$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: kDqd+XCqwlntH52R0Eo1aKX/xJRwHfPJt5NYlig2WNU= Subject key identifier: F9:07:8A:4F:BA:02:4B:BC:4E:C6:18:DC:AB:DC:FF:83:03:FC:B7:E1 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 619C2E74FE11C862609DE229814D2E0DA81D59E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 01FA Signing time: Fri 27 Jun 2025 18:11:03 +0000 Manifest this update: Fri 27 Jun 2025 18:06:03 +0000 Manifest next update: Mon 30 Jun 2025 18:40:03 +0000 Files and hashes: 1: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 2: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: zdkPYfY6aLpDW4sg9tDD/D87L757AVGwUi8CgbrXXAw=) 3: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 4: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 5: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 6: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 18:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9c:2e:74:fe:11:c8:62:60:9d:e2:29:81:4d:2e:0d:a8:1d:59:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Jun 27 18:06:03 2025 GMT Not After : Jun 30 18:40:03 2025 GMT Subject: CN=F9078A4FBA024BBC4EC618DCABDCFF8303FCB7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:ab:d2:64:2b:56:36:3a:8c:47:af:5d:ae: 8e:bb:52:3f:7f:df:69:59:42:4c:2b:f1:47:c7:ff: b0:ca:c4:d5:0b:ed:9e:68:ce:65:38:43:c4:a1:c7: cc:b8:1c:47:43:17:8d:9b:a0:ae:71:78:17:ef:89: 9c:64:9a:aa:83:28:be:c5:5c:e6:60:af:b4:0f:9c: 3f:d0:36:cd:31:c9:84:b2:83:63:c6:e5:f1:8a:1e: 97:bb:e7:fd:86:d1:b4:bf:97:ef:25:ce:e7:6a:d1: e3:fa:a9:b1:a4:68:22:11:92:66:de:ae:6f:70:8c: b0:1d:1a:dd:a4:82:80:06:3f:a8:a7:4f:24:85:31: 35:49:60:29:fb:6c:d5:40:a9:16:da:18:0f:44:98: fd:fe:9b:dd:3b:4f:32:63:2a:33:ae:5c:32:31:ec: b7:50:23:f6:24:a8:10:d5:7d:0e:8d:12:e1:33:03: 04:9b:5b:b6:4d:0b:61:00:c4:d5:b3:05:2f:84:6c: 0f:a6:9c:e3:a1:74:9e:6c:0c:64:f8:b8:fe:7c:0c: d9:4e:45:37:87:90:6c:79:21:bf:74:01:9f:6f:4d: f2:76:6e:d4:ab:83:9c:53:29:81:33:77:ee:b7:77: 9b:c5:26:ae:1d:ff:6d:39:ce:4e:20:c2:3e:f1:a7: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:07:8A:4F:BA:02:4B:BC:4E:C6:18:DC:AB:DC:FF:83:03:FC:B7:E1 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:8b:9b:12:96:bd:cf:b1:39:fd:91:8c:b2:c1:69:f9:48:1d: dc:8f:fa:dc:bf:72:6f:ac:34:7a:05:b1:51:ae:89:44:27:4b: 3f:28:f2:df:73:b9:af:38:6a:7b:21:4a:e3:49:c5:ec:31:0c: 73:a2:28:1b:d4:cd:56:69:7e:a1:4f:b2:f8:cd:73:74:b0:00: 16:60:23:9d:8b:c7:0b:1b:63:9a:a5:1b:45:d0:28:23:71:ff: 70:e1:20:8b:ec:23:e5:9f:59:c5:ec:8e:2a:f9:c5:77:e7:56: a7:a6:91:b4:e0:b8:c9:f8:02:0f:0c:e9:9d:0d:53:e4:70:d4: c6:c3:ca:67:ab:3c:d0:0e:ba:34:57:a0:d5:c0:7a:9d:72:d1: 27:b0:66:87:63:86:c0:fd:77:52:c6:cf:cf:8e:ff:4e:45:41: f9:5f:3a:a0:ce:21:eb:bd:e8:01:9e:e1:c7:89:c7:82:8f:2b: d6:64:22:79:6d:e8:1c:36:19:8e:57:2f:99:ae:4b:35:68:2c: 5c:63:6b:1d:f0:b2:f3:d8:1c:73:4e:de:3f:00:a1:29:65:2b: da:39:36:a8:57:c3:5e:98:34:45:26:93:42:bb:f8:6f:0a:68: 5b:b4:25:8d:c9:19:2f:d4:9a:f9:38:87:b7:8c:76:34:e3:a6: fb:6b:b6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZwudP4RyGJgneIpgU0uDagdWecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTA2MjcxODA2MDNaFw0yNTA2MzAxODQwMDNaMDMxMTAvBgNV BAMTKEY5MDc4QTRGQkEwMjRCQkM0RUM2MThEQ0FCRENGRjgzMDNGQ0I3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCavSZCtWNjqMR69dro67Uj9/ 32lZQkwr8UfH/7DKxNUL7Z5ozmU4Q8Shx8y4HEdDF42boK5xeBfviZxkmqqDKL7F XOZgr7QPnD/QNs0xyYSyg2PG5fGKHpe75/2G0bS/l+8lzudq0eP6qbGkaCIRkmbe rm9wjLAdGt2kgoAGP6inTySFMTVJYCn7bNVAqRbaGA9EmP3+m907TzJjKjOuXDIx 7LdQI/YkqBDVfQ6NEuEzAwSbW7ZNC2EAxNWzBS+EbA+mnOOhdJ5sDGT4uP58DNlO RTeHkGx5Ib90AZ9vTfJ2btSrg5xTKYEzd+63d5vFJq4d/205zk4gwj7xp0sfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QeKT7oCS7xOxhjcq9z/gwP8t+EwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANaLmxKWvc+xOf2RjLLBaflIHdyP+ty/cm+s NHoFsVGuiUQnSz8o8t9zua84anshSuNJxewxDHOiKBvUzVZpfqFPsvjNc3SwABZg I52LxwsbY5qlG0XQKCNx/3DhIIvsI+WfWcXsjir5xXfnVqemkbTguMn4Ag8M6Z0N U+Rw1MbDymerPNAOujRXoNXAep1y0SewZodjhsD9d1LGz8+O/05FQflfOqDOIeu9 6AGe4ceJx4KPK9ZkInlt6Bw2GY5XL5muSzVoLFxjax3wsvPYHHNO3j8AoSllK9o5 NqhXw16YNEUmk0K7+G8KaFu0JY3JGS/Umvk4h7eMdjTjpvtrtmA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:52 2025 by rpki-client