$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: xp6/1UWw6aNhs3jRulYJK+pwfl5ENpT+SdrqlltUC00= Subject key identifier: 4A:21:8A:8D:0E:A1:D0:EC:2A:03:B0:83:79:0A:88:3B:68:03:94:61 Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 168745906702712E5D8FE5472CAD112C77914FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 020B Signing time: Sat 10 May 2025 16:11:54 +0000 Manifest this update: Sat 10 May 2025 16:06:54 +0000 Manifest next update: Tue 13 May 2025 16:52:54 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: ztXhRRN4sqRlmctM//ZkJIgrxKZVbXiXbXV1qaWPkUQ=) 2: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: ZabwrOiLuJ6hCN+iEdKZxIZkNFq+kK0fMo/IQTU1uI8=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: naeH0xmbP/3ggpiYcgSMq3TL3uxCder+395Osm9cRNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:87:45:90:67:02:71:2e:5d:8f:e5:47:2c:ad:11:2c:77:91:4f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: May 10 16:06:54 2025 GMT Not After : May 13 16:52:54 2025 GMT Subject: CN=4A218A8D0EA1D0EC2A03B083790A883B68039461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:0f:ce:52:9b:d9:4f:94:97:8a:aa:cb:14: 25:3b:6a:94:82:4f:83:f3:a1:e6:4a:1e:d7:88:f2: 33:4f:ae:ff:df:f3:0d:82:9d:6b:a0:1d:18:e0:53: a2:71:64:28:14:c4:51:29:18:eb:21:5e:1e:11:61: 29:a4:4a:23:fa:b8:f6:6d:4e:b2:9d:f3:d0:4b:8f: 66:c1:0f:36:3d:e9:73:8f:ea:7b:1b:b6:42:63:09: ce:85:1e:51:89:66:66:de:e4:8a:3c:12:0c:64:b6: 88:03:08:e7:b1:2d:26:c7:27:b9:86:07:f4:a6:06: a5:22:f9:f3:c7:29:97:c9:5e:cc:48:34:8b:6e:a6: c8:95:50:0c:d6:54:d4:4d:a6:2a:68:30:c9:10:57: f6:48:1a:64:d8:78:dc:a5:a4:0f:b6:86:bc:f7:e1: 54:9f:87:dc:a8:5c:27:2a:53:79:4b:41:8b:5f:ee: 0b:7e:37:f9:dc:2e:2c:25:02:a4:ca:29:b2:b5:09: fc:e5:0d:47:eb:07:e7:bc:ce:85:5a:55:94:4c:9e: 5e:39:ec:37:1c:ec:59:cc:b1:76:12:a0:dd:0e:cc: be:16:ac:07:a1:d1:ff:00:04:f9:69:eb:9e:cb:20: da:89:b3:c7:12:2e:b9:c8:0a:9f:59:75:21:0d:4a: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:8A:8D:0E:A1:D0:EC:2A:03:B0:83:79:0A:88:3B:68:03:94:61 X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:31:21:ca:17:7e:53:ae:79:fd:a2:e8:6b:dd:c7:a2:91:6d: 18:42:7c:a4:e1:f6:25:0a:7c:79:43:62:21:42:2c:5a:76:69: ef:ff:37:6c:97:f7:b4:3b:ec:06:9f:14:bf:c9:95:78:12:16: 9f:33:bc:92:db:33:a5:ff:54:b4:dd:07:d2:04:9b:7a:17:90: 3e:20:9e:6c:74:d4:8d:9d:74:b7:0c:77:76:7a:45:01:26:0d: dd:f8:4d:bd:c8:be:da:a6:b6:76:c7:f3:e0:5f:54:25:03:8e: b6:48:23:d2:7c:f4:c4:f6:a9:fe:df:31:05:ba:5e:a2:11:8e: 22:85:22:ab:5c:bf:9b:ce:0b:42:4c:c7:6f:64:47:e3:a7:7f: 65:a9:42:7f:c9:c2:96:e0:98:bf:2e:c4:c7:e7:ad:a7:1e:17: 76:1f:f6:74:c1:be:77:e6:11:63:78:1b:0e:f7:18:65:c1:41: 3b:e5:d1:f9:a5:dc:9b:5c:fc:c6:bb:b0:07:bf:aa:a1:0c:ad: 5c:48:65:82:06:2e:5c:67:21:5b:95:8b:67:f1:07:ef:4d:bc: 48:63:04:1e:30:cf:44:50:01:46:d2:07:8e:75:b4:a5:20:bb: 5a:e7:22:ed:10:b1:a1:9e:bd:33:9f:c6:da:3b:ef:11:a9:cc: 0e:1a:44:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFodFkGcCcS5dj+VHLK0RLHeRT+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTA1MTAxNjA2NTRaFw0yNTA1MTMxNjUyNTRaMDMxMTAvBgNV BAMTKDRBMjE4QThEMEVBMUQwRUMyQTAzQjA4Mzc5MEE4ODNCNjgwMzk0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjag/OUpvZT5SXiqrLFCU7apSC T4PzoeZKHteI8jNPrv/f8w2CnWugHRjgU6JxZCgUxFEpGOshXh4RYSmkSiP6uPZt TrKd89BLj2bBDzY96XOP6nsbtkJjCc6FHlGJZmbe5Io8EgxktogDCOexLSbHJ7mG B/SmBqUi+fPHKZfJXsxINItupsiVUAzWVNRNpipoMMkQV/ZIGmTYeNylpA+2hrz3 4VSfh9yoXCcqU3lLQYtf7gt+N/ncLiwlAqTKKbK1CfzlDUfrB+e8zoVaVZRMnl45 7Dcc7FnMsXYSoN0OzL4WrAeh0f8ABPlp657LINqJs8cSLrnICp9ZdSENSrKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiGKjQ6h0OwqA7CDeQqIO2gDlGEwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgxIcoXflOuef2i6Gvdx6KRbRhCfKTh9iUK fHlDYiFCLFp2ae//N2yX97Q77AafFL/JlXgSFp8zvJLbM6X/VLTdB9IEm3oXkD4g nmx01I2ddLcMd3Z6RQEmDd34Tb3IvtqmtnbH8+BfVCUDjrZII9J89MT2qf7fMQW6 XqIRjiKFIqtcv5vOC0JMx29kR+Onf2WpQn/JwpbgmL8uxMfnraceF3Yf9nTBvnfm EWN4Gw73GGXBQTvl0fml3Jtc/Ma7sAe/qqEMrVxIZYIGLlxnIVuVi2fxB+9NvEhj BB4wz0RQAUbSB451tKUgu1rnIu0QsaGevTOfxto77xGpzA4aRFk= -----END CERTIFICATE-----Generated at Mon May 12 02:28:15 2025 by rpki-client