$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: xg7d8VGA1crxUd1O+AAGgi9bOd3f49kDaICXEWNYbCU= Subject key identifier: 91:5E:3A:47:BD:76:B7:59:7F:AB:DA:E9:60:19:8A:8D:CE:2A:44:BE Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 05E4DA0DC53EA28A16983045A9E37C4BA0DBDD27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 0299 Signing time: Tue 24 Mar 2026 07:12:15 +0000 Manifest this update: Tue 24 Mar 2026 07:07:15 +0000 Manifest next update: Fri 27 Mar 2026 15:32:15 +0000 Files and hashes: 1: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: g55jlzQGSDboskfgFt9JKs9ApoVXqRRNXyTyOH/IFkA=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e4:da:0d:c5:3e:a2:8a:16:98:30:45:a9:e3:7c:4b:a0:db:dd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Mar 24 07:07:15 2026 GMT Not After : Mar 27 15:32:15 2026 GMT Subject: CN=915E3A47BD76B7597FABDAE960198A8DCE2A44BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:43:ca:29:02:45:44:44:2c:69:1c:87:ac: 47:49:9b:10:bb:b8:95:42:13:2a:c2:4e:42:50:b7: c0:59:3b:9a:a6:e2:1e:19:ba:7f:09:7c:8a:d5:d3: 08:93:61:d0:3b:2b:f5:a7:8b:20:5a:79:fa:58:4f: 6d:ff:80:c1:bf:26:1a:a0:32:4d:45:a9:f2:49:fc: 88:e0:7a:a8:c6:28:e8:46:60:73:75:12:63:86:7e: 29:01:6a:a8:1d:ac:76:b2:7a:83:a3:ad:78:c3:02: f2:9d:d1:66:43:12:4b:32:4b:bb:b0:93:91:6d:02: f6:56:bd:19:57:eb:df:57:27:c6:83:90:fc:2d:62: f8:8f:87:0b:6e:86:73:0e:32:20:24:85:97:71:e6: 29:42:b9:64:03:8d:7d:64:ee:ec:71:51:cd:03:38: e7:40:71:30:01:9d:23:3c:6d:4c:e7:e3:2b:62:16: 01:3e:af:53:b2:d0:e0:88:af:4e:34:87:c1:28:15: 1b:13:2c:fb:72:28:72:d1:62:6a:17:57:34:13:c3: dc:f9:4d:c6:52:5b:0f:2e:25:76:bd:2c:63:1d:97: 4c:a2:c0:ba:97:1c:37:83:66:40:91:43:1b:bf:d8: ad:8c:13:2f:aa:09:fa:0e:11:9e:c6:19:e9:25:35: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:3A:47:BD:76:B7:59:7F:AB:DA:E9:60:19:8A:8D:CE:2A:44:BE X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7e:43:ff:bd:ae:e3:2e:77:9c:00:d3:a7:21:82:98:21:99: 45:2c:dc:78:bc:a2:cd:18:eb:3b:7f:eb:c1:b8:99:a1:59:ff: 26:49:17:80:6f:ff:71:47:66:3c:43:b0:83:69:14:ca:34:d4: 98:12:9e:81:fa:70:bc:2e:63:3c:ca:f6:ce:f5:d1:12:d9:60: 28:68:d9:56:9e:73:b1:28:8b:b5:17:8b:f6:55:94:6c:6e:34: 62:1c:2a:a4:6a:d2:05:d3:53:ee:d0:00:f2:93:f1:27:ba:1c: a3:5e:2d:7b:88:f2:a5:3a:b4:61:04:c2:ae:03:5c:d2:0e:c3: 07:6a:d2:fa:63:7a:6e:c8:d8:34:a8:87:8a:64:04:db:2b:7d: 46:3c:e3:6f:e8:80:e0:d0:f5:da:48:68:8f:58:9f:4e:ad:87: 92:98:78:0e:12:f8:74:7e:04:f6:12:4c:46:89:9f:08:6d:9d: 89:0d:ba:4c:06:f6:fb:21:21:57:15:ef:1b:2f:40:e3:39:7b: 80:ba:37:e2:87:94:50:30:c1:49:4d:b2:07:26:91:6b:71:48: d5:18:bf:5d:f7:b2:6b:51:19:0a:c9:5a:9c:51:bb:62:b7:77: 31:2f:b2:8e:ef:1b:31:ca:07:32:13:b5:85:a3:cd:bf:d6:d7: 86:b7:28:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeTaDcU+oooWmDBFqeN8S6Db3ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNjAzMjQwNzA3MTVaFw0yNjAzMjcxNTMyMTVaMDMxMTAvBgNV BAMTKDkxNUUzQTQ3QkQ3NkI3NTk3RkFCREFFOTYwMTk4QThEQ0UyQTQ0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mUPKKQJFREQsaRyHrEdJmxC7 uJVCEyrCTkJQt8BZO5qm4h4Zun8JfIrV0wiTYdA7K/WniyBaefpYT23/gMG/Jhqg Mk1FqfJJ/IjgeqjGKOhGYHN1EmOGfikBaqgdrHayeoOjrXjDAvKd0WZDEksyS7uw k5FtAvZWvRlX699XJ8aDkPwtYviPhwtuhnMOMiAkhZdx5ilCuWQDjX1k7uxxUc0D OOdAcTABnSM8bUzn4ytiFgE+r1Oy0OCIr040h8EoFRsTLPtyKHLRYmoXVzQTw9z5 TcZSWw8uJXa9LGMdl0yiwLqXHDeDZkCRQxu/2K2MEy+qCfoOEZ7GGeklNckFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkV46R712t1l/q9rpYBmKjc4qRL4wHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9+Q/+9ruMud5wA06chgpghmUUs3Hi8os0Y 6zt/68G4maFZ/yZJF4Bv/3FHZjxDsINpFMo01JgSnoH6cLwuYzzK9s710RLZYCho 2Vaec7Eoi7UXi/ZVlGxuNGIcKqRq0gXTU+7QAPKT8Se6HKNeLXuI8qU6tGEEwq4D XNIOwwdq0vpjem7I2DSoh4pkBNsrfUY842/ogODQ9dpIaI9Yn06th5KYeA4S+HR+ BPYSTEaJnwhtnYkNukwG9vshIVcV7xsvQOM5e4C6N+KHlFAwwUlNsgcmkWtxSNUY v133smtRGQrJWpxRu2K3dzEvso7vGzHKBzITtYWjzb/W14a3KPc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:33 2026 by rpki-client