$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: 8AF7yW/I8fDTHADRPT9FfEgCWwcvZ0W0ekMSSKFfodM= Subject key identifier: 2A:92:9C:89:2D:AA:5C:B0:11:37:49:50:A2:50:D2:41:36:49:EC:EC Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 2193066A4961B3F4B9A40B36B59477EA73856673 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 04CE Signing time: Thu 08 May 2025 03:10:33 +0000 Manifest this update: Thu 08 May 2025 03:05:33 +0000 Manifest next update: Sun 11 May 2025 13:08:33 +0000 Files and hashes: 1: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: BT21GFU1Ua6j9r0VVGIljq47rg2Q6UhJRlgOGLG++84=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: bAZsID1SQyp+R8Xb9hXOBSkrx6uEDEnPXqOvDSM+TKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 13:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:93:06:6a:49:61:b3:f4:b9:a4:0b:36:b5:94:77:ea:73:85:66:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: May 8 03:05:33 2025 GMT Not After : May 11 13:08:33 2025 GMT Subject: CN=2A929C892DAA5CB011374950A250D2413649ECEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:8c:c4:ed:5e:6f:06:71:d8:b4:35:a0:7e: 2f:d0:ec:53:b9:b5:2a:ae:f9:7f:83:3f:88:50:38: bc:72:8c:da:37:d7:3f:36:08:bb:65:a3:27:94:55: 71:34:e4:b4:3b:8a:6c:06:92:f4:7e:95:d5:96:33: aa:a1:8c:0b:92:55:0a:22:1e:0e:a9:f6:7c:7c:a4: bc:68:76:25:2b:6f:f4:ad:e4:4e:6f:36:e7:b3:fa: 4b:08:56:11:a5:d7:d1:8a:f1:ac:75:23:2b:15:8c: 8b:05:bf:61:22:3f:3e:5f:6e:79:41:7f:c0:d8:73: 0e:d1:a6:42:e3:ab:a1:0b:69:cd:63:85:5a:5c:28: 08:9a:c4:b6:83:30:1c:4c:6c:44:1e:50:22:b8:fe: cb:eb:85:82:29:5f:c8:f1:bb:87:d7:1c:22:08:7b: e9:a6:cc:cb:f8:ac:90:36:ed:ee:f3:c5:8a:89:ac: df:3a:98:e2:b4:91:d5:ac:e5:3f:a4:fc:8c:84:49: ca:f5:0e:9b:92:6a:5a:5b:28:bd:86:be:e8:a1:ce: 89:fe:5a:0f:5e:a5:a6:47:bd:07:02:9e:a4:b9:e2: f1:e0:fb:b8:29:d6:39:70:12:15:90:b2:e8:39:7e: 1b:a0:40:79:88:90:34:3d:7d:9d:1a:2f:b2:04:12: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:9C:89:2D:AA:5C:B0:11:37:49:50:A2:50:D2:41:36:49:EC:EC X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:31:b4:c4:84:0b:69:b8:9d:5f:3b:08:c4:5e:14:81:6d:3a: bf:04:cd:de:98:59:7a:ea:20:13:75:8c:a2:cf:b4:3b:0e:80: f4:1b:16:6c:e0:3d:c3:d1:8b:93:34:cc:4b:8c:37:b1:a6:76: 92:8c:29:cd:57:a2:19:d9:ad:ab:f3:44:cc:4b:19:8b:93:65: 66:60:6f:ee:8b:6f:70:fa:30:33:54:b5:b7:2d:5e:4e:8b:d0: 7a:0e:b9:41:a8:66:a1:2b:f5:07:e0:5f:f3:f6:27:b1:f3:20: fc:dc:fb:8c:07:2c:b3:be:3f:4f:dc:11:57:13:30:03:e3:45: e8:5e:c6:49:5b:69:e1:82:4c:56:66:b7:12:97:7e:1f:1e:03: 95:d5:ee:f2:f7:54:a4:66:b8:79:25:ac:bf:6a:b3:56:e0:8f: f3:ce:eb:69:cc:68:69:f4:ca:b0:87:51:05:c4:98:0a:37:79: 12:bd:2c:02:55:b4:79:a2:95:08:0d:7b:bc:54:c4:c9:fa:29: e9:4b:dc:b5:ed:41:2a:7d:fe:d9:72:bf:e2:18:88:d3:91:1d: bc:31:cc:55:7f:5c:15:c0:1a:51:4f:99:41:18:ea:31:5c:e2: 45:72:23:e0:f3:19:f7:38:62:2c:53:40:47:d4:6d:98:23:bd: f7:38:97:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZMGaklhs/S5pAs2tZR36nOFZnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNTA1MDgwMzA1MzNaFw0yNTA1MTExMzA4MzNaMDMxMTAvBgNV BAMTKDJBOTI5Qzg5MkRBQTVDQjAxMTM3NDk1MEEyNTBEMjQxMzY0OUVDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCi4zE7V5vBnHYtDWgfi/Q7FO5 tSqu+X+DP4hQOLxyjNo31z82CLtloyeUVXE05LQ7imwGkvR+ldWWM6qhjAuSVQoi Hg6p9nx8pLxodiUrb/St5E5vNuez+ksIVhGl19GK8ax1IysVjIsFv2EiPz5fbnlB f8DYcw7RpkLjq6ELac1jhVpcKAiaxLaDMBxMbEQeUCK4/svrhYIpX8jxu4fXHCII e+mmzMv4rJA27e7zxYqJrN86mOK0kdWs5T+k/IyEScr1DpuSalpbKL2Gvuihzon+ Wg9epaZHvQcCnqS54vHg+7gp1jlwEhWQsug5fhugQHmIkDQ9fZ0aL7IEEuvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKpKciS2qXLARN0lQolDSQTZJ7OwwHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4xtMSEC2m4nV87CMReFIFtOr8Ezd6YWXrq IBN1jKLPtDsOgPQbFmzgPcPRi5M0zEuMN7GmdpKMKc1XohnZravzRMxLGYuTZWZg b+6Lb3D6MDNUtbctXk6L0HoOuUGoZqEr9QfgX/P2J7HzIPzc+4wHLLO+P0/cEVcT MAPjRehexklbaeGCTFZmtxKXfh8eA5XV7vL3VKRmuHklrL9qs1bgj/PO62nMaGn0 yrCHUQXEmAo3eRK9LAJVtHmilQgNe7xUxMn6KelL3LXtQSp9/tlyv+IYiNORHbwx zFV/XBXAGlFPmUEY6jFc4kVyI+DzGfc4YixTQEfUbZgjvfc4l6Q= -----END CERTIFICATE-----Generated at Fri May 9 08:51:02 2025 by rpki-client