$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: RP8uFnFs4fCtmCuH0vUS7hntkM5fRtsOHRIt5fV7ZoI= Subject key identifier: F0:21:72:D5:AB:65:CE:74:AC:9D:01:50:73:F8:96:42:65:DA:33:48 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 7DB9A5A817B71B18B5E3BD2A48354970E319599E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 0212 Signing time: Thu 21 Aug 2025 19:01:08 +0000 Manifest this update: Thu 21 Aug 2025 18:56:08 +0000 Manifest next update: Mon 25 Aug 2025 03:12:08 +0000 Files and hashes: 1: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 2: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 3: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 4: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 5: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: lcc+LrrDsSZ5HhhhnpGAwXjMnROPViqpk9693hdPtJw=) 6: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b9:a5:a8:17:b7:1b:18:b5:e3:bd:2a:48:35:49:70:e3:19:59:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Aug 21 18:56:08 2025 GMT Not After : Aug 25 03:12:08 2025 GMT Subject: CN=F02172D5AB65CE74AC9D015073F8964265DA3348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:31:12:26:eb:0d:02:0a:ed:04:22:be:8e: 94:60:52:92:42:d8:b4:2e:51:64:35:c8:8e:af:56: 56:63:d9:5e:f6:39:db:80:e4:ad:49:7d:6b:c7:13: db:b0:e6:6d:51:90:77:45:dc:35:8e:b6:76:54:70: f0:bd:5a:eb:e2:3b:47:f7:da:80:25:b1:1e:e7:b7: a4:c4:2f:ce:ac:3c:83:4e:5e:74:01:a9:0e:7f:b5: fc:9b:e9:d2:8b:21:9f:e4:ce:79:27:57:48:e8:a3: 04:3f:3c:cc:d4:c1:ad:9a:eb:2f:e4:31:15:fe:1e: 76:6d:e7:e5:aa:1b:44:28:a6:2d:df:b2:49:f0:68: 4e:1d:3a:53:c3:4f:99:a4:bc:d8:10:c9:e6:fc:0f: 7f:32:a2:24:3e:3c:44:be:28:3d:d5:92:f2:c8:42: 29:b0:39:a6:87:49:8e:f8:c8:01:f9:b2:f0:55:4f: bd:2f:e3:43:0d:29:a9:7f:0b:b9:9d:d7:4d:1e:97: 22:fd:c4:e9:2c:1f:f8:a5:d9:e2:5a:21:32:d9:dd: b4:00:be:7d:1a:26:a3:ee:a0:e0:08:ec:34:5a:82: 3f:52:97:e5:47:9e:5e:82:39:86:3b:62:a0:dc:e9: 26:20:d1:54:09:8d:ab:6e:5d:d9:69:6d:1a:6a:ef: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:21:72:D5:AB:65:CE:74:AC:9D:01:50:73:F8:96:42:65:DA:33:48 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:65:9d:83:4d:93:a7:93:a0:7c:ad:b2:c0:f5:10:37:89:a5: 0a:ed:f7:f8:c3:b6:65:08:96:16:e5:c1:60:2c:e3:83:9b:50: 1c:f5:2a:dd:66:69:8d:8e:f4:28:83:6a:fd:a5:a7:11:91:16: 07:a0:39:95:3b:cf:94:d4:ae:17:f4:b2:8b:16:5b:df:1f:25: a2:c8:18:88:b3:0b:f9:f0:e9:91:af:d3:d3:11:24:8a:30:da: 9e:bf:b7:4e:dc:51:52:83:1e:c1:ce:69:d9:31:74:30:29:b2: 37:c3:ef:44:16:ad:d8:5d:8d:a6:b2:13:57:f2:4f:65:a8:30: d8:b6:27:c4:77:a0:22:d3:54:6d:81:49:0e:0d:46:39:66:20: 41:9b:7b:1e:b5:1f:d3:77:92:f9:7e:26:3d:73:4d:e5:61:66: 67:29:13:7f:26:30:16:6a:70:4c:26:c5:3a:96:03:0d:27:b0: 6c:ea:24:41:43:41:11:9d:65:d0:33:60:3d:3f:08:39:28:fd: 82:be:d6:55:5b:2c:51:db:a7:95:17:c5:f7:fb:fe:06:87:1d: 1a:bb:04:64:b3:50:e4:ca:9c:07:41:8f:28:f4:54:0a:7d:aa: ab:97:57:d5:ef:72:85:30:b3:ca:3e:9d:83:36:0e:f2:c4:e3: 04:eb:3c:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbmlqBe3Gxi1470qSDVJcOMZWZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTA4MjExODU2MDhaFw0yNTA4MjUwMzEyMDhaMDMxMTAvBgNV BAMTKEYwMjE3MkQ1QUI2NUNFNzRBQzlEMDE1MDczRjg5NjQyNjVEQTMzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqjESJusNAgrtBCK+jpRgUpJC 2LQuUWQ1yI6vVlZj2V72OduA5K1JfWvHE9uw5m1RkHdF3DWOtnZUcPC9WuviO0f3 2oAlsR7nt6TEL86sPINOXnQBqQ5/tfyb6dKLIZ/kznknV0joowQ/PMzUwa2a6y/k MRX+HnZt5+WqG0Qopi3fsknwaE4dOlPDT5mkvNgQyeb8D38yoiQ+PES+KD3VkvLI QimwOaaHSY74yAH5svBVT70v40MNKal/C7md100elyL9xOksH/il2eJaITLZ3bQA vn0aJqPuoOAI7DRagj9Sl+VHnl6COYY7YqDc6SYg0VQJjatuXdlpbRpq783xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8CFy1atlznSsnQFQc/iWQmXaM0gwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRlnYNNk6eToHytssD1EDeJpQrt9/jDtmUI lhblwWAs44ObUBz1Kt1maY2O9CiDav2lpxGRFgegOZU7z5TUrhf0sosWW98fJaLI GIizC/nw6ZGv09MRJIow2p6/t07cUVKDHsHOadkxdDApsjfD70QWrdhdjaayE1fy T2WoMNi2J8R3oCLTVG2BSQ4NRjlmIEGbex61H9N3kvl+Jj1zTeVhZmcpE38mMBZq cEwmxTqWAw0nsGzqJEFDQRGdZdAzYD0/CDko/YK+1lVbLFHbp5UXxff7/gaHHRq7 BGSzUOTKnAdBjyj0VAp9qquXV9XvcoUws8o+nYM2DvLE4wTrPEk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:48 2025 by rpki-client