$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: v8P5P6AGGYonbuEDBaePfJHlDv6SNUVPPhrtPzVL4lQ= Subject key identifier: 97:90:77:4A:D7:E9:2F:59:25:16:56:24:B7:F1:11:D8:3F:A9:00:CA Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 5A24C8FF54657D7AD630D2DF5D830A3FA5D3BB92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 0214 Signing time: Sun 19 Oct 2025 18:51:21 +0000 Manifest this update: Sun 19 Oct 2025 18:46:21 +0000 Manifest next update: Wed 22 Oct 2025 19:47:21 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: T55TWevb+CAuWW9667xlaAlEIyWb1SQ5913N/r2oWMk=) 2: 3130332e3138352e3235322e302f32332d3234203d3e20313439363839.roa (hash: HnJcM1pYTCQNaP5Phr+gH+vSqyaKDOtxhKznqfzli4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:24:c8:ff:54:65:7d:7a:d6:30:d2:df:5d:83:0a:3f:a5:d3:bb:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Oct 19 18:46:21 2025 GMT Not After : Oct 22 19:47:21 2025 GMT Subject: CN=9790774AD7E92F5925165624B7F111D83FA900CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:70:d4:1e:1d:3a:66:f1:91:e0:7a:45:f6:02: 16:e4:cd:7e:24:0f:3f:03:bf:b7:d1:b9:8d:8e:2b: 8b:27:50:7a:7c:53:66:80:53:84:c8:08:bf:40:de: d6:b4:03:b2:42:35:3b:8a:26:5b:0d:4b:9f:57:e1: 92:9e:07:38:cf:9a:69:1d:11:38:02:6b:6c:67:19: ad:df:8a:5b:10:6b:e2:06:b0:8f:3b:b1:83:bd:68: 49:f4:66:53:71:23:2d:06:55:4d:70:df:b4:56:b9: ff:52:65:26:bc:2e:19:28:50:72:65:d9:58:7a:b0: a1:80:7f:99:2b:5d:7e:f8:e6:50:bf:8c:5e:ce:d7: 62:c7:76:c6:9b:75:9f:20:d0:b7:8d:af:3d:f2:48: 6c:76:7e:87:d2:1a:da:6c:f0:20:67:b8:3b:38:8c: d0:2d:25:3e:5b:5c:b5:01:f8:e4:62:ae:3e:18:41: 0c:39:91:18:d3:e7:5b:92:ad:b1:bb:29:e0:61:0f: dd:64:ea:2b:ef:a1:a5:4f:5a:9b:ee:a3:a3:d9:e4: 3b:9c:00:88:53:d0:92:c3:d6:0a:85:50:91:0a:d0: e5:67:f5:3a:7e:cc:15:e0:40:f0:fd:99:1f:18:d2: 8d:54:b3:51:df:39:ef:8a:e0:c4:fe:78:18:6b:be: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:90:77:4A:D7:E9:2F:59:25:16:56:24:B7:F1:11:D8:3F:A9:00:CA X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8a:5f:d1:26:57:5a:09:ba:0a:c7:aa:b4:74:0b:b6:18:f2: 5f:b3:0b:d4:cd:32:1f:8a:84:9f:56:85:c9:f2:40:a2:36:64: 4d:ac:a7:8f:b2:f8:ea:3a:09:6f:e0:d2:42:d4:f6:0e:bb:f5: 6a:18:dc:92:30:58:7a:75:8f:d5:d4:29:16:4f:c3:39:53:e0: 3e:f2:64:98:f9:cd:d5:7c:2a:bc:35:68:c1:b2:31:e4:25:7a: 14:98:b5:06:06:65:10:d3:9c:d7:f9:cf:79:74:a1:d7:86:db: e7:16:f3:ca:56:35:02:7f:8e:8c:a9:1f:dc:e4:b6:7c:b3:9b: b2:f6:c1:21:41:e2:ae:56:fd:1e:5b:f4:48:70:37:73:21:fc: c2:c9:59:f5:d4:ca:92:53:ba:18:d1:e6:67:a0:9a:ec:4c:07: 60:d0:4e:39:1e:55:54:ed:29:70:b5:1b:11:03:31:2a:7d:72: 1e:3c:6a:cf:c9:5d:8b:41:32:3b:a4:25:7d:f2:f9:95:ad:d9: c2:55:61:77:9d:b6:5e:96:41:25:82:3c:3e:ad:94:1e:9b:8c: e9:c0:9f:55:d1:aa:bd:7f:66:62:b9:1b:95:a1:22:72:c6:f3: ef:6e:3c:de:a7:70:d3:40:8a:7a:66:16:63:28:fe:e6:5b:7c: 69:4f:01:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiTI/1RlfXrWMNLfXYMKP6XTu5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTEwMTkxODQ2MjFaFw0yNTEwMjIxOTQ3MjFaMDMxMTAvBgNV BAMTKDk3OTA3NzRBRDdFOTJGNTkyNTE2NTYyNEI3RjExMUQ4M0ZBOTAwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcNQeHTpm8ZHgekX2AhbkzX4k Dz8Dv7fRuY2OK4snUHp8U2aAU4TICL9A3ta0A7JCNTuKJlsNS59X4ZKeBzjPmmkd ETgCa2xnGa3filsQa+IGsI87sYO9aEn0ZlNxIy0GVU1w37RWuf9SZSa8LhkoUHJl 2Vh6sKGAf5krXX745lC/jF7O12LHdsabdZ8g0LeNrz3ySGx2fofSGtps8CBnuDs4 jNAtJT5bXLUB+ORirj4YQQw5kRjT51uSrbG7KeBhD91k6ivvoaVPWpvuo6PZ5Duc AIhT0JLD1gqFUJEK0OVn9Tp+zBXgQPD9mR8Y0o1Us1HfOe+K4MT+eBhrvg3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5B3StfpL1klFlYkt/ER2D+pAMowHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqKX9EmV1oJugrHqrR0C7YY8l+zC9TNMh+K hJ9WhcnyQKI2ZE2sp4+y+Oo6CW/g0kLU9g679WoY3JIwWHp1j9XUKRZPwzlT4D7y ZJj5zdV8Krw1aMGyMeQlehSYtQYGZRDTnNf5z3l0odeG2+cW88pWNQJ/joypH9zk tnyzm7L2wSFB4q5W/R5b9EhwN3Mh/MLJWfXUypJTuhjR5megmuxMB2DQTjkeVVTt KXC1GxEDMSp9ch48as/JXYtBMjukJX3y+ZWt2cJVYXedtl6WQSWCPD6tlB6bjOnA n1XRqr1/ZmK5G5WhInLG8+9uPN6ncNNAinpmFmMo/uZbfGlPAf4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:31 2025 by rpki-client