$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: eHBw1pPLfUHIRInarDDp8v5jrEQ5JGft+OK52ZXuYCg= Subject key identifier: 33:71:D6:09:E6:76:37:C9:E2:AC:B4:00:1A:29:65:A6:4D:85:81:69 Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 3816E8C53082322F5EE77B53291969C20E5EB15E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: 0149 Signing time: Sun 19 Oct 2025 20:20:50 +0000 Manifest this update: Sun 19 Oct 2025 20:15:50 +0000 Manifest next update: Thu 23 Oct 2025 03:30:50 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: ALcO3DaAkcSRJp/VeOrB6tOakNcNpVt/ocxiMUWUb0M=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: lba1v4z7nYWbnoK/4kTVSAyDKKCR7EsAIZ4ZYjgIw60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:16:e8:c5:30:82:32:2f:5e:e7:7b:53:29:19:69:c2:0e:5e:b1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Oct 19 20:15:50 2025 GMT Not After : Oct 23 03:30:50 2025 GMT Subject: CN=3371D609E67637C9E2ACB4001A2965A64D858169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:3b:8c:91:0a:a0:e2:81:2b:26:70:3c:8f: 8a:83:ff:d3:a5:8f:ba:66:8d:34:08:ba:e0:46:53: 97:9c:7d:bc:09:da:9e:2f:91:0d:a2:85:22:01:b7: af:0b:9f:c4:9b:c7:39:7b:15:ec:06:7e:e5:61:34: ea:aa:70:d1:3b:92:0f:52:ba:2b:0a:27:7e:9f:bf: b1:38:ed:10:5b:19:4a:66:1e:1c:99:d1:48:04:e9: 9b:36:8d:e3:df:c5:51:8f:d9:05:ea:f5:5f:3f:e8: 09:66:ea:ea:57:db:1f:f3:2b:92:e3:f2:54:bd:3d: 4c:44:e9:45:41:cd:a0:fe:10:3b:41:5f:d0:5e:7a: 38:23:d2:52:50:b3:f6:7a:27:c4:46:2a:55:0a:47: 00:8e:6c:d3:7d:e5:2c:54:21:5e:19:f3:cf:af:e1: dc:ec:19:f8:50:bc:45:0d:40:bb:e8:4a:06:4f:65: 0d:46:14:f8:b2:30:b0:4b:dc:cd:24:e8:28:af:42: 22:04:50:53:e3:bb:d2:7f:d4:b9:fc:b7:af:de:18: a6:09:b9:34:69:11:10:e7:9a:e2:ca:23:df:cd:7b: 3f:89:ee:ac:93:4b:02:9e:24:11:39:aa:f6:e7:62: ed:92:58:a5:91:7b:4c:e9:be:fc:8a:1c:b4:a8:07: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:71:D6:09:E6:76:37:C9:E2:AC:B4:00:1A:29:65:A6:4D:85:81:69 X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:28:e3:e8:77:44:ba:1d:96:88:db:4b:05:12:61:a0:6c:e0: 85:df:b9:6c:9c:fe:36:85:c2:25:9f:06:c2:12:c7:49:0e:f3: 61:9f:6a:78:92:c1:e3:6a:63:24:d3:0a:bb:d9:e2:0c:62:1a: 27:4d:8d:aa:0b:b3:b6:60:48:8e:20:4b:61:5d:86:a2:76:73: c6:d6:23:b4:e0:bb:f2:34:16:c1:97:74:55:3c:80:1a:c2:f3: 8c:7f:62:0c:7e:fe:4a:ab:c2:1f:f9:5b:76:cb:14:46:b2:86: c2:79:c2:cb:56:f4:cc:01:f8:9e:dc:be:aa:af:e9:2d:ba:42: f0:08:3a:90:b3:77:99:f2:ac:fc:5f:49:e9:88:04:d7:39:05: 09:82:90:7a:af:e4:f7:c8:cf:15:9d:16:66:7a:0b:f2:5a:81: 27:bc:b8:5b:6a:fa:20:ea:22:f8:b9:2e:2a:70:29:74:f2:da: d3:16:9c:dd:13:5e:62:d6:72:08:10:a3:4f:14:ae:76:16:62: 14:6f:fc:f4:9b:96:f7:31:3d:e5:9c:76:1a:43:f3:87:b8:50: 6b:9d:e0:0e:61:86:12:e5:44:71:39:00:bb:d0:7e:47:bd:8f: 40:e0:98:f1:67:b4:d0:b9:c2:a3:8e:12:fb:fc:af:40:13:93: c2:fc:aa:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBboxTCCMi9e53tTKRlpwg5esV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTEwMTkyMDE1NTBaFw0yNTEwMjMwMzMwNTBaMDMxMTAvBgNV BAMTKDMzNzFENjA5RTY3NjM3QzlFMkFDQjQwMDFBMjk2NUE2NEQ4NTgxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0DuMkQqg4oErJnA8j4qD/9Ol j7pmjTQIuuBGU5ecfbwJ2p4vkQ2ihSIBt68Ln8Sbxzl7FewGfuVhNOqqcNE7kg9S uisKJ36fv7E47RBbGUpmHhyZ0UgE6Zs2jePfxVGP2QXq9V8/6Alm6upX2x/zK5Lj 8lS9PUxE6UVBzaD+EDtBX9Beejgj0lJQs/Z6J8RGKlUKRwCObNN95SxUIV4Z88+v 4dzsGfhQvEUNQLvoSgZPZQ1GFPiyMLBL3M0k6CivQiIEUFPju9J/1Ln8t6/eGKYJ uTRpERDnmuLKI9/Nez+J7qyTSwKeJBE5qvbnYu2SWKWRe0zpvvyKHLSoB5iHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM3HWCeZ2N8nirLQAGillpk2FgWkwHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMo4+h3RLodlojbSwUSYaBs4IXfuWyc/jaF wiWfBsISx0kO82GfaniSweNqYyTTCrvZ4gxiGidNjaoLs7ZgSI4gS2FdhqJ2c8bW I7Tgu/I0FsGXdFU8gBrC84x/Ygx+/kqrwh/5W3bLFEayhsJ5wstW9MwB+J7cvqqv 6S26QvAIOpCzd5nyrPxfSemIBNc5BQmCkHqv5PfIzxWdFmZ6C/JagSe8uFtq+iDq Ivi5LipwKXTy2tMWnN0TXmLWcggQo08UrnYWYhRv/PSblvcxPeWcdhpD84e4UGud 4A5hhhLlRHE5ALvQfke9j0DgmPFntNC5wqOOEvv8r0ATk8L8qsQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:50 2025 by rpki-client