$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: VlfBwg/LyDvQ0x2eYdBzVwBij3aWxSRNXHmANqy170U= Subject key identifier: 0F:85:2E:39:3B:9F:62:45:B3:B0:62:0C:2A:1C:49:73:43:A2:34:3A Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 1177FD776FA7AD3B69390398CC00F4FB36E4E3FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 04EA Signing time: Sat 28 Jun 2025 19:01:53 +0000 Manifest this update: Sat 28 Jun 2025 18:56:53 +0000 Manifest next update: Wed 02 Jul 2025 03:52:53 +0000 Files and hashes: 1: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: jb+zZW68X2lBBqw+Tke1H+DjZKrA2j90+80BJ14FsRA=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 3: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 4: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:77:fd:77:6f:a7:ad:3b:69:39:03:98:cc:00:f4:fb:36:e4:e3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Jun 28 18:56:53 2025 GMT Not After : Jul 2 03:52:53 2025 GMT Subject: CN=0F852E393B9F6245B3B0620C2A1C497343A2343A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:c3:e3:8b:ec:29:8f:8d:74:b9:c3:cd:8f: 59:e9:6e:e6:c5:b5:14:e0:35:fc:a4:2e:a6:a9:93: c1:18:48:d6:5b:c9:f1:48:48:8a:05:f6:43:8c:6e: 47:ac:74:35:c7:a5:ab:6d:66:2b:39:3d:39:58:49: 59:b5:ae:36:40:18:2b:a2:eb:4c:5c:a8:56:99:f8: a7:ee:a7:c2:72:f5:27:09:49:70:ad:e9:24:08:63: 86:1c:d3:7f:d7:9e:1f:51:1f:1d:5c:10:25:11:6d: 17:88:28:e1:63:3c:1c:24:3b:8b:32:80:4c:78:d7: 84:c4:65:62:3c:28:44:5b:35:fc:c7:a2:f3:f3:95: 8e:b9:65:2e:ca:96:c6:9e:5c:0e:4a:f6:17:96:2f: 7e:d9:3d:9b:b3:07:ea:7e:17:a2:58:85:30:e7:55: 45:4c:64:b1:14:90:ed:72:22:99:8a:91:80:f4:5a: 9a:7a:6b:91:12:be:42:4b:79:12:5f:ca:04:0c:e4: 64:e1:27:22:d8:c3:38:4e:bc:f2:6d:76:b6:d3:7b: 28:1a:3d:75:c0:34:d3:eb:4f:b1:36:41:97:c4:e4: 44:cc:33:b6:41:78:90:bc:71:36:9c:dc:b2:c6:fb: 92:54:2f:e3:92:26:1a:c9:d7:97:87:c1:12:dd:7f: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:85:2E:39:3B:9F:62:45:B3:B0:62:0C:2A:1C:49:73:43:A2:34:3A X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b7:01:2b:31:41:d7:f8:cf:99:89:1b:40:7e:1d:f9:9a:0a: b6:1b:d6:1f:de:7b:cb:d6:b5:6f:92:61:f6:64:31:20:9a:97: 43:d5:22:c2:de:2d:c4:bd:d6:41:fe:8d:c1:74:bb:15:f6:70: c2:1c:51:8c:b9:88:e7:d9:af:a5:da:1d:65:89:b8:fb:91:47: 1b:87:57:b2:ba:b3:15:4c:b6:df:2e:08:49:73:b7:01:94:24: 37:22:f6:ff:11:3d:ea:0d:f0:ee:38:3e:c7:5f:21:85:bc:55: cc:ba:d9:63:45:bc:25:0b:78:4f:9b:72:d2:5f:4f:0e:05:04: 82:a3:09:e8:e1:37:b1:f0:1d:b0:d9:75:aa:45:cb:8f:a4:0f: 7a:21:5e:f3:a8:e3:0a:7d:f8:80:b5:33:20:8e:b4:9f:bc:56: 74:fe:94:58:f5:39:fe:81:8f:35:29:d7:87:6f:91:d7:ae:7f: 13:0d:55:ee:53:30:83:28:65:0c:a9:24:60:6c:da:99:07:ce: 96:8a:35:b5:02:5b:2a:c5:8e:d6:e7:75:f2:64:93:da:b7:e2: 07:82:37:57:4f:0d:4e:85:60:8f:8f:2f:e1:88:00:77:7e:7d: 2e:50:e7:ac:f6:af:49:8d:d8:59:59:53:10:94:57:86:37:ba: f5:a1:22:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXf9d2+nrTtpOQOYzAD0+zbk4/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA2MjgxODU2NTNaFw0yNTA3MDIwMzUyNTNaMDMxMTAvBgNV BAMTKDBGODUyRTM5M0I5RjYyNDVCM0IwNjIwQzJBMUM0OTczNDNBMjM0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EcPji+wpj410ucPNj1npbubF tRTgNfykLqapk8EYSNZbyfFISIoF9kOMbkesdDXHpattZis5PTlYSVm1rjZAGCui 60xcqFaZ+Kfup8Jy9ScJSXCt6SQIY4Yc03/Xnh9RHx1cECURbReIKOFjPBwkO4sy gEx414TEZWI8KERbNfzHovPzlY65ZS7KlsaeXA5K9heWL37ZPZuzB+p+F6JYhTDn VUVMZLEUkO1yIpmKkYD0Wpp6a5ESvkJLeRJfygQM5GThJyLYwzhOvPJtdrbTeyga PXXANNPrT7E2QZfE5ETMM7ZBeJC8cTac3LLG+5JUL+OSJhrJ15eHwRLdf6DxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4UuOTufYkWzsGIMKhxJc0OiNDowHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi3ASsxQdf4z5mJG0B+HfmaCrYb1h/ee8vW tW+SYfZkMSCal0PVIsLeLcS91kH+jcF0uxX2cMIcUYy5iOfZr6XaHWWJuPuRRxuH V7K6sxVMtt8uCElztwGUJDci9v8RPeoN8O44PsdfIYW8Vcy62WNFvCULeE+bctJf Tw4FBIKjCejhN7HwHbDZdapFy4+kD3ohXvOo4wp9+IC1MyCOtJ+8VnT+lFj1Of6B jzUp14dvkdeufxMNVe5TMIMoZQypJGBs2pkHzpaKNbUCWyrFjtbndfJkk9q34geC N1dPDU6FYI+PL+GIAHd+fS5Q56z2r0mN2FlZUxCUV4Y3uvWhIpE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:31 2025 by rpki-client