$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: 7CMByAnR2/UILrCKydVPiArrUUrj78tzP1czXcB4oAE= Subject key identifier: 31:E1:1E:91:2D:BE:E5:F5:D7:52:9D:69:EB:C9:C5:54:03:97:BC:00 Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 4C7B1E3F5BCF86322CE59B92580A7E3F1162D64C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 0221 Signing time: Sat 28 Jun 2025 09:31:55 +0000 Manifest this update: Sat 28 Jun 2025 09:26:55 +0000 Manifest next update: Tue 01 Jul 2025 13:50:55 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) 4: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: eQ/McHzEkSe3KC3PQqABuDiWl/ZvEeqF78axUVgBJYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7b:1e:3f:5b:cf:86:32:2c:e5:9b:92:58:0a:7e:3f:11:62:d6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Jun 28 09:26:55 2025 GMT Not After : Jul 1 13:50:55 2025 GMT Subject: CN=31E11E912DBEE5F5D7529D69EBC9C5540397BC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:c8:1c:98:85:b4:8d:7d:18:65:ca:77:91: 0f:37:60:f8:96:09:e2:a9:67:46:92:ae:a7:75:57: d0:89:63:a2:75:41:83:b8:a3:e8:85:6a:ea:47:b7: 01:6a:be:4c:b3:43:12:ff:36:00:15:5b:a0:75:83: fe:ef:1f:cc:76:46:92:27:dd:4b:54:50:20:a3:08: 8a:49:34:b4:76:5c:8c:fc:e2:9b:62:94:42:6a:f3: 52:31:6b:43:48:43:b1:27:56:11:89:ec:56:8c:b0: f9:7f:4b:5e:8e:73:49:f5:ac:bf:e3:f9:58:65:40: 1c:c4:ba:a5:4d:b9:de:eb:8f:39:36:15:a2:d3:09: a3:35:76:65:2d:36:41:32:7b:d3:60:4c:39:74:70: a9:9d:b3:8a:5a:61:81:82:76:07:8d:8b:a1:0d:09: 81:5c:09:b8:69:9a:49:de:f3:5f:b7:69:31:f9:14: c8:e5:3e:e5:c3:cd:5f:f9:03:51:df:7e:9c:9f:78: 2b:3e:e1:84:f6:c6:e4:59:da:ef:0d:9c:10:67:9c: 6b:b7:d2:8e:12:0b:a9:52:93:70:46:d5:36:73:0c: a1:a6:2f:16:ca:bc:21:d2:99:dc:ff:3f:e4:7f:69: fb:28:fb:ce:ae:d9:ee:a1:e7:b0:35:6a:ed:27:0f: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E1:1E:91:2D:BE:E5:F5:D7:52:9D:69:EB:C9:C5:54:03:97:BC:00 X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e3:6d:d0:ba:a6:68:35:b4:84:96:15:66:9b:7b:4e:14:04: e9:2c:70:49:9e:0e:ca:87:e9:ab:21:2e:ff:83:e3:9c:78:0a: 64:07:b2:44:45:2a:58:dd:b5:05:52:d4:c2:54:6f:ad:e9:a7: ad:50:02:0a:2a:ec:2e:cf:84:09:67:c8:83:14:dc:1b:d6:74: bf:60:f2:3f:c6:d7:0b:f4:81:1b:ec:8d:05:7c:c0:87:d2:66: 17:b6:27:eb:d5:97:66:12:b2:6d:41:40:38:99:0b:e9:3c:3a: 39:4a:c7:96:c1:db:12:5d:b7:a7:f7:6a:7f:8f:d7:0a:d7:5b: 4d:50:cd:06:68:ae:55:36:0a:61:08:be:fb:43:e5:76:ca:18: 98:57:a5:a8:ab:ac:1a:ad:6b:08:7e:7b:0e:aa:c4:4f:67:18: a3:12:25:0b:54:af:43:97:40:ad:e1:93:2d:67:3a:bd:6b:93: 6c:e2:45:80:cb:fa:56:cc:a0:e4:b2:10:ee:66:c6:12:a0:a6: 94:d8:11:e5:57:ac:f4:a6:0f:7f:84:67:56:d8:cd:fe:a2:97: 70:84:be:2e:32:c8:66:e8:42:0f:91:c7:5b:ab:e0:9e:3f:31: 1c:ae:0b:1f:37:69:27:e4:09:3c:09:f3:39:1f:1d:47:72:58: 2c:4e:7b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHseP1vPhjIs5ZuSWAp+PxFi1kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTA2MjgwOTI2NTVaFw0yNTA3MDExMzUwNTVaMDMxMTAvBgNV BAMTKDMxRTExRTkxMkRCRUU1RjVENzUyOUQ2OUVCQzlDNTU0MDM5N0JDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGN8gcmIW0jX0YZcp3kQ83YPiW CeKpZ0aSrqd1V9CJY6J1QYO4o+iFaupHtwFqvkyzQxL/NgAVW6B1g/7vH8x2RpIn 3UtUUCCjCIpJNLR2XIz84ptilEJq81Ixa0NIQ7EnVhGJ7FaMsPl/S16Oc0n1rL/j +VhlQBzEuqVNud7rjzk2FaLTCaM1dmUtNkEye9NgTDl0cKmds4paYYGCdgeNi6EN CYFcCbhpmkne81+3aTH5FMjlPuXDzV/5A1HffpyfeCs+4YT2xuRZ2u8NnBBnnGu3 0o4SC6lSk3BG1TZzDKGmLxbKvCHSmdz/P+R/afso+86u2e6h57A1au0nDwOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMeEekS2+5fXXUp1p68nFVAOXvAAwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLjbdC6pmg1tISWFWabe04UBOkscEmeDsqH 6ashLv+D45x4CmQHskRFKljdtQVS1MJUb63pp61QAgoq7C7PhAlnyIMU3BvWdL9g 8j/G1wv0gRvsjQV8wIfSZhe2J+vVl2YSsm1BQDiZC+k8OjlKx5bB2xJdt6f3an+P 1wrXW01QzQZorlU2CmEIvvtD5XbKGJhXpairrBqtawh+ew6qxE9nGKMSJQtUr0OX QK3hky1nOr1rk2ziRYDL+lbMoOSyEO5mxhKgppTYEeVXrPSmD3+EZ1bYzf6il3CE vi4yyGboQg+Rx1ur4J4/MRyuCx83aSfkCTwJ8zkfHUdyWCxOe3o= -----END CERTIFICATE-----Generated at Mon Jun 30 09:02:24 2025 by rpki-client