$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: oxCUKaoQlngM3OZYSQB4Fb7kJ9sbPTxkJbGOxn5/prA= Subject key identifier: 23:BE:98:8B:7A:CB:D4:7F:27:42:E5:D0:C2:35:10:0C:D4:DD:90:56 Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 4721CEC7F049983E6E844BDB6385BA3B2ED13895 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 20:30:36 +0000 Manifest this update: Sat 28 Jun 2025 20:25:36 +0000 Manifest next update: Wed 02 Jul 2025 04:37:36 +0000 Files and hashes: 1: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: ZR2T3t5Q1/RGcW0OQmOP7X8hkEkg2wCWw/lyvXiquTE=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: ghYDscgkEkmdPz9NuYZxp4pY2E2dRL+ayWbivu6Gtd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:21:ce:c7:f0:49:98:3e:6e:84:4b:db:63:85:ba:3b:2e:d1:38:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: Jun 28 20:25:36 2025 GMT Not After : Jul 2 04:37:36 2025 GMT Subject: CN=23BE988B7ACBD47F2742E5D0C235100CD4DD9056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:7a:89:53:92:b0:1c:56:9e:25:72:d2:e8: cb:6b:04:1d:12:da:34:96:18:b7:83:b5:c5:61:c6: c1:48:a4:68:26:86:a4:a7:7d:02:fa:9f:0b:eb:ba: 12:d4:d0:c4:a1:2a:92:3b:c3:0b:3d:15:ac:b2:dc: 78:4e:d8:18:01:b3:05:c7:95:40:fb:00:6c:77:60: bb:0a:88:3c:5e:99:ed:0d:26:95:bd:f3:60:44:2f: 9d:17:e0:d6:60:16:58:5d:13:07:16:0d:95:4d:92: bd:63:fc:36:ed:d5:98:50:7c:68:ab:4c:ac:3c:39: 37:63:69:a3:5e:ce:1e:0e:e6:8f:8e:f5:0d:ef:0a: 73:d8:90:90:23:d8:a2:37:4b:fe:24:c0:6d:9b:6b: 98:c0:6a:0e:51:ea:89:ac:29:5e:00:cb:32:63:cd: 10:ae:bd:a2:02:c6:46:bf:d8:2d:74:f2:88:c5:17: f0:ac:4f:c1:b2:eb:88:29:15:d5:28:50:90:d4:aa: f9:ba:59:1f:90:6f:2c:cb:d7:4b:6d:6e:35:c1:f0: df:1f:c2:ac:98:d0:78:da:b0:20:5f:a7:3f:18:2e: ab:ce:6e:b0:ab:4e:a7:71:12:29:24:7d:c7:73:3a: 49:cb:18:07:96:de:f3:70:35:e2:93:71:d8:c0:fc: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:98:8B:7A:CB:D4:7F:27:42:E5:D0:C2:35:10:0C:D4:DD:90:56 X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a2:b0:2c:33:f3:a9:cd:a1:32:72:94:b1:62:0c:b6:63:33: bc:11:a5:5d:a9:a8:19:0f:b0:71:8f:86:ea:cf:02:ab:da:65: 3d:79:42:45:57:2c:91:2a:51:9e:60:0f:ed:99:4f:ad:e2:48: 9c:12:fe:79:27:5a:21:92:1a:95:12:e2:32:05:3c:2e:1f:8b: 78:8f:a4:9b:70:26:17:cf:fc:d0:7e:7f:ad:de:86:d2:e1:dc: f5:2a:0d:41:7e:2e:e5:d5:a4:08:44:a4:df:87:e6:09:43:fd: 4c:2c:ee:33:67:e4:ea:7b:89:2c:85:0a:38:02:47:dc:11:01: 8e:d5:bb:7a:c1:4b:0c:05:fd:8a:66:86:a6:81:20:dc:fa:eb: 72:e5:df:44:71:a9:35:4c:58:94:ad:60:a0:05:d5:45:c9:4e: 13:f1:9e:fc:e0:e4:80:28:08:b6:72:2c:03:da:16:e5:fc:7c: 07:c4:a0:ab:ca:8c:6b:99:3a:7a:84:cf:7c:a0:19:9d:2d:9f: 58:b6:95:cb:c9:92:e9:bf:aa:a8:11:52:6a:62:ab:1f:46:ad: 5c:19:9b:d1:55:1b:5a:c7:cc:cd:a8:7b:2a:1c:50:89:db:15: c9:0c:6d:28:2b:46:5e:69:59:cf:df:41:9a:63:a5:b6:8a:0b: 8c:e9:ae:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyHOx/BJmD5uhEvbY4W6Oy7ROJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNTA2MjgyMDI1MzZaFw0yNTA3MDIwNDM3MzZaMDMxMTAvBgNV BAMTKDIzQkU5ODhCN0FDQkQ0N0YyNzQyRTVEMEMyMzUxMDBDRDRERDkwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZHqJU5KwHFaeJXLS6MtrBB0S 2jSWGLeDtcVhxsFIpGgmhqSnfQL6nwvruhLU0MShKpI7wws9Fayy3HhO2BgBswXH lUD7AGx3YLsKiDxeme0NJpW982BEL50X4NZgFlhdEwcWDZVNkr1j/Dbt1ZhQfGir TKw8OTdjaaNezh4O5o+O9Q3vCnPYkJAj2KI3S/4kwG2ba5jAag5R6omsKV4AyzJj zRCuvaICxka/2C108ojFF/CsT8Gy64gpFdUoUJDUqvm6WR+QbyzL10ttbjXB8N8f wqyY0HjasCBfpz8YLqvObrCrTqdxEikkfcdzOknLGAeW3vNwNeKTcdjA/NH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI76Yi3rL1H8nQuXQwjUQDNTdkFYwHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+isCwz86nNoTJylLFiDLZjM7wRpV2pqBkP sHGPhurPAqvaZT15QkVXLJEqUZ5gD+2ZT63iSJwS/nknWiGSGpUS4jIFPC4fi3iP pJtwJhfP/NB+f63ehtLh3PUqDUF+LuXVpAhEpN+H5glD/Uws7jNn5Op7iSyFCjgC R9wRAY7Vu3rBSwwF/YpmhqaBINz663Ll30RxqTVMWJStYKAF1UXJThPxnvzg5IAo CLZyLAPaFuX8fAfEoKvKjGuZOnqEz3ygGZ0tn1i2lcvJkum/qqgRUmpiqx9GrVwZ m9FVG1rHzM2oeyocUInbFckMbSgrRl5pWc/fQZpjpbaKC4zprkc= -----END CERTIFICATE-----Generated at Sun Jun 29 23:09:25 2025 by rpki-client