$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: EsH8Fn8YH/iYtz2obg0Vo3jEhfXUPzqldTw3J39xXZI= Subject key identifier: D4:75:FE:7B:73:EF:6B:E0:F8:45:79:3E:EA:EF:B8:0A:B6:A1:4F:56 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 64F6AB3A82B939079B96EC24B2B4CAF6F8BE07CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01AC Signing time: Sat 28 Jun 2025 03:31:45 +0000 Manifest this update: Sat 28 Jun 2025 03:26:45 +0000 Manifest next update: Tue 01 Jul 2025 14:24:45 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: Elr6cE2mk2xIloB1FfoHnHIexFIzjCpbQvw66RDBvhk=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f6:ab:3a:82:b9:39:07:9b:96:ec:24:b2:b4:ca:f6:f8:be:07:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Jun 28 03:26:45 2025 GMT Not After : Jul 1 14:24:45 2025 GMT Subject: CN=D475FE7B73EF6BE0F845793EEAEFB80AB6A14F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:f9:3a:dd:f6:76:67:c4:4f:8e:af:13:f3: c8:7f:a8:07:be:71:88:bc:cd:05:85:ae:4a:46:18: 29:d2:ee:dd:40:08:3c:47:ac:81:b9:a3:81:67:39: d1:9e:fb:73:d4:0d:d5:d2:32:14:ef:90:76:90:bc: 9a:af:20:89:38:92:92:fa:8f:e8:8a:88:c7:06:67: 7f:cd:c5:a6:93:f4:0d:22:81:fd:46:e7:c4:a2:8a: 5e:4f:62:7f:9b:eb:14:d9:f5:57:55:73:f9:ca:1d: 79:69:a7:39:76:c3:68:76:92:cd:ca:26:92:17:7d: 87:fe:e1:57:2b:9a:4d:2b:59:80:30:04:e2:40:f6: 6f:73:9a:b6:ba:86:f7:e6:2b:a5:a1:1c:67:bb:ce: 21:43:fc:e3:bd:49:0c:7c:c2:fd:a7:13:a4:09:6c: 06:f3:e9:88:34:1a:7b:82:ac:ab:30:ba:dd:50:08: a8:c6:4c:50:61:9f:05:85:05:9d:59:00:f2:7d:2e: a7:1c:91:ea:ce:30:7c:52:c1:30:bb:f8:9e:ef:a4: c6:46:9a:77:b9:5a:e5:1e:6d:8c:e6:85:8c:96:f7: 8a:eb:56:38:62:d2:41:70:0d:56:ab:54:02:43:47: 48:f7:de:05:f0:e1:d9:63:97:e0:9f:58:ca:10:08: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:FE:7B:73:EF:6B:E0:F8:45:79:3E:EA:EF:B8:0A:B6:A1:4F:56 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a1:85:62:ad:85:11:62:6b:f9:d4:b7:c7:a4:dd:43:7d:7a: 49:6e:4a:32:dc:3c:2d:26:73:00:8b:5c:34:d6:01:06:95:33: b8:e3:0b:2a:0e:23:c9:d0:20:52:7a:3e:b0:06:e5:ff:42:bb: 0b:c8:4d:a9:0f:52:ed:6c:c7:58:2c:18:6d:a1:5b:b3:70:db: 2c:2e:46:2d:8a:2a:65:7e:d9:6e:a7:0b:cd:53:e4:cf:bc:91: c8:8b:e9:98:d0:b1:23:d7:18:77:95:80:54:61:83:56:35:50: 64:37:2c:a0:43:f0:fb:c4:3e:70:e4:99:54:84:22:de:69:fc: 17:70:0d:43:0d:73:c9:f4:dc:9e:1c:1a:2f:da:8b:93:40:f7: a8:64:1b:3a:44:47:42:d4:53:d4:01:03:1b:1a:bf:05:b0:2a: 12:0e:6f:12:ce:3f:5c:69:89:3f:5e:12:be:3d:4d:dd:f5:bb: c9:90:ca:58:b0:55:41:7f:49:ed:61:ea:d7:79:aa:c3:19:f1: ba:a5:d1:03:70:43:33:89:59:eb:45:22:09:f3:61:78:fd:c0: 8c:7f:9a:c3:a9:c9:3b:5d:f4:fd:89:30:90:0c:1e:d5:b3:68: 32:53:3e:bb:43:6a:79:aa:76:19:14:b4:be:07:71:46:da:7d: 74:ed:3f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZParOoK5OQebluwksrTK9vi+B88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA2MjgwMzI2NDVaFw0yNTA3MDExNDI0NDVaMDMxMTAvBgNV BAMTKEQ0NzVGRTdCNzNFRjZCRTBGODQ1NzkzRUVBRUZCODBBQjZBMTRGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunvk63fZ2Z8RPjq8T88h/qAe+ cYi8zQWFrkpGGCnS7t1ACDxHrIG5o4FnOdGe+3PUDdXSMhTvkHaQvJqvIIk4kpL6 j+iKiMcGZ3/NxaaT9A0igf1G58Siil5PYn+b6xTZ9VdVc/nKHXlppzl2w2h2ks3K JpIXfYf+4Vcrmk0rWYAwBOJA9m9zmra6hvfmK6WhHGe7ziFD/OO9SQx8wv2nE6QJ bAbz6Yg0GnuCrKswut1QCKjGTFBhnwWFBZ1ZAPJ9LqcckerOMHxSwTC7+J7vpMZG mne5WuUebYzmhYyW94rrVjhi0kFwDVarVAJDR0j33gXw4dljl+CfWMoQCBHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1HX+e3Pva+D4RXk+6u+4CrahT1YwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWhhWKthRFia/nUt8ek3UN9ekluSjLcPC0m cwCLXDTWAQaVM7jjCyoOI8nQIFJ6PrAG5f9CuwvITakPUu1sx1gsGG2hW7Nw2ywu Ri2KKmV+2W6nC81T5M+8kciL6ZjQsSPXGHeVgFRhg1Y1UGQ3LKBD8PvEPnDkmVSE It5p/BdwDUMNc8n03J4cGi/ai5NA96hkGzpER0LUU9QBAxsavwWwKhIObxLOP1xp iT9eEr49Td31u8mQyliwVUF/Se1h6td5qsMZ8bql0QNwQzOJWetFIgnzYXj9wIx/ msOpyTtd9P2JMJAMHtWzaDJTPrtDanmqdhkUtL4HcUbafXTtP80= -----END CERTIFICATE-----Generated at Mon Jun 30 00:47:36 2025 by rpki-client