$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: /utjsQJxR7a0bTaGCNfIYm9gWjs8TIlg+IsmbJy/wZI= Subject key identifier: 96:CA:B6:0A:E4:83:94:1C:34:78:41:C0:09:2C:BD:25:6F:A9:8A:91 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 52DF5631AEA98EEF2A250DE25A6ED76C845DD09A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01C5 Signing time: Sat 23 Aug 2025 07:11:47 +0000 Manifest this update: Sat 23 Aug 2025 07:06:47 +0000 Manifest next update: Tue 26 Aug 2025 13:52:47 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: pQLDn+pqstjEtcEiX2Bm2Hf0LzaMHjuXGaiZ2LXEO0M=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:df:56:31:ae:a9:8e:ef:2a:25:0d:e2:5a:6e:d7:6c:84:5d:d0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Aug 23 07:06:47 2025 GMT Not After : Aug 26 13:52:47 2025 GMT Subject: CN=96CAB60AE483941C347841C0092CBD256FA98A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:48:eb:a7:c9:06:d8:b3:94:1b:29:65:53: be:fa:e1:da:d3:d2:c1:00:cc:40:c7:d1:e6:66:d2: 4a:9f:d4:5f:a0:8f:c4:9d:5f:c3:9a:bf:9e:15:ba: fa:29:91:d7:eb:b0:ba:ab:21:34:3f:62:4e:d3:40: 64:7d:5a:cd:67:8d:cb:8c:7f:c8:35:e1:6d:87:c1: 3a:7a:de:64:13:15:aa:7a:73:8d:82:12:1a:c3:35: bb:82:d4:07:f3:93:6e:f1:74:28:df:90:09:dc:b8: 11:83:a3:a6:9c:08:b6:49:24:92:6a:29:50:02:1a: 29:7f:59:7b:22:5b:37:06:8f:5b:bb:1f:8f:20:70: 09:6b:a3:cb:1c:14:61:79:bd:cc:38:ae:b4:d0:26: 90:fd:d8:3e:74:6d:b8:9a:9c:af:7a:f1:47:fd:4b: 72:23:42:1e:87:ca:95:93:4b:09:f0:89:4f:3e:63: 6b:22:8a:fb:cb:21:a7:42:6e:17:c3:6c:59:2c:9d: 7f:c2:8a:ce:5b:d0:bc:29:0e:1b:46:06:eb:ac:da: 00:6b:66:4f:1d:53:2d:f4:0e:67:b1:19:d6:26:75: 83:31:80:e3:12:9d:8b:87:e8:54:e9:56:0f:ae:89: fd:49:b0:c2:de:51:a2:b7:0c:ac:80:e1:77:02:76: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:B6:0A:E4:83:94:1C:34:78:41:C0:09:2C:BD:25:6F:A9:8A:91 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:02:23:0e:f1:b3:74:b7:80:ab:b4:3b:a0:58:4c:86:dc:c6: 93:30:ce:bd:2a:d1:68:65:15:2b:63:71:8a:e8:64:62:2f:b8: d6:a5:85:a5:39:a8:06:60:fd:51:98:9d:94:1f:ec:81:ea:c6: a2:0b:81:ca:6b:a2:6a:58:03:a9:ce:fa:d8:bc:e6:f1:66:08: b0:5f:fc:36:55:0b:1f:4c:a5:95:a2:57:7f:1e:cf:7c:b7:7c: a2:30:3d:4e:f4:91:f2:10:ee:fb:a5:f1:e9:af:2d:b8:37:09: 1b:e1:c5:73:5c:a7:93:45:42:1a:f7:cd:5d:41:77:67:8a:a5: 2a:31:26:69:3b:ad:d6:47:1e:e1:13:ef:63:e6:ba:b2:0d:7a: 20:bb:d1:66:2c:16:c2:0a:4f:f0:9e:6d:5b:dd:47:d6:d6:35: 69:58:5d:fa:fb:b0:25:58:74:a1:66:d8:70:c4:96:c0:ab:36: 52:66:c7:c7:fb:1a:53:8e:91:d5:75:3e:1b:4c:7b:44:aa:94: 3e:ed:41:4b:c5:96:ff:f7:29:88:b8:05:2b:22:6a:3b:fb:93: 8a:5e:45:92:37:9f:2a:7f:16:6a:4f:23:af:a9:cc:ef:bd:ee: 61:2e:cc:f2:74:d5:41:3d:f7:7e:41:2c:9a:e4:d3:ee:70:be: 67:46:27:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt9WMa6pju8qJQ3iWm7XbIRd0JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA4MjMwNzA2NDdaFw0yNTA4MjYxMzUyNDdaMDMxMTAvBgNV BAMTKDk2Q0FCNjBBRTQ4Mzk0MUMzNDc4NDFDMDA5MkNCRDI1NkZBOThBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBUjrp8kG2LOUGyllU7764drT 0sEAzEDH0eZm0kqf1F+gj8SdX8Oav54VuvopkdfrsLqrITQ/Yk7TQGR9Ws1njcuM f8g14W2HwTp63mQTFap6c42CEhrDNbuC1Afzk27xdCjfkAncuBGDo6acCLZJJJJq KVACGil/WXsiWzcGj1u7H48gcAlro8scFGF5vcw4rrTQJpD92D50bbianK968Uf9 S3IjQh6HypWTSwnwiU8+Y2siivvLIadCbhfDbFksnX/Cis5b0LwpDhtGBuus2gBr Zk8dUy30DmexGdYmdYMxgOMSnYuH6FTpVg+uif1JsMLeUaK3DKyA4XcCdsXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsq2CuSDlBw0eEHACSy9JW+pipEwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHECIw7xs3S3gKu0O6BYTIbcxpMwzr0q0Whl FStjcYroZGIvuNalhaU5qAZg/VGYnZQf7IHqxqILgcprompYA6nO+ti85vFmCLBf /DZVCx9MpZWiV38ez3y3fKIwPU70kfIQ7vul8emvLbg3CRvhxXNcp5NFQhr3zV1B d2eKpSoxJmk7rdZHHuET72PmurINeiC70WYsFsIKT/CebVvdR9bWNWlYXfr7sCVY dKFm2HDElsCrNlJmx8f7GlOOkdV1PhtMe0SqlD7tQUvFlv/3KYi4BSsiajv7k4pe RZI3nyp/FmpPI6+pzO+97mEuzPJ01UE9935BLJrk0+5wvmdGJ28= -----END CERTIFICATE-----Generated at Sat Aug 23 18:48:33 2025 by rpki-client