$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: RKhZyuOU9QkqrB1UtOwfoxDvHLxReVkxyXA3lIn0DZg= Subject key identifier: 52:4A:37:6C:86:CF:33:12:6C:3F:7F:82:D3:55:4F:09:67:C5:9F:DF Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 4EE6764B46B5BAA859F5BD1C8A896FEE52EE8C03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01A6 Signing time: Fri 13 Jun 2025 23:51:45 +0000 Manifest this update: Fri 13 Jun 2025 23:46:45 +0000 Manifest next update: Tue 17 Jun 2025 07:54:45 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 8AYEczZOBSh5G+avL3tUXItXbxuIYbCxw94Jm2sxQmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 07:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:76:4b:46:b5:ba:a8:59:f5:bd:1c:8a:89:6f:ee:52:ee:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Jun 13 23:46:45 2025 GMT Not After : Jun 17 07:54:45 2025 GMT Subject: CN=524A376C86CF33126C3F7F82D3554F0967C59FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:05:ca:be:7d:c6:90:d1:fe:22:01:32:44: f4:7e:1a:43:39:db:c0:22:26:aa:6e:6f:9a:4f:c4: 94:10:ac:8d:7e:22:02:4c:5c:72:d1:fc:6d:5f:b7: 49:70:c0:cb:db:bd:43:95:4a:e5:d1:7e:05:bf:60: 56:28:1e:63:ec:54:7c:05:2c:ce:39:a7:55:54:b7: 60:e5:87:3f:b5:95:bd:e5:65:b6:9b:01:ed:37:ff: da:b5:c5:84:a2:e5:6e:86:b0:4f:d6:17:39:ac:8c: e8:05:d9:67:96:13:2d:aa:2b:e8:5f:09:cd:d0:1b: c0:4f:a2:e0:69:d5:31:f8:a6:b1:98:f8:45:b0:bc: fb:b7:5b:3c:00:ca:85:e7:a8:f5:78:ca:98:e4:63: d9:0c:5d:40:4b:36:81:e3:0c:96:34:3a:09:3e:82: dc:a5:8d:7f:08:d3:49:54:00:db:1f:53:e6:03:54: df:d0:9f:ba:64:b0:d3:79:e1:e6:d8:34:3e:3b:59: 98:2c:e8:cc:b2:98:4b:da:55:75:98:58:54:b2:8a: 61:e4:48:89:30:a0:98:ae:7f:69:ba:a1:21:5a:97: 13:fc:ad:1e:ad:4f:f5:45:cb:0c:cf:3c:12:ed:72: 42:c9:f8:a7:20:82:32:5e:fa:d1:70:c0:1e:ba:c0: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:37:6C:86:CF:33:12:6C:3F:7F:82:D3:55:4F:09:67:C5:9F:DF X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:44:36:84:a7:43:87:4f:b1:fb:31:31:53:eb:dc:3b:e0:9f: 31:6d:f1:c7:2c:4c:e3:65:67:d9:36:4d:56:b9:17:f2:ec:aa: 6c:a2:43:b9:04:21:4a:b2:f0:cb:38:68:d4:9e:49:35:c5:fa: 5b:64:f5:d4:d9:64:e7:64:04:b0:f3:f0:d5:88:23:e3:8f:31: c0:31:e4:18:20:42:c8:4a:15:93:a5:85:08:d5:49:f8:8c:bd: e3:0b:38:5f:58:68:56:19:c6:1b:2a:5c:14:f1:88:e1:fa:f0: ce:e5:87:1d:85:6f:ca:d3:90:16:66:13:b6:14:a3:15:fc:2a: 78:b9:19:55:14:d5:49:ba:d3:d3:df:40:38:8b:36:52:5b:59: d9:9b:cb:0b:f4:4c:4d:51:41:10:a2:ee:b1:b0:0a:2f:95:30: 7e:45:4c:48:e6:54:a2:f1:f8:cc:fc:4f:cf:0d:b1:47:f7:13: 1f:63:39:21:0a:84:55:9f:4b:4f:f5:8f:d9:6b:64:9c:dc:86: 7f:00:ba:9c:fb:e8:31:1d:c2:98:db:dc:95:ea:28:76:58:5d: 02:fc:18:ed:55:09:ba:66:c2:5e:92:46:e6:84:6a:0d:7b:76: d8:4c:63:49:6d:56:4e:cd:0d:72:6f:f8:95:bb:7f:7b:d0:f3: 2e:a7:4c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuZ2S0a1uqhZ9b0ciolv7lLujAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA2MTMyMzQ2NDVaFw0yNTA2MTcwNzU0NDVaMDMxMTAvBgNV BAMTKDUyNEEzNzZDODZDRjMzMTI2QzNGN0Y4MkQzNTU0RjA5NjdDNTlGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAgXKvn3GkNH+IgEyRPR+GkM5 28AiJqpub5pPxJQQrI1+IgJMXHLR/G1ft0lwwMvbvUOVSuXRfgW/YFYoHmPsVHwF LM45p1VUt2Dlhz+1lb3lZbabAe03/9q1xYSi5W6GsE/WFzmsjOgF2WeWEy2qK+hf Cc3QG8BPouBp1TH4prGY+EWwvPu3WzwAyoXnqPV4ypjkY9kMXUBLNoHjDJY0Ogk+ gtyljX8I00lUANsfU+YDVN/Qn7pksNN54ebYND47WZgs6MyymEvaVXWYWFSyimHk SIkwoJiuf2m6oSFalxP8rR6tT/VFywzPPBLtckLJ+KcggjJe+tFwwB66wFNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUko3bIbPMxJsP3+C01VPCWfFn98wHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBENoSnQ4dPsfsxMVPr3DvgnzFt8ccsTONl Z9k2TVa5F/LsqmyiQ7kEIUqy8Ms4aNSeSTXF+ltk9dTZZOdkBLDz8NWII+OPMcAx 5BggQshKFZOlhQjVSfiMveMLOF9YaFYZxhsqXBTxiOH68M7lhx2Fb8rTkBZmE7YU oxX8Kni5GVUU1Um609PfQDiLNlJbWdmbywv0TE1RQRCi7rGwCi+VMH5FTEjmVKLx +Mz8T88NsUf3Ex9jOSEKhFWfS0/1j9lrZJzchn8Aupz76DEdwpjb3JXqKHZYXQL8 GO1VCbpmwl6SRuaEag17dthMY0ltVk7NDXJv+JW7f3vQ8y6nTIM= -----END CERTIFICATE-----Generated at Mon Jun 16 04:38:02 2025 by rpki-client