$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: KTQA3kMh5skTPyz2Zfl26iCmPoa6oIAwbov3spYOsQk= Subject key identifier: 72:54:39:54:AB:56:41:9E:CB:E5:CD:DF:CD:85:C0:70:E4:84:50:CA Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 5EA4546B062743490F4F0849D3483D87EAA58FEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 0239 Signing time: Thu 21 Aug 2025 20:32:08 +0000 Manifest this update: Thu 21 Aug 2025 20:27:08 +0000 Manifest next update: Mon 25 Aug 2025 02:35:08 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 4: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: 315o17On7+fQue6wIqCaC0t3iyGR7n9HN6bQ7q2Sibs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a4:54:6b:06:27:43:49:0f:4f:08:49:d3:48:3d:87:ea:a5:8f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Aug 21 20:27:08 2025 GMT Not After : Aug 25 02:35:08 2025 GMT Subject: CN=72543954AB56419ECBE5CDDFCD85C070E48450CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:3b:f7:47:b0:a5:74:05:c8:6a:14:26:f9: ea:a7:c2:b2:a4:b6:ac:89:2d:b6:43:f0:a4:76:24: 66:c1:60:16:89:7b:e6:4a:4f:ef:51:96:b4:7c:c5: ec:6c:79:75:c6:37:6c:c7:48:bc:dd:4f:46:56:27: a9:aa:4a:15:b9:5d:32:8a:d1:21:21:2f:4c:f1:47: 93:b4:6e:c1:3b:16:0a:5d:82:18:c7:fd:22:8b:01: a2:58:87:b0:eb:7c:15:30:92:2b:14:a9:98:1d:79: c6:06:8c:10:72:72:72:33:6e:f6:96:8c:84:a5:1a: 1f:58:d1:c7:38:5e:7f:87:38:25:e9:7f:9e:06:8e: 09:7e:fc:04:21:bd:45:04:67:1c:22:0f:7e:f2:46: 42:fe:86:d9:f6:f9:ac:f9:eb:a9:b2:a4:ed:0e:97: 56:1f:6f:23:3c:5d:f0:47:8a:af:5b:c6:25:ec:d2: 88:b7:3e:88:66:72:96:b8:2b:1d:cf:bb:12:6a:9e: 69:06:f1:2a:aa:31:20:41:13:b6:5f:c8:de:d5:49: 63:b4:20:57:42:21:a7:64:19:8b:fe:57:72:0f:af: 5b:7d:98:c6:76:ba:72:24:25:91:59:26:09:00:12: 7d:9d:7d:fa:70:c6:c8:ff:c4:aa:88:b2:35:27:76: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:39:54:AB:56:41:9E:CB:E5:CD:DF:CD:85:C0:70:E4:84:50:CA X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3b:30:d5:d5:4d:4f:13:14:38:81:b4:59:f6:0e:f3:e6:04: de:b2:46:13:e7:1e:09:1c:f5:81:20:24:e0:08:55:0b:21:ea: ed:7a:b2:4f:02:ff:7d:8e:ea:0c:06:a4:2c:38:5f:97:f2:82: 01:58:e3:82:30:6f:8d:cc:bd:d5:07:59:3c:25:ca:f8:c2:0b: aa:42:ea:b4:07:95:a2:55:cf:ed:25:dc:61:a6:98:11:38:67: 07:6c:a6:f3:6a:74:21:b5:11:f4:47:c3:e8:90:31:ac:d4:35: df:30:24:56:59:2e:e0:33:2c:8a:13:1f:8b:c7:56:6c:21:f2: 2f:f9:0d:d5:a1:51:81:47:4a:0f:8c:9f:fd:79:d4:a4:ea:5a: 05:23:97:1f:bf:98:59:cf:3a:63:fe:72:5d:f7:42:d6:97:e6: e3:f1:9a:fc:f3:19:80:4c:7a:92:32:81:94:20:9a:74:72:9e: 56:19:e4:35:ea:29:22:06:dc:ba:8c:f0:62:1f:be:18:b4:dc: 5d:05:aa:0a:e5:dc:2b:f6:12:0b:5c:95:21:07:7b:95:d5:a5: 21:17:f3:c3:71:97:09:a4:c6:dc:cb:26:0d:11:06:64:20:c4: b7:10:ad:b7:20:ba:da:4e:24:9f:05:69:45:86:10:f5:bb:0b: 3c:4f:f3:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqRUawYnQ0kPTwhJ00g9h+qlj+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTA4MjEyMDI3MDhaFw0yNTA4MjUwMjM1MDhaMDMxMTAvBgNV BAMTKDcyNTQzOTU0QUI1NjQxOUVDQkU1Q0RERkNEODVDMDcwRTQ4NDUwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsjv3R7CldAXIahQm+eqnwrKk tqyJLbZD8KR2JGbBYBaJe+ZKT+9RlrR8xexseXXGN2zHSLzdT0ZWJ6mqShW5XTKK 0SEhL0zxR5O0bsE7FgpdghjH/SKLAaJYh7DrfBUwkisUqZgdecYGjBBycnIzbvaW jISlGh9Y0cc4Xn+HOCXpf54Gjgl+/AQhvUUEZxwiD37yRkL+htn2+az566mypO0O l1YfbyM8XfBHiq9bxiXs0oi3Pohmcpa4Kx3PuxJqnmkG8SqqMSBBE7ZfyN7VSWO0 IFdCIadkGYv+V3IPr1t9mMZ2unIkJZFZJgkAEn2dffpwxsj/xKqIsjUndsCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUclQ5VKtWQZ7L5c3fzYXAcOSEUMowHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHs7MNXVTU8TFDiBtFn2DvPmBN6yRhPnHgkc 9YEgJOAIVQsh6u16sk8C/32O6gwGpCw4X5fyggFY44Iwb43MvdUHWTwlyvjCC6pC 6rQHlaJVz+0l3GGmmBE4ZwdspvNqdCG1EfRHw+iQMazUNd8wJFZZLuAzLIoTH4vH Vmwh8i/5DdWhUYFHSg+Mn/151KTqWgUjlx+/mFnPOmP+cl33QtaX5uPxmvzzGYBM epIygZQgmnRynlYZ5DXqKSIG3LqM8GIfvhi03F0Fqgrl3Cv2EgtclSEHe5XVpSEX 88NxlwmkxtzLJg0RBmQgxLcQrbcgutpOJJ8FaUWGEPW7CzxP82U= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:22 2025 by rpki-client