$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: p13dpJ0PbIem43QFNidp+hT3RzJgvPsDOBkVxlQkV1A= Subject key identifier: DB:94:49:4C:32:38:A4:53:DD:2E:A4:51:34:16:72:16:6C:05:2E:B4 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 37263FD70906B1E5E80B5E2F4982438ECF53F1FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 0503 Signing time: Sat 23 Aug 2025 04:51:42 +0000 Manifest this update: Sat 23 Aug 2025 04:46:42 +0000 Manifest next update: Tue 26 Aug 2025 14:53:42 +0000 Files and hashes: 1: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: WwAxhSaWE/dBvyuQR/aC9nb+Ofu28uLMud8OrI6nKww=) 2: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) 3: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) 4: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 5: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:26:3f:d7:09:06:b1:e5:e8:0b:5e:2f:49:82:43:8e:cf:53:f1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Aug 23 04:46:42 2025 GMT Not After : Aug 26 14:53:42 2025 GMT Subject: CN=DB94494C3238A453DD2EA451341672166C052EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:a7:3f:95:ec:eb:81:c2:16:7b:d5:91:2d: f6:3e:4e:97:68:78:9b:39:a3:77:a7:ee:a6:65:4a: 38:e6:91:e9:49:ad:3b:2f:6d:d5:8f:9e:3e:56:ca: 24:b9:ac:5f:47:8a:47:f9:df:14:99:d0:44:00:20: fa:fa:4a:8c:f8:91:d0:50:fc:9b:0b:d0:fc:75:2f: 01:d8:5f:4a:d7:d5:b3:61:b6:da:b6:42:5f:80:97: 12:d1:7b:96:00:b2:f6:16:b8:4e:85:9e:18:57:84: 6a:1c:c7:90:44:aa:04:d3:bf:52:b7:08:6c:4c:e0: 19:4c:44:5d:ec:77:1f:30:3d:fb:db:91:1a:af:15: c7:10:3a:df:75:5b:a4:1b:8b:0e:67:69:79:89:80: af:81:fb:48:90:2b:28:e5:12:03:21:80:3a:ee:68: cc:ea:ab:e1:ff:c8:a3:da:0f:c7:dc:86:15:e8:09: 75:2f:cc:a5:b2:00:a3:68:52:55:19:92:5e:7a:f9: 33:d9:f9:b5:7f:d3:78:99:8e:3e:41:a4:ec:58:46: f2:54:5b:df:19:31:1e:53:9c:c6:13:9e:a8:66:92: d2:fc:c2:fb:06:ea:1b:85:bc:cf:0b:be:43:30:28: de:78:d8:ee:49:e1:23:63:81:12:94:a3:10:22:8e: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:94:49:4C:32:38:A4:53:DD:2E:A4:51:34:16:72:16:6C:05:2E:B4 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:af:1a:08:9f:0e:04:5f:f0:21:13:91:b7:b4:f0:02:83: 32:07:4f:64:a8:80:6f:db:df:cd:fb:a3:51:e2:09:41:92:9d: 3f:e9:52:15:c5:1e:65:19:d3:42:46:ee:17:0e:fb:76:80:43: bf:09:9e:d1:58:f5:47:29:95:84:ae:be:00:83:de:8b:23:87: 34:54:21:54:00:63:74:4c:56:0f:85:04:63:7c:a0:f7:d9:47: 6a:90:01:6a:a1:49:92:f4:24:f9:7e:fe:80:1e:94:a3:59:89: 93:bc:55:90:d9:b0:83:eb:f0:e8:d4:fa:f4:60:ad:79:8a:a6: 69:03:87:77:30:bc:78:85:47:8f:3e:67:5f:45:b5:09:b5:b7: 40:b2:0e:0c:ef:e8:ab:a4:c1:b7:77:30:99:d8:4b:61:a7:62: 88:97:b9:ac:60:f7:7b:c3:ab:61:bd:bd:3f:dc:ac:72:b1:ca: c7:12:83:f7:2c:2c:9c:f6:bc:2f:e5:83:07:18:56:f8:2f:4a: 5d:50:e3:24:02:0b:37:5d:b2:5e:cc:86:fe:91:e9:ab:60:c7: f5:f4:76:3f:1e:41:ff:70:19:ce:d7:b5:3a:bb:3c:a6:39:fb: bf:38:81:98:fd:17:d0:0a:8b:bd:49:5b:79:ff:25:0d:82:13: 32:00:fb:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNyY/1wkGseXoC14vSYJDjs9T8f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA4MjMwNDQ2NDJaFw0yNTA4MjYxNDUzNDJaMDMxMTAvBgNV BAMTKERCOTQ0OTRDMzIzOEE0NTNERDJFQTQ1MTM0MTY3MjE2NkMwNTJFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7Kc/lezrgcIWe9WRLfY+Tpdo eJs5o3en7qZlSjjmkelJrTsvbdWPnj5WyiS5rF9Hikf53xSZ0EQAIPr6Soz4kdBQ /JsL0Px1LwHYX0rX1bNhttq2Ql+AlxLRe5YAsvYWuE6FnhhXhGocx5BEqgTTv1K3 CGxM4BlMRF3sdx8wPfvbkRqvFccQOt91W6Qbiw5naXmJgK+B+0iQKyjlEgMhgDru aMzqq+H/yKPaD8fchhXoCXUvzKWyAKNoUlUZkl56+TPZ+bV/03iZjj5BpOxYRvJU W98ZMR5TnMYTnqhmktL8wvsG6huFvM8LvkMwKN542O5J4SNjgRKUoxAijhpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25RJTDI4pFPdLqRRNBZyFmwFLrQwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt1rxoInw4EX/AhE5G3tPACgzIHT2SogG/b 3837o1HiCUGSnT/pUhXFHmUZ00JG7hcO+3aAQ78JntFY9UcplYSuvgCD3osjhzRU IVQAY3RMVg+FBGN8oPfZR2qQAWqhSZL0JPl+/oAelKNZiZO8VZDZsIPr8OjU+vRg rXmKpmkDh3cwvHiFR48+Z19FtQm1t0CyDgzv6Kukwbd3MJnYS2GnYoiXuaxg93vD q2G9vT/crHKxyscSg/csLJz2vC/lgwcYVvgvSl1Q4yQCCzddsl7Mhv6R6atgx/X0 dj8eQf9wGc7XtTq7PKY5+784gZj9F9AKi71JW3n/JQ2CEzIA+8o= -----END CERTIFICATE-----Generated at Sat Aug 23 18:29:07 2025 by rpki-client