$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: iuKU3M7f4XAnF8p2MN0fr1qqEvz8ZnGl0/rNEX63FCU= Subject key identifier: 2D:22:EF:9C:72:EA:8B:A7:B3:2C:20:A6:8B:2C:56:4D:42:DD:2E:9B Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 1D0FDD82598EF9BD963C2271DC7A0C7DBCE55D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01DF Signing time: Sun 19 Oct 2025 20:01:47 +0000 Manifest this update: Sun 19 Oct 2025 19:56:47 +0000 Manifest next update: Wed 22 Oct 2025 20:23:47 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 9NVeuKbgOoAW2GTK3PHkzliRZ3PGAnBEStan6Vu/Z6I=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:dd:82:59:8e:f9:bd:96:3c:22:71:dc:7a:0c:7d:bc:e5:5d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Oct 19 19:56:47 2025 GMT Not After : Oct 22 20:23:47 2025 GMT Subject: CN=2D22EF9C72EA8BA7B32C20A68B2C564D42DD2E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:b8:cf:82:17:34:96:e4:4b:e4:4e:e8:99: ff:4f:dd:f3:47:be:18:d4:e9:22:02:36:f2:26:8a: d3:77:a1:e9:cf:e6:55:dd:de:01:d0:3d:4c:c4:92: 38:5d:78:7e:68:6a:15:e1:cd:52:b2:b7:0c:c0:81: 0a:43:0f:d8:eb:f3:61:5e:dd:16:f5:84:76:ba:6e: 03:e4:0c:00:df:06:98:a4:96:bf:98:07:7a:04:d7: 1a:50:2c:53:eb:3b:25:16:be:24:37:33:3f:f6:20: c1:31:02:15:84:b3:06:1e:5c:a5:9d:d4:99:26:ca: da:9e:17:b6:c7:b5:c7:14:95:a5:47:81:3a:2c:58: 7e:68:04:8a:de:88:c7:c3:f5:c9:6c:8a:4a:28:b2: b3:14:d7:04:c7:95:df:76:f1:f0:03:31:8b:b0:a0: 77:c0:28:d4:40:dc:c2:bc:c6:17:15:9b:33:d8:4a: cb:8e:e4:0e:69:e7:e6:0c:5c:b8:35:ed:6b:5d:96: ec:a2:08:ec:9b:8f:f1:09:cd:62:93:20:3c:38:54: ca:53:37:74:c8:cb:94:25:87:47:e3:d8:83:5e:c3: 39:94:8a:01:75:64:78:3a:cb:54:02:1e:12:e6:4c: de:1a:64:a5:cf:c1:57:9d:92:99:49:95:71:97:e4: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:22:EF:9C:72:EA:8B:A7:B3:2C:20:A6:8B:2C:56:4D:42:DD:2E:9B X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2b:ac:4c:6a:c6:51:8e:00:da:cf:7f:f4:70:3f:ce:b8:e5: 22:64:7a:c2:b8:da:09:a4:73:18:a5:f7:f4:61:4d:c8:b5:1f: 3e:cb:88:ac:f7:f3:bf:85:98:5f:85:ea:bd:cc:63:e7:67:6d: 8b:86:87:ca:1c:27:a4:b5:09:c0:88:88:0b:80:a2:d0:1c:cd: 35:98:bf:24:a7:92:9c:0c:c1:17:11:3c:7c:07:df:a6:76:2c: 3b:0e:e5:c3:a8:0b:33:c5:7a:8c:e1:0b:8a:81:63:a2:f6:b7: 5a:28:10:55:73:94:34:bb:d2:71:e7:70:e4:98:2d:a2:09:ef: eb:28:23:fe:79:20:69:77:71:73:2e:28:4f:77:13:6b:56:8b: 96:71:14:f2:37:81:99:2a:f7:f9:30:67:e5:bb:2d:c4:60:f7: 97:b4:65:bc:68:8f:df:cb:41:08:50:07:4f:cb:18:d1:67:28: fa:1f:f9:ea:43:f0:1a:f8:8c:e4:6a:9c:e0:29:7f:48:f5:f6: 84:28:de:6d:2d:ba:92:e8:b4:b3:f6:83:fc:0e:3c:33:b6:b6: c0:d5:d8:56:87:36:37:c7:2e:bc:72:f9:5f:bb:c8:36:2b:ff: 80:61:5d:d9:4e:72:3a:26:87:33:cc:10:37:f5:3c:92:e7:17: 9c:af:d9:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQ/dglmO+b2WPCJx3HoMfbzlXRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTEwMTkxOTU2NDdaFw0yNTEwMjIyMDIzNDdaMDMxMTAvBgNV BAMTKDJEMjJFRjlDNzJFQThCQTdCMzJDMjBBNjhCMkM1NjRENDJERDJFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBLjPghc0luRL5E7omf9P3fNH vhjU6SICNvImitN3oenP5lXd3gHQPUzEkjhdeH5oahXhzVKytwzAgQpDD9jr82Fe 3Rb1hHa6bgPkDADfBpiklr+YB3oE1xpQLFPrOyUWviQ3Mz/2IMExAhWEswYeXKWd 1JkmytqeF7bHtccUlaVHgTosWH5oBIreiMfD9clsikoosrMU1wTHld928fADMYuw oHfAKNRA3MK8xhcVmzPYSsuO5A5p5+YMXLg17WtdluyiCOybj/EJzWKTIDw4VMpT N3TIy5Qlh0fj2INewzmUigF1ZHg6y1QCHhLmTN4aZKXPwVedkplJlXGX5IG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULSLvnHLqi6ezLCCmiyxWTULdLpswHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIrrExqxlGOANrPf/RwP8645SJkesK42gmk cxil9/RhTci1Hz7LiKz387+FmF+F6r3MY+dnbYuGh8ocJ6S1CcCIiAuAotAczTWY vySnkpwMwRcRPHwH36Z2LDsO5cOoCzPFeozhC4qBY6L2t1ooEFVzlDS70nHncOSY LaIJ7+soI/55IGl3cXMuKE93E2tWi5ZxFPI3gZkq9/kwZ+W7LcRg95e0Zbxoj9/L QQhQB0/LGNFnKPof+epD8Br4jORqnOApf0j19oQo3m0tupLotLP2g/wOPDO2tsDV 2FaHNjfHLrxy+V+7yDYr/4BhXdlOcjomhzPMEDf1PJLnF5yv2UU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:52 2025 by rpki-client