$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: N8cKpgq0whQzE3zODQtHdKu4G/zUdWGQ9W1/menhDpA= Subject key identifier: 17:95:B0:21:F5:0C:D7:46:3B:1D:27:D1:6A:39:BC:1B:50:BF:15:CE Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 47BA7B53AF676B2FF6B182AC468928E37D4A5BF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 012F Signing time: Fri 22 Aug 2025 16:40:53 +0000 Manifest this update: Fri 22 Aug 2025 16:35:53 +0000 Manifest next update: Tue 26 Aug 2025 01:25:53 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: 6W8tlTTd6wEO7FVcG6X37vPcIRhkOI1nGzJ9fkKKtLM=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: lba1v4z7nYWbnoK/4kTVSAyDKKCR7EsAIZ4ZYjgIw60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ba:7b:53:af:67:6b:2f:f6:b1:82:ac:46:89:28:e3:7d:4a:5b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Aug 22 16:35:53 2025 GMT Not After : Aug 26 01:25:53 2025 GMT Subject: CN=1795B021F50CD7463B1D27D16A39BC1B50BF15CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:55:a1:a9:f6:96:1b:93:6d:95:f1:38:b3: 6f:df:af:04:71:2f:31:0a:2e:ca:f6:27:cf:0a:2d: 4a:5a:43:a8:b6:a2:a0:d3:42:99:e8:12:ed:07:30: fc:d6:72:e2:79:18:9b:ab:9d:6e:cb:40:28:57:e7: da:cb:57:77:c3:49:21:d8:46:2f:eb:39:6d:af:6d: 0f:28:76:28:33:4f:80:16:4e:d0:50:29:e5:e2:64: 55:c4:c1:46:57:ad:9c:ad:b6:58:ea:12:2a:04:08: 1a:e2:56:44:b1:48:d5:4a:87:7b:a4:e5:95:bc:4b: 8f:e3:0f:71:d1:30:82:fc:32:b7:37:81:3b:ca:c2: b5:7f:54:e8:4e:69:14:d8:69:71:72:44:c8:bc:92: 93:e5:9d:1b:4b:ec:6e:29:4a:b6:48:f2:09:09:9f: f0:8b:be:c3:a8:c0:dd:9d:d4:11:49:64:a4:f3:90: 40:ba:39:fb:7e:4f:94:e4:8d:36:8e:04:0d:1c:1a: 82:dd:86:53:5d:b2:97:b6:56:f5:8b:95:29:e8:e5: 8c:ff:4b:b7:db:17:37:58:65:00:f2:1f:ed:ae:34: d1:05:88:cf:69:00:f9:20:1f:85:b7:4f:fc:df:41: 19:b5:51:2c:d0:1a:04:a4:ae:82:b7:1d:1b:ac:c9: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:95:B0:21:F5:0C:D7:46:3B:1D:27:D1:6A:39:BC:1B:50:BF:15:CE X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:81:64:2a:72:f1:94:20:00:44:66:a2:8c:fb:34:e0:62:05: 46:eb:69:48:f8:80:08:7e:62:f8:1d:15:6b:5f:57:79:ec:91: 80:03:7f:83:80:d9:3f:2f:f3:13:16:3b:74:d6:e2:5c:d8:61: 2b:2e:cf:6b:32:02:02:60:e6:ec:25:c4:35:e7:c8:ca:09:cb: c8:8e:bd:f8:a3:e4:13:36:ee:dd:a5:bc:33:ba:f5:84:69:4a: 30:04:56:ca:a3:94:05:ef:66:22:ab:4c:a5:c8:f0:f3:2f:bb: 8a:c7:c3:9d:69:e3:3b:7a:a6:1c:f9:08:80:df:bb:7f:7e:a0: 76:2f:15:31:08:ec:14:1b:79:72:ac:cc:82:96:25:7a:12:fa: 1a:be:97:39:f1:85:00:ef:2d:8a:5b:7d:da:fe:d9:42:bf:c2: 51:0a:e0:26:77:1f:49:e8:24:0b:bc:9e:02:cf:68:72:bd:63: 86:a1:04:8a:52:5a:ca:a7:cc:d3:5c:dd:6c:82:30:8d:e7:fc: fb:20:69:e0:f6:2a:6b:02:86:c6:c2:6e:82:1b:5f:19:e8:77: c8:4d:af:cf:2b:5a:8b:ea:42:69:67:5f:91:66:4c:43:cc:d3: 5b:a4:b3:6c:7e:32:93:3c:c3:ae:d8:eb:18:02:81:32:51:b1: e8:ff:57:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7p7U69nay/2sYKsRoko431KW/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTA4MjIxNjM1NTNaFw0yNTA4MjYwMTI1NTNaMDMxMTAvBgNV BAMTKDE3OTVCMDIxRjUwQ0Q3NDYzQjFEMjdEMTZBMzlCQzFCNTBCRjE1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJw1WhqfaWG5NtlfE4s2/frwRx LzEKLsr2J88KLUpaQ6i2oqDTQpnoEu0HMPzWcuJ5GJurnW7LQChX59rLV3fDSSHY Ri/rOW2vbQ8odigzT4AWTtBQKeXiZFXEwUZXrZyttljqEioECBriVkSxSNVKh3uk 5ZW8S4/jD3HRMIL8Mrc3gTvKwrV/VOhOaRTYaXFyRMi8kpPlnRtL7G4pSrZI8gkJ n/CLvsOowN2d1BFJZKTzkEC6Oft+T5TkjTaOBA0cGoLdhlNdspe2VvWLlSno5Yz/ S7fbFzdYZQDyH+2uNNEFiM9pAPkgH4W3T/zfQRm1USzQGgSkroK3HRusyaMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF5WwIfUM10Y7HSfRajm8G1C/Fc4wHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKBZCpy8ZQgAERmooz7NOBiBUbraUj4gAh+ YvgdFWtfV3nskYADf4OA2T8v8xMWO3TW4lzYYSsuz2syAgJg5uwlxDXnyMoJy8iO vfij5BM27t2lvDO69YRpSjAEVsqjlAXvZiKrTKXI8PMvu4rHw51p4zt6phz5CIDf u39+oHYvFTEI7BQbeXKszIKWJXoS+hq+lznxhQDvLYpbfdr+2UK/wlEK4CZ3H0no JAu8ngLPaHK9Y4ahBIpSWsqnzNNc3WyCMI3n/PsgaeD2KmsChsbCboIbXxnod8hN r88rWovqQmlnX5FmTEPM01uks2x+MpM8w67Y6xgCgTJRsej/V7I= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:13 2025 by rpki-client