$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: A69M3f6ZDX1qd1yuXLqIeqZG8ekrRNPoBe32rUCNTG4= Subject key identifier: FA:FD:03:C5:AB:CC:5D:42:C1:13:9A:A4:DF:1B:6F:29:BF:EA:F5:C8 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 432517EFDB1E61A1CD8A21E1E3D00EC2841E7704 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 022C Signing time: Mon 20 Oct 2025 02:31:07 +0000 Manifest this update: Mon 20 Oct 2025 02:26:07 +0000 Manifest next update: Thu 23 Oct 2025 07:16:07 +0000 Files and hashes: 1: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 2: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 3: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: AFrTXydhoK07Inglnzc5PbMsrOyROiv4G8ZyVzVbJ78=) 4: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 5: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 6: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:25:17:ef:db:1e:61:a1:cd:8a:21:e1:e3:d0:0e:c2:84:1e:77:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Oct 20 02:26:07 2025 GMT Not After : Oct 23 07:16:07 2025 GMT Subject: CN=FAFD03C5ABCC5D42C1139AA4DF1B6F29BFEAF5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:eb:6c:25:4c:74:6d:10:5e:34:20:6c:1b: d7:39:69:e6:9b:10:a6:27:3e:35:d6:d3:f8:2e:68: bb:e9:5d:95:c8:58:8a:a8:d3:b4:74:b1:2b:ef:10: 28:48:17:72:2e:c6:6b:bf:cf:98:e4:12:ee:52:ed: d4:73:44:3c:4a:c4:e9:7c:96:d7:8f:66:06:9a:4a: dc:e9:92:af:1a:39:cb:0a:41:4f:d3:f8:c3:69:9e: 11:25:c5:d9:c3:58:ef:6b:c4:00:45:30:ae:bc:6c: 73:d9:60:7b:a7:d8:a6:06:33:df:97:00:27:f7:e1: 9c:9b:d9:71:25:32:b8:35:f2:c6:aa:98:da:5a:2d: e5:ac:66:a2:5f:15:ce:53:cc:4b:00:74:a7:bc:fb: d8:d8:55:2a:e9:85:ff:fe:ca:73:92:45:46:64:a4: d5:13:86:8f:f2:99:d1:c2:cc:b8:60:b7:08:5d:8e: e4:1f:b9:18:18:01:24:52:44:b4:f0:d9:ad:39:b3: d8:19:8c:ba:85:c2:e2:8e:1d:27:7f:ae:f1:0f:d6: 40:95:86:22:e9:6e:a6:35:92:1b:ba:6a:71:76:81: 2d:0f:1c:ad:91:99:70:bd:01:59:8d:6c:59:70:83: fd:58:44:f0:c7:a6:b0:c0:b3:8d:e8:26:3f:d6:a5: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FD:03:C5:AB:CC:5D:42:C1:13:9A:A4:DF:1B:6F:29:BF:EA:F5:C8 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:92:7c:5f:2a:e6:b4:54:48:3a:53:3d:5c:32:cb:ca:21:42: 48:c5:3a:ad:93:c1:45:37:be:33:f5:93:ab:bf:5e:a9:50:e4: 80:65:11:04:01:cd:21:b5:f4:ae:af:97:09:2a:a7:c5:ce:35: 72:32:60:f5:9a:dd:ab:a9:0c:86:f0:63:5e:cb:3c:72:9f:4a: 53:fa:3f:19:13:9a:a0:e7:11:d0:3d:c2:d3:c5:97:de:14:8d: ce:6a:4e:50:c8:c8:a9:da:54:e8:5e:cb:0d:54:88:9b:1c:36: 69:19:62:b2:d2:3f:14:46:75:d3:79:b1:79:0d:5a:43:48:02: 16:cf:2d:1c:27:1f:bf:71:52:51:16:d0:57:13:4d:74:e5:5f: 3a:ed:a4:d4:b9:4e:5e:7b:85:84:ee:56:44:15:0f:29:3a:ad: f0:fc:c4:ac:7a:c8:1e:0b:74:18:0f:ef:ab:ec:9f:dd:9f:36: b9:bd:3b:ea:e8:12:80:58:71:d5:9e:ec:40:1c:80:2f:53:1f: ff:77:6d:5d:87:2e:f5:d2:74:a7:ad:c4:77:30:44:8f:44:4b: 0a:67:e9:6b:b5:c6:b0:de:da:65:3f:c0:aa:1a:75:80:45:96: 4d:df:bb:15:1b:17:5e:41:21:23:a3:6a:f4:e4:c0:2f:1e:42: 79:5c:98:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyUX79seYaHNiiHh49AOwoQedwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTEwMjAwMjI2MDdaFw0yNTEwMjMwNzE2MDdaMDMxMTAvBgNV BAMTKEZBRkQwM0M1QUJDQzVENDJDMTEzOUFBNERGMUI2RjI5QkZFQUY1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOOtsJUx0bRBeNCBsG9c5aeab EKYnPjXW0/guaLvpXZXIWIqo07R0sSvvEChIF3Iuxmu/z5jkEu5S7dRzRDxKxOl8 ltePZgaaStzpkq8aOcsKQU/T+MNpnhElxdnDWO9rxABFMK68bHPZYHun2KYGM9+X ACf34Zyb2XElMrg18saqmNpaLeWsZqJfFc5TzEsAdKe8+9jYVSrphf/+ynOSRUZk pNUTho/ymdHCzLhgtwhdjuQfuRgYASRSRLTw2a05s9gZjLqFwuKOHSd/rvEP1kCV hiLpbqY1khu6anF2gS0PHK2RmXC9AVmNbFlwg/1YRPDHprDAs43oJj/WpbrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+v0DxavMXULBE5qk3xtvKb/q9cgwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSSfF8q5rRUSDpTPVwyy8ohQkjFOq2TwUU3 vjP1k6u/XqlQ5IBlEQQBzSG19K6vlwkqp8XONXIyYPWa3aupDIbwY17LPHKfSlP6 PxkTmqDnEdA9wtPFl94Ujc5qTlDIyKnaVOheyw1UiJscNmkZYrLSPxRGddN5sXkN WkNIAhbPLRwnH79xUlEW0FcTTXTlXzrtpNS5Tl57hYTuVkQVDyk6rfD8xKx6yB4L dBgP76vsn92fNrm9O+roEoBYcdWe7EAcgC9TH/93bV2HLvXSdKetxHcwRI9ESwpn 6Wu1xrDe2mU/wKoadYBFlk3fuxUbF15BISOjavTkwC8eQnlcmA8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:51 2025 by rpki-client