$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: 9j+vEARK0n5wWPCuu4iy3DY6bByhmRJe+ciUSwj6398= Subject key identifier: 56:27:0D:BE:1D:79:EE:86:C2:96:31:E2:83:A6:1B:56:CF:BF:6C:10 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 070A2E1E68CDF70E892C62EE37607AE145D41726 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 051C Signing time: Sun 19 Oct 2025 04:01:43 +0000 Manifest this update: Sun 19 Oct 2025 03:56:43 +0000 Manifest next update: Wed 22 Oct 2025 11:45:43 +0000 Files and hashes: 1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) 4: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: kpPz/gE8JT88LiK59PGomOL8muY4eSMtdKjPWBYzJiw=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0a:2e:1e:68:cd:f7:0e:89:2c:62:ee:37:60:7a:e1:45:d4:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Oct 19 03:56:43 2025 GMT Not After : Oct 22 11:45:43 2025 GMT Subject: CN=56270DBE1D79EE86C29631E283A61B56CFBF6C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:56:ff:ae:f5:c2:50:b7:26:59:79:72:12: 12:e2:23:f5:e6:1e:52:c8:68:83:f1:87:57:3d:92: 80:f7:d9:9b:68:15:51:9e:29:d8:ef:2c:25:73:e3: 69:ce:18:b6:b0:33:ad:00:04:81:59:d4:fc:06:77: 35:82:c5:1e:e4:67:e8:a6:46:e7:25:91:da:54:4d: 98:67:14:b2:5b:6a:7e:97:3a:08:65:e5:68:3e:ba: de:ff:14:14:88:53:bd:db:12:53:7f:f9:e7:40:82: e7:d5:0e:eb:95:2c:97:69:89:d6:54:87:14:8b:18: 9a:52:a2:d2:52:0c:9c:d6:28:5e:b4:73:64:63:7b: 4f:3a:36:f4:c7:34:83:f4:51:c3:42:9d:83:04:2b: 71:c1:16:ee:2a:ed:15:b4:5e:62:6f:c1:15:8a:bc: 79:83:82:fd:a8:cb:9a:f1:1b:48:81:31:93:9a:78: b6:0f:c0:52:2a:04:f0:36:58:7d:bc:d6:20:2d:bc: bd:17:4e:03:b1:0c:37:01:83:75:27:e8:42:c6:53: 06:c7:7d:fe:f9:eb:24:aa:c3:d1:25:86:4d:7f:89: 4a:ba:16:88:9e:ce:2b:e8:73:76:6d:ba:d7:2d:26: 81:56:e5:ba:af:4c:f5:54:40:95:08:95:d8:f4:76: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:27:0D:BE:1D:79:EE:86:C2:96:31:E2:83:A6:1B:56:CF:BF:6C:10 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c6:62:33:8c:84:80:41:f1:fd:0e:45:9e:bc:d2:d8:95:4e: 58:74:63:5c:36:4f:f6:56:20:ec:83:4f:9a:07:6d:b7:90:2e: 92:58:8d:2d:87:c7:d0:da:a4:17:ed:cc:cd:65:3e:a9:26:32: 4f:64:2c:02:28:a9:69:a5:33:56:bf:9c:0d:2a:03:8f:e4:f4: 1d:ee:e6:ce:db:73:b2:59:dd:6e:bd:64:29:67:16:ea:69:11: ba:1a:e1:73:26:55:19:e4:9c:09:3f:e1:a8:51:29:4d:f0:25: 9e:f5:6f:53:be:5e:1a:3b:c9:8d:67:a1:ce:ff:6a:60:9b:d2: ed:3a:6e:47:9e:0c:84:67:3a:a9:11:87:aa:1b:79:1b:10:69: 06:9f:cc:b3:c2:e3:2e:be:34:77:88:19:79:5f:d8:0f:fa:51: 23:f0:de:f7:a3:7a:fe:76:34:f3:5a:7f:99:68:a3:45:05:af: 4f:fe:c5:55:ce:ed:de:1b:d4:3a:d7:0a:e2:80:01:05:05:00: d5:02:20:ae:b8:76:59:ed:ba:03:d2:80:b7:e0:8c:a0:39:a7: d4:78:9b:30:e3:f6:23:26:68:27:50:a7:e3:5c:68:b4:8c:2d: 44:92:e6:3b:c5:5f:79:ce:8a:91:fc:32:58:6f:0e:04:c8:f3: 82:b1:bf:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwouHmjN9w6JLGLuN2B64UXUFyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTEwMTkwMzU2NDNaFw0yNTEwMjIxMTQ1NDNaMDMxMTAvBgNV BAMTKDU2MjcwREJFMUQ3OUVFODZDMjk2MzFFMjgzQTYxQjU2Q0ZCRjZDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKVb/rvXCULcmWXlyEhLiI/Xm HlLIaIPxh1c9koD32ZtoFVGeKdjvLCVz42nOGLawM60ABIFZ1PwGdzWCxR7kZ+im RuclkdpUTZhnFLJban6XOghl5Wg+ut7/FBSIU73bElN/+edAgufVDuuVLJdpidZU hxSLGJpSotJSDJzWKF60c2Rje086NvTHNIP0UcNCnYMEK3HBFu4q7RW0XmJvwRWK vHmDgv2oy5rxG0iBMZOaeLYPwFIqBPA2WH281iAtvL0XTgOxDDcBg3Un6ELGUwbH ff756ySqw9Elhk1/iUq6Foiezivoc3ZtutctJoFW5bqvTPVUQJUIldj0dtCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVicNvh157obCljHig6YbVs+/bBAwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzGYjOMhIBB8f0ORZ680tiVTlh0Y1w2T/ZW IOyDT5oHbbeQLpJYjS2Hx9DapBftzM1lPqkmMk9kLAIoqWmlM1a/nA0qA4/k9B3u 5s7bc7JZ3W69ZClnFuppEboa4XMmVRnknAk/4ahRKU3wJZ71b1O+Xho7yY1noc7/ amCb0u06bkeeDIRnOqkRh6obeRsQaQafzLPC4y6+NHeIGXlf2A/6USPw3vejev52 NPNaf5loo0UFr0/+xVXO7d4b1DrXCuKAAQUFANUCIK64dlntugPSgLfgjKA5p9R4 mzDj9iMmaCdQp+NcaLSMLUSS5jvFX3nOipH8MlhvDgTI84Kxv9w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:13 2025 by rpki-client