$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: jpWHpNUZQagulDaEKicWwYshtnri8F46xlZ+DWuX92k= Subject key identifier: F9:0B:D2:42:71:05:56:4F:3E:17:2A:7E:5E:8F:5E:A1:0B:DD:85:EC Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 29DDDD6DAF9C3FF5B24457042691CB542A7C5208 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 07:01:14 +0000 Manifest this update: Sat 23 Aug 2025 06:56:14 +0000 Manifest next update: Tue 26 Aug 2025 07:10:14 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: oe3117HM31j/AP8KUFzAwPimBMoGTdPmJtYGawH96DA=) 2: 3130332e3138352e3235322e302f32332d3234203d3e20313439363839.roa (hash: HnJcM1pYTCQNaP5Phr+gH+vSqyaKDOtxhKznqfzli4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:dd:dd:6d:af:9c:3f:f5:b2:44:57:04:26:91:cb:54:2a:7c:52:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Aug 23 06:56:14 2025 GMT Not After : Aug 26 07:10:14 2025 GMT Subject: CN=F90BD2427105564F3E172A7E5E8F5EA10BDD85EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:1c:6f:a7:30:c1:60:94:96:78:10:c2:4b: b5:5f:a1:6e:af:c4:dd:b9:7e:42:47:ec:2a:b4:5b: 45:7f:59:f7:ed:e4:64:80:b2:a4:5a:09:ec:ed:ec: 12:62:db:dc:2a:dc:9b:a8:bd:03:3e:51:37:3a:84: d7:50:ef:ab:c5:1b:bf:57:cd:a0:93:79:6e:62:2d: 1e:5d:53:17:68:1e:79:a8:28:19:33:df:eb:a3:6a: 44:f4:fd:44:40:a9:d6:de:10:26:3e:f2:ec:ba:c6: 58:b0:29:5c:81:6d:be:91:7c:22:69:c3:3d:61:be: ec:7a:36:33:e5:8a:9e:ad:d4:30:9d:e5:25:e1:c8: 3e:0e:24:87:6b:63:a4:0f:03:78:76:f9:b8:ea:99: a5:90:31:85:f0:97:54:b0:f2:45:a2:c4:7e:b1:7b: fa:c2:79:82:a9:36:4b:d9:cb:32:0d:ea:5a:ca:b3: 8a:e2:be:e4:dd:b8:12:97:30:08:f7:0c:e6:cb:50: c0:17:0d:90:76:e3:fc:50:88:ad:aa:c4:34:36:71: 62:ab:ad:03:ed:da:df:6e:62:09:b5:41:76:b4:0b: 6f:93:12:db:da:db:4b:3f:0a:61:52:37:9c:48:b9: b9:1f:26:17:af:cc:dc:e7:43:f2:8f:a4:5f:d6:dd: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:D2:42:71:05:56:4F:3E:17:2A:7E:5E:8F:5E:A1:0B:DD:85:EC X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2f:5c:2b:c6:99:8a:d3:6d:b5:d1:1d:2b:0f:91:79:cf:db: 69:14:ef:36:4e:55:93:9d:88:90:f5:29:e6:6a:01:17:18:8d: 09:1d:84:85:b7:35:d9:38:7d:8c:bb:63:09:63:d3:ba:65:20: 99:06:03:55:e2:cb:f9:68:59:2e:5c:57:11:39:7e:57:30:dd: 4d:9c:78:27:1e:28:6c:64:b2:6e:61:43:00:5f:ee:05:67:ad: d0:70:e7:50:96:6f:e7:73:8d:4f:b8:93:11:76:80:2c:73:c8: ee:9b:c9:e7:8e:a5:1b:13:e3:06:c8:e4:b9:ea:37:17:68:31: 49:28:78:d3:3b:db:2c:fe:9f:19:0d:5d:1e:ca:09:b1:33:62: 30:7f:eb:52:58:ce:22:cf:92:5f:d2:c8:46:2b:ef:f5:40:5f: 61:44:78:55:3a:b9:16:f5:21:fd:98:49:34:76:e0:89:bd:05: 1e:36:fa:3c:2c:2b:c6:2b:77:af:d5:6c:7d:ae:96:aa:bd:d9: 6a:74:8c:9e:65:4d:e4:eb:6a:fd:ff:bf:3f:c8:1f:1a:9a:ae: 62:2c:ff:77:85:ea:0a:72:5e:b5:8b:0a:3a:ca:db:ce:b1:41: 62:f5:0c:f1:2d:78:df:33:da:5f:4a:20:31:25:cb:52:a9:ca: 7d:bb:14:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKd3dba+cP/WyRFcEJpHLVCp8UggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTA4MjMwNjU2MTRaFw0yNTA4MjYwNzEwMTRaMDMxMTAvBgNV BAMTKEY5MEJEMjQyNzEwNTU2NEYzRTE3MkE3RTVFOEY1RUExMEJERDg1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMxxvpzDBYJSWeBDCS7VfoW6v xN25fkJH7Cq0W0V/Wfft5GSAsqRaCezt7BJi29wq3JuovQM+UTc6hNdQ76vFG79X zaCTeW5iLR5dUxdoHnmoKBkz3+ujakT0/URAqdbeECY+8uy6xliwKVyBbb6RfCJp wz1hvux6NjPlip6t1DCd5SXhyD4OJIdrY6QPA3h2+bjqmaWQMYXwl1Sw8kWixH6x e/rCeYKpNkvZyzIN6lrKs4rivuTduBKXMAj3DObLUMAXDZB24/xQiK2qxDQ2cWKr rQPt2t9uYgm1QXa0C2+TEtva20s/CmFSN5xIubkfJhevzNznQ/KPpF/W3QuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QvSQnEFVk8+Fyp+Xo9eoQvdhewwHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4vXCvGmYrTbbXRHSsPkXnP22kU7zZOVZOd iJD1KeZqARcYjQkdhIW3Ndk4fYy7Ywlj07plIJkGA1Xiy/loWS5cVxE5flcw3U2c eCceKGxksm5hQwBf7gVnrdBw51CWb+dzjU+4kxF2gCxzyO6byeeOpRsT4wbI5Lnq NxdoMUkoeNM72yz+nxkNXR7KCbEzYjB/61JYziLPkl/SyEYr7/VAX2FEeFU6uRb1 If2YSTR24Im9BR42+jwsK8Yrd6/VbH2ulqq92Wp0jJ5lTeTrav3/vz/IHxqarmIs /3eF6gpyXrWLCjrK286xQWL1DPEteN8z2l9KIDEly1Kpyn27FMY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:16 2025 by rpki-client