$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: HQALao+HbXUz6Fp4QPcUbd0oDR7BKkPtkSJ9Ln4hvdU= Subject key identifier: A3:8C:53:0D:F8:B9:49:69:96:3D:56:92:0E:82:E1:63:7E:F3:28:A4 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 665E0FC04B97FBE7ED1E60B2B7E787C2D6D2F11F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 031F Signing time: Wed 06 Aug 2025 16:11:55 +0000 Manifest this update: Wed 06 Aug 2025 16:06:55 +0000 Manifest next update: Sun 10 Aug 2025 00:27:55 +0000 Files and hashes: 1: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 2: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 3: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: Cexfm136bJZCBiiwFBG5w/1gqOpLd/53Bomk3BMgyco=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5e:0f:c0:4b:97:fb:e7:ed:1e:60:b2:b7:e7:87:c2:d6:d2:f1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Aug 6 16:06:55 2025 GMT Not After : Aug 10 00:27:55 2025 GMT Subject: CN=A38C530DF8B94969963D56920E82E1637EF328A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:bb:09:fa:5b:d6:ce:69:e3:a3:10:e2:42: 7a:12:28:65:42:27:73:14:82:cf:ce:ed:c4:cf:92: c0:c5:46:4b:e7:66:9f:db:93:5b:83:3e:c7:c1:3f: 3f:11:00:1d:4e:d0:d9:bb:58:c5:90:63:1e:5c:53: 3c:7a:01:86:e6:bf:2b:4f:d5:a7:ad:75:c2:af:18: 06:f0:73:92:04:85:97:ff:dd:0a:33:d1:1d:c7:d8: 21:2b:f3:86:4d:61:d7:75:93:e6:b3:07:da:b2:7b: 2f:cc:55:15:a9:be:1d:07:75:b4:65:2d:77:01:df: 65:c6:9a:62:62:e6:a3:22:2b:f0:d6:48:7a:66:73: 1c:a0:83:f5:a7:1d:cf:b2:a7:e3:32:cb:4f:a0:1f: 69:77:03:70:81:cc:bf:64:06:9a:e8:0c:b5:6e:24: 3d:41:0e:34:dc:22:21:cd:04:8f:e0:44:75:2c:a0: de:4d:74:19:dc:d2:5e:af:d2:8c:9c:82:0a:40:cd: e0:da:35:6d:ba:4b:ce:71:27:e2:c2:2e:94:54:e6: a5:ac:de:24:cf:52:f9:e9:f9:42:29:45:85:2a:ec: 8c:99:1a:a0:f1:f1:dc:50:83:a5:a9:12:95:ee:6d: d7:14:4a:cf:65:6b:a4:f7:36:fb:fb:38:36:70:3d: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:53:0D:F8:B9:49:69:96:3D:56:92:0E:82:E1:63:7E:F3:28:A4 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:24:27:17:ca:14:9d:68:2c:cc:81:5f:fe:94:df:48:d6: 4b:c1:f5:33:fb:76:c0:83:1f:71:8d:7b:2c:90:c4:21:94:d1: eb:26:f6:5e:e9:05:ab:54:72:48:0d:bb:27:b4:c5:6c:67:7f: c0:87:31:bb:13:bb:3b:7a:19:b3:0e:ff:79:21:66:16:15:68: 7c:d3:ed:be:87:46:10:09:02:4e:02:cf:44:2e:86:8f:57:e9: 35:dd:0a:1c:fe:27:73:f0:09:bd:8b:29:60:01:03:d8:0e:b3: f5:a9:83:04:94:64:d1:14:cf:5d:d0:66:8f:8b:6a:10:11:52: 10:ec:79:2a:e6:24:c0:51:df:99:a6:10:5f:27:9c:13:cf:da: 8c:d1:83:fc:bb:3a:a0:30:79:27:28:fb:2d:2e:18:d6:2d:aa: e4:5f:a5:fb:46:63:1b:f8:a4:c6:dc:76:4d:3d:8d:97:0d:35: 15:c0:55:cb:3d:03:91:34:74:ab:d6:c9:f1:79:21:5e:c1:c1: 39:e6:72:bc:74:f3:e4:4d:76:9a:f1:f4:38:53:ed:67:7c:b2: c2:ce:14:e1:72:8e:8f:e0:6f:ac:1b:bc:46:bd:14:68:00:32: 2b:c0:2a:40:4e:2e:3c:c2:0b:e0:6a:3a:3a:7e:2c:3f:b9:49: c6:08:e8:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZl4PwEuX++ftHmCyt+eHwtbS8R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTA4MDYxNjA2NTVaFw0yNTA4MTAwMDI3NTVaMDMxMTAvBgNV BAMTKEEzOEM1MzBERjhCOTQ5Njk5NjNENTY5MjBFODJFMTYzN0VGMzI4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSrsJ+lvWzmnjoxDiQnoSKGVC J3MUgs/O7cTPksDFRkvnZp/bk1uDPsfBPz8RAB1O0Nm7WMWQYx5cUzx6AYbmvytP 1aetdcKvGAbwc5IEhZf/3Qoz0R3H2CEr84ZNYdd1k+azB9qyey/MVRWpvh0HdbRl LXcB32XGmmJi5qMiK/DWSHpmcxygg/WnHc+yp+Myy0+gH2l3A3CBzL9kBproDLVu JD1BDjTcIiHNBI/gRHUsoN5NdBnc0l6v0oycggpAzeDaNW26S85xJ+LCLpRU5qWs 3iTPUvnp+UIpRYUq7IyZGqDx8dxQg6WpEpXubdcUSs9la6T3Nvv7ODZwPRIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo4xTDfi5SWmWPVaSDoLhY37zKKQwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABywJCcXyhSdaCzMgV/+lN9I1kvB9TP7dsCD H3GNeyyQxCGU0esm9l7pBatUckgNuye0xWxnf8CHMbsTuzt6GbMO/3khZhYVaHzT 7b6HRhAJAk4Cz0Quho9X6TXdChz+J3PwCb2LKWABA9gOs/WpgwSUZNEUz13QZo+L ahARUhDseSrmJMBR35mmEF8nnBPP2ozRg/y7OqAweSco+y0uGNYtquRfpftGYxv4 pMbcdk09jZcNNRXAVcs9A5E0dKvWyfF5IV7BwTnmcrx08+RNdprx9DhT7Wd8ssLO FOFyjo/gb6wbvEa9FGgAMivAKkBOLjzCC+BqOjp+LD+5ScYI6G4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:08 2025 by rpki-client