$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json) Hash identifier: 98zCYOpJUWVGb/ZWRUu86TxbkBxXHxxBsTDipVweBqM= Subject key identifier: 28:FC:43:CC:CD:C1:3D:36:5E:42:78:44:69:C7:5A:99:94:AE:70:FB Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1 Certificate serial: 709FEF0BD1AA60C68EDDC1E977B3F25EF644BD33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft Manifest number: 0100 Signing time: Mon 20 Oct 2025 08:32:19 +0000 Manifest this update: Mon 20 Oct 2025 08:27:19 +0000 Manifest next update: Thu 23 Oct 2025 20:13:19 +0000 Files and hashes: 1: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: 7DE0cxvhXJAk3bFcgkV/mzIdoQJc0surlmBW9R+ZOyA=) 2: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: LdkOVHPRJZ2FR3qmT6KJhjMmjG6naW4xlLBSVHp1k1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9f:ef:0b:d1:aa:60:c6:8e:dd:c1:e9:77:b3:f2:5e:f6:44:bd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Validity Not Before: Oct 20 08:27:19 2025 GMT Not After : Oct 23 20:13:19 2025 GMT Subject: CN=28FC43CCCDC13D365E42784469C75A9994AE70FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:1e:a9:9d:9f:50:e9:f1:69:0f:e7:1b:1e: 60:2a:7b:b5:19:cd:08:9d:8f:6c:05:05:10:80:7e: 64:d6:4d:69:c9:df:1a:56:a6:bf:02:0d:d3:86:39: d5:db:24:c3:ff:a2:4d:78:ae:73:c1:e9:9e:50:c4: 9a:1f:c9:0f:bd:7a:6d:39:4e:65:f0:5a:27:b0:35: 41:6c:94:b9:17:2e:49:3f:a8:a5:4b:81:9e:2c:94: e9:98:32:c7:7d:72:f7:7b:07:3b:7f:77:01:69:24: 79:cb:9a:31:6e:98:5a:c4:63:df:e5:61:6d:7b:69: be:d5:8a:c4:12:35:48:cd:71:c8:c7:0e:7d:8f:0a: 0c:50:ae:fa:49:17:b8:6c:ed:9f:d3:ee:61:88:ba: bd:e9:d7:5e:88:a2:70:10:51:fb:67:33:b8:90:a3: 8b:37:1b:ef:5b:8b:71:da:e1:74:c0:49:fc:e7:7c: a0:6e:54:62:79:55:fc:d4:7a:2f:6a:35:80:6c:ae: 0e:ea:b8:e4:a4:8b:e7:20:6c:80:74:6b:39:57:7f: 43:4f:7c:80:8b:55:7c:bd:7f:59:32:8d:07:64:5a: ce:7b:49:a2:dd:f3:9c:71:a2:cf:75:92:7d:93:1e: d8:ba:8d:da:a5:98:65:f7:b4:4a:cb:fa:c6:ff:36: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:43:CC:CD:C1:3D:36:5E:42:78:44:69:C7:5A:99:94:AE:70:FB X509v3 Authority Key Identifier: keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9a:2f:23:78:03:c0:10:36:cf:cc:37:3d:56:cd:31:36:32: cb:a7:bc:a5:4c:ef:ee:8a:02:cb:23:f2:e6:5f:71:c2:2c:63: a4:ff:e6:de:d7:2b:24:61:f2:a1:3f:69:94:51:c5:62:a9:d7: 5d:e5:da:1d:d9:fe:b9:de:dd:aa:61:4d:66:0b:24:7c:26:c5: 32:74:ce:83:ab:72:87:35:8b:92:89:0a:81:b3:34:0d:59:ce: 0e:27:12:bd:00:20:c7:89:f5:f8:a4:f4:ec:c0:4e:1c:c7:29: 69:13:07:ff:06:79:25:7d:03:8c:17:44:61:d2:07:97:16:9e: 8c:5b:6f:43:f1:77:c8:98:56:58:4b:a3:82:01:dc:ca:fd:18: 8b:66:56:b5:66:43:8e:de:04:c8:3e:03:82:52:07:45:98:90: 4a:9e:d7:6d:ed:ea:c9:76:ce:83:3f:49:6f:2c:b1:46:a3:2b: 6d:03:02:5e:ad:cb:02:b1:c1:bc:32:c3:33:94:33:0f:a7:05: 8e:a0:9b:7e:68:92:35:e9:70:bd:02:c4:96:3b:35:77:41:8d: fb:64:8c:40:08:33:7f:4b:16:63:38:d9:f8:41:56:f8:db:6f: 2c:6a:25:aa:84:31:e4:48:90:39:5c:ce:36:0a:41:56:df:64: 10:f1:42:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJ/vC9GqYMaO3cHpd7PyXvZEvTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND NDMwN0ZGMTAeFw0yNTEwMjAwODI3MTlaFw0yNTEwMjMyMDEzMTlaMDMxMTAvBgNV BAMTKDI4RkM0M0NDQ0RDMTNEMzY1RTQyNzg0NDY5Qzc1QTk5OTRBRTcwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt4h6pnZ9Q6fFpD+cbHmAqe7UZ zQidj2wFBRCAfmTWTWnJ3xpWpr8CDdOGOdXbJMP/ok14rnPB6Z5QxJofyQ+9em05 TmXwWiewNUFslLkXLkk/qKVLgZ4slOmYMsd9cvd7Bzt/dwFpJHnLmjFumFrEY9/l YW17ab7VisQSNUjNccjHDn2PCgxQrvpJF7hs7Z/T7mGIur3p116IonAQUftnM7iQ o4s3G+9bi3Ha4XTASfznfKBuVGJ5VfzUei9qNYBsrg7quOSki+cgbIB0azlXf0NP fICLVXy9f1kyjQdkWs57SaLd85xxos91kn2THti6jdqlmGX3tErL+sb/NmD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPxDzM3BPTZeQnhEacdamZSucPswHwYDVR0j BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw N0ZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1 NUNDNDMwN0ZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6aLyN4A8AQNs/MNz1WzTE2MsunvKVM7+6K Assj8uZfccIsY6T/5t7XKyRh8qE/aZRRxWKp113l2h3Z/rne3aphTWYLJHwmxTJ0 zoOrcoc1i5KJCoGzNA1Zzg4nEr0AIMeJ9fik9OzAThzHKWkTB/8GeSV9A4wXRGHS B5cWnoxbb0Pxd8iYVlhLo4IB3Mr9GItmVrVmQ47eBMg+A4JSB0WYkEqe123t6sl2 zoM/SW8ssUajK20DAl6tywKxwbwywzOUMw+nBY6gm35okjXpcL0CxJY7NXdBjftk jEAIM39LFmM42fhBVvjbbyxqJaqEMeRIkDlczjYKQVbfZBDxQuU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:37 2025 by rpki-client