subject key identifier: AF:3F:34:61:D5:A4:F3:4B:4E:04:B7:1C:A7:20:97:C7:CA:B2:D8:3F Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 27A878D48772CA381460CB3ACA8F23628A9F1108 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 04FB Signing time: Tue 05 Aug 2025 08:21:45 +0000 Manifest this update: Tue 05 Aug 2025 08:16:45 +0000 Manifest next update: Fri 08 Aug 2025 18:55:45 +0000 Files and hashes: 1: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: jlRv7lz+5iah8JopqWtWHrCIUbkNX6AvzO63WE9t01E=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 3: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) 4: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 5: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a8:78:d4:87:72:ca:38:14:60:cb:3a:ca:8f:23:62:8a:9f:11:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Aug 5 08:16:45 2025 GMT Not After : Aug 8 18:55:45 2025 GMT Subject: CN=AF3F3461D5A4F34B4E04B71CA72097C7CAB2D83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:7e:e7:47:9c:1d:66:02:61:6e:38:00:0b: 12:54:53:13:8f:2b:f3:b2:21:a8:3f:b1:88:24:98: 23:0d:84:32:36:d3:42:5f:9e:39:a0:4c:55:4c:89: 16:18:2c:2f:b7:9a:4f:a7:74:ca:d2:5f:e6:14:e6: 8d:3a:e3:b1:3c:e7:51:c7:c4:1e:0a:84:55:5f:1a: 78:10:50:f3:53:03:c6:83:92:88:10:8a:5a:4b:b1: 7a:3d:cc:ed:2b:56:c8:29:26:e0:af:4a:a9:c6:cd: 9c:1e:c1:08:3e:0b:7e:80:2e:7f:19:af:ac:37:31: 2c:a4:42:7a:21:a6:20:07:dd:bb:1f:5d:37:59:1c: 0e:38:d1:49:01:91:ec:a1:2a:2d:4d:28:7d:7a:bc: 51:55:a7:fb:d2:24:31:2b:0f:c6:3d:f4:99:76:55: 73:33:01:a9:05:5c:00:42:bc:cd:3f:70:38:31:40: ed:62:b1:0c:0d:17:e3:5f:ac:8b:6c:af:53:9e:5e: 60:38:ad:fc:32:f2:e2:f7:80:cc:ce:9a:2a:04:70: a4:1f:18:61:0e:84:2a:6a:0f:7a:11:c9:8e:07:a7: 03:04:f8:1e:02:6b:f8:09:ef:5b:82:8a:53:0b:77: b5:c6:97:41:1a:c9:b8:ef:a1:6e:36:1e:72:7c:50: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3F:34:61:D5:A4:F3:4B:4E:04:B7:1C:A7:20:97:C7:CA:B2:D8:3F X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f3:6d:36:cd:6c:b0:76:53:da:b8:f0:e8:28:c9:57:10:99: 1a:03:68:69:e5:37:77:6a:91:45:fc:16:d1:09:f7:e3:ed:c7: 41:3f:7f:7f:a8:4f:a8:bb:48:c1:5b:f9:92:c0:1e:9d:9b:18: 96:c7:f8:37:03:0a:7f:55:bb:54:3f:29:a3:28:36:52:a9:e5: 9f:b3:d2:57:e9:d4:80:80:91:1d:67:03:68:2d:a1:23:a4:48: af:59:43:a8:d8:b9:42:50:2b:46:46:5a:e3:cd:5c:06:8d:24: 43:df:38:26:37:44:1f:de:5e:01:5e:e2:75:9e:f7:07:30:f1: 2a:22:3c:34:71:8e:4a:95:9f:6d:a4:f5:e8:04:8f:92:10:a9: 08:26:37:89:89:e0:81:c9:73:cf:32:7b:a0:c7:59:3e:d6:58: 90:3e:14:85:b3:a0:9e:ea:b3:53:2a:46:71:18:b7:b3:ab:fa: 30:6b:3f:29:64:2e:27:2c:d7:28:68:1b:0e:ed:30:15:89:f0: 8f:29:bf:6c:80:62:b2:63:50:da:bb:98:c4:61:f8:bd:70:06: 12:65:93:d8:31:9b:4d:12:b4:f9:6b:4d:25:d3:60:aa:ac:7b: 63:e7:11:94:9c:eb:d8:af:52:2d:f9:46:fa:c3:03:66:d7:9e: fc:de:38:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6h41IdyyjgUYMs6yo8jYoqfEQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA4MDUwODE2NDVaFw0yNTA4MDgxODU1NDVaMDMxMTAvBgNV BAMTKEFGM0YzNDYxRDVBNEYzNEI0RTA0QjcxQ0E3MjA5N0M3Q0FCMkQ4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+k37nR5wdZgJhbjgACxJUUxOP K/OyIag/sYgkmCMNhDI200JfnjmgTFVMiRYYLC+3mk+ndMrSX+YU5o0647E851HH xB4KhFVfGngQUPNTA8aDkogQilpLsXo9zO0rVsgpJuCvSqnGzZwewQg+C36ALn8Z r6w3MSykQnohpiAH3bsfXTdZHA440UkBkeyhKi1NKH16vFFVp/vSJDErD8Y99Jl2 VXMzAakFXABCvM0/cDgxQO1isQwNF+NfrItsr1OeXmA4rfwy8uL3gMzOmioEcKQf GGEOhCpqD3oRyY4HpwME+B4Ca/gJ71uCilMLd7XGl0EaybjvoW42HnJ8UGb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrz80YdWk80tOBLccpyCXx8qy2D8wHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXzbTbNbLB2U9q48OgoyVcQmRoDaGnlN3dq kUX8FtEJ9+Ptx0E/f3+oT6i7SMFb+ZLAHp2bGJbH+DcDCn9Vu1Q/KaMoNlKp5Z+z 0lfp1ICAkR1nA2gtoSOkSK9ZQ6jYuUJQK0ZGWuPNXAaNJEPfOCY3RB/eXgFe4nWe 9wcw8SoiPDRxjkqVn22k9egEj5IQqQgmN4mJ4IHJc88ye6DHWT7WWJA+FIWzoJ7q s1MqRnEYt7Or+jBrPylkLics1yhoGw7tMBWJ8I8pv2yAYrJjUNq7mMRh+L1wBhJl k9gxm00StPlrTSXTYKqse2PnEZSc69ivUi35RvrDA2bXnvzeOJQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:41:36 2025 by rpki-client