$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: QDjnRsQ5YlVCrNV20Vc4EIuv11MKh7gGPdHCfycfdCk= Subject key identifier: B6:5B:42:D5:B5:E0:45:C4:9B:2B:D0:93:6F:8F:A7:F1:87:6B:20:A9 Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 48D5F30B28D3AABBDAF63375F9F3A0CFE85550AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 055D Signing time: Thu 26 Mar 2026 01:30:41 +0000 Manifest this update: Thu 26 Mar 2026 01:25:41 +0000 Manifest next update: Sun 29 Mar 2026 03:48:41 +0000 Files and hashes: 1: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: ghYDscgkEkmdPz9NuYZxp4pY2E2dRL+ayWbivu6Gtd8=) 2: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: WmNZytrOHXYwNtJU1JdFmSEEGSdPnJwRYaB3xRokSRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d5:f3:0b:28:d3:aa:bb:da:f6:33:75:f9:f3:a0:cf:e8:55:50:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: Mar 26 01:25:41 2026 GMT Not After : Mar 29 03:48:41 2026 GMT Subject: CN=B65B42D5B5E045C49B2BD0936F8FA7F1876B20A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:7d:b3:7a:3d:01:35:84:17:58:1c:92:d4: f7:d9:03:29:b6:17:a2:3a:2f:b8:cd:48:b3:2b:78: f4:06:07:23:4c:21:3d:29:ad:9d:05:73:a5:47:ff: 43:37:31:58:5b:eb:6e:a6:cf:fe:58:5d:4b:03:2d: cb:a5:04:70:10:92:50:e4:1c:50:5b:65:56:22:3f: 88:4f:bb:76:0b:91:20:64:74:6f:ec:0e:ee:38:62: bb:b4:ad:ca:f7:56:37:0b:5f:45:13:a0:ed:29:19: 02:5d:a0:49:4c:c5:d0:ad:fc:66:ac:77:a8:67:d4: fd:08:4b:64:ee:a9:9e:5e:9f:b5:c7:14:54:d5:e1: 44:f8:fb:31:0d:0f:8b:d7:82:c1:38:0a:89:e1:48: 7f:2e:98:2b:a0:57:5e:d8:db:8a:ea:88:7f:6a:6c: ca:4b:c8:22:32:be:76:d5:a7:a6:32:95:05:9d:05: 80:d8:55:6b:95:36:ad:e4:3f:5f:e2:35:66:ee:83: 6d:b2:b2:24:ab:26:9c:bb:79:a7:76:81:e7:ad:ae: d3:32:b0:12:e3:6a:31:8a:bb:7d:1d:28:98:6f:ab: 10:05:7e:41:51:5f:a9:8d:a2:da:3a:3f:2f:ff:d1: 45:3f:fb:fe:db:60:54:81:22:56:a3:57:a0:01:6f: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5B:42:D5:B5:E0:45:C4:9B:2B:D0:93:6F:8F:A7:F1:87:6B:20:A9 X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:99:71:fe:8d:30:64:b5:cd:3b:8b:2c:d4:d1:31:09:37:09: ee:b9:7f:4a:13:cb:64:ff:eb:fa:b7:14:6d:a7:4d:04:25:8a: b1:4d:61:1b:26:77:2a:97:df:d8:cd:00:3b:92:a2:ba:5e:f8: fb:f4:eb:36:70:6d:5a:7a:e4:1d:d8:38:94:bf:60:b8:a6:fd: f5:11:c7:49:fe:c9:72:f6:af:6d:59:de:f0:f3:fc:38:2b:96: 93:1e:4b:82:b2:f6:d5:85:a7:6d:1f:c4:2d:1b:55:06:45:e7: 52:0a:65:38:51:fa:4b:ba:75:27:1a:fd:cc:9a:ce:c2:88:23: 9f:52:27:f1:b1:ec:c1:84:e5:a4:3b:70:63:fd:a0:f2:74:ed: 9a:be:53:dd:44:66:e5:82:dd:a2:c9:48:46:fe:f1:15:af:e1: 7d:21:5a:f5:ab:63:46:30:42:bc:37:fb:c7:8c:45:b2:35:f6: 2b:4f:70:3c:4c:a3:1d:62:90:6c:9d:b9:3d:dd:54:fb:43:be: 84:e6:08:ba:2a:a6:dc:27:7c:87:ed:d0:8a:84:e9:3a:6a:d2: 98:77:6f:b1:de:63:1c:75:10:3f:24:8c:14:52:89:7e:7e:00: 3f:fb:f0:1a:e3:d7:17:4d:b2:7e:a0:27:b4:9e:21:34:79:7f: d9:32:39:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNXzCyjTqrva9jN1+fOgz+hVUKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNjAzMjYwMTI1NDFaFw0yNjAzMjkwMzQ4NDFaMDMxMTAvBgNV BAMTKEI2NUI0MkQ1QjVFMDQ1QzQ5QjJCRDA5MzZGOEZBN0YxODc2QjIwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdn2zej0BNYQXWByS1PfZAym2 F6I6L7jNSLMrePQGByNMIT0prZ0Fc6VH/0M3MVhb626mz/5YXUsDLculBHAQklDk HFBbZVYiP4hPu3YLkSBkdG/sDu44Yru0rcr3VjcLX0UToO0pGQJdoElMxdCt/Gas d6hn1P0IS2TuqZ5en7XHFFTV4UT4+zEND4vXgsE4ConhSH8umCugV17Y24rqiH9q bMpLyCIyvnbVp6YylQWdBYDYVWuVNq3kP1/iNWbug22ysiSrJpy7ead2geetrtMy sBLjajGKu30dKJhvqxAFfkFRX6mNoto6Py//0UU/+/7bYFSBIlajV6ABb+UZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtltC1bXgRcSbK9CTb4+n8YdrIKkwHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaZcf6NMGS1zTuLLNTRMQk3Ce65f0oTy2T/ 6/q3FG2nTQQlirFNYRsmdyqX39jNADuSorpe+Pv06zZwbVp65B3YOJS/YLim/fUR x0n+yXL2r21Z3vDz/DgrlpMeS4Ky9tWFp20fxC0bVQZF51IKZThR+ku6dSca/cya zsKII59SJ/Gx7MGE5aQ7cGP9oPJ07Zq+U91EZuWC3aLJSEb+8RWv4X0hWvWrY0Yw Qrw3+8eMRbI19itPcDxMox1ikGyduT3dVPtDvoTmCLoqptwnfIft0IqE6Tpq0ph3 b7HeYxx1ED8kjBRSiX5+AD/78Brj1xdNsn6gJ7SeITR5f9kyOZQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:05 2026 by rpki-client