$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: RxKT89SNBoeurErm5A71OpMq0VHQLf4sBsBM9FCnR1o= Subject key identifier: 33:3D:51:0D:2E:E3:DD:1E:32:F4:B8:13:8A:62:BE:B3:5E:2E:18:F2 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 1EF5323197977203F793AAFCBFB2689842AF41E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 0563 Signing time: Thu 26 Mar 2026 05:51:59 +0000 Manifest this update: Thu 26 Mar 2026 05:46:59 +0000 Manifest next update: Sun 29 Mar 2026 06:57:59 +0000 Files and hashes: 1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 2: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) 3: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: MrMpnNKVUri9DSsKOY5J29jxdxmIWO0EF08hRpdOEV4=) 4: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: r5FJio9tKv9JNtA5eG5F3RQatFMR61KMFIqTgV3qbBk=) 5: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:32:31:97:97:72:03:f7:93:aa:fc:bf:b2:68:98:42:af:41:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Mar 26 05:46:59 2026 GMT Not After : Mar 29 06:57:59 2026 GMT Subject: CN=333D510D2EE3DD1E32F4B8138A62BEB35E2E18F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:0c:8f:d4:70:63:e2:d1:1f:79:db:0b:e7: b5:e5:54:bc:51:34:c0:9f:d0:0f:82:a9:c0:1a:ca: 21:0a:57:4c:ba:03:59:4b:5b:79:e9:c8:c5:7d:86: 0c:48:3e:61:2e:4d:48:11:81:b8:72:ac:84:96:cb: cf:55:53:15:2e:88:5f:fd:e9:83:65:67:0f:b6:e7: fd:f7:00:00:28:f4:3d:91:96:5c:82:e3:de:d3:b8: b5:e8:fe:1f:66:1a:99:6d:0f:a0:35:a9:02:de:68: 27:5c:1e:a0:a7:41:62:16:67:c1:28:5a:4c:27:35: d5:36:d0:f4:5b:4e:1c:bf:7a:62:3c:38:15:24:67: 6d:34:5b:ad:f0:b6:e6:78:b3:3e:49:23:66:49:90: c9:45:0e:d8:c3:2e:9a:8b:8d:e5:2d:14:e4:ff:66: 4e:56:ec:14:c6:b9:22:ec:b5:4a:c3:c9:01:8a:68: 95:bf:5c:55:b8:ba:a4:0e:3d:4b:69:d4:e5:ff:09: 94:d5:ee:75:2f:58:d4:ec:dd:5e:2f:78:19:6a:cf: c0:e3:e4:10:13:5a:04:7f:15:db:e7:07:62:ff:5c: 27:03:d2:74:15:79:a0:ec:02:93:11:20:32:eb:0b: d5:e9:c2:64:83:21:d6:92:6a:42:28:87:34:67:8b: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:51:0D:2E:E3:DD:1E:32:F4:B8:13:8A:62:BE:B3:5E:2E:18:F2 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:90:b3:9e:70:f9:83:0e:74:27:88:83:9f:67:2d:7c:b8:a7: 70:37:5f:19:47:ef:82:b3:63:b6:f7:5b:57:74:d1:a4:6f:69: e8:66:ab:65:cb:46:9d:d7:be:fd:dd:a5:e5:8d:d4:5d:8d:67: 4f:ed:d1:84:db:fb:9e:88:d8:f5:fb:86:e2:e9:a4:a0:3d:ea: c8:65:2b:28:86:5d:6e:c8:bb:35:16:63:20:99:f9:a7:31:c8: d3:a7:7c:3b:e3:cf:a8:b1:c6:02:6b:ef:41:b5:f1:c4:ca:00: 2d:71:31:10:98:87:d4:5e:d4:49:dd:e3:bd:17:81:f0:be:7d: 9b:e8:1f:c3:b2:d4:97:94:7f:79:1e:31:03:48:49:c9:2f:a6: 8b:b8:a6:6f:4e:7c:15:2e:c4:ff:31:ec:ff:8f:1c:e6:2c:03: d4:7c:93:63:68:4d:63:25:fe:9c:5f:0d:ec:9d:4c:ed:4d:10: e3:da:39:3a:87:e7:b4:61:9c:19:cc:9c:f0:85:ac:bf:64:eb: 95:4c:bd:69:b6:c1:8f:c9:7a:c4:1b:1e:b1:a0:9c:c4:3a:da: 2a:d8:48:b5:c6:b7:61:80:68:be:1f:05:46:e8:2e:40:5e:46: 54:dd:da:7a:4e:b7:29:1a:70:fc:77:9c:9a:e4:c2:18:8b:32: d6:73:38:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvUyMZeXcgP3k6r8v7JomEKvQeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNjAzMjYwNTQ2NTlaFw0yNjAzMjkwNjU3NTlaMDMxMTAvBgNV BAMTKDMzM0Q1MTBEMkVFM0REMUUzMkY0QjgxMzhBNjJCRUIzNUUyRTE4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHAyP1HBj4tEfedsL57XlVLxR NMCf0A+CqcAayiEKV0y6A1lLW3npyMV9hgxIPmEuTUgRgbhyrISWy89VUxUuiF/9 6YNlZw+25/33AAAo9D2RllyC497TuLXo/h9mGpltD6A1qQLeaCdcHqCnQWIWZ8Eo WkwnNdU20PRbThy/emI8OBUkZ200W63wtuZ4sz5JI2ZJkMlFDtjDLpqLjeUtFOT/ Zk5W7BTGuSLstUrDyQGKaJW/XFW4uqQOPUtp1OX/CZTV7nUvWNTs3V4veBlqz8Dj 5BATWgR/FdvnB2L/XCcD0nQVeaDsApMRIDLrC9XpwmSDIdaSakIohzRni+hLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMz1RDS7j3R4y9LgTimK+s14uGPIwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWQs55w+YMOdCeIg59nLXy4p3A3XxlH74Kz Y7b3W1d00aRvaehmq2XLRp3Xvv3dpeWN1F2NZ0/t0YTb+56I2PX7huLppKA96shl KyiGXW7IuzUWYyCZ+acxyNOnfDvjz6ixxgJr70G18cTKAC1xMRCYh9Re1End470X gfC+fZvoH8Oy1JeUf3keMQNISckvpou4pm9OfBUuxP8x7P+PHOYsA9R8k2NoTWMl /pxfDeydTO1NEOPaOTqH57RhnBnMnPCFrL9k65VMvWm2wY/JesQbHrGgnMQ62irY SLXGt2GAaL4fBUboLkBeRlTd2npOtykacPx3nJrkwhiLMtZzOKQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:40 2026 by rpki-client