$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json) Hash identifier: 4yFnae6s6auTrrocfbS9SBA/UMSb5u+YanCRX3XW0lA= Subject key identifier: C7:FC:8B:37:0C:B8:31:B2:BF:52:A4:D3:E6:5C:A4:B9:3C:8C:CC:B8 Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1 Certificate serial: 3D7A0BF869013BE581496E355138795660F94EBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft Manifest number: E5 Signing time: Thu 21 Aug 2025 15:22:18 +0000 Manifest this update: Thu 21 Aug 2025 15:17:18 +0000 Manifest next update: Sun 24 Aug 2025 15:58:18 +0000 Files and hashes: 1: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: MGzw+AQ6GP4LeqMp5MOqZpmSqiyPWa3C59CDzsi1fdk=) 2: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: LdkOVHPRJZ2FR3qmT6KJhjMmjG6naW4xlLBSVHp1k1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7a:0b:f8:69:01:3b:e5:81:49:6e:35:51:38:79:56:60:f9:4e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Validity Not Before: Aug 21 15:17:18 2025 GMT Not After : Aug 24 15:58:18 2025 GMT Subject: CN=C7FC8B370CB831B2BF52A4D3E65CA4B93C8CCCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:14:36:24:4c:27:7f:31:0e:d6:68:28:d8: e4:44:4d:85:87:8c:00:75:da:ee:67:60:f0:e7:19: fd:48:46:b7:e7:f8:68:6d:82:e7:3d:ae:ba:4a:54: 59:d6:2b:fa:0c:61:21:66:e6:b8:d0:1a:40:68:58: 0c:3c:3a:30:c6:e3:58:85:1c:b9:0a:c0:57:cf:08: 3a:2d:20:16:f0:17:e9:0a:1e:e6:ec:7d:e8:f1:d8: 49:6e:2d:fd:61:f0:8a:a1:69:09:b9:74:77:fa:46: b2:da:c0:8c:17:96:0e:bf:cc:ad:3b:13:37:a3:52: ce:64:c4:e9:54:30:f5:5c:c0:14:b7:d2:57:7e:d1: 75:7b:43:2b:66:78:fa:86:f3:5b:87:c2:cc:03:0e: e6:ed:82:e6:5a:ef:cd:74:97:bc:a4:c1:b4:6b:bf: 73:fa:61:9f:2a:9d:69:e6:12:a3:e5:8b:ac:c2:68: 2b:3f:0f:62:2b:c8:22:6c:76:e4:67:a4:c8:6e:8b: e9:c9:da:3a:41:23:54:3d:4e:27:eb:49:a7:56:68: 67:09:5d:a3:f9:44:95:0f:6b:0c:7d:b1:49:8b:f1: 15:1a:64:55:9c:a6:36:a0:ff:25:55:b8:e5:af:8f: e6:3b:b6:db:73:39:f7:f0:4a:57:b6:fb:d0:74:ae: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FC:8B:37:0C:B8:31:B2:BF:52:A4:D3:E6:5C:A4:B9:3C:8C:CC:B8 X509v3 Authority Key Identifier: keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:18:6b:14:49:da:77:54:76:36:41:3a:58:d4:70:cc:90:b3: 6e:9e:01:dd:ad:de:e2:c4:10:45:85:ed:56:df:dd:4a:c0:4a: 0f:3a:01:e4:e4:85:a6:2f:4c:d9:bf:05:aa:ef:49:f9:66:9a: 9e:a8:e3:f8:79:22:c0:a7:24:f5:7e:40:54:49:e3:4b:04:7e: a6:d4:d7:2b:b4:93:ba:30:43:ea:30:57:82:61:fb:fc:10:59: cb:57:a0:b5:12:7c:a7:cf:85:cf:4f:e6:c5:90:1b:61:8c:f0: c4:b2:9d:ce:d1:e9:4c:70:f8:92:3f:24:f5:c8:3c:10:f9:de: 89:9f:80:79:3a:91:95:45:d5:a2:5a:5b:23:50:79:cd:23:96: b5:ef:be:ca:04:a5:8a:3e:26:40:c1:64:c7:c0:93:e1:6b:92: e6:fe:a1:0b:e0:b4:55:fc:88:5a:bd:fb:47:9f:60:6e:58:ab: 45:77:61:1f:77:ec:31:5b:ce:3f:b7:22:f8:14:bb:06:e9:f0: c1:ce:90:c4:b3:99:e2:43:31:14:70:11:77:22:72:4b:25:78: dc:c5:d8:7a:29:5d:ef:52:6b:27:2a:c8:1a:7f:16:63:1c:28: 0c:49:e3:78:91:0d:f0:29:63:6f:e8:1a:c0:9b:ac:e2:22:de: e8:c6:4d:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXoL+GkBO+WBSW41UTh5VmD5Tr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND NDMwN0ZGMTAeFw0yNTA4MjExNTE3MThaFw0yNTA4MjQxNTU4MThaMDMxMTAvBgNV BAMTKEM3RkM4QjM3MENCODMxQjJCRjUyQTREM0U2NUNBNEI5M0M4Q0NDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/xQ2JEwnfzEO1mgo2ORETYWH jAB12u5nYPDnGf1IRrfn+Ghtguc9rrpKVFnWK/oMYSFm5rjQGkBoWAw8OjDG41iF HLkKwFfPCDotIBbwF+kKHubsfejx2EluLf1h8IqhaQm5dHf6RrLawIwXlg6/zK07 EzejUs5kxOlUMPVcwBS30ld+0XV7QytmePqG81uHwswDDubtguZa7810l7ykwbRr v3P6YZ8qnWnmEqPli6zCaCs/D2IryCJsduRnpMhui+nJ2jpBI1Q9TifrSadWaGcJ XaP5RJUPawx9sUmL8RUaZFWcpjag/yVVuOWvj+Y7tttzOffwSle2+9B0rngnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/yLNwy4MbK/UqTT5lykuTyMzLgwHwYDVR0j BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw N0ZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1 NUNDNDMwN0ZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEYaxRJ2ndUdjZBOljUcMyQs26eAd2t3uLE EEWF7Vbf3UrASg86AeTkhaYvTNm/BarvSflmmp6o4/h5IsCnJPV+QFRJ40sEfqbU 1yu0k7owQ+owV4Jh+/wQWctXoLUSfKfPhc9P5sWQG2GM8MSync7R6Uxw+JI/JPXI PBD53omfgHk6kZVF1aJaWyNQec0jlrXvvsoEpYo+JkDBZMfAk+Frkub+oQvgtFX8 iFq9+0efYG5Yq0V3YR937DFbzj+3IvgUuwbp8MHOkMSzmeJDMRRwEXcicksleNzF 2HopXe9SaycqyBp/FmMcKAxJ43iRDfApY2/oGsCbrOIi3ujGTYI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:23 2025 by rpki-client