$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: Mhj+jZwqwodRvhS8yI0e//tu2TeuFa68KFk4k0JNgBI= Subject key identifier: E8:9F:79:00:4E:EA:D0:17:1D:1C:E2:F0:5E:08:AE:A4:8F:94:E8:11 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 029152605861AD74DA3B19715679C3D04CBF8C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 04CC Signing time: Wed 23 Apr 2025 13:41:38 +0000 Manifest this update: Wed 23 Apr 2025 13:36:38 +0000 Manifest next update: Sat 26 Apr 2025 13:54:38 +0000 Files and hashes: 1: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 03HkjmQzt/Ep8zy5D6Eve4fKrD/0G+PHtCK39LVJn98=) 2: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: SscI993Dt7eLqGBoQBX8oyNOZ7enmFzcIvZg0Fy4SGo=) 3: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: uq3LVWKKrkpYeOM+AKyLXbVXOsmjRq6mjV7qDXEUvSo=) 4: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: y++h1YJ1hOHYw7NDJcJEUKA4UZp+NRi8+3UP1/gBIDw=) 5: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:91:52:60:58:61:ad:74:da:3b:19:71:56:79:c3:d0:4c:bf:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Apr 23 13:36:38 2025 GMT Not After : Apr 26 13:54:38 2025 GMT Subject: CN=E89F79004EEAD0171D1CE2F05E08AEA48F94E811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:2b:8f:22:3b:06:d5:cf:e3:d6:a7:f5:c9: f6:71:ba:61:2d:00:fd:60:9a:e3:40:55:b4:96:ba: 77:ef:27:c6:f8:d6:f9:08:24:01:51:ca:a6:e2:a5: 66:c5:fa:1f:71:db:55:d3:1d:44:d3:eb:0f:3e:47: 7b:3f:4d:41:65:ba:5b:25:8a:33:9d:6e:de:9e:cc: 45:19:3a:05:e9:50:ca:bc:f2:5b:ae:9a:42:04:89: f6:86:dc:89:25:0f:8b:6c:4f:15:42:51:e7:d8:56: 46:13:71:10:8a:17:62:9f:56:d6:00:3f:83:cb:31: 01:b6:96:e5:de:67:72:73:af:c4:f8:ce:8c:ed:cd: 10:8f:1b:ad:83:c8:f3:2e:ab:ba:eb:c9:cc:b3:94: 39:e8:ff:73:13:0e:95:dd:31:4e:61:65:b0:6e:28: 3c:10:52:47:6d:a2:42:02:e4:04:35:41:d5:e4:e6: e3:02:6a:67:57:5b:24:1e:98:bd:92:3b:4d:82:4d: 26:2c:89:d5:e3:d1:01:c9:41:5b:95:3c:d0:6b:4d: 5f:d4:be:1a:00:67:c4:9e:8d:44:c9:6b:e4:0c:39: 6d:63:35:0b:5e:94:bc:87:0b:18:08:da:8c:48:85: 7b:ea:76:d6:ab:c6:0b:e7:35:88:37:68:18:f0:88: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9F:79:00:4E:EA:D0:17:1D:1C:E2:F0:5E:08:AE:A4:8F:94:E8:11 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:22:f6:d4:87:18:32:32:c9:c9:5d:08:45:87:c8:ea:88:50: fb:e1:dc:75:1a:91:77:dd:d2:bf:d1:cb:01:31:ac:32:d9:bf: eb:2e:f4:63:82:5e:e1:55:3d:15:ea:f0:ed:b0:9a:01:2b:f2: bd:f2:7f:d1:15:85:73:a8:04:72:85:df:29:ed:51:01:54:9a: 6c:16:9c:34:5e:fd:2e:27:7c:85:c1:aa:50:1e:ea:3c:33:11: 98:a9:12:c9:35:58:dc:49:6f:0a:da:d2:74:76:52:97:c9:70: 80:e8:e2:05:18:0e:07:7c:3e:04:27:7b:05:02:4d:11:fc:d8: c2:fc:c3:68:b8:79:0c:02:82:82:7f:66:a8:81:34:8d:fa:b5: fe:65:43:66:d0:a4:31:02:6b:88:b7:7c:c2:19:aa:48:f0:b3: ae:7b:b2:a3:c9:5b:6b:ca:a1:c6:ff:e5:7a:a3:f5:9a:f6:60: ed:fb:8a:b5:51:32:65:77:06:75:93:d7:5e:ee:cc:70:ab:e3: 8d:99:52:01:07:cd:ae:6d:28:91:df:37:f7:a3:16:e7:b3:5c: ec:01:26:31:10:70:30:ae:34:07:43:67:40:2c:52:4c:44:42: f4:c1:51:d5:a6:3a:7d:7e:c2:18:13:60:12:bf:2e:a2:3b:4b: 80:9c:e1:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApFSYFhhrXTaOxlxVnnD0Ey/jHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTA0MjMxMzM2MzhaFw0yNTA0MjYxMzU0MzhaMDMxMTAvBgNV BAMTKEU4OUY3OTAwNEVFQUQwMTcxRDFDRTJGMDVFMDhBRUE0OEY5NEU4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlCuPIjsG1c/j1qf1yfZxumEt AP1gmuNAVbSWunfvJ8b41vkIJAFRyqbipWbF+h9x21XTHUTT6w8+R3s/TUFlulsl ijOdbt6ezEUZOgXpUMq88luumkIEifaG3IklD4tsTxVCUefYVkYTcRCKF2KfVtYA P4PLMQG2luXeZ3Jzr8T4zoztzRCPG62DyPMuq7rrycyzlDno/3MTDpXdMU5hZbBu KDwQUkdtokIC5AQ1QdXk5uMCamdXWyQemL2SO02CTSYsidXj0QHJQVuVPNBrTV/U vhoAZ8SejUTJa+QMOW1jNQtelLyHCxgI2oxIhXvqdtarxgvnNYg3aBjwiA7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6J95AE7q0BcdHOLwXgiupI+U6BEwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4i9tSHGDIyycldCEWHyOqIUPvh3HUakXfd 0r/RywExrDLZv+su9GOCXuFVPRXq8O2wmgEr8r3yf9EVhXOoBHKF3yntUQFUmmwW nDRe/S4nfIXBqlAe6jwzEZipEsk1WNxJbwra0nR2UpfJcIDo4gUYDgd8PgQnewUC TRH82ML8w2i4eQwCgoJ/ZqiBNI36tf5lQ2bQpDECa4i3fMIZqkjws657sqPJW2vK ocb/5Xqj9Zr2YO37irVRMmV3BnWT117uzHCr442ZUgEHza5tKJHfN/ejFuezXOwB JjEQcDCuNAdDZ0AsUkxEQvTBUdWmOn1+whgTYBK/LqI7S4Cc4Rk= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net