$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: bPlp5YOWheb60wfcVMl1uofhuTbYHRnWnolEFWQncrE= Subject key identifier: 0E:E2:21:2B:2B:8D:61:CF:0D:56:C6:FF:81:CA:51:BF:81:E8:C8:FA Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 06A1F99CB88985BAAF4243AA86015CD0F47B86FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 0253 Signing time: Sun 19 Oct 2025 06:31:58 +0000 Manifest this update: Sun 19 Oct 2025 06:26:58 +0000 Manifest next update: Wed 22 Oct 2025 11:06:58 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) 4: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: yq7P61gSYs180DGkdX/5h6BHFBR2tltzKoKS2XVaXxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a1:f9:9c:b8:89:85:ba:af:42:43:aa:86:01:5c:d0:f4:7b:86:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Oct 19 06:26:58 2025 GMT Not After : Oct 22 11:06:58 2025 GMT Subject: CN=0EE2212B2B8D61CF0D56C6FF81CA51BF81E8C8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:c9:ab:97:ae:8d:d8:d3:f5:ea:ad:40:7b: 9c:bd:64:f3:6b:21:78:65:35:4b:fa:ae:de:0b:3c: 01:d1:b3:f0:b2:e7:88:d1:f9:4f:17:bc:c7:bc:22: 4b:ed:0d:f2:f7:d0:90:32:b4:a4:ae:08:29:2e:1e: cf:fa:71:7c:e2:b2:29:55:f2:a1:28:cf:72:f4:f1: 79:33:c4:b8:cc:73:af:08:e2:04:8e:8b:cf:7a:4f: 05:a4:de:51:e4:db:ce:f8:7e:1b:b1:dc:e1:6e:b8: c3:49:15:9f:66:07:9d:62:44:f2:d5:63:83:0e:6c: 90:74:e1:d5:27:04:c7:bb:28:89:8e:02:25:5f:4a: 05:84:e5:a1:96:5b:fe:98:23:16:fd:d0:2b:35:b0: a0:e6:9b:50:f0:7e:c9:b2:75:7f:b1:45:93:4f:37: 5f:f0:2b:af:af:0a:92:f1:37:21:59:d9:98:93:ad: 74:46:5b:2b:d1:30:9c:83:f2:ae:a0:69:6f:97:41: 90:b6:32:2b:9e:2a:e0:a3:70:62:f1:1a:96:ef:3c: 06:69:0c:80:59:4d:71:00:59:bf:39:ee:db:2f:c4: b3:91:b3:97:a1:9e:92:7e:fb:35:99:a1:ac:80:4f: 13:5f:3c:a4:34:e3:21:49:7b:7b:e0:96:45:cd:90: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E2:21:2B:2B:8D:61:CF:0D:56:C6:FF:81:CA:51:BF:81:E8:C8:FA X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:eb:8a:29:17:10:7e:72:54:76:d9:70:34:21:f9:45:3e:58: 16:ae:fc:95:02:5c:99:a2:4d:91:85:6d:35:e0:06:bc:77:ce: 80:c6:0a:50:26:c4:64:cc:a0:90:55:d3:69:15:03:c6:07:37: d0:1b:fd:09:ee:77:80:21:d2:af:f3:d6:d0:50:64:ec:5e:1f: 84:ea:51:32:b2:30:15:0e:24:5d:eb:85:45:89:fb:4f:dd:34: d1:1f:66:87:b0:36:08:94:19:35:a4:57:dd:c8:d7:27:b5:6c: 8b:d0:63:65:51:21:26:52:6f:e8:9c:3c:95:ec:fd:05:d7:4d: fc:13:4f:35:0d:e6:bc:9e:43:af:d6:f7:1b:d2:25:af:4e:c4: d7:58:f7:fd:58:a5:52:67:23:d0:9a:af:38:21:6d:be:4e:49: e7:0b:2d:dd:0b:9b:93:02:c2:69:5b:9b:70:29:3c:90:21:16: 3f:b6:17:b7:79:21:70:16:8f:0b:62:c7:67:cd:bb:6a:d8:64: a9:7b:cd:83:10:a6:74:38:ac:16:32:eb:8a:8f:d9:18:77:dc: 82:73:cf:60:00:c3:71:38:b5:f1:21:a6:0a:12:65:12:75:c5: b8:84:42:28:39:1c:22:ef:39:49:d5:35:a8:b9:52:fe:24:68: 6d:5f:2a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqH5nLiJhbqvQkOqhgFc0PR7hv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTEwMTkwNjI2NThaFw0yNTEwMjIxMTA2NThaMDMxMTAvBgNV BAMTKDBFRTIyMTJCMkI4RDYxQ0YwRDU2QzZGRjgxQ0E1MUJGODFFOEM4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqsmrl66N2NP16q1Ae5y9ZPNr IXhlNUv6rt4LPAHRs/Cy54jR+U8XvMe8IkvtDfL30JAytKSuCCkuHs/6cXzisilV 8qEoz3L08XkzxLjMc68I4gSOi896TwWk3lHk2874fhux3OFuuMNJFZ9mB51iRPLV Y4MObJB04dUnBMe7KImOAiVfSgWE5aGWW/6YIxb90Cs1sKDmm1DwfsmydX+xRZNP N1/wK6+vCpLxNyFZ2ZiTrXRGWyvRMJyD8q6gaW+XQZC2MiueKuCjcGLxGpbvPAZp DIBZTXEAWb857tsvxLORs5ehnpJ++zWZoayATxNfPKQ04yFJe3vglkXNkDXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuIhKyuNYc8NVsb/gcpRv4HoyPowHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHriikXEH5yVHbZcDQh+UU+WBau/JUCXJmi TZGFbTXgBrx3zoDGClAmxGTMoJBV02kVA8YHN9Ab/Qnud4Ah0q/z1tBQZOxeH4Tq UTKyMBUOJF3rhUWJ+0/dNNEfZoewNgiUGTWkV93I1ye1bIvQY2VRISZSb+icPJXs /QXXTfwTTzUN5ryeQ6/W9xvSJa9OxNdY9/1YpVJnI9Carzghbb5OSecLLd0Lm5MC wmlbm3ApPJAhFj+2F7d5IXAWjwtix2fNu2rYZKl7zYMQpnQ4rBYy64qP2Rh33IJz z2AAw3E4tfEhpgoSZRJ1xbiEQig5HCLvOUnVNai5Uv4kaG1fKkE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:32 2025 by rpki-client