$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: uW7Fcd9irmynJsd2cxSZ0XNaBSJ+cE7lABKbblU5lD4= Subject key identifier: 87:52:53:57:96:1A:FC:F7:81:B6:6B:CA:67:3A:13:0F:F4:B5:B4:AE Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 3B13E43346C57DC267243E7BB024EDC5C5A195DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 0117 Signing time: Tue 01 Jul 2025 04:40:48 +0000 Manifest this update: Tue 01 Jul 2025 04:35:48 +0000 Manifest next update: Fri 04 Jul 2025 04:58:48 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: tjRkp2q69TZAATtZf2RXP/SP9WK02uYw0fNEkE8eQt4=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: XSreqIJljknfOIObygSCrMVbPXNgjuTPQtrsZby6wgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:13:e4:33:46:c5:7d:c2:67:24:3e:7b:b0:24:ed:c5:c5:a1:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Jul 1 04:35:48 2025 GMT Not After : Jul 4 04:58:48 2025 GMT Subject: CN=87525357961AFCF781B66BCA673A130FF4B5B4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:1e:1a:0f:6e:ce:9d:4d:90:d3:68:1f:f3: f8:df:4d:b8:2c:73:8a:d9:e3:25:00:e8:22:a7:3e: bc:85:6a:20:ec:9a:a5:ca:2b:15:42:30:2d:d1:72: 76:1c:3e:04:49:58:73:c5:72:e3:e5:9e:5e:54:b6: 90:21:c5:7e:2c:2b:73:97:de:1a:e2:c3:57:36:a1: 25:a3:f7:bd:26:c0:7c:65:87:16:62:8c:b7:1b:7a: a9:b3:b8:42:bd:89:59:b6:e7:d2:44:11:dd:65:47: 65:e4:c9:99:91:7f:ff:2f:33:f0:21:69:06:c8:d9: 2f:fa:b0:6d:41:2a:ae:25:e5:d8:41:8a:1c:ab:8b: 49:57:34:c6:08:73:c7:7e:5e:3a:10:08:28:04:41: af:8b:c9:c3:bd:e3:90:2b:3b:86:83:34:87:43:a2: 32:9f:64:82:60:5d:91:46:af:4a:46:e7:de:c3:17: 3c:18:62:8e:a5:8f:18:37:48:e8:c9:ed:14:a4:06: ef:ec:fd:5a:86:96:1f:31:73:fb:4c:33:98:da:7f: b9:4e:cf:44:37:f8:0e:cd:19:81:db:1f:42:39:61: 07:4c:95:b4:7b:86:ea:d1:30:33:6b:94:2c:56:af: 66:b2:42:7b:2b:0d:f4:c3:f8:fc:0e:a2:37:e7:ee: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:53:57:96:1A:FC:F7:81:B6:6B:CA:67:3A:13:0F:F4:B5:B4:AE X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b7:88:de:40:43:57:e9:19:f1:df:ba:28:1b:ee:87:69:a0: 60:87:6e:1d:7d:60:e9:a7:b6:1f:75:c6:27:26:9f:5e:b7:ea: 24:09:b7:00:ea:fd:93:8d:fc:b3:a2:72:bb:74:bc:94:f6:55: fb:cd:b1:3e:ba:a0:00:99:b1:d5:a3:2c:08:68:b2:3d:17:0f: bf:01:33:9c:3d:05:2f:a6:07:59:66:90:18:06:84:6f:09:92: 5e:b3:a5:6e:b2:d6:91:b0:0f:41:fa:3d:c4:c1:57:ba:d1:1f: 47:4d:98:1b:d2:b5:85:67:ef:64:e7:6d:6f:43:52:93:87:2a: b2:7a:e0:ad:02:17:a1:ef:ae:96:9f:d8:08:b3:a8:d0:5e:a9: fd:5a:70:a8:33:80:4d:e5:06:48:d1:88:ab:90:c3:77:74:88: bc:25:8f:16:8e:9c:82:05:03:84:1a:89:b1:e8:cc:aa:0f:ed: 7e:93:f1:9f:88:80:ea:7b:9c:fe:ec:c2:58:12:69:77:d4:2b: 05:4b:1c:0f:7e:1f:e9:ed:05:2f:02:1e:4d:aa:fa:7d:48:9d: 74:8e:da:41:9c:65:52:2a:b5:55:49:b1:32:4c:8e:1b:97:c0: a9:c1:a5:7f:14:17:17:2f:c9:14:57:37:96:c2:da:53:7e:30: 14:a6:49:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxPkM0bFfcJnJD57sCTtxcWhldswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTA3MDEwNDM1NDhaFw0yNTA3MDQwNDU4NDhaMDMxMTAvBgNV BAMTKDg3NTI1MzU3OTYxQUZDRjc4MUI2NkJDQTY3M0ExMzBGRjRCNUI0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzx4aD27OnU2Q02gf8/jfTbgs c4rZ4yUA6CKnPryFaiDsmqXKKxVCMC3RcnYcPgRJWHPFcuPlnl5UtpAhxX4sK3OX 3hriw1c2oSWj970mwHxlhxZijLcbeqmzuEK9iVm259JEEd1lR2XkyZmRf/8vM/Ah aQbI2S/6sG1BKq4l5dhBihyri0lXNMYIc8d+XjoQCCgEQa+LycO945ArO4aDNIdD ojKfZIJgXZFGr0pG597DFzwYYo6ljxg3SOjJ7RSkBu/s/VqGlh8xc/tMM5jaf7lO z0Q3+A7NGYHbH0I5YQdMlbR7hurRMDNrlCxWr2ayQnsrDfTD+PwOojfn7lDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh1JTV5Ya/PeBtmvKZzoTD/S1tK4wHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK3iN5AQ1fpGfHfuigb7odpoGCHbh19YOmn th91xicmn1636iQJtwDq/ZON/LOicrt0vJT2VfvNsT66oACZsdWjLAhosj0XD78B M5w9BS+mB1lmkBgGhG8Jkl6zpW6y1pGwD0H6PcTBV7rRH0dNmBvStYVn72TnbW9D UpOHKrJ64K0CF6Hvrpaf2AizqNBeqf1acKgzgE3lBkjRiKuQw3d0iLwljxaOnIIF A4QaibHozKoP7X6T8Z+IgOp7nP7swlgSaXfUKwVLHA9+H+ntBS8CHk2q+n1InXSO 2kGcZVIqtVVJsTJMjhuXwKnBpX8UFxcvyRRXN5bC2lN+MBSmSdA= -----END CERTIFICATE-----Generated at Thu Jul 3 03:36:26 2025 by rpki-client