$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: 5/04i7DMWZGmB8aDCb+s/twwYPx4isq+uPz/xVpQRzg= Subject key identifier: 5B:16:53:BE:93:47:8C:86:F1:B8:69:7C:95:17:39:E1:24:2C:19:30 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 4618AA350A7D56E7A06A5084F1641FEF2613AC49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01E5 Signing time: Sun 02 Nov 2025 21:21:48 +0000 Manifest this update: Sun 02 Nov 2025 21:16:48 +0000 Manifest next update: Thu 06 Nov 2025 00:55:48 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: Dc8QK40MGEt6CxkMintODUGIezz0TkmoXg9r5N2mSKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:18:aa:35:0a:7d:56:e7:a0:6a:50:84:f1:64:1f:ef:26:13:ac:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Nov 2 21:16:48 2025 GMT Not After : Nov 6 00:55:48 2025 GMT Subject: CN=5B1653BE93478C86F1B8697C951739E1242C1930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:cd:0d:b5:83:b1:2e:4b:e0:6a:12:14:8a: 94:51:e9:60:73:31:8d:13:41:60:17:49:3a:30:a4: 67:a9:27:4b:41:fa:21:68:c4:09:19:92:74:38:59: 43:19:fe:2c:7a:4c:bc:d5:4d:04:da:25:00:db:fe: 3e:5b:69:3c:ef:27:e8:16:58:e5:eb:12:b8:16:32: 83:c3:5f:eb:3b:82:0c:56:96:9f:42:25:13:52:c6: 85:29:e4:7e:f6:68:d1:41:da:00:b7:ad:b4:94:35: cd:7e:65:4d:f1:33:da:81:3f:dc:b5:46:40:d8:d2: 93:18:44:88:ba:69:ca:83:fa:72:29:58:ed:04:1c: 78:51:9b:64:70:a7:98:42:9d:a3:fe:c1:0a:f3:6b: 62:44:a2:30:6f:34:b7:88:d3:31:01:4a:95:aa:a7: bd:58:44:fd:bd:f7:d8:0e:e9:85:0a:06:4e:02:c3: 73:10:e0:1a:cc:11:97:38:18:fd:9a:7e:18:25:e7: ed:77:11:d4:6f:07:3d:d3:9b:2a:0c:fd:a7:58:45: d1:5b:f7:44:e5:27:3a:5e:6e:1d:68:7b:5c:c7:65: 80:a9:76:0b:71:4c:c9:6a:c8:24:25:6e:4c:24:cf: 2a:bc:66:85:66:39:d1:aa:5a:ab:7b:8c:d6:48:85: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:16:53:BE:93:47:8C:86:F1:B8:69:7C:95:17:39:E1:24:2C:19:30 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:58:5f:18:42:cd:fb:a2:8e:d2:8e:24:ce:ee:57:cf:d6:6f: a6:1a:03:aa:dc:a3:0e:ab:f8:c6:04:36:e6:62:e9:26:00:1e: de:56:97:ca:9e:b4:1e:06:7a:07:a1:f9:0c:a3:9e:ad:56:c5: 95:12:bd:20:95:ae:80:00:30:81:81:14:11:29:cc:b5:7d:29: b8:0c:a4:e7:b4:e9:4b:c3:99:8c:3a:a2:b0:d0:ce:1b:4b:e7: 04:2c:d6:e4:c3:86:11:01:c5:8d:50:b6:b8:ac:18:ca:00:20: bc:cc:25:d1:44:99:19:b9:ce:4f:c9:55:73:16:c8:21:e0:d9: ad:83:25:18:2f:ad:d7:f5:59:d1:3f:22:f2:e1:ee:ea:53:7b: 1c:d1:5d:fd:06:57:05:12:7b:78:f1:ed:4a:5a:c3:ed:ed:89: a1:49:00:28:33:3a:e9:6f:af:14:2d:b1:ef:98:78:43:44:3a: 8c:a2:c1:f2:62:fd:48:46:d4:3e:b2:dd:64:b4:4e:76:30:a5: d6:b9:94:6e:78:96:1a:c6:f0:f0:51:a0:e1:d2:53:c9:91:05: ce:dc:33:e8:f1:bb:bf:de:4d:c8:29:97:5a:a3:39:22:d3:3c: a6:6e:80:72:34:48:14:04:a7:84:4b:3f:2b:7d:f3:c3:b7:6b: 71:82:03:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhiqNQp9VuegalCE8WQf7yYTrEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTExMDIyMTE2NDhaFw0yNTExMDYwMDU1NDhaMDMxMTAvBgNV BAMTKDVCMTY1M0JFOTM0NzhDODZGMUI4Njk3Qzk1MTczOUUxMjQyQzE5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBc0NtYOxLkvgahIUipRR6WBz MY0TQWAXSTowpGepJ0tB+iFoxAkZknQ4WUMZ/ix6TLzVTQTaJQDb/j5baTzvJ+gW WOXrErgWMoPDX+s7ggxWlp9CJRNSxoUp5H72aNFB2gC3rbSUNc1+ZU3xM9qBP9y1 RkDY0pMYRIi6acqD+nIpWO0EHHhRm2Rwp5hCnaP+wQrza2JEojBvNLeI0zEBSpWq p71YRP2999gO6YUKBk4Cw3MQ4BrMEZc4GP2afhgl5+13EdRvBz3TmyoM/adYRdFb 90TlJzpebh1oe1zHZYCpdgtxTMlqyCQlbkwkzyq8ZoVmOdGqWqt7jNZIhYILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxZTvpNHjIbxuGl8lRc54SQsGTAwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZYXxhCzfuijtKOJM7uV8/Wb6YaA6rcow6r +MYENuZi6SYAHt5Wl8qetB4Gegeh+Qyjnq1WxZUSvSCVroAAMIGBFBEpzLV9KbgM pOe06UvDmYw6orDQzhtL5wQs1uTDhhEBxY1QtrisGMoAILzMJdFEmRm5zk/JVXMW yCHg2a2DJRgvrdf1WdE/IvLh7upTexzRXf0GVwUSe3jx7Upaw+3tiaFJACgzOulv rxQtse+YeENEOoyiwfJi/UhG1D6y3WS0TnYwpda5lG54lhrG8PBRoOHSU8mRBc7c M+jxu7/eTcgpl1qjOSLTPKZugHI0SBQEp4RLPyt988O3a3GCA64= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:43 2025 by rpki-client